JP4584192B2 - Authentication system, authentication server, terminal, authentication method, program - Google Patents

Description

  The present invention relates to an authentication system, and more particularly to an authentication system that authenticates a terminal with an authentication server.

  When providing an authentication system on the Internet, the conventional ID / password method has a security problem of leaking passwords, so an electronic device dedicated to authentication such as an IC card or authentication token generator with special calculation capability An authentication system using is used.

  Here, an example of an authentication method with high security using an IC card will be described with reference to FIGS. FIG. 8 is a block diagram showing the configuration of the authentication system in the conventional example, and FIG. 9 is a sequence diagram showing the authentication operation.

  Referring to FIG. 8, a conventional authentication system using an IC card includes a user terminal 210, an IC card device 230, an IC card 240, an authentication server 220, a user public key storage location 201, and a user terminal 200. The Internet 100 connects the authentication server 300 to each other.

  Referring to FIG. 9, the user terminal 210 receiving authentication first receives an authentication random number from the authentication server 220 (step G1). Subsequently, in order to use the IC card 240, the PIN (PIN code) of the IC card 240 is input at the user terminal 210 (step G2), and the PIN verification is received by the IC card 240 (step G3). Subsequently, if the PIN is verified, an authentication random number is input to the IC card 240 (step G4). Then, the IC card 240 that has received the authentication random number creates authentication data using the user secret key stored in the tamper resistant area (step G5). Subsequently, the user terminal 210 receives the created authentication data from the IC card 240 (step G6) and transmits it to the authentication server 220 as terminal authentication information together with the authentication ID (step G7). Subsequently, the authentication server 220 that has received the terminal authentication information extracts the authentication ID from the terminal authentication information (step G8), and acquires the user public key from the user terminal public key storage location 221 based on the authentication ID (step G9). The authentication data is verified using the authentication data in the terminal authentication information, the authentication random number transmitted to the user terminal 210, and the user public key (step G10). Thereafter, the authentication result is transmitted to the user terminal 210 (step G11), and the user terminal 210 receives the authentication result (step G12).

JP 2002-312319 A JP 2004-234632 A

  However, although the conventional authentication method using the IC card can perform authentication with a high level of security, it is necessary for the user to input a PIN for each authentication, which is troublesome for the user and is convenient. There is a problem that is low. Further, since the authentication data is created in the IC card, it is necessary to store a special program and a user secret key in the IC card. Generally, the program and user secret key in the IC card are stored for each system. On the other hand, since the program and the user secret key cannot be rewritten, a special IC card is used for each system, and there is a problem that the system introduction cost becomes very high.

  Furthermore, in terms of security, in the case of an IC card, if the PIN code is leaked, there is a possibility that it will be authenticated by an unauthorized user. An authentication system with a security level commensurate with the cost of making a smart IC card cannot be expected. Also, authentication using an IC card or an authentication token cannot be made aware of the client terminal that performs authentication. In other words, if an unauthorized user uses a legitimate IC card or authentication token on another client terminal, there are problems such that the authorized user is unaware and cannot respond quickly to unauthorized use. Arise. In addition, since the authentication method in the IC card special calculation does not include the number of authentications, once a means for illegal use is acquired, there is a possibility that it may be used illegally infinitely thereafter.

  Furthermore, when the above-described electronic device dedicated to authentication is used, an authentication system with high security can be provided, but there is a problem that the device itself is expensive and is not a general device because it is a special device.

  Further, as other examples of the authentication system with improved security, there are Patent Documents 1 and 2 mentioned above. Patent Document 1 discloses a method in which a one-time password generated on the user side is registered in advance in an authentication server, and authentication is performed using this. Japanese Patent Application Laid-Open No. 2004-228561 discloses a method for performing login authentication without a password by transmitting information in an IC card and information in a terminal memory to an authentication server.

  However, since the method of Patent Document 1 generates a one-time password regardless of the terminal, the authentication target is only the user, and authentication is possible as long as the one-time password is provided. The problem is that is low. Further, in the method of Patent Document 2, if the information in the IC card transmitted from the user side over the network and the information in the terminal memory are eavesdropped, unauthorized authentication is performed and security is low. There is.

  Therefore, the object of the present invention is to provide an authentication system that improves the disadvantages of the above-described conventional example, and in particular, provides a high security while ensuring low security and high convenience. .

Therefore, an authentication system according to one aspect of the present invention is:
The first and second identification information protects the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. A user terminal stored in the user-side storage means in the
An authentication server that stores the use count limited password in the server-side storage unit in association with the identification information for authentication generated in advance based on the first and second identification information;
An authentication system comprising:
Identification information reading means for the user terminal to read the first and second identification information; password reading means for reading the use-restricted password from the user-side storage means using the first and second identification information; Authentication information transmitting means for generating authentication identification information based on the second identification information, and transmitting the use limit password together with the authentication identification information to the authentication server via the network,
The authentication server includes a verification unit that reads the use count limited password stored in the server-side storage unit based on the authentication identification information received from the user terminal and performs verification with the use count limited password received from the user terminal. The
It is characterized by that.

