JP4704673B2 - Information communication system and information storage medium - Google Patents

Description

  The present invention relates to an information communication system that requires concealment of communication contents and an information storage medium used in the information communication system.

  IC cards have been put into practical use as storage media with high security performance for storing valuable value information in a secret manner. In recent years, non-contact type IC cards using wireless as a communication interface have been applied due to their convenience in handling. Opening up. Further, a storage medium using a radio communication interface called RFID (Radio Frequency Identification) or an IC tag or the like that does not require the security performance as that of an IC card is becoming common.

  Further, a device having a plurality of storage media using a wireless communication interface has been proposed. As one of technologies for realizing such a device, Japanese Patent Laid-Open No. 2002-76983 (Patent Document 1) describes a data carrier system. Disclose. This technology includes an IC card having a plurality of data carriers, a reader / writer having a plurality of transmission / reception units, a host computer, and a door opening / closing mechanism. With such a configuration, the plurality of data carriers on the IC card communicate independently with the plurality of transmission / reception units on the reader / writer. The host computer controls the door opening / closing mechanism based on information obtained from a plurality of data carriers, and for example, can manage the access of the IC card owner.

  Japanese Patent Laying-Open No. 2003-67253 (Patent Document 2) discloses a method of providing a plurality of computer storage devices on a network and performing data encryption and division to distribute and store the data on the network.

JP 2002-76983 A

JP 2003-67253 A

  According to the conventional data carrier system described above, it is possible to improve the communication speed between the reader / writer and the IC card by performing data transmission / reception of a plurality of data carriers and transmission / reception units in parallel. Further, by storing separate data on each data carrier, the IC card can increase the data storage capacity. However, this prior art does not sufficiently disclose a method for concealing data stored in a data carrier on a communication path.

  Accordingly, an object of the present invention is to provide an information communication system and an information storage medium capable of concealing data stored in each storage device on a communication path in an information storage medium having a plurality of storage devices. .

  The information communication system of the present invention includes an information processing apparatus and an information storage medium. The information processing apparatus includes encryption means and means for dividing data stored in the information storage medium, and the information storage medium includes a plurality of storage devices that operate independently. The information processing apparatus is characterized by an information communication system that divides data to be stored in an information storage medium, encrypts each divided data with a different encryption key depending on the storage apparatus, and stores the encrypted data in an independent storage apparatus of the information storage medium. Moreover, such an information storage medium is characterized.

  As described above, according to the present invention, it is difficult to illegally obtain data stored in an information storage medium using communication data eavesdropped on the communication path of the information communication system according to the present embodiment. An information communication system can be provided.

Embodiments of the present invention will be described with reference to the drawings.
1. First Embodiment A first embodiment of the present invention will be described with reference to FIGS. 1 to 8, 14 and 15. FIG. First, a schematic configuration of an information communication system according to the present embodiment, an information processing apparatus constituting the communication system, and an information storage medium will be described with reference to FIG.

  FIG. 1 is a schematic configuration diagram of an information communication system according to the present embodiment. In the figure, reference numeral 101 denotes an information processing apparatus including a CPU that processes some data, such as a PC, a mobile terminal, and a mobile phone (hereinafter, this information processing apparatus is referred to as a host).

  Reference numeral 102 denotes an information storage medium such as an RFID or an LSI chip for an IC card having a nonvolatile information storage area such as an EEPROM or a flash memory (hereinafter referred to as an RFID). In addition, the subscripts a and b are added after the reference numeral 102 to indicate independent devices each having the same function. Here, reference numerals 102a and 102b denote independent RFIDs. The same applies to the subsequent codes. Reference numeral 103 denotes an information storage medium such as an IC card or a memory card including a plurality of RFIDs 102 (hereinafter referred to as a storage medium). The plurality of RFIDs 102a and 102b are both disposed on or inside the storage medium 103 and function independently.

  A reader / writer 104 has individual communication paths with the host 101 and the RFID 102, and transmits and receives data between the host 101 and the RFID 102 (hereinafter referred to as R / W). Reference numerals 105 and 106 denote communication paths between the RFID 102 and the R / W 104, and between the host 101 and the R / W 104, respectively. The communication path 105 is a path for performing wireless communication. The RFID 102 has a non-contact type interface or a contact type interface with the R / W 104. The R / W 104 communicates with the corresponding RFID 102 according to a predetermined communication protocol. The RFID 102 normally has no power source and is supplied with power from the R / W 104 by radio.

  Reference numeral 107 denotes a module for encrypting / decrypting information and a module for storing an encryption key used for encryption / decryption (hereinafter referred to as an encryption / key storage unit). The encryption algorithm used by the encryption unit is arbitrary. The key storage unit keeps a certain encryption key secretly. The key update method is arbitrary. The encryption / key storage unit 107 is provided by the R / W 104. The R / W 104 may include a CPU and a memory, and the encryption / key storage unit 107 may be realized by software, or the encryption / key storage unit 107 may be realized by hard wired logic. The R / W 104 may be an external device of the host 101 or may be mounted so as to be incorporated as a part of the host 101. The host 101 and the R / W 104 may be collectively referred to as an information processing apparatus.

