JP4704000B2 - Communication system and communication method - Google Patents

Description

  The present invention relates to a communication system and a communication method, and more particularly to a communication system and a communication method that enable session information to be easily managed while efficiently distributing a load.

  In recent years, electronic money has been charged to a contactless IC chip such as FeliCa (registered trademark) embedded in a credit card or mobile phone, and the charged electronic money is used to pay for the purchase of the product. It is becoming popular.

  When paying the price, the user can quickly pay the price because the user simply holds his / her credit card or mobile phone over a terminal (reader / writer) installed in the store.

  Such an electronic money system has a configuration as shown in FIG. 1, for example.

  The server side of the electronic money system includes a server device 1 and a security module 2, and the client side includes a client device 3 and an R / W (reader / writer) 4. The server device 1 and the client device 3 are connected via a network 5.

  In the example of FIG. 1, the mobile phone 6 with the non-contact IC chip 31 built in is close to the R / W 4 on the client side, and is connected to the client device 3 via short-range communication using electromagnetic induction. ing.

  The server device 1 is provided with an HTTP (Hyper Text Transfer Protocol) server 11 and an application server 12, and the client device 3 is provided with an HTTP client 21 and a client application 22. The HTTP server 11 and the HTTP client 21 perform HTTP communication, and the application server 12 (an application of the application server 12) performs various types of information between the client application 22 and the HTTP communication performed by the HTTP server 11 and the HTTP client 21. The electronic money service is provided by transmitting / receiving.

  For example, the application server 12 outputs a command (a command to be executed by the non-contact IC chip 31) created in response to a request from the client application 22 to the security module 2. In addition, when an encrypted command is supplied from the security module 2, the application server 12 transmits it to the client application 22. The application server 12 also transmits information on a screen to be displayed on the client device 3 to the client application 22.

  The security module 2 is a tamper-resistant device, and performs cryptographic processing and management of keys used in the cryptographic processing. The security module 2 encrypts the command supplied from the application server 12 and outputs the encrypted command to the application server 12. The security module 2 and the non-contact IC chip 31 have a common key, and encrypted communication is realized between the security module 2 and the non-contact IC chip 31 by transmitting and receiving information encrypted with the key. .

  The client application 22 of the client device 3 transmits a predetermined request to the application server 12 of the server device 1, and when a command is transmitted from the application server 12, the command is transmitted via the R / W 4 to the non-contact IC chip 31. To send and execute.

  The non-contact IC chip 31 decrypts the encryption applied to the command transmitted from the security module 2 via the R / W 4 or the like and executes it. When the content of the command is rewriting of electronic money, this command includes information on the amount of money to be rewritten.

  For example, in the electronic money system having such a configuration, when paying for the product purchased by the user of the mobile phone 6 using the electronic money stored in the non-contact IC chip 31, the client application 22 of the client device 3. Is sent to the application server 12 of the server device 1, and the application server 12 that receives the request sends a command for requesting the contactless IC chip 31 to read the balance of electronic money (see FIG. Read command) is created.

  The Read command created by the application server 12 is encrypted by the security module 2, and then is read via the application server 12 of the server device 1, the network 5, the client application 22 of the client device 3, and the R / W 4. It is transmitted to the contact IC chip 31 and decrypted by the non-contact IC chip 31 and then executed.

  The balance read by executing the Read command is encrypted by the non-contact IC chip 31, and then, as a response to the application server 12, the R / W 4, the client application 22 of the client device 3, the network 5 And to the security module 2 via the application server 12 of the server device 1. In the security module 2, the encryption applied to the balance transmitted from the non-contact IC chip 31 is decrypted, and the decrypted balance is transmitted to the application server 12.

  As a result, the application server 12 can check the current electronic money balance stored in the non-contact IC chip 31.

  When the balance is confirmed, the application server 12 of the server device 1 issues a command (Write command) for requesting the contactless IC chip 31 to rewrite the balance of electronic money (rewrite to the balance reduced by the price of the product). Created.

