JP4140683B2 - Directory hiding method, apparatus, and IC card system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a system in which a plurality of persons access a file system having a directory structure.
[0002]
[Prior art]
Conventionally, as an example of a system in which a plurality of persons access a file system having a directory structure, an IC card system using a multi-application IC card capable of providing services by a plurality of service providers with respect to one IC card There is. In such an IC card, for example, a plurality of directories are generated for each service provider, and each service provider accesses files and data existing under their own directory and performs processing necessary for service provision. I was going.
[0003]
[Problems to be solved by the invention]
However, when a certain service provider accesses the IC card as described above, the service provider can freely select a directory of another service provider in the card. There is a possibility that security problems such as falsification of the contents of the person's file and theft of data may occur. Also, the cardholder has a privacy problem because the other person can know what services are stored in his / her card.
[0004]
In addition, the same problem as described above has occurred with respect to computers such as personal computers, terminals, and servers in an environment where a plurality of users use data stored in their directories.
[0005]
The present invention has been made in view of the above-described circumstances, and an object thereof is to provide a directory hiding method, apparatus, and IC card system that can prevent unauthorized access to a file system having a directory structure.
It is another object of the present invention to provide a directory concealment method, apparatus, and IC card system that can protect user privacy.
[0006]
[Means for Solving the Problems]
In order to achieve the above object, a directory hiding method according to the first aspect of the present invention includes:
An IC card is a directory concealing method for preventing unauthorized access to a file system having a directory structure,
In response to the directory generation request, a directory and a pair of directory selection keys are generated, one selection key is transmitted to the request source, and the other selection key is stored in association with the directory.
An authentication code generated using the one selection key as an encryption key, and information specifying a directory are received from an access request source;
Decrypting the authentication code with the other selection key to perform authentication;
If the authentication result shows normal, move the current directory to the selected directory,
When the authentication result indicates an error, an error status indicating that the selected directory does not exist is returned, so that each directory is concealed from those without proper authority by denying the existence of the selected directory.
It is characterized by that.
[0007]
According to such a configuration, in a file system having a directory structure, authentication is performed according to directory selection, and if the authentication result is an error, the existence of the directory is denied. You can hide from others and prevent others from entering. Also, even if a person who can access a directory in the file system cannot know what other directories exist in the file system, the privacy of users who use each directory is protected. Can do.
[0008]
A directory hiding device according to the second aspect of the present invention provides:
A directory hiding device comprising a file system having a directory structure,
Means for generating a directory and a pair of directory selection keys in response to the directory generation request, transmitting one selection key to the request source and storing the other selection key in association with the directory;
Means for receiving an authentication code generated using the one selection key as an encryption key and information for specifying a directory from an access request source;
Means for decrypting and authenticating the authentication code using the other selection key;
If the authentication result indicates normal, means for moving the current directory to the selected directory,
Means for concealing each directory from those without legitimate authority by denying the existence of the selected directory by returning an error status that the selected directory does not exist if the authentication result indicates an error ; ,
It is characterized by providing.
[0009]
According to such a configuration, in a file system having a directory structure, authentication is performed according to directory selection, and if the authentication result is an error, the existence of the directory is denied. You can hide from others and prevent others from entering. Also, even if a person who can access a directory in the file system cannot know what other directories exist in the file system, the privacy of users who use each directory is protected. Can do.
[0010]
An IC card system according to the third aspect of the present invention is
An IC card system including an IC card in which a directory is formed for each service provider in a storage area, and a service provider terminal,
The IC card is
In response to a directory generation request from the service provider terminal, a directory and a pair of directory selection keys are generated, and one selection key is transmitted to the service provider terminal and the other selection key Means for storing in association with the directory;
Means for receiving an authentication code generated using the one selection key as an encryption key and information indicating the directory of the service provider from the terminal of the service provider;
Means for decrypting and authenticating the authentication code using the other selection key;
If the authentication result indicates normal, means for permitting access to the requested directory;
Means for concealing each directory from those without legitimate authority by denying the existence of the requested directory by returning an error status indicating that the selected directory does not exist if the authentication result indicates an error ; With
The terminal of the service provider is
Means for transmitting the directory generation request to the IC card;
Means for receiving the one selection key from the IC card;
Means for transmitting the authentication code and information indicating a directory of the service provider to the IC card,
It is characterized by that.