  A data division / reconstruction unit 108 divides a data string into a plurality of data strings by a predetermined method, and reconfigures the plurality of data strings into one data string by a predetermined method. The data division / reconstruction unit 108 is provided by the host 101. The data division / reconstruction unit 108 is conveniently realized as a program executed by the CPU, but may be realized by dedicated hardware.

  The main operation of the information communication system according to the present embodiment is that the host 101 writes some secret data to the storage medium 103 and reads the secret data written from the storage medium 103.

  Next, the outline of the information communication system according to the present embodiment, the information processing apparatus constituting the information communication system, and the information storage medium writing operation will be described with reference to FIGS.

  FIG. 2 is a conceptual diagram of a write operation of the information communication system according to the present embodiment. The data division / reconstruction unit 108 of the host 101 divides a data string 201 into a plurality of data strings according to the number of RFIDs 102. Reference numeral 202 denotes a divided data string. The encryption / key storage units 107 a and 107 b of the R / W 104 encrypt the divided data strings 202 with the encryption keys 203 a and b and send the encrypted data strings 202 to the RFID 102. Reference numeral 204 denotes an encrypted divided data string. Each RFID 102 stores the divided data string 204 in its storage area.

  FIG. 3 is a schematic flowchart of the write operation of the information communication system according to the present embodiment. The host 101 divides the data string to be written into the storage medium 103 into a plurality of divided data strings by the data dividing / reconstructing unit 108 (301). The host 101 transmits the divided data to the R / W 104a and the R / W 104b, respectively (302a, 302b). The host 101 adds control data such as the address, pointer, and data size of the RFID 102 to the transmission data as necessary.

  The R / W 104a receives the divided data string (303a), encrypts the received divided data string using the encryption key a (203a) stored in the encryption / key storage unit 107a, and encrypts the divided data A row is obtained (304a). Next, the R / W 104a transmits this encrypted data to the RFID 102a (305a). Similarly, the R / W 104b receives the divided data string (303b), encrypts the received divided data string using the encryption key b (203b) stored in the encryption / key storage unit 107b, and is encrypted. A divided data string is obtained (304b). Next, the R / W 104b transmits this encrypted data to the RFID 102b (305b).

  The RFID 102a receives this encrypted divided data string (306a), stores it in a storage area in the RFID (307a), and transmits a write completion notification to the R / W 104a (308a). Similarly, the RFID 102b receives this encrypted divided data string (306b), stores it in a storage area in the RFID (307b), and transmits a write completion notification to the R / W 104b (308b).

  The R / W 104a receives the write completion notification (309a) and transmits the write completion notification to the host 101 (310a). Similarly, the R / W 104b receives a write completion notification (309b) and transmits a write completion notification to the host 101 (310b).

  The host 101 receives a write completion notification from the R / W 104a and the R / W 104b (311a, 311b).

  Next, the outline of the information communication system according to the present embodiment, the information processing apparatus constituting the information communication system, and the information storage medium reading operation will be described with reference to FIGS.

  FIG. 4 is a conceptual diagram of a read operation of the information communication system according to the present embodiment. Each RFID 102 sends the stored encrypted divided data sequence 204 to the corresponding R / W 104. The encryption / key storage unit 107 of the R / W 104 decrypts the divided data string 204 with the encryption key 203 and sends it to the host 101. The data dividing / reconstructing unit 108 of the host 101 receives the divided data string 202, reconstructs the data, and restores the original data string 201.

  FIG. 5 is a schematic flowchart of the read operation of the information communication system according to the present embodiment. The host 101 transmits a data read request to the R / W 104a and the R / W 104b (501a, 501b). At this time, necessary control data is added. The R / W 104a receives the data read request (502a), and transmits the data read request to the RFID 102a (503a). Similarly, the R / W 104b receives the data read request (502b) and transmits the data read request to the RFID 102b (503b).

  The RFID 102a receives the data read request (504a), takes out the encrypted divided data string from the storage area in the RFID (505a), and transmits this encrypted data to the R / W 104a (506a). Similarly, the RFID 102b receives the data read request (504b), extracts the encrypted divided data string from the storage area in the RFID (505b), and transmits this encrypted data to the R / W 104b (506b).

  The R / W 104a receives the encrypted data (507a), decrypts the received encrypted data using the encryption key a (203a) stored in the encryption / key storage unit 107a, and obtains a divided data string (508a). ). Next, the R / W 104a transmits this divided data string to the host 101 (509a). Similarly, the R / W 104b receives the encrypted data (507b), decrypts the received encrypted data using the encryption key b (203b) stored in the encryption / key storage unit 107b, and obtains a divided data string. (508b). Next, the R / W 104b transmits this divided data string to the host 101 (509b).

  The host 101 receives this divided data string from the R / W 104a and the R / W 104b (510a, 510b). The host 101 reconstructs the original data string from the plurality of divided data strings received by the data dividing / reconstructing unit 108 (511).

