JP4713135B2 - Wireless authentication apparatus and control method - Google Patents

Description

The present invention relates to a wireless authentication device using RFID technology and a reading device that communicates with the wireless authentication device.

 Conventionally, RFID (Radio Frequency Identification) has been used as a technology for performing contactless authentication using radio waves using a small wireless IC chip, and a wireless authentication device storing data in this IC chip is applied to a mobile phone. There is something. (See Patent Document 1).

 The RFID includes a wireless authentication device that includes a wireless IC chip that stores information, and a reading device (reader) that reads and writes information stored in the wireless IC chip.

 A basic configuration of RFID is shown in FIG. FIG. 10 shows, as an example of RFID, a so-called passive RFID that does not have a power source in the wireless authentication device and is driven by dielectric electromotive force generated by a radio wave emitted from a reader that reads the wireless authentication device.

  Referring to FIG. 10, the wireless authentication device 100 includes an IC chip 110 (indicated by a dotted line) and an antenna 120. The IC chip 110 includes a control unit 111, an encoding processing unit 112, a decoding processing unit 113, and a memory 114. Have. On the other hand, the reader 200 includes a control unit 211, an encoding processing unit 212, a decoding processing unit 213, a memory 214, a power source 215, and an antenna 220. In addition, the wireless authentication device 100 and the reader 200 store a common key for encryption and decryption in the memory 114 and the memory 214, respectively. When reading and writing information using RFID, if the wireless authentication device 100 is sufficiently close to the reader 200, the antenna 120 of the wireless authentication device 100 that receives the radio wave emitted from the antenna 220 of the reader 200 uses the dielectric electromotive force to generate a current. The IC chip 110 is generated and driven. At this time, the wireless authentication device 100 and the reader 200 authenticate each other using a common key.

  Referring to FIG. 2, the reader 200 generates an arbitrary random number (referred to as a random number A) in the control unit 211 (S10), encrypts the random number A with a common key stored in the memory 214 (S11), and transmits the antenna. Carried to radio waves emitted from 220. When receiving the encrypted random number from the antenna 220, the wireless connection device 100 decrypts the random number with the common key stored in the memory 114 and acquires the random number (S12). Next, the wireless authentication device 100 encrypts the acquired random number with the common key (S13) and transmits it through the antenna 120. Then, the reader 200 that has received the encrypted random number obtains a random number (referred to as a random number A ′) by decrypting with the common key (S14). Here, the reader 200 determines whether the random number A matches the random number A ′ (S15). If the random number A matches the random number A ′, it is authenticated that the reader 200 and the wireless authentication device 100 have the same common key.

  Similarly, this time, it is also determined whether or not the random number B generated by the wireless authentication device 100 matches the random number B ′ obtained by decoding by the reader 200 based on the random number B (S16 to S21). Then, it is confirmed whether the reader 200 and the wireless authentication device 100 have the same common key.

  In the present specification, the processing of S10 to S21 is referred to as “mutual authentication processing”.

When the mutual authentication process of S10 to S21 is completed and it is confirmed that the reader 200 and the wireless authentication device 100 have the same common key, actual data exchange is started thereafter. ing.
Japanese Patent Laid-Open No. 2001-223631

 However, when the wireless authentication device is applied to a portable electronic device such as a cellular phone as in Patent Document 1, for example, a user who carries the portable electronic device in a pocket of clothes with another person in the crowd A portable electronic device may be dropped due to a shock at the time of collision or a user's carelessness. At this time, if the user does not notice that the portable electronic device is dropped, personal information stored in the IC chip of the wireless authentication device may be misused.

 That is, for example, there is a possibility that a malicious third party picks up a portable electronic device that has been dropped and exploits and misuses personal information from an IC chip using a reader.

 SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a wireless authentication device capable of protecting important data stored in an IC chip even if dropped and a reading device for the wireless authentication device.

  In order to solve the above-described problems, a wireless authentication device according to the present invention is a wireless authentication device that performs mutual authentication with a reading device using a common key, as a first aspect, and a storage unit that stores the common key. An impact detection means for detecting an impact, and a control means for controlling the common key to be encrypted so that mutual authentication with the reading device cannot be performed when the impact detection means detects an impact. It is characterized by that.