[0011]
According to such a configuration, in an IC card in which a directory is formed for each service provider in the storage area, authentication is performed when the service provider accesses the directory, and if the authentication result is an error, the directory In order to deny the existence, each service provider's directory can be hidden from other service providers to prevent others from entering. As a result, unauthorized access by a person who does not have proper authority for each directory can be prevented.
In addition, even a service provider that can access an IC card cannot know what other service data is stored in the IC card, so the privacy of the card holder can be protected. .
[0012]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an IC card system according to an embodiment of the present invention will be described with reference to the drawings. This system is a system for a user to receive a service provided by a plurality of service providers using a single IC card.
[0013]
As shown in FIG. 1, the IC card system according to the embodiment of the present invention includes an IC card 1 and a card processing terminal 3.
[0014]
The IC card 1 includes an IC chip that includes a storage unit 11, a control unit 12, and an input / output I / F (interface) 13.
The storage unit 11 includes a memory such as a ROM, a RAM, and an EEPROM, and a directory for each service provider is formed as shown in FIG. The directory includes a hidden directory and a normal directory, and the hidden directory indicates a directory that can be accessed only by a person having a legitimate authority.
The hidden directory stores a directory selection key (public key) used when the service provider accesses his / her hidden directory, in addition to information used for providing the service.
[0015]
In response to a request from the card processing terminal 3, the control unit 12 performs processing such as generation of a directory in the storage unit 11 and reading / writing of data stored in each directory.
[0016]
For example, the control unit 12 generates a new directory in the storage unit 11 in response to receiving a directory creation request from the card processing terminal 3. At this time, when generation of a hidden directory is requested, a pair of directory selection keys (secret key / public key) is generated, and one directory selection key (secret key) is supplied to the card processing terminal 3. The other directory selection key (public key) is stored in the generated directory.
[0017]
The control unit 12, when receiving an access request to the directory in the card by the service provider from the card processing terminal 3, the selected directory is determined whether a hidden directory, if it is hidden directory The service provider is authenticated by a predetermined authentication process. If the authentication result is appropriate, the current directory is moved to the selected hidden directory. At this time, if the authentication result is an error, an error status indicating that the corresponding directory does not exist is returned.
If the selected directory is a normal directory, the current directory is moved to the selected directory as it is.
[0018]
The input / output I / F 13 communicates by connecting to the card processing terminal 3 in accordance with an instruction from the control unit 12.
[0019]
The card processing terminal 3 is provided for each service provider, for example, and includes a control unit 31, a card R / W (reader / writer) unit 32, a storage unit 33, an input unit 34, a display unit 35, Is provided.
[0020]
The control unit 31 executes a program stored in the storage unit 33 to access the IC card 1 and generate a service provider directory in the storage area, or data stored in the directory. The service provider performs various processes for providing a service to the user.
For example, the control unit 31 transmits a directory generation request to the IC card 1 in generating a directory in the IC card 1. At this time, information indicating the type of directory to be created ( hidden directory or normal directory) is also supplied to the IC card 1.
When accessing the storage area of the IC card 1, for example, when the directory selected by the service provider is a hidden directory, the control unit 31 performs a predetermined authentication process with the IC card 1. When this authentication result indicates normality, migration to the service provider's directory is permitted.
[0021]
The card R / W unit 32 communicates with the IC card 1 in accordance with instructions from the control unit 31.
The storage unit 33 stores information such as a directory selection key (encryption key) generated along with the generation of the corresponding service provider directory.