  The write command created by the application server 12 is encrypted by the security module 2 in the same manner as the previously sent read command, and then the application server 12 of the server device 1, the network 5, and the client of the client device 3. It is transmitted to the non-contact IC chip 31 via the application 22 and the R / W 4, and is executed after being decoded by the non-contact IC chip 31. This Write command includes information indicating how much the balance will be. As a result, the balance of electronic money stored in the non-contact IC chip 31 is reduced by the price of the product.

  For example, after processing such as a message notifying that the balance reduction has been completed is transmitted from the non-contact IC chip 31 to the application server 12, a series of processing ends. By such a series of processes, payment for the price of the product is realized.

  From the server-client system having such a configuration, the client device 3 is provided in addition to the payment of the price of the product as described above, for example, management of points issued by a store or ticket gate of a train station. If it is, payment of the boarding fee is realized. Also in the case of point management and boarding fee payment, basically the same processing as in the case of payment of the above-mentioned price is performed by each device in FIG.

A server-client system configured as shown in FIG. 1 is disclosed in Patent Document 1.
JP 2003-141063 A

  By the way, in such a server-client system, one process such as payment of money by electronic money is performed for communication for reading the balance (communication for executing a Read command and receiving the response) and rewriting the balance. Communication (communication for executing a write command and rewriting information) is performed over a plurality of communications.

  In this case, each of the application server 12 and the security module 2 on the server side performs a process from the start to the end of a series of processes (sessions), for example, information for identifying a session, and how far out of the series of processes. It is necessary to internally manage session information including information indicating whether the session has been performed and information on the session key when communication is encrypted using a session key that is different for each session.

  On the server side, the session information managed by the application server 12 and the session information managed by the security module 2 are linked and used, and the information from the client side (non-contact IC chip 31) is always up to that point. The session information of the exchange is supplied to the security module 2 that manages the session information.

  For example, in order to distribute the load of one security module, a plurality of security modules may be provided. In this case, the load distribution apparatus provided between the server apparatus 1 (application server 12) and the security module 2 is a string. Then, referring to the managed session information, the information from the non-contact IC chip 31 in FIG. 1 is supplied to the security module 2, and the information from other non-contact IC chips is supplied to other security modules. Thus, information from the same non-contact IC chip is always supplied to the same security module.

  Accordingly, since it is necessary to select which security module the information from the client side is to be supplied to, the load distribution device can be a layer 7 switch that selects the information supply destination by looking up to the application layer information. That is, it is necessary to use a switch having a higher function than a switch (for example, a layer 4 switch) that has only a function for distributing the load.

  In addition, since session information is distributed, management becomes complicated and software implementation becomes complicated.

  The present invention has been made in view of such a situation, and makes it possible to easily manage session information while efficiently distributing a load.

The communication system of the present invention is connected to a client-side device that controls a non-contact IC chip in proximity to a reader / writer, a first server-side device connected via a network, and the first server-side device, In a communication system including a plurality of second server-side devices each having a session information key, the first server-side device is information for identifying a session at the start of communication with the client-side device. Generating means for generating first session information including identification information and communication information that is information indicating which communication of a series of communication performed with the client side device is performed; After generating the first session information, one of the plurality of second server side devices is accessed, and the access destination second server side device Receiving means for receiving the generated second session information encrypted with the session information key, including the identification information and the communication information; and the first session information generated by the generating means; Management means for managing the second session information in an encrypted state received by the receiving means, and a plurality of the second server side devices are respectively the first server side devices. Generating means for generating the second session information, and encryption processing means for encrypting the second session information generated by the generating means with the session information key; A transmission means for transmitting the second session information encrypted by the encryption processing means to the first server side device; and the second session information by the transmission means. Erasing means for erasing the second session information after the session information is transmitted.

  The first server side device transmits the second session information in an encrypted state managed by the management unit together with a processing request to any of the plurality of second server side devices. A plurality of second server-side devices, each of which receives a request for the processing and the second session information transmitted from the first server-side device. The encryption processing means decrypts the second session information received by the receiving means by using the session information key, and based on the decrypted second session information, A process subsequent to the second server side apparatus previously accessed by the server side apparatus is performed, and the second session information reflected according to the performed process is changed to the session information. The transmission means transmits the information obtained by the processing and the second session information encrypted by the encryption processing means to the first server side device, and The erasing unit erases the second session information after the information obtained by the processing and the second session information are transmitted to the first server side device.