  According to the above-described invention, first, based on the first identification information stored in advance in the portable medium and the second identification information stored in the user terminal, the use frequency limit password (for example, the use frequency is limited to one time). Generated one-time password) is generated and stored in the user terminal and the authentication server. At this time, in the user-side storage means of the user terminal, the use-number-restricted password is protected by the first and second identification information so that it cannot be read unless the first and second identification information is used. Is remembered. When the user performs authentication, the first identification information is read from the portable medium, the second identification information is read from the user terminal, and the user-side storage means is used using these two identification information. Get the password for use limit. Thereafter, authentication identification information is generated based on the first and second identification information, and the use frequency limit password is transmitted to the authentication server together with the authentication identification information. Then, the authentication server reads the use frequency limit password stored in advance in the server-side storage unit based on the received authentication identification information, and compares it with the use frequency limit password received from the user terminal.

  Therefore, according to the present invention, first and second identification information necessary for authentication are automatically acquired from the user terminal at the time of authentication, so that the operation by the user is facilitated. Further, the first identification information from the portable medium owned by the user and the second identification information from the user terminal operated by the user are read out, and the use time limit password generated based on the first identification information is used. Therefore, if the two are not available, the authentication cannot be performed and the security is high. Furthermore, since the identification information for authentication and the use count limit password are transmitted from the user terminal to the authentication server, even if the use count limit password is wiretapped, it cannot be used later depending on the use count. Since unauthorized acquisition of the first and second authentication information for acquiring the use frequency limit password can be suppressed, a stronger authentication system can be provided.

And the authentication server which comprises the said system is
An authentication server connected to a user terminal via a network and authenticating the user terminal,
Based on the first identification information and the second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. Server-side storage means stored in association with the generated identification information for authentication;
The first and second identification information is used at the user terminal from the user-side storage means that is transmitted from the user terminal and is stored in a state where the password for use count restriction is protected in advance by the first and second identification information. Authentication information accepting means for accepting the use frequency limit password read out and the authentication identification information generated on the user terminal based on the first and second identification information;
A verification unit that reads the usage limit password stored in the server-side storage unit corresponding to the authentication identification information received from the user terminal, and performs verification with the usage limit password received from the user terminal;
It is characterized by having.

  At this time, the authentication identification information is generated from the authentication identification information so that the first and second identification information cannot be generated. Thereby, it is possible to more strictly prevent the authentication information from leaking from the information flowing on the network, thereby improving the security.

  The use frequency limit password includes a plurality of passwords, and the verification unit reads one use frequency limit password from the server-side storage unit in accordance with the verification execution count. In addition, a password generation means for generating a use count limit password is provided. The password generation means stores the generated use count limit password in the server side storage means and outputs it for storage in the user side storage means of the user terminal. It is characterized by that. As a result, a plurality of use-time-restricted passwords are generated at a time, and an appropriate password is selected according to the number of uses. Therefore, convenience can be improved while realizing more reliable authentication. And the function mounted in the user terminal side can be reduced by producing | generating a use frequency limit password in an authentication server.

  In addition, the use frequency limit password received from the user terminal is information combined with the combining information provided from the authentication server at the user terminal, and the collating unit uses the use frequency limit stored in the server-side storage unit. It is characterized in that the information for composition is combined with the password and used for verification. As a result, the composition information provided from the authentication server is combined with the use frequency limit password and transmitted over the network, so that unauthorized authentication can be suppressed even if wiretapped.

  Further, a storage means for storing the first and second identification information in association with the authentication identification information generated in advance by the authentication server, and the authentication identification information received from the user terminal according to the collation result by the collation means And authentication means for authenticating the user terminal corresponding to the first and second identification information associated with. Thereby, the user and user terminal used as authentication object can be specified after password authentication.

Moreover, the program which is the other form of this invention is:
Connected to the user terminal via the network,
Based on the first identification information and the second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. Server-side storage means stored in association with the generated identification information for authentication;
To the authentication server that authenticates user terminals,
The first and second identification information is used at the user terminal from the user-side storage means that is transmitted from the user terminal and is stored in a state where the password for use count restriction is protected in advance by the first and second identification information Authentication information accepting means for accepting the use frequency limit password read out and the authentication identification information generated on the user terminal based on the first and second identification information;
A verification unit that reads the usage limit password stored in the server-side storage unit corresponding to the authentication identification information received from the user terminal, and performs verification with the usage limit password received from the user terminal;
It is characterized by realizing.