 The wireless authentication device further includes an input unit, and the control unit encrypts the common key and then performs a specific operation with the input unit so that mutual authentication with the reading device can be performed. It is preferable to control to decrypt the common key.

  According to a second aspect of the wireless authentication apparatus of the present invention, a wireless authentication apparatus that performs mutual authentication with a reading apparatus using a common key, a storage unit that stores the common key, and an impact that detects an impact. When the detection means, the time measurement means for measuring time, the input means, and the impact detection means detect an impact, the time measurement means is driven after the impact is detected, and the time measurement means is set to a predetermined value. And control means for controlling the common key to be encrypted so that mutual authentication with the reading device cannot be performed unless time is input by the input means before the time is counted.

 Further, in this wireless authentication device, the control unit decrypts the common key so that mutual authentication with the reading device can be performed when the input unit performs a specific operation after encrypting the common key. It is preferable to control so as to.

  Furthermore, the reading device of the present invention is a reading device that performs mutual authentication with a wireless authentication device using a common key, the storage device storing media data, the playback device capable of reproducing the media data, and the wireless And control means for controlling the reproduction means to reproduce the media data when mutual authentication with the authentication device is not established.

  According to the present invention, it is possible to provide a wireless authentication device that can protect important data stored in an IC chip even if it is dropped, and a reader for the wireless authentication device.

 Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
In the first embodiment of the present invention, an example applied to a mobile phone as a wireless authentication device is shown.

 1 and 2 are perspective views showing an external appearance of a mobile phone (wireless authentication device) 100. FIG.

 As illustrated in FIGS. 1 and 2, the wireless authentication device 100 includes a first housing 101 and a second housing 102. The two casings 101 and 102 are configured to be able to be opened and closed with each other by being foldably connected via a hinge portion 103.

 A display surface 118 and a speaker unit 104 are provided on the facing surface 101a of the first housing 101 that faces the second housing 102 when folded. In addition, the second housing 102 has an input unit (input means) 117 and a microphone 105 on the facing surface 102a of the second housing 102 that faces the first housing 101 when folded. A wireless authentication unit 106 is provided inside 102, and a telescopic whip antenna 107 for communicating with a base station is provided near the hinge unit 103 of the second housing 102.

 The wireless authentication unit 106 has a configuration in which the IC chip 110 and the antenna 120 are connected. For example, a battery cover (not shown) that forms a part of the outer surface opposite to the facing surface 102a of the second housing 102. It is arranged on the inner surface side.

 FIG. 3 is a block diagram showing the configuration of the wireless authentication unit 106, which is the main part of the wireless authentication device 100 according to the first embodiment of the present invention, and the reading device 200 of this wireless authentication device.

 Referring to FIG. 3, the wireless authentication unit 106 includes an IC chip 110 and an antenna 120. The IC chip 110 includes a control unit (control unit) 111, an encoding processing unit 112, a decoding processing unit 113, and a memory (storage unit). 114.

 The control unit 111 is connected to an impact detection unit (impact detection unit) 116 and an input unit 117.

 The impact detection unit 116 is a device that detects and digitizes the impact applied to the impact detection unit 116. For example, an acceleration sensor may be used.

 The input unit 117 includes a plurality of keys such as a numeric keypad.

 The encoding processing unit 112 encodes data to be transmitted to the reader 200.

 The decryption processing unit 113 decrypts data received from the reader 200.

 The memory 114 is a rewritable storage medium such as an EEPROM (Electronically Erasable and Programmable Read Only Memory).

 The control unit 111 is a microprocessor that is connected to the components 116 to 117 and 112 to 114 and controls each of the components.

 In FIG. 3, the speaker unit 104, the microphone 105, and the like are omitted.

 On the other hand, the reader 200 includes a control unit (control unit) 211, an encoding processing unit 212, a decoding processing unit 213, a memory (storage unit) 214, a power source 215, a display unit (reproducing unit) 218, and an antenna 220. ing.