The storage unit 33 stores a program executed by the control unit 31 and stores various data necessary for processing.
The input unit 34 notifies the control unit 31 of the input data.
The display unit 35 displays a processing screen for providing a service in accordance with an instruction from the control unit 31.
[0022]
Next, the operation of the IC card system according to the present embodiment will be described.
For example, a directory generation process in a scene where a directory of a service provider C is newly generated in a storage area of an IC card 1 will be described with reference to FIG.
[0023]
For example, the IC card 1 is set in the card processing terminal 3 corresponding to the service provider C, and an operator (user, person in charge of the service provider C, etc.) inputs a directory generation request to the card processing terminal 3. At this time, the operator sets, for example, a hidden directory as a generation target. In response to this, the card processing terminal 3 transmits a generation request for the hidden directory of the service provider C to the IC card 1 (L1).
[0024]
When the IC card 1 receives from the card processing terminal 3 the generation request for the hidden directory of the service provider C, the IC card 1 generates a directory corresponding to the service provider C in the storage unit 11 and also creates a pair of directory selection keys (secret key / (Public key) is generated (L2). Then, one directory selection key (secret key) is supplied to the card processing terminal 3 (L3), and the other directory selection key (public key) is stored in the directory of the service provider C in the card (L4).
Thereby, the concealment directory of the service provider C is generated in the IC card 1.
[0025]
Next, an authentication process in a situation where the service provider C accesses his / her concealed directory in the IC card 1 in order to provide a service to the user will be described with reference to FIG.
[0026]
For example, when the user's IC card 1 is set in the card processing terminal 3 corresponding to the service provider C, the card processing terminal 3 transmits a random number generation request to the IC card 1 (L11).
In response to this, the IC card 1 generates a random number, stores it in the storage unit 11, and transmits it to the card processing terminal 3 (L12).
Upon receiving the random number, the card processing terminal 3 generates an authentication code by encrypting the random number with a directory selection key (secret key) (L13). Then, the authentication code, the directory name of the hidden directory of the service provider C, and the ID of the directory selection key (public key) paired with the directory selection key (secret key) are transmitted to the IC card 1 together with the authentication request. (L14).
[0027]
In response to this, the IC card 1 searches the directory selection key (public key) corresponding to the hidden directory of the service provider C from the argument directory name and the ID of the directory selection key (public key), and the corresponding directory. When the selection key is detected, the authentication code is decrypted using the key. Then, the code acquired by decryption is checked against the random number previously stored in the storage unit 11 to check whether they match (L15). Then, a response based on the check result is transmitted to the card processing terminal 3 (L16). This completes the authentication process.
[0028]
In this example, it is assumed that the check result is normal and a reply is given to permit access to the hidden directory of the service provider C. In this case, the IC card 1 moves the current directory to the directory of the selected service provider C. As a result, the service provider can read the data under its own directory and perform processing for providing the service.
[0029]
In the authentication process, when the check result of the authentication code indicates an error, the IC card 1 transmits a response that the corresponding directory does not exist to the card processing terminal 3 and ends the process.
[0030]
In this way, in the IC card 1 having a file system in which a directory for each service provider is formed, authentication is performed when the service provider selects its own directory in the IC card 1, and the authentication result is an error. In some cases, in order to deny the existence of the directory, each service provider's directory can be hidden from other service providers to prevent others from entering. As a result, unauthorized access by a person who does not have proper authority for each directory can be prevented.
In addition, even a service provider who can access the IC card 1 cannot know what other service data is stored in the IC card 1, and thus protect the privacy of the card holder. Can do.
[0031]
In the above description, the card processing terminal 3 is provided for each service provider. However, the present invention is not limited to this. For example, a single card processing terminal 3 provides services by a plurality of service providers. You may do it. In this case, the processing program and data of each service provider are stored in the storage unit 33 of the card processing terminal 3, and the card processing terminal 3 stores the processing program or the like of any service provider in response to a predetermined request. It may be read and executed. The criteria for selecting the service to be executed are arbitrary, and may be made in response to an external request (for example, when receiving a service selection input from the input unit 34), or an internal request (for example, a card) For example, the processing terminal 3 may automatically select a service based on information stored in the IC card 1 or the like.