Further, according to another aspect of the present invention, the user terminal constituting the authentication system is
Based on the first identification information and the second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. A user terminal that is stored in association with authentication information generated in advance and that is connected to an authentication server that performs verification of a use-time-restricted password via a network,
User-side storage means for storing the use count limited password in a state protected by the first and second identification information;
Identification information reading means for reading the first and second identification information;
Password reading means for reading out the use frequency limit password from the user-side storage means using the first and second identification information;
Authentication information transmitting means for generating authentication identification information based on the first and second identification information, and transmitting the use count limited password together with the authentication identification information to the authentication server via the network;
It is characterized by having.

  Then, the authentication information transmitting means generates the authentication identification information so that the first and second identification information cannot be generated from the authentication identification information. Further, the use frequency limit password is configured to include a plurality of passwords, and the authentication information transmitting unit reads one use frequency limit password from the user-side storage unit according to the transmission execution count. . Further, the authentication information transmitting means is characterized in that the combining information provided from the authentication server is combined with the use frequency limit password and transmitted.

Moreover, the program which is the other form of this invention is:
Based on the first identification information and the second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. It is stored in association with previously generated identification information for authentication, and is connected to an authentication server that verifies the number-of-use restricted password via the network, and the number-of-use restricted password is protected by the first and second identification information. In the user terminal equipped with the user side storage means stored in the
Identification information reading means for reading the first and second identification information;
Password reading means for reading out the use frequency limit password from the user-side storage means using the first and second identification information;
Authentication information transmitting means for generating authentication identification information based on the first and second identification information, and transmitting the use count limited password together with the authentication identification information to the authentication server via the network;
It is characterized by realizing.

Furthermore, an authentication method according to another aspect of the present invention includes:
The first and second identification information protects the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. A user terminal stored in the user-side storage means in the
An authentication server that stores the use-time-restricted password in the server-side storage unit in association with authentication identification information generated in advance based on the first and second terminal identification information;
A method of authenticating a user terminal,
Based on the first and second identification information, the user terminal reads the first and second identification information, reads the use frequency limit password from the user-side storage means using the first and second identification information. Authentication identification information is generated, and the use limit password and the authentication identification information are transmitted to the authentication server via the network,
The authentication server reads the use frequency limit password stored in the server-side storage unit based on the authentication identification information received from the user terminal, and collates with the use frequency limit password received from the user terminal.
It is characterized by that.

  Even if it is invention of the authentication server of the said structure, a user terminal, a program, and an authentication method, since it acts similarly to the authentication system mentioned above, the objective of this invention mentioned above can be achieved.

  Since the present invention is configured and functions as described above, according to this, first, first and second identification information necessary for authentication are automatically acquired from the user terminal at the time of authentication. Becomes easy. Further, the first identification information from the portable medium owned by the user and the second identification information from the user terminal operated by the user are read out, and the use time limit password generated based on the first identification information is used. Therefore, if the two are not available, the authentication cannot be performed and the security is high. Furthermore, since the identification information for authentication and the use frequency limit password are transmitted from the user terminal to the authentication server, even if the use frequency limit password is intercepted, it cannot be used later depending on the number of use. Since unauthorized acquisition with the first and second authentication information for acquiring the number-limited password can be suppressed, it has an unprecedented excellent effect that a stronger authentication system can be provided.

  The present invention is an authentication system that performs user authentication using first identification information stored in a portable medium possessed by a user and second identification information stored in a user terminal. Hereinafter, the configuration and operation of the system will be described in the embodiments. In the following, an IC card will be described as an example of a portable medium, but the portable medium is not limited to an IC card. In addition, as a password used for authentication (usage limit password), a one-time password that can be used only once is taken as an example, but the number of usable times can be arbitrarily set. However, from the point of security, it is desirable to be once.

  A first embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a block diagram showing the configuration of the entire authentication system. FIG. 2 is a functional block diagram showing the configuration of the user terminal, and FIG. 3 is a functional block diagram showing the configuration of the authentication server. FIG. 4 is a diagram illustrating information stored in the authentication server and the user terminal. 5 to 6 are sequence diagrams showing the operation of the system.

[Constitution]
As shown in FIG. 1, the authentication system includes an authentication server 1 and a user terminal 4 and is connected via a network N such as the Internet. In the storage device in the authentication server 1, storage units such as an authentication ID related information storage location 2 and an issued authentication token storage location 3 are formed. Further, the user terminal 4 is connected with a received authentication token storage destination 5 which is a storage unit formed in a built-in or external storage device, and an IC card device 6. The IC card 7 owned by the user is inserted. Hereinafter, each configuration will be described in detail.

<IC card, IC card device>
The IC card 7 (portable medium) refers to a physical medium having a tamper-resistant area, in which a service ID 7a (first identification information) that is unique identification information for each service used by the user is stored. Yes. With this service ID, the IC card 7, that is, the user holding the IC card 7 can be uniquely identified. Note that the IC card 7 in which the service ID is stored is not necessarily in the form of a card.

  The IC card device 6 connected to the user terminal 4 has a function of automatically acquiring the service ID 7a stored in the tamper resistant area of the IC card 7 in response to a control command from the user terminal 4. ing. The IC card device 6 may be either internal or external to the user terminal 4.