The communication method of the present invention is connected to a client-side device that controls a non-contact IC chip in proximity to a reader / writer, a first server-side device connected via a network, and the first server-side device, In a communication method of a communication system including a plurality of second server-side devices each having a session information key, the first server-side device identifies a session at the start of communication with the client-side device. Generating first session information including identification information which is information and communication information which is information indicating which communication of a series of communications performed with the client side device is performed, After generating the first session information, access to any of the plurality of second server-side devices, and generate in the second server-side device that is the access destination The received second session information including the identification information and the communication information, encrypted with the session information key, and the generated first session information and the received encrypted state The second session information is managed, and when the plurality of second server side devices are accessed by the first server side device, the second session information is generated and generated. The second session information is encrypted with the session information key, the encrypted second session information is transmitted to the first server side device, and the second session information is transmitted. Erasing the second session information.

In the present invention, in the first server side device, at the start of communication with the client side device, identification information which is information for identifying a session, and a series of communications performed with the client side device After the first session information including communication information that is information indicating which communication has been performed is generated and the first session information is generated, any one of the plurality of second server side devices Is accessed. Also, the second session information including the identification information and the communication information, which is generated in the second server device as the access destination, encrypted with the session information key is received and generated. 1 session information and the received second session information in an encrypted state are managed. In each of the plurality of second server side devices, when access is made by the first server side device, the second session information is generated, and the generated second session information is The second session information is encrypted after being encrypted with the session information key, the encrypted second session information is transmitted to the first server-side device, and the second session information is transmitted. Is erased.

  According to the present invention, the load can be distributed efficiently.

  Further, according to the present invention, session information can be easily managed.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 2 is a block diagram showing a configuration example of a server-client system to which the present invention is applied. The same components as those in FIG. 1 are denoted by the same reference numerals.

  The server-side apparatus of the server-client system in FIG. 2 includes, for example, an apparatus that implements the HTTP server 11 and the application server 12, a load distribution apparatus 41, and security modules 42-1 and 42-2.

  A device that implements the HTTP server 11 and the like is connected to the load balancer 41, and the load balancer 41 is connected to a plurality of security modules 42-1 and 42-2. Hereinafter, when it is not necessary to distinguish each of the security modules 42-1 and 42-2, they are collectively referred to as the security module 42.

  On the other hand, the client-side device includes a device that implements the HTTP client 21. In the example of FIG. 2, only the HTTP client 21 is shown on the client side. However, a client application that exchanges with the application server 12 as shown in FIG. Implemented.

  In addition, an R / W that performs communication using electromagnetic induction with a non-contact IC chip is connected to a device on which the HTTP client 21 or the like is mounted, if necessary. A device on the client side is composed of a device for mounting the HTTP client 21 and the like, an R / W connected as necessary, and a non-contact IC chip.

  The HTTP server 11 performs HTTP communication with the HTTP client 21 via the network 5 such as the Internet.

  The application server 12 (an application of the application server 12) transmits and receives various types of information to and from the client application over HTTP communication performed by the HTTP server 11 and the HTTP client 21, thereby enabling various services such as an electronic money service. I will provide a.

  For example, the application server 12 outputs a command (command to be executed by the non-contact IC chip) created in response to a request from the client application to the security module 42 via the load distribution device 41. When the encrypted command is supplied from the security module 42 via the load balancer 41, the application server 12 transmits it to the client application.

  Further, the application server 12 may transmit screen information to be displayed on the client side device to the client application.

  The load balancer 41 allocates a processing request from the application server 12 to one of the security modules 42 so as to distribute the load of the security module 42 (selects an access destination of the application server 12). Further, the load balancer 41 supplies the information supplied from the security module 42 to the application server 12.