[0032]
Further, the card processing terminal 3 may be connected to a network or may be stand-alone.
In addition, the user of data in the IC card 1 is not limited to the service provider and is arbitrary.
[0033]
Although the present embodiment is a system when the present invention is applied to the file system in the IC card 1, the application target of the present invention is not limited to this, and can be applied to various file systems having a directory structure. It is.
Next, for example, as a modification of the present embodiment, a file protection system for preventing unauthorized access to a file system in a terminal used by a plurality of users will be described.
[0034]
This file protection system includes a terminal 5 and an authentication IC card 7, for example, as shown in FIG.
[0035]
The terminal 5 includes a storage unit 51, a control unit 52, an input unit 53, and a display unit 54, and is connected to the IC card R / W6.
In the storage unit 51, a directory for each user who uses the terminal 5 is formed. The directory includes a normal directory and a hidden directory. Among these, the hidden directory stores a directory selection key (public key) used when the user accesses the directory in addition to the data used by the user.
The storage unit 51 stores a program executed by the control unit 52 and stores various data necessary for processing.
[0036]
The control unit 52 executes a program stored in the storage unit 51 to generate a directory for each user, an authentication process when the selection target by the user is a hidden directory, and a directory for each directory selected by the user. The subordinate data read / write processing is performed.
[0037]
For example, the control unit 52 generates a new user directory in the storage unit 51 in response to a directory creation request input from the input unit 53. At this time, if generation of a hidden directory is requested, a pair of directory selection keys (secret key / public key) is generated, and one directory selection key (secret key) is transmitted to the user via the IC card R / W6. And the other directory selection key (public key) is stored in the generated directory.
[0038]
The control unit 52, in response to the access request to the directory input from the input unit 53 by the user, the directory that is selected to determine a hidden directory, if it is hidden directory, predetermined authentication The user is authenticated by the process. If the authentication result is appropriate, the current directory is transferred to the selected hidden directory. At this time, if the authentication result is an error, an error message indicating that the corresponding directory does not exist is displayed on the display unit 54.
If the selected directory is a normal directory, the current directory is transferred to the selected directory as it is.
[0039]
The input unit 53 notifies the control unit 52 of data input by the user.
The display unit 54 displays various processing screens in accordance with instructions from the control unit 52.
[0040]
The authentication IC card 7 is provided for each user, and has an IC chip including a storage unit 71, a control unit 72, and an input / output I / F (interface) 73.
The storage unit 71 includes a memory such as a ROM, a RAM, and an EEPROM, and stores a directory selection key (secret key) supplied from the terminal 5.
When the processing target directory selected by the user at the terminal 5 is a hidden directory, the control unit 72 performs a predetermined authentication process with the terminal 5.
[0041]
Next, the operation of this file protection system will be described.
For example, a directory generation process in a scene where a user D directory in the storage unit 51 of the terminal 5 is newly generated will be described with reference to FIG.
[0042]
For example, the user D inputs a directory generation request from the input unit 53 of the terminal 5 (L21). At this time, for example, the user D sets a hidden directory as a generation target.
In response to this, the control unit 52 of the terminal 5 generates a directory corresponding to the user D in the storage unit 51 and also generates a pair of directory selection keys (secret key / public key) (L22). Then, one directory selection key (secret key) is supplied to the authentication card 7 of the user D via the IC card R / W 6 (L23), and the other directory selection key (public key) is stored in the user D directory. Store (L24).
Thereby, the concealment directory of the user D is generated in the terminal 5.
[0043]
Next, authentication processing in a scene where the user D accesses his / her own hidden directory in the terminal 5 will be described with reference to FIG.