<User terminal, received authentication token storage location>
The user terminal 4 is an information processing terminal such as a personal computer operated by the user, and is provided with the above-described IC card device 6 connected thereto. In addition, a storage device such as a hard disk drive is built in or connected externally, and a storage unit such as a received authentication token storage destination 5 is formed.

  Specifically, a predetermined program is incorporated in the arithmetic device such as the CPU of the user terminal 4 so that an authentication token acceptance processing unit 41, a basic information reading processing unit 42, a one-time password acquisition process, as shown in FIG. A unit 43, a terminal authentication information generation / transmission processing unit 44, and a counter update processing unit 45 are constructed. Further, terminal identification information (second identification information), which is identification information unique to the terminal, is stored in a storage unit such as a ROM provided in the user terminal 4. Hereinafter, the processing units 41 to 45 will be described in detail.

  First, the basic information reading processing unit 42 (identification information reading means) has a function of reading and acquiring the service ID stored in the IC card 7 from the IC card device 6 described above. The service ID is obtained from the IC card 7 via the IC card device 6 every time authentication is performed by the user terminal 4 as described later, or when the service ID is provided to the authentication server 1 to generate a one-time password described later. If acquired, it is not stored in the user terminal 4. In addition, the basic information reading processing unit 42 has a function of acquiring the terminal identification information 4 a stored in the user terminal 4. The terminal identification information is information specific to the user terminal and is information that can be uniquely identified from other terminals. This terminal identification information is also acquired every time authentication is performed by the user terminal 4 or when the authentication server 1 is provided to generate a one-time password to be described later.

  The basic information reading processing unit 42 passes the read service ID and terminal identification information to the one-time password acquisition processing unit 43 when performing authentication, and authenticates when generating the one-time password first. An authentication token acceptance processing unit 41 is provided to be provided to the server 1.

  The authentication token reception processing unit 41 outputs the service ID and the terminal identification information passed from the basic information reading processing unit 42 to be passed to the authentication server 1. For example, it is encrypted and transmitted to the authentication server 1 via the network N, or is recorded on a storage medium such as a CD-ROM and passed to the authentication server 1. Further, the authentication token reception processing unit 41 receives an input of the authentication token generated by the authentication server 1 based on the service ID and terminal identification information passed to the authentication server 1 as will be described later, and has received the received authentication. It has a function of storing in the token storage destination 5. At this time, for example, the authentication token is encrypted from the authentication server 1 and transmitted via the network N, or is input via a storage medium such as a CD-ROM. Then, the authentication token reception processing unit 41 protects the received authentication token with the service ID acquired by the basic information reading processing unit 42 and the terminal identification information, and the received authentication token storage destination 5 (user Side storage means). Specifically, “in a state protected by the service ID and the terminal identification information” means that the information in the received authentication token storage location 5 (the authentication token) if there is no two information of the service ID and the terminal identification information. Etc.) is stored so that it cannot be read out. The authentication token is a set of a plurality of random number data continuously generated by the authentication server 1 and mathematically guarantees that even if random number data is exposed, a random number generated earlier cannot be estimated. Suppose that Each random number constituting the authentication token is called a one-time password. That is, the authentication token includes a plurality of one-time passwords. In addition, the authentication token reception processing unit 41 stores the number of one-time passwords (number of passwords) included in the authentication token as a counter value in the received authentication token storage destination 5 together with the authentication token. Here, FIG. 5 shows the state of information stored in the received authentication token storage destination 5.

  Next, the one-time password acquisition processing unit 42 (password reading means) uses the service ID and the terminal identification information acquired by the basic information reading processing unit 42 when performing authentication, so that these two pieces of information are obtained. An authentication token that cannot be acquired without it is acquired from the received authentication token storage destination 5. At this time, the number of passwords as a counter value is also read, the one-time passwords in the order corresponding to these values are extracted from the authentication token, and passed to the terminal authentication information generation / transmission processing unit 44 as a password used for this authentication.

  Next, the terminal authentication information generation processing unit 44 (authentication information transmitting means) becomes information for identifying a combination of the service ID and the terminal identification information acquired by the basic information reading processing unit 42 as described above. It has a function of generating an authentication ID (identification information for authentication). At this time, the authentication ID is, for example, information calculated by connecting the service ID and the terminal identification information and performing Hash calculation on the connected value. By doing so, the service ID and the terminal identification information cannot be generated (restored) from the authentication ID. Then, the terminal authentication information generation processing unit 44 sends the authentication server 1 through the network N as terminal authentication information including the generated authentication ID and the one-time password acquired by the one-time password acquisition processing unit 43. A function to transmit is provided.

  Further, every time a one-time password is transmitted, the counter update processing unit 45 performs a process (decrement) of reducing the number of passwords in the received authentication token storage destination 5 by one. As a result, when the next authentication is performed, the number of passwords, which is a counter value, is changed, and thus a different one-time password is extracted from the authentication token.