  The security module 42 is a tamper-resistant device, and performs encryption processing and management of keys used in the encryption processing. For example, the security module 42 encrypts the command supplied from the application server 12 and transmits the encrypted command to the application server 12 via the load balancer 41. The security module 42 and the contactless IC chip on the client side each have a common key, and encrypted communication is realized between the security module 42 and the contactless IC chip by transmitting and receiving information encrypted with the key. Is done.

  Also, the security modules 42-1 and 42-2 are prepared in advance, for example, when the security module 42 is manufactured, and one device generates a random key at the first start-up and can be safely transmitted to other devices. By distributing this key, we have a common key. This key cannot be taken out to the outside.

  As will be described later, with this key, the session information generated by the security module 42 is encrypted and the encrypted session information is decrypted. Hereinafter, this key that the security modules 42-1 and 42-2 have as appropriate is referred to as a session information key.

  The HTTP client 21 performs HTTP communication with the HTTP server 11 via the network 5.

  A client application (not shown) on the client side transmits a predetermined request to the application server 12 and, when a command is transmitted from the application server 12, transmits it to the non-contact IC chip for execution.

  The non-contact IC chip decrypts the encryption applied to the command transmitted from the security module 42 via R / W or the like and executes it. When the content of the command is rewriting of electronic money, this command includes information on the amount of money to be rewritten.

  In such a server-client system, for example, as described with reference to FIG. 1, communication for reading out the balance and rewriting of the balance until one processing such as payment of electronic money is realized. As described above, communication is performed a plurality of times between the server side and the client side.

  Therefore, in this case, at the start of communication with the client side (when the first HTTP request is received from the HTTP client 21), each of the application server 12 and the security module 42 (for example, the security module 42-1) Session information about the session with is generated.

  The session information includes, for example, information for identifying the session, information indicating how far the communication has been performed in a series of communication, and the session key when encrypting communication using a session key that is different for each session. Information etc. are included.

  The session information generated by the security module 42-1 is encrypted using the session information key included in the security module 42-1, and then supplied to the application server 12 via the load balancer 41.

  In the application server 12, session information generated by the application server 12 itself and session information generated and encrypted by the security module 42-1 are collectively managed.

  For example, in the second or later communication among a plurality of communications performed between the server side and the client side (when there is a second or later HTTP request), the security module 42 (load distribution) from the application server 12 The security module 42) selected by the device 41 is accessed as necessary, and the security module 42 is managed at the time of the first communication together with a command encryption request and the like. Session information is transmitted from the application server 12.

  In the load balancer 41, one of the security modules is selected as the access destination of the application server 12 based on the load status of the security modules 42-1 and 42-2 at that time. That is, the security module 42-2, which is different from the security module 42-1 that generated the session information at the start of a series of communications, becomes the access destination, and processing such as encryption may be required.

  For example, when the security module 42-2 is selected as the access destination of the application server 12 in the second communication, the security module 42-2 receives the session information (security module 42-) supplied from the application server 12. 1 is encrypted with the session information key possessed by the security module 42-2 itself, and based on the decrypted session information, following the processing of the security module 42-1, Subsequent processing is performed.

  In this way, the session information generated by one security module is supplied to another security module, and the subsequent processing for controlling the same target (non-contact IC chip) is performed based on the session information. By allowing the security module to perform the access, it is not always necessary to set the access destination of the application server 12 to the same security module as that used to generate the session information.

  Therefore, the load distribution device 41 can select the access destination of the application server 12 from the viewpoint of purely distributing the load, and can efficiently distribute the load.

  In other words, if a series of processes for controlling the same target must be generated by session information generated by a security module that is managed internally, the security module that does not have session information is continuously processed. Since the process cannot be performed from the middle of the above processes, the access destination of the application server 12 is inevitably determined regardless of the load status of the security module at that time. As described above, by supplying the session information to a security module different from the one that has generated the session information so that the subsequent processing can be performed, the load balancer 41 has the location of the session information (session information is present). Then without worrying about the security module) Look at the situation of the load, it is possible to select the access destination.

  Further, as the load distribution device 41, a high-function switch that allocates processing by looking up to the information of the application layer is not necessary, and a layer 4 switch having a function of distributing the load can be used.