[0044]
For example, when the user D selects the directory of the user D from the input unit 53 of the terminal 5 (L31), the terminal 5 generates a random number, stores it in the storage unit 51, and transmits it to the authentication IC card 7 (L32). ).
Upon receiving the random number, the authentication IC card 7 generates an authentication code by encrypting the random number with a directory selection key (secret key) (L33). Then, the authentication code, the directory name of the user D's hidden directory, and the directory selection key (public key) ID paired with the directory selection key (secret key) are transmitted to the terminal 5 together with the authentication request (L34). .
[0045]
In response to this, the terminal 5 searches the directory selection key (public key) corresponding to the directory of the user D from the argument directory name and the directory selection key (public key) ID, and detects the corresponding directory selection key. If so, the authentication code is decrypted using the key. Then, the code acquired by decryption is checked against the random number previously stored in the storage unit 51, and it is checked whether or not they match (L35). Then, a message based on the check result is displayed on the display unit 54 (L36). This completes the authentication process.
[0046]
In this example, it is assumed that the check result is normal. In this case, the terminal 5 moves the current directory to the directory of the selected user D. Thereby, the user D can read the data under his / her directory.
[0047]
In the authentication process, if the check result of the authentication code indicates an error, the terminal 5 displays a message indicating that the corresponding directory does not exist on the display unit 54 and ends the process.
[0048]
In this way, in the terminal 5 having a file system in which a directory for each user is formed, authentication is performed when the user selects his / her own directory in the terminal 5, and if the authentication result is an error, the directory exists. Therefore, it is possible to hide each user's directory from other users and prevent others from entering. As a result, unauthorized access by a person who does not have proper authority for each directory can be prevented.
Further, even a user who can access the terminal 5 cannot know which other user's data is stored in the IC card 1, so that the privacy of each user can be protected.
[0049]
In this embodiment, the secret key is held on the card processing terminal 3 side (in the modification example, the authentication card 7 side) using the public key cryptosystem, and the public key is stored in the IC card 1 (in the modification example, on the terminal 5 side). However, the present invention is not limited to this. For example, a common key cryptosystem may be used. In this case, for example, the IC card 1 and the card processing terminal 3 (in the modified example, the terminal 5 and the authentication card 7) may hold a common key.
[0050]
In this embodiment, the directory selection key used for authentication is generated inside the IC card. However, the present invention is not limited to this. For example, the directory selection key may be generated outside the IC card (such as the card processing terminal 3). Good.
For example, the card processing terminal 3 generates a pair of directories selected key to request generation of concealment directory to the IC card 1, in response thereto, the IC card 1 generates a concealment directory, generating concealment Directory Is notified to the card processing terminal 3, and in response to this, the card processing terminal 3 transmits a directory selection key to the IC card 1, and in response thereto, the IC card 1 generates a directory selection key. You may make it store in a concealment directory.
In the above process, the directory selection key need not be generated at the beginning of the process. For example, it may be performed after the card processing terminal 3 transmits a hidden directory generation request to the IC card 1.
[0051]
In the above modification, authentication using the directory selection key may not be performed, and all users who know the existence of a certain hidden directory may be able to access the hidden directory. In this case, the terminal 5 moves the current directory to the selected directory if the specified directory exists according to the designation of the hidden directory from the user, and if the specified directory cannot be detected. May output an error message. Similarly, with respect to the IC card 1, authentication using the directory selection key is not performed, and all service providers who know the existence of a hidden directory can access the hidden directory. Also good.
[0052]
Further, in the above description, in the authentication when the access request to the directory is accepted, if the check result indicates an error, the existence of the directory is denied. However, the present invention is not limited to this. You may reply that access is denied.
[0053]
The system of the present invention can be realized using a normal computer system, not a dedicated system. For example, a program for executing the above operation is stored in a computer-readable recording medium (FD, CD-ROM, DVD, etc.) and distributed, and the program is installed in the computer to execute the above processing. You may comprise the card processing terminal 3, the terminal 5, etc. to perform. Further, it may be stored in a disk device included in a server device on a network such as the Internet, and may be downloaded onto a computer, for example, superimposed on a carrier wave.