  Next, an operation outline of data division processing included in the information communication system according to the present embodiment and the information processing apparatus constituting the communication system will be described with reference to FIGS. 6 to 8 are schematic explanatory diagrams of a data division method in the host 101 of the information communication system according to the present embodiment.

  In the data division method shown in FIG. 6, when 1 byte of data is stored for each address of the data memory address managed by the host 101, one is stored at an even address and the other is stored at an odd address. Divide the data every other place so that A plurality of data strings obtained by this procedure are divided data.

  The data division is not necessarily limited to the division in units of bytes. For example, as shown in FIG. 7, the data may be divided every second address to create divided data in units of 2 bytes. Conversely, 1 byte (= 8 bits) of data stored at address 1 may be divided into upper 4 bits and lower 4 bits, or even in 1-bit units.

  Further, the method shown in FIG. 8 may be used as a data division method. In this data division method, the data memory address on the host 101 (hereinafter referred to as “host memory address”) and the memory address of the storage area on the RFID 102 (hereinafter referred to as “RFID address”) are used for data having a size as a division unit. Give two independent addresses.

  When data is stored on the memory address of the host 101, the data and RFID address are stored in the host memory address. When dividing the data, the data is rearranged in the order of the RFID addresses, and divided into a plurality of upper and lower sides of the RFID address. When data is stored in the storage area of the RFID 102, the data and the host memory address are stored in the RFID address. Thus, by randomizing the correspondence between the host memory address and the RFID address, the data stored in the RFID 102 is greatly agitated. In this example, the RFID address is a continuous address viewed from the host 101. This RFID address may be associated with the physical address of each RFID 102 as necessary.

  Although FIG. 8 shows data division in byte units, the data division is not necessarily limited to byte units. For example, data may be divided in units of 2 bytes, 4 bytes, etc., and corresponding addresses may be assigned. Good.

  As described above, according to the first embodiment of the present invention, the data stored in the information storage medium 103 of the information communication system according to the present embodiment is divided and stored in the RFID 102a and the RFID 102b. The communication path 105 between the R / W 104 and the information storage medium 103 is encrypted and communication is concealed. When a malicious third party tries to illegally obtain data stored in the storage medium 103 from communication data by eavesdropping on the communication path, the stored data is divided and agitated. It is necessary to make both attacks on the communication path 105 succeed. In addition, since the communication paths 105a and 105b are concealed by encryption using the independent encryption key a (203a) and encryption key b (203b), when decryption is attempted, a plurality of decryption is independent. It is necessary to succeed, and only one piece of information in units of the divided data size can be obtained by successful decryption of only one side. That is, the storage area of the storage medium 103 is composed of a plurality of independent RFIDs 102 included in the storage medium 103, but the data stored in each RFID can be obtained by devising the storage method. It is distributed and stored in the RFID 102. Further, by devising an encryption method, it is essential to perform a plurality of encryption processes independently when reading stored data.

  Note that the schematic configuration of the information communication system according to the first embodiment may be as shown in FIG. FIG. 14 is a schematic configuration diagram of another information communication system according to the present embodiment. In the figure, reference numerals 101 to 108 constituting the information communication system are the same as those in FIG. The system having this configuration is different from the configuration shown in FIG. 1 in that only one R / W 104 is provided. Therefore, in this configuration, when communicating with a plurality of RFIDs 102a and 102b, it is necessary to perform communication by alternately switching communication partners. The other functions are the same as those shown in FIG. According to this configuration, the information communication system does not need to have a plurality of R / Ws, and an effect of cost reduction can be obtained. The configuration of FIG. 1 is suitable for the close contact type storage medium 103 having a small interval between the R / W 104a and the RFID 102a and the R / W 104b and the RFID 102b, whereas the configuration of FIG. Is suitable for the proximity type storage medium 103 which may be further separated.

  As the schematic configuration of the information communication system according to the first embodiment, the one shown in FIG. 15 may be used. FIG. 15 is a schematic configuration diagram of another information communication system according to the present embodiment. In the figure, reference numerals 102 to 103 and 105 to 108 constituting the information communication system are the same as those in FIG. Reference numeral 1501 denotes an information processing apparatus similar to 101 (hereinafter referred to as a host). The host 1501 includes an encryption / key storage unit 107 and a data division / reconstruction unit 108. The encryption / key storage unit 107 and the data division / reconstruction unit 108 may be realized by executing a program stored in the memory of the host 1501. A reader / writer 1504 has individual communication paths with the host 101 and the RFID 102, and transmits and receives data between the host 101 and the RFID 102 (hereinafter referred to as R / W).

  In the system having this configuration, the division and encryption processing of data stored in the RFID 102 are all realized by the host 1501, and the R / W 1504 performs only relay processing of data read from and written to the RFID 102. The information storage medium writing / reading processing flow can be realized by replacing the host 101 and the reader / writer 104 in FIGS. 3 and 4 with the host 1501. According to this configuration, encrypted data encrypted by the host 1501 flows in both the communication paths 105 and 106, and it is possible to obtain an effect that it is not necessary to keep the communication path 106 confidential.