<Authentication server>
The authentication server 1 is an information processing device such as a workstation server and is connected to the user terminal 4 via the network N and has a function of authenticating the user terminal 4. Specifically, by incorporating a predetermined program into an arithmetic device such as a CPU, as shown in FIG. 3, a user information acquisition processing unit 11, an authentication token / ID generation processing unit 12, a terminal authentication information reception processing unit 13, An authentication token acquisition processing unit 14, a password verification processing unit 15, a user authentication processing unit 16, and a counter update processing unit 17 are constructed. As described above, each storage unit such as the authentication ID related information storage destination 2 and the issued authentication token storage destination 3 is formed in a storage device such as a hard disk drive. The details will be described below.

  The user information acquisition processing unit 11 inputs the service ID stored in the user's IC card 7 and the terminal identification information stored in the user terminal 4 from the user terminal 4 or via a storage medium. Has a function to accept.

  The authentication token / ID generation processing unit 12 (password generation means) generates an authentication ID from the received service ID and terminal identification information, and similarly generates an authentication ID from the service ID and the authentication token. And a function to perform. Here, as described above, the authentication token is a set of a plurality of continuously generated random number data, and each of the random numbers becomes a one-time password. As described above, the authentication ID is information for identifying a combination of a service ID and terminal identification information. For example, the authentication ID is calculated by concatenating the service ID and terminal identification information and performing a hash calculation on the concatenated value. The

  The authentication token / ID generation processing unit 12 first associates the service ID 2b and the terminal identification information 2c with the authentication ID 2a generated as described above, as shown in FIG. Store in storage location 2. Further, as shown in FIG. 4 (c), the authentication ID 3a generated as described above includes the generated authentication token 3b and the number of one-time passwords included in the authentication token (password number 3c). Stored in the token storage destination 3 (server-side storage means).

  Further, the authentication token / ID generation processing unit 12 outputs to the user terminal 4 so as to be stored in the received authentication token storage destination 5 by the authentication token reception processing unit 41 of the user terminal 4 as described above. At this time, for example, the authentication token is stored in the received authentication token storage destination 5 of the user terminal 4 as described above by being encrypted and output via the network N or output to a storage medium. .

  Here, since the service ID and the terminal identification information are used in the generation of the authentication token by the authentication server 1, different authentication tokens are generated if the combination of the service ID and the terminal identification information is different. That is, a unique authentication token is generated for the combination of the user's IC card 7 and the user terminal 4, and the same authentication token is stored in the authentication server 1 and the user terminal 4. At this time, the same number of passwords is stored. The generation process of the authentication token and the like by the user information acquisition processing unit 11 and the authentication token / ID generation processing unit 12 is first performed only once.

  Next, as described above, the terminal authentication information reception processing unit 13 (authentication information reception means) receives the terminal authentication information transmitted from the terminal authentication information generation / transmission processing unit 44 of the user terminal 4 when the user requests authentication. .

  The authentication token acquisition processing unit 14 (verification unit) extracts the authentication ID and the one-time password included in the received terminal authentication information, searches the issued authentication token storage destination 3 using the extracted authentication ID as a key, An authentication token associated with the same authentication ID as the authentication ID is acquired. Then, a one-time password corresponding to the number of passwords that is a counter value stored in the issued authentication token storage destination 3 is extracted from the authentication token.

  As described above, the password verification processing unit 15 (verification unit) is configured to receive the one-time password received from the user terminal 4, the one-time password read from the issued authentication token storage destination 3 by the authentication token acquisition processing unit 14, To see if they are the same. Then, the verification result is notified to the user authentication processing unit 16.

  When the collation results match, the user authentication processing unit 16 (authentication means) reads the service ID and the terminal identification information from the authentication ID related information storage location 2 based on the received authentication ID, and stores these information. The user terminal 4 (user) to be authenticated is authenticated, and the authentication result is notified to the user terminal 4.

  In addition, the counter update processing unit 17 increases the number of passwords in the issued authentication token storage destination 3 by one each time the one-time password is verified or each time the one-time password is extracted from the issued authentication token storage destination 3. Decrement processing is performed. As a result, when the next authentication is performed, the number of passwords, which is a counter value, is changed, and thus a different one-time password is extracted from the authentication token. As described above, when the user terminal 4 transmits a one-time password, or when the authentication server 1 receives and authenticates, the password number (counter value) is decremented one by one. The numbers of passwords stored in the received authentication token storage destination 5 and the issued authentication token storage destination 3 always match.

[Operation]
Next, the operation of the authentication system will be described with reference to the sequence diagrams of FIGS. First, the authentication server 1 acquires the service ID and terminal identification information from the user terminal 10 by some means. For example, what the user terminal 4 reads from the IC card device 6 or the terminal 4 itself (steps S1, S2, and S2). S3), acquired via the network N or via a recording medium (step S4). Then, the authentication server 1 generates an authentication token and an authentication ID from the service ID and the terminal identification information (step S5), and stores the service ID and the terminal identification information in the authentication ID related information storage location 21 in association with the authentication ID. Also, the authentication token and the number of one-time passwords in the authentication token as a counter are stored in the issued authentication token storage location 22 in association with the authentication ID (step S7, FIG. 4B). 4 (c)).