  Furthermore, even when session information is issued outside the security module as described above, since it is output in an encrypted state, the content of the session information is decrypted or altered by a person other than the security module. There is nothing to do.

  In addition, for example, a security module that has generated session information and performed a process once does not always allocate the next process for controlling the same target to itself. Session information (session information generated and encrypted by yourself) is supplied from the application server 12, so it is not necessary to retain session information after processing, and it was managed until then. Session information can be deleted.

  In other words, it is not necessary for each of a plurality of devices (the application server 12 and the security module 42) to have session information for controlling one target, thereby facilitating management of session information. it can.

  The operation of the server-client system of FIG. 2 that manages session information as described above will be described later.

  FIG. 3 is a block diagram illustrating a hardware configuration example of a device that implements the HTTP server 11 and the application server 12 of FIG.

  A CPU (Central Processing Unit) 51 executes various processes according to a program stored in a ROM (Read Only Memory) 52 or a program loaded from a storage unit 58 to a RAM (Random Access Memory) 53. The RAM 53 also appropriately stores data necessary for the CPU 51 to execute various processes.

  The CPU 51, ROM 52, and RAM 53 are connected to each other via a bus 54. An input / output interface 55 is also connected to the bus 54.

  The input / output interface 55 includes an input unit 56 including a keyboard and a mouse, a display including an LCD (Liquid Crystal Display), an output unit 57 including a speaker, a storage unit 58 including a hard disk, and the network 5. A communication unit 59 that performs communication processing via the network is connected.

  A drive 60 is also connected to the input / output interface 55 as necessary. A removable medium 61 composed of a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is appropriately attached to the drive 60, and a computer program read therefrom is installed in the storage unit 58 as necessary.

  The security module 42 has the same configuration as that shown in FIG. In the following, the configuration of FIG. 3 will be described with reference to the configuration of the security module 42 as appropriate.

  FIG. 4 is a block diagram illustrating a functional configuration example of the application server 12. At least a part of each functional unit shown in FIG. 4 is realized by a predetermined program being executed by the CPU 51 of FIG.

  The application server 12 includes a control unit 71 and a session information management unit 72.

  The control unit 71 controls the overall operation of the application server 12. For example, when the HTTP server 11 is notified that there is an HTTP request from a client application, the control unit 71 notifies the session information management unit 72 of the notification. In the session information management unit 72, session information of the application server 12 is generated in response to this notification.

  In addition, when the encrypted session information is transmitted from the security module 42, the control unit 71 outputs the encrypted session information to the session information management unit 72 so that it is managed together with the session information of the application server 12. The control unit 71 appropriately reads the session information of the security module 42 managed by the session information management unit 72, and stores the read session information in the load balancer 41 (security module 42) in an encrypted state. Send.

  The control unit 71 generates a command to be executed by the non-contact IC chip in response to a request from the client application, and transmits a request for encrypting the generated command to the load balancer 41, or the client application Information on a screen to be displayed on the mounted device is transmitted to the HTTP server 11.

  The session information management unit 72 generates session information regarding a session with the client application, manages the generated session information, and manages the session information of the security module 42 supplied from the control unit 71 together with the generated session information. To do.

  FIG. 5 is a block diagram illustrating a functional configuration example of the security modules 42-1 and 42-2. At least a part of each functional unit shown in FIG. 5 is realized by a predetermined program being executed by the CPU 51 (FIG. 3) of the security module 42.

  The security module 42-1 includes a control unit 81-1, an encryption processing unit 82-1, a key management unit 83-1, and a session information management unit 84-1.

  The control unit 81-1 controls the overall operation of the security module 42-1, and performs processing in response to a request from the application server 12.

  For example, when the command encryption is requested from the application server 12, the control unit 81-1 causes the encryption processing unit 82-1 to encrypt the command, and sends the encrypted command via the load balancer 41. To the application server 12.