  Further, the information communication system having the configuration shown in FIG. 15 omits the detailed processing flow, but divides the data to be transmitted to the plurality of RFIDs 102 after encryption. Therefore, in this case, the processing procedure is such that data input from a plurality of RFIDs 102 is reconstructed and then decrypted. Compared to the procedure of dividing the data to be transmitted to the RFID 102 and then encrypting the data with the same encryption key, this procedure is more secure because it is more difficult to decrypt the encrypted divided data. Therefore, when the data to be transmitted to the RFID 102 is divided and then encrypted, both the encryption / key storage unit 107a and the encryption / key storage unit 107b are required, but the data to be transmitted to the RFID 102 is encrypted. , The single encryption / key storage unit 107 may be used.

As described above, according to the first embodiment, it is difficult to eavesdrop on communication data on the communication path 105 of the information communication system according to the present embodiment and illegally obtain data stored in the storage medium 103. A communication system can be provided.
2. Second Embodiment A second embodiment will be described with reference to FIGS. 9 to 13 and FIG. First, the schematic configuration of the information communication system according to the present embodiment, the information processing apparatus constituting the communication system, and the information storage medium will be described with reference to FIG.

  FIG. 9 is a schematic configuration diagram of the information communication system according to the present embodiment. In the figure, reference numerals 101 and 104 to 108 constituting this information communication system are the same as those in FIG. The same applies to the subscripts a and b. Reference numeral 902 denotes an information storage medium such as an RFID or an LSI chip for an IC card having a nonvolatile information storage area such as an EEPROM or a flash memory (hereinafter referred to as an RFID). The RFID 902 includes an encryption / key storage unit 107. Reference numeral 903 denotes an information storage medium such as an IC card or a memory card including a plurality of RFIDs 902 (hereinafter referred to as a storage medium). The plurality of RFIDs 902a and 902b are both disposed on or inside the storage medium 903 and function independently.

  Next, an information communication system according to the second embodiment, an information processing apparatus constituting the communication system, and an outline of the writing operation of the information storage medium will be described with reference to FIGS.

  FIG. 10 is a conceptual diagram of a write operation of the information communication system according to the present embodiment. The data division / reconstruction unit 108 of the host 101 divides a certain data string 201 into a plurality of data strings. Reference numeral 202 denotes a divided data string. The encryption / key storage units 107a and 107b of the R / W 104 encrypt the divided data strings 202 with the encryption keys a and b (203a and b), respectively, and send them to the RFID 902. Each of the RFIDs 902a and 902b decrypts the encrypted data with the encryption keys a and b (203a and b), generates a data string 202, and stores it in the storage area.

  FIG. 11 is a schematic flowchart of the write operation of the information communication system according to the present embodiment. The host 101 divides the data string to be written in the storage medium 903 into a plurality of divided data strings by the data dividing / reconstructing unit 108 (1101). The host 101 transmits the divided data strings to the R / W 104a and the R / W 104b, respectively (1102a and 1102b).

  The R / W 104a receives the divided data string (1103a), encrypts the received divided data string using the encryption key a (203a) stored in the encryption / key storage unit 107a, and encrypts the divided data A row is obtained (1104a). Next, the R / W 104a transmits this encrypted data to the RFID 902a (1105a). Similarly, the R / W 104b receives the divided data string (1103b), encrypts the received divided data string using the encryption key b (203b) stored in the encryption / key storage unit 107b, and is encrypted. A divided data string is obtained (1104b). Next, the R / W 104b transmits this encrypted data to the RFID 902b (1105b).

  The RFID 902a receives the encrypted divided data string (1106a), decrypts the received encrypted data using the encryption key a (203a) stored in the encryption / key storage unit 107a, and obtains divided data. (1112a). Next, the RFID 902a stores this divided data string in a storage area in the RFID (1107a), and transmits a write completion notification to the R / W 104a (1108a). Similarly, the RFID 902b receives this encrypted divided data string (1106b), decrypts the received encrypted data using the encryption key b (203b) stored in the encryption / key storage unit 107b, and generates divided data. Is obtained (1112b). Next, the RFID 902b stores the divided data in a storage area in the RFID (1107b) and transmits a write completion notification to the R / W 104b (1108b).

  The R / W 104a receives the write completion notification (1109a) and transmits the write completion notification to the host 101 (1110a). Similarly, the R / W 104b receives a write completion notification (1109b) and transmits a write completion notification to the host 101 (1110b).

  The host 101 receives a write completion notification from the R / W 104a and the R / W 104b (1111a, 1111b).

  Next, with reference to FIG. 12 and FIG. 13, an outline of the information communication system according to the present embodiment, the information processing apparatus constituting the communication system, and the information storage medium reading operation will be described.

  FIG. 12 is a conceptual diagram of a read operation of the information communication system according to the present embodiment. The RFIDs 902a and b encrypt the data string 202 with the encryption keys a and b (203a and b), respectively, and send the encrypted data strings 202 to the R / W 104. The encryption / key storage units 107a and 107b of the R / W 104 decrypt the encrypted data with the encryption keys a and b (203a and b), respectively, and send the decrypted data to the host 101. The data division / reconstruction unit 108 of the host 101 receives the data string 202, reconstructs the data, and restores the original data string 201.