  Thereafter, the user terminal 4 acquires the authentication token generated by the authentication server 1 by some means as described above. For example, the user terminal 4 acquires the authentication token via the network N or a recording medium (step S8). Then, the authentication token and the number of one-time passwords in the authentication token as a counter are set in a state protected by the service ID stored in the IC card 7 and the terminal identification information of the user terminal 4, and the received authentication The token is stored in the token storage destination 5 (see step S9, FIG. 4A).

  Subsequently, when the user requests terminal authentication from the authentication server 1, the user terminal 4 instructs the user terminal 4 to perform an authentication operation, so that the user terminal 4 uses the IC card device 6 to the service ID 7 a. Are automatically acquired (steps A1 and A2). At this time, the user does not need to input a PIN or the like. Subsequently, the user terminal 4 automatically acquires terminal identification information from within the terminal (step A3).

  Subsequently, an authentication token and a counter stored in the received authentication token storage destination 5 are acquired from the acquired service ID and terminal identification information (step A4). At this time, a counter value, that is, a one-time password corresponding to the value of the number of passwords is acquired from the authentication token (step A5). Also, an authentication ID is generated from the service ID and the terminal identification information (step A6), terminal authentication information is created from the authentication ID and the acquired one-time password, and transmitted to the authentication server (step A7).

  Thereafter, when the transmission of the terminal authentication information to the authentication server 1 is successful, the counter value in the counter received authentication talk storage destination 5, that is, the value of the number of passwords is decremented by one (step A8), and the received authentication token is stored. The first counter is updated (step A9).

  Subsequently, when receiving the terminal authentication information from the user terminal 4, the authentication server 1 acquires an authentication ID from the terminal authentication information (step A10). Then, using this authentication ID, an authentication token and a counter value (number of passwords) are acquired from the issued authentication token storage 3 (step 11), and a one-time password corresponding to the counter value is acquired from the authentication token (step 11). A12). At this time, since the counter value (number of passwords) is the same value as when the one-time password is acquired at the user terminal 4 in step A5, the password acquired from the issued authentication token storage 3 in the authentication server 1 Is the same.

  Subsequently, it is verified whether the one-time password extracted from the authentication token matches the one-time password in the terminal authentication information received from the user terminal 4 (step A13). If the verifications match, the service ID and terminal identification information are acquired from the authentication ID related information storage location 2 using the authentication ID (step A14), and the user terminal 4 having the acquired service ID and terminal identification information is authenticated. . Conversely, if the verification does not match, the user terminal 1 is not authenticated.

  Subsequently, the authentication server 1 decrements the counter value regardless of whether or not the user terminal 4 is authenticated (step A15), and updates the counter of the issued authentication token storage destination 2 using the authentication ID (step A15). A16). Thereafter, the authentication result is transmitted to the user terminal 4 (step A17), and the user terminal 4 receives this authentication result (step A18).

  In this way, according to the present embodiment, a convenient authentication system with high security using a general-purpose IC card can be introduced at low cost. That is, first, since the service ID is automatically acquired from the IC card, it is not necessary to perform complicated processing such as PIN input by the user, which is convenient. Furthermore, the function of the IC card necessary for this method is that the service ID can be stored in the tamper resistant area, and the function necessary for the IC card device is only to acquire the service ID from the IC card. It is considered that it is basically provided in general IC cards and IC card devices. For this reason, it is not necessary to introduce a new program into the IC card or to give the IC card device a special function, and the present method can be introduced at low cost without depending on the types of the IC card and the IC card device.

  In the present embodiment, since a one-time password is used for authentication, unauthorized authentication can be prevented even if wiretapped. A person who intends to cheat needs to acquire a one-time password that is not being used. However, if the authentication token storing the one-time password does not have terminal identification information and a service ID, can not get. Further, the service ID is stored in the IC card, and unlike information such as a password, the service ID is not forgotten or looked into, and it is easy to ensure safety. Further, the terminal identification information is stored in the user terminal, and sufficient safety can be ensured by performing access restriction and monitoring of the user terminal. That is, the authentication token necessary for terminal authentication is protected by two physical media, and it is easy to ensure the safety of the physical media to be protected. Furthermore, since these pieces of information are not transmitted over the network, it is possible to ensure safety. Further, although the authentication ID transmitted over the network is generated from the service ID and the terminal authentication information, it is generated by performing a process such as Hash processing, so that the service ID and the terminal identification information are obtained from the authentication ID. Can not be done, it has become a stronger security system.