  In addition, when the encrypted session information is supplied from the encryption processing unit 82-1, the control unit 81-1 transmits it to the application server 12 via the load distribution device 41. Furthermore, when the security module 42-1 is selected as the access destination and the session information encrypted by the other security module 42 (security module 42-2) is transmitted from the application server 12, the control unit 81-1 Then, it is output to the encryption processing unit 82-1, and decrypted.

  If there is an access from the application server 12 but the session information of the encrypted security module 42 is not transmitted from the application server 12 at that time, the session information on the client side and the session of the security module 42 is received. Is not generated yet (it is determined that it is the first communication), and the session information management unit 84-1 is instructed to generate session information.

  The encryption processing unit 82-1 uses the key supplied from the key management unit 83-1, and encrypts the command and decrypts the encrypted information included in the response from the non-contact IC chip. 12, encryption processing of session information managed by the session information management unit 84-1, and decryption of session information encrypted by another security module 42 (security module 42-2) Encryption processing of session information such as

  The key management unit 83-1 uses a session information key or a key common to the non-contact IC chip to be controlled (for example, when a key is generated in each of the security module 42 and the non-contact IC chip for each session) The keys (session keys) are managed, and the keys are output to the encryption processing unit 82-1 as necessary.

  The session information management unit 84-1 generates session information according to an instruction from the control unit 81-1 and manages it. In addition, the session information management unit 84-1 manages the session information generated by the other security module 42 when it is decrypted and supplied by the encryption processing unit 82-1. The processing for the non-contact IC chip in the security module 42-1 is performed based on the session information managed by the session information management unit 84-1.

  In addition, the session information management unit 84-1 outputs the managed session information to the encryption processing unit 82-1 after the processing according to the request from the application server 12 is performed by the control unit 81-1 or the like. After the encryption, the application server 12 is made to transmit and the session information managed by itself is deleted.

  The control unit 81-2, the encryption processing unit 82-2, the key management unit 83-2, and the session information management unit 84-2 of the security module 42-2 are the same as the control unit 81-1 and the encryption process of the security module 42-1. Since it is the same as each of the unit 82-1, the key management unit 83-1, and the session information management unit 84-1, description thereof will be omitted.

  Next, the operation of the server-client system in FIG. 2 for managing session information will be described with reference to the flowchart in FIG.

  For example, when requesting payment of a price using electronic money stored in the non-contact IC chip, the HTTP client 21 transmits an HTTP request (HTTP request (1)) to the HTTP server 11 in step S1.

  In step S11, the HTTP server 11 receives an HTTP request from the HTTP client 21, proceeds to step S12, and notifies the application server 12 that there is an HTTP request.

  In step S21, the control unit 71 of the application server 12 receives the notification from the HTTP server 11, and notifies the session information management unit 72 of the notification. In step S22, the session information management unit 72 generates session information (session information of the application server 12).

  In step S23, the control unit 71 accesses the security module 42 as necessary. In FIG. 6, the processing of the load balancer 41 is not shown, but the access destination of the access by the control unit 71 is the one selected by the load balancer 41 from the security modules 42-1 and 42-2. It is a security module. In this example, it is assumed that the security module 42-1 is selected as the access destination.

  In step S41, the control unit 81-1 of the security module 42-1 receives access from the application server 12 (control unit 71), and the session information of the security module 42 encrypted for access from the application server 12. Is determined not to be included, the session information management unit 84-1 is instructed to newly generate session information.

  As will be described later, when communication is performed once between the contactless IC chip and the security module 42 and the session information is generated by any one of the security modules 42, the access from the application server 12 includes: The session information is transmitted from the application server 12 in an encrypted state.

  In step S42, the session information management unit 84-1 newly generates session information (session information of the security module 42).

  In step S43, the control unit 81-1 encrypts the command supplied from the application server 12 or decrypts the encrypted information based on the session information generated in step S42. Perform the process. For example, information indicating the contents of the processing performed here, information indicating the session key, and the like are reflected in the session information managed by the session information management unit 84. When the processing of the security module 42 ends, the session information is output from the session information management unit 84-1 to the encryption processing unit 82-1.