  FIG. 13 is a schematic flowchart of the read operation of the information communication system according to the present embodiment. The host 101 transmits a data read request to the R / W 104a and the R / W 104b (1301a and 1301b). The R / W 104a receives the data read request (1302a), and transmits the data read request to the RFID 902a (1303a). Similarly, the R / W 104b receives the data read request (1302b) and transmits the data read request to the RFID 902b (1303b).

  The RFID 902a receives the data read request (1304a), extracts the divided data string from the storage area in the RFID (1305a), and uses the encryption key a (204a) stored in the encryption / key storage unit 107a. The read divided data string is encrypted to obtain encrypted data (1312a). Next, the RFID 902a transmits this encrypted data to the R / W 104a (1506a). Similarly, the RFID 902b receives the data read request (1304b), extracts the data string divided from the storage area in the RFID (1305b), and uses the encryption key b (204b) stored in the encryption / key storage unit 107b. The divided data string read out by using the encrypted data is encrypted to obtain encrypted data (1312b). Next, the RFID 902b transmits this encrypted data to the R / W 104b (1306b).

  The R / W 104a receives the encrypted data (1307a), decrypts the received encrypted data using the encryption key a (204a) stored in the encryption / key storage unit 107a, and obtains a divided data string (1308a). ). Next, the R / W 104a transmits this divided data string to the host 101 (1309a). Similarly, the R / W 104b receives the encrypted data (1307b), decrypts the received encrypted data using the encryption key b (204b) stored in the encryption / key storage unit 107b, and obtains a divided data string. (1308b). Next, the R / W 104b transmits this divided data to the host 101 (1309b).

  The host 101 receives this divided data string from the R / W 104a and the R / W 104b (1310a, 1310b). The host 101 reconstructs the original data sequence from the plurality of divided data sequences received by the data division / reconstruction unit 108 (1311).

  The data division processing included in the information communication system according to the second embodiment and the information processing apparatus constituting the communication system is the same as that shown in FIGS.

  As described above, according to the second embodiment, the same effect as that obtained in the first embodiment of the present invention can be obtained with respect to the confidentiality of data flowing on the communication path 105. Further, the RFID 902 has a function of decrypting the input encrypted data and holding it as plain text, and re-encrypting this plain text at the time of reading. With this function, it is possible to make the encryption key used at the time of writing to and reading from the RFID 902 independent, and by using a different encryption key each time at the time of input / output, it becomes more difficult to perform encryption analysis by wiretapping the communication path 105 An effect is obtained. Further, by sharing the encryption key for each communication between the host 101 and the RFID 902, an effect of facilitating key management when communicating with a host other than the host 101 that has written data in the RFID 902 can be obtained. The key sharing method is arbitrary as described above, but for example, the following method may be used.

  FIG. 16 is a system configuration and operation conceptual diagram of the encryption key sharing method for the information communication system according to the second embodiment. In the figure, 104a, 903, and 902a are the same as those shown in FIG. Reference numerals 1601 and 1602 denote public / private key pairs of the R / W 104 public key cryptosystem. Reference numeral 1603 denotes arbitrary data generated by the RFID 902a for authentication (hereinafter referred to as a password). 203a is a shared encryption key for data transfer generated by the R / W 104. Reference numerals 1606 and 1607 denote public key and secret key pairs of the RFID 903 public key cryptosystem. The R / W 104 and the RFID 902a each have a public key encryption / decryption module.

  In this method, the R / W 104a and the RFID 902a do not need to share an individual encryption key for encrypting communication data in advance, and each has a public key and a private key pair of the public key encryption method, and is shared during communication. An encryption key may be generated.

  The shared key sharing procedure is as follows. First, the RFID 902a generates an arbitrary password 1603 and transmits it to the R / W 104a. The R / W 104a transmits the public key 1601 and the encrypted password obtained by public key encryption of the input password 1603 with the private key 1602 to the RFID 902a. The RFID 902a decrypts the input encrypted password with the public key 1601 input from the R / W 104a, obtains the decrypted password, and compares this decrypted password with the previously generated password 1603. If the comparison results match, the R / W 104a is authenticated as a communication partner.

  Although not shown in the figure, the R / W 104a similarly authenticates the RFID 902a using the public key 1606 and the secret key 1607.

  Next, the R / W 104a generates an arbitrary shared encryption key a (203a), public key encrypts the encryption key a (203a) with the private key 1602, and obtains an encrypted shared key. The encrypted shared key is transmitted to the RFID 902a. The RFID 902a decrypts the received encrypted shared key with the public key 1601 previously input to obtain the encryption key a (203a). Similarly, the RFID 902a generates a shared encryption key 204a, and uses the public key 1606 and the secret key 1607 to share the encryption key a (204a) with the R / W 104a. By the above procedure, it is possible to share a key when it becomes necessary.

  Although detailed description is omitted, in the second embodiment, the same effect as that obtained in the first embodiment can be obtained by the same method as shown in FIGS. Is possible.