  Further, even if the fraudster obtains the IC card, the authentication token cannot be acquired unless the terminal identification information of the user terminal is acquired. And it is possible to easily control the unauthorized person to connect to the user terminal in order to acquire the terminal identification information of the user terminal, and if the user terminal is monitored, the unauthorized use can be quickly known. Furthermore, since the number of unauthorized uses is also limited to the number of one-time passwords in the authentication token stored in the received authentication token storage destination, it is possible to prevent infinite unauthorized use.

  As described above, according to the present embodiment, an authentication method with high security can be introduced conveniently and inexpensively, and a special IC card that sacrifices the necessity and convenience of abundant financial power. It is possible to provide an authentication method using a general-purpose IC card for general users instead of using the above.

  Next, a second embodiment of the present invention will be described with reference to the sequence diagram of FIG. The authentication system in the present embodiment basically has the same configuration as the authentication system described in the first embodiment, except that a one-time password used for authentication is used as an authentication random number (synthesis information). It differs in that it is synthesized and used. Specifically, the authentication server 1 transmits an authentication random number to the user terminal 4, and the user terminal 4 combines the authentication token random number and the authentication random number, which is a one-time password acquired from the received authentication token storage destination. Is transmitted as terminal authentication information. Similarly, at the time of verification of the one-time password, the authentication server 1 synthesizes the same authentication random number that is transmitted to the user terminal 4 with the one-time password read from the issued authentication token storage destination 3 and performs verification. Do.

  Next, the operation of the authentication system will be described. First, the authentication server 1 transmits an authentication random number to the user terminal (step B1). Thereafter, the operation until the user terminal 4 acquires the one-time password and creates the authentication ID is the same as that in the first embodiment (steps A1 to A6) (steps B2 to B7).

  Subsequently, the user terminal 4 synthesizes the random number in the authentication token (one-time password) and the authentication random number received from the authentication server 1 (step B8), and sends it to the authentication server 1 as terminal authentication information together with the authentication ID. (Step B9). Then, the user terminal 1 decrements and updates the counter (Steps B10 and B11).

  Subsequently, the operation from when the authentication server 1 receives the terminal authentication information until the one-time password, which is a random number in the authentication token corresponding to the counter value, is obtained (steps B12 to B14), as in the first embodiment. (See steps A10 to A12). Subsequently, the authentication server 1 combines the authentication random number transmitted to the user terminal 4 and the random number acquired from the authentication token (step B15), and verifies the match between the combined random number and the random number in the terminal authentication information (step B15). B16). The subsequent operations (steps B17 to B21) are the same as those in the first embodiment (see steps A14 to A18).

  As described above, according to the present embodiment, it is possible to make it difficult for an unauthorized person to predict authentication data by using a combination of an authentication random number and an authentication token random number (one-time password) as a password. it can. Further, since the authentication random number transmitted from the authentication server 1 to the user terminal 4 is used, it can be confirmed that the terminal authentication information is transmitted from the legitimate user terminal 4, and further security is improved. Can be achieved.

  INDUSTRIAL APPLICABILITY According to the present invention, the present invention can be applied to uses such as a passwordless online shopping system that is restricted to home use only, and uses such as a cash machine control program that restricts the number of withdrawals, and has industrial applicability.

It is a block diagram which shows the structure of the whole authentication system in this invention. It is a functional block diagram which shows the structure of a user terminal. It is a functional block diagram which shows the structure of an authentication server. It is a figure which shows the information memorize | stored in an authentication server or a user terminal. It is a sequence diagram which shows operation | movement of an authentication system. It is a sequence diagram which shows operation | movement of an authentication system. It is a sequence diagram which shows operation | movement of the authentication system in Example 2. It is a block diagram which shows the structure of the whole authentication system in a prior art example. It is a sequence diagram which shows operation | movement of the authentication system in a prior art example.

Explanation of symbols

1 Authentication server 2 Authentication ID related information storage 3 Issued authentication token storage 4 User terminal 5 Received authentication token storage 6 IC card device 7 IC card 11 User information acquisition processing unit 12 Authentication token / ID generation processing unit 13 Terminal Authentication information reception processing unit 14 Authentication token acquisition processing unit 15 Password verification processing unit 16 User authentication processing unit 17 Counter update processing unit 41 Authentication token reception processing unit 42 Basic information reading processing unit 43 One-time password acquisition processing unit 44 Terminal authentication information generation Transmission processor 45 Counter update processor

Claims (14)