  In step S44, the encryption processing unit 82-1 encrypts the session information supplied from the session information management unit 84-1, using the session information key managed by the key management unit 83-1, and performs encryption. The converted session information is output to the control unit 81-1.

  In step S <b> 45, the control unit 81-1 transmits the session information of the encrypted security module 42 supplied from the encryption processing unit 82-1 to the application server 12. For example, information obtained by the process of the security module 42 (the process of step S43) is also transmitted to the application server 12.

  Thereafter, in step S46, the session information management unit 84-1 deletes the managed session information and ends the process until there is a next access.

  In step S24, the control unit 71 of the application server 12 receives the session information transmitted from the security module 42-1, and outputs the received session information to the session information management unit 72.

  In step S25, the session information management unit 72 collectively manages the session information generated in step S22 and the session information transmitted from the security module 42-1. Since there is no key for decrypting the encryption applied to the session information, the application server 12 cannot decrypt the contents of the session information.

  In step S26, the control unit 71 transmits, for example, a command (a command encrypted by the processing of the security module 42-1) to be executed by the non-contact IC chip to the HTTP server 11.

  In step S13, the HTTP server 11 receives the information transmitted from the application server 12, proceeds to step S14, and transmits it to the HTTP client 21 as a response to the HTTP request (HTTP response (1)).

  In step S2, the HTTP client 21 receives an HTTP response from the HTTP server 11 and performs a predetermined process. For example, an encrypted command is transmitted from the HTTP client 21 to the non-contact IC chip, decrypted by the non-contact IC chip, and then executed.

  As a result, the first communication out of a plurality of times for realizing one process is completed. When starting the second communication, the HTTP client 21 transmits an HTTP request (HTTP request (2)) to the HTTP server 11 in step S3.

  In step S15, the HTTP server 11 receives the HTTP request from the HTTP client 21, proceeds to step S16, and notifies the application server 12 that there is an HTTP request.

  In step S27, when the control unit 71 of the application server 12 receives the notification from the HTTP server 11 and accesses the security module 42, the control unit 71 proceeds to step S28 and includes the session information managed by the session information management unit 72. From this, the session information of the security module 42 is read out.

  In step S29, the control unit 71 accesses the security module 42 (the security module 42 selected by the load balancer 41). At the time of this access, the session information of the security module 42 read in step S28 is transmitted to the access destination security module 42 together with a processing request or the like.

  Here, for example, it is assumed that the security module 42-2 is selected as the access destination of the application server 12. That is, the session information generated and encrypted by the security module 42-1 and the request for processing by the application server 12 are supplied to the security module 42-2.

  In step S47, the control unit 81-2 of the security module 42-2 receives the session information of the security module 42 and the processing request transmitted from the application server 12. The session information of the security module 42 received by the control unit 81-2 is output to the encryption processing unit 82-2.

  In step S48, the encryption processing unit 82-2 decrypts the session information using the session information key managed by the key management unit 83-2, and outputs the decrypted session information to the session information management unit 84-2.

  Thereafter, in step S49, the subsequent processing (the same processing as in step S43 and subsequent steps) is performed based on the session information managed by the session information management unit 84-2.

  That is, when the processing of the security module 42 is performed by the security module 42-2, the session information managed by the session information management unit 84-2 is encrypted and transmitted to the application server 12. In the application server 12, the session information transmitted from the security module 42-2 is managed together with the session information of the application server 12, and held until it is transmitted to the security module that performs the next processing.

  By repeating the above processing, session information can be easily managed even when it is necessary to communicate multiple times to achieve one processing while efficiently distributing the load. Is possible.

  The series of processes described above can be executed by hardware, but can also be executed by software.

  When a series of processing is executed by software, a program constituting the software may execute various functions by installing a computer incorporated in dedicated hardware or various programs. For example, it is installed from a network or a recording medium into a general-purpose personal computer or the like.

  As shown in FIG. 3, the recording medium is distributed to provide a program to the user separately from the apparatus main body, and includes a magnetic disk (including a flexible disk) on which the program is recorded, an optical disk (CD- Removable media 61 composed of ROM (compact disk-read only memory), DVD (digital versatile disk), magneto-optical disk (including MD (registered trademark) (mini-disk)), or semiconductor memory In addition, it is configured by a ROM 52 on which a program is recorded and a hard disk included in the storage unit 58 provided to the user in a state of being pre-installed in the apparatus main body.