As described above, according to the second embodiment, it is difficult to eavesdrop on communication data on the communication path 105 of the information communication system according to the present embodiment and illegally obtain data stored in the storage medium 103. In addition, it is possible to provide an information communication system that can easily manage encryption keys used for encryption communication.
3. Third Embodiment A third embodiment of the present invention will be described with reference to FIGS. 5 and 17 to 19. First, the schematic configuration of the information communication system according to the present embodiment, the information processing apparatus constituting the communication system, and the information storage medium will be described with reference to FIG.

  FIG. 17 is a schematic configuration diagram of an information communication system according to the third embodiment. In the figure, 101 and 104 to 108 constituting this information communication system are the same as those in FIG. The same applies to the subscripts a and b.

  Reference numeral 1702 denotes an information storage medium having a nonvolatile information storage area such as an EEPROM or a flash memory, such as an RFID or an LSI chip for an IC card (hereinafter referred to as an RFID). Reference numeral 1703 denotes an information storage medium such as an IC card or a memory card (hereinafter referred to as a storage medium) including a plurality of RFIDs 1702. The plurality of RFIDs 1702a and 1702b are both disposed on or inside the storage medium 1703 and function independently.

  Reference numeral 1710 denotes flag data indicating the presence or absence of data update processing (hereinafter referred to as a data update flag). A data update flag 1710 is provided for each RFID 1702. A data update flag 1710 indicates two states of on / off. An area for storing the data update flag may be secured in the data storage area of each RFID 1702, or a storage device different from the data storage area may be used, but it must be a non-volatile storage area. The number of data update flags 1710 provided in each RFID 1702 may be one, or may be provided in each of a plurality of data storage areas.

  Next, with reference to FIGS. 5, 18, and 19, an overview of the information communication system according to the present embodiment, the information processing apparatus that constitutes the communication system, and the information storage medium writing and reading operations will be described.

  FIG. 18 is a schematic flowchart of the write operation of the information communication system according to the present embodiment. The host 101 divides the data string to be written into the storage medium 103 into a plurality of divided data strings by the data dividing function 108 (301). The host 101 transmits the divided data strings to the R / W 104a and the R / W 104b, respectively (302a and 302b).

  The R / W 104a receives the divided data string (303a), and encrypts and divides the divided data string received by using the encryption key a (203a) stored in the encryption / key storage unit 107a. (304a). Next, the R / W 104a transmits this encrypted data to the RFID 1702a (305a). Similarly, the R / W 104b receives the divided data string (303b), encrypts the received divided data string using the encryption key b (203b) stored in the encryption / key storage unit 107b, and is encrypted. A divided data string is obtained (304b). Next, the R / W 104b transmits this encrypted data to the RFID 1702b (305b).

  The RFID 1702a receives the encrypted divided data string (306a), turns on the data update flag 1710a (1801a), and stores the encrypted data in a storage area in the RFID (307a). Further, the RFID 1702a confirms the completion of writing of the encrypted data to the storage area in the RFID, and then turns off the data update flag 1710a (1802a), and transmits a write completion notification to the R / W 104a (308a). . Similarly, the RFID 1702b receives the encrypted divided data string (306b), sets the data update flag 1710b to the on state (set) (1801b), and stores the encrypted data in a storage area in the RFID (307b). ). Further, the RFID 1702b confirms the completion of writing of the encrypted data to the storage area in the RFID, and then turns off the data update flag 1710b (reset) (1802b), and transmits a write completion notification to the R / W 104b. (308b).

  The R / W 104a receives the write completion notification (309a) and transmits the write completion notification to the host 101 (310a). Similarly, the R / W 104b receives a write completion notification (309b) and transmits a write completion notification to the host 101 (310b).

  The host 101 receives a write completion notification from the R / W 104a and the R / W 104b (311a, 311b).

  Next, with reference to FIG. 19 and FIG. 5, an overview of the information communication system according to the present embodiment, the information processing apparatus constituting the communication system, and the information storage medium read operation will be described.

  FIG. 19 is a schematic flowchart of the data update flag check operation at the time of reading in the information communication system according to the present embodiment. The host 101 transmits a flag read request to the R / W 104a and the R / W 104b (1901a, 1901b). The R / W 104a receives the flag read request (1902a), and transmits the flag read request to the RFID 1702a (1903a). Similarly, the R / W 104b receives a flag read request (1902b) and transmits a flag read request to the RFID 1702b (1903b).

  The RFID 1702a receives the flag read request (1904a), extracts the data update flag in the RFID (1905a), and transmits this data update flag to the R / W 104a (1906a). Similarly, the RFID 1702b receives the flag read request (1904b), extracts the data update flag in the RFID (1905b), and transmits this data update flag to the R / W 104b (1906b).

  The R / W 104a receives the data update flag (1907a), and transmits this data update flag to the host 101 (1909a). Similarly, the R / W 104b receives the data update flag (1907b), and transmits this data update flag to the host 101 (1909b).

  The host 101 receives the data update flag from the R / W 104a and the R / W 104b (1910a, 1910b). The host 101 determines the state of the plurality of received data update flags, and when all the data update flags are off (reset state), the flag check is successful, and any one of the data update flags is on (set state). Sometimes it is determined that the flag check has failed (1911).