Further, when the OS realizes the above functions by sharing the OS or jointly with the OS and the application, only the part other than the OS may be stored and distributed in a medium, or may be superimposed on a carrier wave to a computer. You may download it.
[0054]
【The invention's effect】
As described above, according to the present invention, unauthorized access to a file system having a directory structure can be prevented.
[Brief description of the drawings]
FIG. 1 is a system configuration diagram of an IC card system according to an embodiment of the present invention.
FIG. 2 is a diagram for explaining a data structure in a storage unit of an IC card used in the IC card system of FIG. 1;
FIG. 3 is a diagram for explaining directory generation processing;
FIG. 4 is a diagram for explaining an authentication process when accessing a directory in an IC card.
FIG. 5 is a system configuration diagram of a modification of the embodiment of the present invention.
6 is a diagram for explaining directory generation processing in the system shown in FIG. 5; FIG.
7 is a diagram for explaining an authentication process when a directory in a terminal is accessed in the system shown in FIG. 5. FIG.
[Explanation of symbols]
1 IC Card 11 Storage Unit 12 Control Unit 13 Input / Output I / F
3 Card processing terminal 31 Control unit 32 Card R / W unit 33 Storage unit 34 Input unit 35 Display unit 5 Terminal 51 Storage unit 52 Control unit 53 Input unit 54 Display unit 6 Card R / W
7 Authentication IC Card 71 Storage Unit 72 Control Unit 73 Input / Output I / F

Claims (3)

An IC card is a directory concealing method for preventing unauthorized access to a file system having a directory structure,
In response to the directory generation request, a directory and a pair of directory selection keys are generated, one selection key is transmitted to the request source, and the other selection key is stored in association with the directory.
An authentication code generated using the one selection key as an encryption key, and information specifying a directory are received from an access request source;
Decrypting the authentication code with the other selection key to perform authentication;
If the authentication result shows normal, move the current directory to the selected directory,
When the authentication result indicates an error, an error status indicating that the selected directory does not exist is returned, so that each directory is concealed from those without proper authority by denying the existence of the selected directory.
A directory hiding method characterized by the above. A directory hiding device comprising a file system having a directory structure,
Means for generating a directory and a pair of directory selection keys in response to the directory generation request, transmitting one selection key to the request source and storing the other selection key in association with the directory;
Means for receiving an authentication code generated using the one selection key as an encryption key and information for specifying a directory from an access request source;
Means for decrypting and authenticating the authentication code using the other selection key;
If the authentication result indicates normal, means for moving the current directory to the selected directory,
Means for concealing each directory from those without legitimate authority by denying the existence of the selected directory by returning an error status that the selected directory does not exist if the authentication result indicates an error; ,
A directory concealment device comprising: An IC card system including an IC card in which a directory is formed for each service provider in a storage area, and a service provider terminal,
The IC card is
In response to a directory generation request from the service provider terminal, a directory and a pair of directory selection keys are generated, and one selection key is transmitted to the service provider terminal and the other selection key Means for storing in association with the directory;
Means for receiving an authentication code generated using the one selection key as an encryption key and information indicating the directory of the service provider from the terminal of the service provider;
Means for decrypting and authenticating the authentication code using the other selection key;
If the authentication result indicates normal, means for permitting access to the requested directory;
Means for concealing each directory from those without legitimate authority by denying the existence of the requested directory by returning an error status indicating that the selected directory does not exist if the authentication result indicates an error; With
The terminal of the service provider is
Means for transmitting the directory generation request to the IC card;
Means for receiving the one selection key from the IC card;
Means for transmitting the authentication code and information indicating a directory of the service provider to the IC card;
An IC card system characterized by comprising:

Images