  In the present specification, each step includes not only processing performed in time series according to the described order but also processing executed in parallel or individually, although not necessarily performed in time series.

  Further, in this specification, the system represents the entire apparatus composed of a plurality of apparatuses.

It is a block diagram which shows the structural example of the conventional electronic money system. It is a block diagram which shows the structural example of the server client system to which this invention is applied. It is a block diagram which shows the hardware structural example of the apparatus by which the HTTP server and application server of FIG. 2 are mounted. It is a block diagram which shows the function structural example of the application server of FIG. It is a block diagram which shows the function structural example of the security module of FIG. 3 is a flowchart for explaining the operation of the server-client system in FIG. 2.

Explanation of symbols

  11 HTTP Server, 12 Application Server, 21 HTTP Client, 41 Load Balancing Device, 42-1, 42-2 Security Module, 71 Control Unit, 72 Session Information Management Unit, 81-1, 81-2 Control Unit, 82-1 , 82-2 Encryption processing unit, 83-1, 83-2 Key management unit, 83-1, 84-2 Session information management unit

Claims (3)

  A client-side device that controls a non-contact IC chip close to the reader / writer, a first server-side device connected via a network, and a first server-side device connected to the first server-side device, each having a session information key In a communication system comprising a plurality of second server-side devices,
  The first server side device includes:
    It is identification information that is information for identifying a session at the start of communication with the client side device, and information indicating up to which communication of a series of communication performed with the client side device has been performed. Generating means for generating first session information including communication information;
    After generating the first session information, access to any of the plurality of second server side devices, and the identification information and the communication information generated in the second server side device of the access destination Receiving means for receiving second session information encrypted with the session information key;
    Managing means for managing the first session information generated by the generating means and the second session information in an encrypted state received by the receiving means;
  With
  The plurality of second server side devices are respectively
    Generating means for generating the second session information when access is made by the first server-side device;
    Encryption processing means for encrypting the second session information generated by the generation means with the session information key;
    Transmitting means for transmitting the second session information encrypted by the encryption processing means to the first server side device;
    An erasure unit for erasing the second session information after the second session information is transmitted by the transmission unit;
  With
  Communications system.   The first server side device includes:
    A transmission unit that transmits the second session information in an encrypted state managed by the management unit together with a request for processing to any of the plurality of second server-side devices;
  The plurality of second server side devices are respectively
    Receiving means for receiving the processing request and the second session information transmitted from the first server side device;
    The encryption processing means decrypts the second session information received by the receiving means using the session information key, and based on the decrypted second session information, the first server side device The process following the second server-side device that has been previously accessed is performed, and the second session information reflected according to the performed process is encrypted using the session information key,
    The transmission means transmits the information obtained by the processing and the second session information encrypted by the encryption processing means to the first server side device,
    The erasure unit erases the second session information after the information obtained by the processing and the second session information are transmitted to the first server side device.
  The communication system according to claim 1.   A client-side device that controls a non-contact IC chip close to the reader / writer, a first server-side device connected via a network, and a first server-side device connected to the first server-side device, each having a session information key In a communication method of a communication system comprising a plurality of second server-side devices,
  The first server-side device is
    It is identification information that is information for identifying a session at the start of communication with the client side device, and information indicating up to which communication of a series of communication performed with the client side device has been performed. Generating first session information including communication information;
    After generating the first session information, access to any of the plurality of second server side devices, and the identification information and the communication information generated in the second server side device of the access destination Including second session information encrypted with the session information key,
    Managing the generated first session information and the received second session information in an encrypted state;
  A plurality of the second server side devices are respectively
    When access is made by the first server side device, the second session information is generated,
    The generated second session information is encrypted with the session information key,
    Sending the encrypted second session information to the first server side device;
    After transmitting the second session information, erase the second session information
  A communication method including steps.

Images