  When the flag check is successful, the information storage medium is read according to the flowchart shown in FIG. When the flag check fails, it is determined that the data stored in the storage medium 1703 is invalid and is not read out.

  As described above, it has been shown that the third embodiment can be applied to the first embodiment shown in FIGS. Similarly, the third embodiment can be applied to the second embodiment shown in FIG.

  As described above, according to the third embodiment, the same effect as that obtained in the first embodiment can be obtained with respect to confidentiality of data flowing on the communication path 105. Furthermore, in RFID using wireless communication, communication may become unstable in the middle of communication, and data writing operations may not be completed normally. On the other hand, data stored in a plurality of RFIDs 1702 is normally written. It is possible to determine whether or not the data has been completed and eliminate illegal data.

  Further, the storage area of each RFID 1702 can be duplicated, and the data update flag 1702 can be used as a flag indicating which area is valid. For example, the data update flag 1710 is turned on when the storage area A is valid, and the data update flag 1710 is turned off when the storage area B is valid. When the data in the storage area A is updated, if the writing ends normally, the data update flag 1710 is turned on. Next, when the copy of the data is written in the storage area B, if the writing is normally completed, the data update flag 1710 is turned off. As a result, when the values of the data update flags 1710 of a plurality of RFIDs 1702 do not match, it is possible to roll back to at least the state before writing failure by validating the data in the old storage area for all the RFIDs 1702. Become.

  As described above, according to the third embodiment, it is possible to illegally obtain data stored in the information storage medium 103 using communication data eavesdropped on the communication path 105 of the information communication system according to the present embodiment. It is possible to provide an information communication system that is difficult and can easily improve the reliability of data stored in the storage medium 1703.

  In the first to third embodiments of the present invention, in FIGS. 1, 9, and 15, two R / Ws 104 are connected to the host 101 or the host 1501, and the storage medium 103 is connected to the storage medium 103. Although the case where two RFIDs 102 are provided has been described, the present invention is not necessarily limited to this configuration. If the number of R / Ws connected to the host 101 and the number of RFIDs 102 included in the storage medium 103 are both plural, Good. Even in the case of three or three units each, writing and reading processing with respect to a plurality of RFIDs can be performed in the same procedure as the processing shown in FIGS.

  In the first to third embodiments of the present invention, the following method may be used as a method for easily identifying how data is divided and stored among a plurality of storage media. . A special area for recording the data division method and order is provided in the storage area of the RFID 102 or 902, and necessary information is recorded in this area when data is written to the RFID. The host 101 or the host 1501 takes out the encrypted divided data sequence at the time of reading data, extracts information on the data division method and order from this area, and reconstructs the divided data sequence based on this information. When exchanging information regarding the data division method and order using the communication path 105, encryption may be performed in the same manner as the communication of encrypted data.

  The present invention creates a storage medium simply having a plurality of RFIDs having a predetermined interface, associates data held by the plurality of independent RFIDs with each other, and encrypts the data on the communication path. The encryption key necessary for decrypting the encrypted data flowing through is increased by the number of independent RFIDs, thereby improving the overall encryption strength. In other words, the storage area is increased using existing RFIDs, and communication is performed in parallel with a plurality of RFIDs, thereby increasing the communication speed and increasing the security performance.

  For example, when a plurality of RFIDs are mounted on a small size such as an IC card, interference with nearby RFIDs becomes a problem. Therefore, the application destination of the present invention is preferably a contact type RFID.

1 is a schematic configuration diagram of an information communication system according to a first embodiment. FIG. 3 is a conceptual diagram of a write operation of the information communication system according to the first embodiment. 3 is a schematic flowchart of a write operation of the information communication system according to the first embodiment. FIG. 3 is a conceptual diagram of a read operation of the information communication system according to the first embodiment. 7 is a schematic flowchart of a read operation of the information communication system according to the first and third embodiments. It is a schematic explanatory drawing of the data division system of the information communication system which concerns on 1st, 2nd and 3rd embodiment. It is a schematic explanatory drawing of the data division system of the information communication system which concerns on 1st, 2nd and 3rd embodiment. It is a schematic explanatory drawing of the data division system of the information communication system which concerns on 1st, 2nd and 3rd embodiment. It is a schematic block diagram of the information communication system which concerns on 2nd Embodiment. It is a write-in operation conceptual diagram of the information communications system concerning a 2nd embodiment. 6 is a schematic flowchart of a write operation of the information communication system according to the second embodiment. It is a read-out operation | movement conceptual diagram of the information communication system which concerns on 2nd Embodiment. It is a general | schematic flowchart of the read-out operation | movement of the information communication system which concerns on 2nd Embodiment. 1 is a schematic configuration diagram of an information communication system according to a first embodiment. 1 is a schematic configuration diagram of an information communication system according to a first embodiment. It is a system configuration | structure and operation | movement conceptual diagram of the encryption key sharing system of the information communication system which concerns on 2nd Embodiment. It is a schematic block diagram of the information communication system which concerns on 3rd Embodiment. It is a general | schematic flowchart of the write-in operation | movement of the information communication system which concerns on 3rd Embodiment. It is a general | schematic flowchart of the data update flag check operation | movement at the time of the reading of the information communication system which concerns on 3rd Embodiment.