The use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal is the first and second identification information. A user terminal stored in the user storage means in a protected state; and
An authentication server storing the use-time-restricted password in a server-side storage unit in association with authentication identification information generated in advance based on the first and second identification information;
An authentication system comprising:
Identification information reading means for reading out the first and second identification information by the user terminal, and password reading means for reading out the use limit password from the user-side storage means using the first and second identification information. And authentication information transmitting means for generating authentication identification information based on the first and second identification information, and transmitting the use frequency limit password together with the authentication identification information to the authentication server via a network; With
The authentication server reads the use frequency limit password stored in the server-side storage unit based on the authentication identification information received from the user terminal, and compares it with the use frequency limit password received from the user terminal. With matching means,
An authentication system characterized by that. An authentication server connected to a user terminal via a network and authenticating the user terminal,
Based on the first and second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. Server-side storage means stored in association with the authentication identification information generated
The first and second at the user terminal from the user-side storage means, which is transmitted from the user terminal and stored in advance in a state where the use frequency limit password is protected by the first and second identification information. Authentication information accepting means for accepting the use limit password read using the identification information and authentication identification information generated on the user terminal based on the first and second identification information; ,
A verification unit that reads the use count limited password stored in the server-side storage unit corresponding to the authentication identification information received from the user terminal, and performs verification with the use count limited password received from the user terminal; ,
An authentication server comprising:   The authentication server according to claim 2, wherein the authentication identification information is generated so that the first and second identification information cannot be generated from the authentication identification information. The use limit password is configured to include a plurality of passwords,
The collation means reads one use-time limited password from the server-side storage means according to the number of collation execution times.
The authentication server according to claim 2 or 3, wherein Password generating means for generating the use-time-restricted password;
The password generation means stores the generated use frequency limit password in the server-side storage means and outputs the password for storage in the user-side storage means of the user terminal.
The authentication server according to claim 2, 3 or 4. The usage limit password received from the user terminal is information combined with the combining information provided from the authentication server at the user terminal,
The collation means synthesizes the information for synthesis with the use frequency limit password stored in the server-side storage means and uses it for collation.
The authentication server according to claim 2, 3, 4, or 5. Storage means for storing the first and second identification information in association with the authentication identification information generated in advance by an authentication server;
Authentication means for authenticating the user terminal corresponding to the first and second identification information associated with the identification information for authentication received from the user terminal, in accordance with the collation result by the collation means;
The authentication server according to claim 2, 3, 4, 5, or 6. Connected to the user terminal via the network,
Based on the first and second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. Server-side storage means stored in association with the identification information generated for authentication,
In an authentication server for authenticating the user terminal,
The first and second at the user terminal from the user-side storage means, which is transmitted from the user terminal and stored in advance in a state where the use frequency limit password is protected by the first and second identification information. Authentication information accepting means for accepting the use limit password read using the identification information and authentication identification information generated on the user terminal based on the first and second identification information; ,
A verification unit that reads the use count limited password stored in the server-side storage unit corresponding to the authentication identification information received from the user terminal, and performs verification with the use count limited password received from the user terminal; ,
A program to realize Based on the first and second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. A user terminal connected via a network to an authentication server that stores the authentication identification information generated in advance in association with the authentication server that performs verification of the use-time-restricted password,
User-side storage means for storing the use-time limited password in a state protected by the first and second identification information;
Identification information reading means for reading the first and second identification information;
Password reading means for reading out the use-restricted password from the user-side storage means using the first and second identification information;
Authentication information transmitting means for generating authentication identification information based on the first and second identification information, and transmitting the use frequency limit password together with the authentication identification information to the authentication server via a network;
A user terminal comprising:   10. The user terminal according to claim 9, wherein the authentication information transmitting unit generates the authentication identification information from the authentication identification information so that the first and second identification information cannot be generated. The use limit password is configured to include a plurality of passwords,
The authentication information transmitting unit reads one use number limited password from the user-side storage unit according to the number of times of transmission execution.
11. The user terminal according to claim 9 or 10, wherein: The authentication information transmitting means synthesizes and transmits the combining information provided from the authentication server to the use limit password.
The user terminal according to claim 9, 10 or 11. Based on the first and second identification information, the use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal. The authentication information is stored in association with the authentication identification information generated in advance, and is connected to an authentication server that performs verification of the use-time-restricted password via the network, and the use-restriction password is used as the first and second identification information. In the user terminal provided with the user side storage means stored in a protected state at
Identification information reading means for reading the first and second identification information;
Password reading means for reading out the use-restricted password from the user-side storage means using the first and second identification information;
Authentication information transmitting means for generating authentication identification information based on the first and second identification information, and transmitting the use frequency limit password together with the authentication identification information to the authentication server via a network;
A program to realize The use limit password generated based on the first identification information stored in the portable medium and the second identification information stored in the user terminal is the first and second identification information. A user terminal stored in the user storage means in a protected state; and
An authentication server that stores the use limit password in a server-side storage unit in association with authentication identification information generated in advance based on the first and second terminal identification information;
Comprising the steps of: authenticating the user terminal,
The user terminal reads the first and second identification information, reads the use limit password from the user-side storage means using the first and second identification information, and the first and second Generating identification information for authentication based on the identification information, and transmitting the use limit password together with the authentication identification information to the authentication server via a network,
The authentication server reads the use frequency limit password stored in the server-side storage unit based on the authentication identification information received from the user terminal, and collates with the use frequency limit password received from the user terminal. Do,
An authentication method characterized by that.

Images