Explanation of symbols

101: host, 102, 902: RFID, 103, 903: storage medium, 104: reader / writer, 105: communication path, 107: encryption / key storage unit, 108: data division / reconfiguration unit

Claims (11)

An information communication system having an information processing device and an information storage medium that communicates with the information processing device,
The information storage medium includes a plurality of independently operating storage devices each storing encrypted divided data,
The information processing apparatus divides the data to be written into the storage device according to the number of the storage devices, writes the decoded data read from the storage device into the original data, and writes the original data into the storage device The divided data is encrypted with a different encryption key for each storage device and transmitted to each of the storage devices as encrypted divided data, and the encrypted divided data received from each of the storage devices is sent to the encryption key An information communication system comprising: an encryption / decryption means for decrypting with the above. 2. The information communication system according to claim 1, wherein the information processing apparatus includes a reader / writer that communicates with the information storage medium, and the reader / writer includes the encryption / decryption unit. An information communication system having an information processing device and an information storage medium that communicates with the information processing device,
The information storage medium includes a plurality of independently operating storage devices each storing encrypted data that has been divided,
The information processing device encrypts data to be written to the storage device with an encryption key, and encrypts / decrypts the read data from the storage device and decrypts the reconstructed encrypted data with the encryption key; and the storage device The divided encrypted data received from each of the storage devices is transmitted as encrypted data divided into each of the storage devices by dividing the encrypted data to be written to the storage device. And a data dividing / reconstructing means for reconstructing the original data into encrypted original data. 4. The information communication system according to claim 3, wherein the encryption / decryption means and the data division / reconstruction means are realized by executing a program stored in a memory of the information processing apparatus. An information communication system having an information processing device and an information storage medium that communicates with the information processing device,
The information storage medium includes a plurality of storage devices that operate independently, and each of the storage devices has a first encryption that is different for each storage device from the encrypted divided data received from the information processing device. An encryption / decryption unit that decrypts and stores the data with a key and encrypts the divided data to be transmitted to the information processing device with a second encryption key that is different for each storage device;
The information processing apparatus divides the data to be written into the storage device according to the number of the storage devices, writes the decoded data read from the storage device into the original data, and writes the original data into the storage device The divided data is encrypted with the first encryption key held for each of the storage devices, transmitted to each of the storage devices as encrypted divided data, and received from each of the storage devices. An information communication system comprising: encryption / decryption means for decrypting the divided data with the second encryption key held for each storage device. The information processing apparatus holds a first public / private key pair corresponding to the storage device, and each of the storage devices has a different second public / private key pair that is different for each storage device. Hold
Each of the storage devices restores the first generation information by decrypting the transmitted first generation information, which is encrypted with the first secret key, with the first public key. Means for verifying this, and means for decrypting the encrypted first encryption key with the first public key to obtain the first encryption key,
The information processing apparatus decrypts the transmitted second generation information, which is encrypted with the second secret key, with the second public key to restore the second generation information. 6. The method according to claim 5, further comprising: means for verifying the authentication information; and means for decrypting the encrypted second encryption key with the second public key to obtain the second encryption key. Information communication system. Each of the storage devices sets a data update flag stored on a non-volatile storage means in the information storage medium, the data update flag before writing the divided data, and resets after the divided data has been written. Means to
6. The information communication system according to claim 1, 3 or 5, wherein the information processing device has means for reading the data update flag for each of the storage devices after writing the divided data and determining the state thereof. . Each storage area of the storage device is data duplexed, and the data update flag indicates which of the first storage area and the second storage area of the storage area is data duplexed for the divided data after writing. The information communication system according to claim 7, wherein the information communication system is a flag indicating whether the storage area is valid. An information storage medium having a plurality of storage devices that operate independently,
Each of the storage devices includes means for receiving data encrypted after being divided from the outside, means for decrypting with the first encryption key used for encrypting the data, and the decrypted data Means for writing to the storage area; means for reading the data from the storage area in accordance with an external request; means for encrypting the read data with a second encryption key; and encrypting with the second encryption key Means for transmitting the converted data to the outside. Each of the storage devices decrypts the generated information with a public key received from the outside, means for receiving the encrypted information from the outside, and means for receiving the encrypted information from the outside Means for comparing the decrypted information with the generated original information to verify the validity of the public key / private key pair, and the first encryption key encrypted with the secret key from the outside 10. The information according to claim 9, further comprising: means for receiving the first encryption key; and means for decrypting the received encrypted first encryption key with the public key to obtain the first encryption key. Storage medium. Each of the storage devices sets a data update flag stored on a non-volatile storage means in the information storage medium, the data update flag before writing the divided data, and resets after the divided data has been written. It means for said data and means for reading the update flag, read 9. Symbol mounting information storage medium characterized by having a means for transmitting the data update flag to the outside in accordance with a request from the outside.

Images