 The encoding processing unit 212 encodes data to be transmitted to the wireless authentication device 100.

 The decryption processing unit 213 decrypts data received from the wireless authentication device 100.

 The memory 214 is a rewritable storage medium such as an EEPROM (Electronically Erasable and Programmable Read Only Memory) and stores media data.

 The power source 215 supplies power to the antenna 220.

 The display unit 218 is a display device using an LCD (Liquid Crystal Display), an organic EL, or the like.

 The control unit 211 is a microprocessor that is connected to the components 212 to 215 and 218 and controls each of them.

 In addition, the wireless authentication device 100 and the reader 200 store a common key for encryption and decryption in the memory 114 and the memory 214, respectively. When reading and writing information using RFID, if the wireless authentication device 100 is sufficiently close to the reader 200, the antenna 120 of the wireless authentication device 100 that receives the radio wave emitted from the antenna 220 of the reader 200 uses, for example, dielectric electromotive force. The IC chip 110 and the impact detection unit 116 are driven by generating a current. At this time, the wireless authentication device 100 and the reader 200 perform authentication by the following procedure using a common key.

  As shown in FIG. 4, the reader 200 generates an arbitrary random number (referred to as a random number A) by the control unit 211 (S10), encrypts the random number A with the common key stored in the memory 214 (S11), It is carried on radio waves emitted from the antenna 220. When the wireless authentication device 100 receives the random number encrypted by the antenna 120, the wireless authentication device 100 decrypts it with the common key stored in the memory 114 and acquires the random number (S12). Next, the wireless authentication device 100 encrypts the acquired random number with the common key (S13) and transmits it through the antenna 120. Then, the reader 200 that has received the encrypted random number with the antenna 220 decrypts it with the common key and obtains a random number (referred to as a random number A ′) (S14). Here, the reader 200 determines whether the random number A matches the random number A ′ (S15). If the random number A matches the random number A ′, it is authenticated that the reader 200 and the wireless authentication device 100 have the same common key.

  Similarly, the wireless authentication device 100 also determines whether or not the random number B generated by the control unit 111 matches the random number B obtained by decrypting the reader 200 based on the random number B (S16 to S21). ), It is confirmed whether the reader 200 and the RFID 100 have the same common key.

  In the present specification, the processing of S10 to S21 is referred to as “mutual authentication processing”.

 When the mutual authentication processing of S10 to S21 is completed and it is confirmed that the reader 200 and the wireless authentication device 100 have the same common key, transmission / reception of predetermined data starts thereafter. ing.

 Next, processing when the wireless authentication device 100 is dropped will be described.

 In the first embodiment, the common key stored in the memory 114 is encrypted so that mutual authentication with the reader 200 cannot be performed.

 Referring to FIG. 5, when the user drops the wireless authentication device 100 while walking, for example, in a clothing pocket or the like, the impact detector 116 detects the impact (S100). When the control unit 111 determines that the impact signaled by the impact detection unit 116 is equal to or greater than a predetermined threshold, the control unit 111 encrypts the common key stored in the memory 114. This encryption is performed using a predetermined key that is not notified to the reader 200.

 Next, for example, when a third party who has picked up the wireless authentication device 100 that has dropped is sufficiently close to the reader 200, the wireless authentication device 100 is driven by the generation of dielectric electromotive force, and the wireless authentication device 100 and the reader 200 4 starts the mutual authentication process shown in FIG.

 However, since the common key is encrypted with a predetermined key not notified to the reader 200 in S101, the random number A ′ acquired as a result of the decryption processing S14 of the reader 200 is different from the original random number A. Become. Further, in the decryption process S18 of the reader 200, the original random number B cannot be decrypted, and the random number B ′ acquired as a result of S21 of the wireless authentication device 100 is different from the original random number B. As described above, when the mutual authentication of S10 to S21 shown in FIG. 4 is not established (S103), the control unit 211 reads out the media data stored in the memory 214 and displays it on the display unit 218. This media data is display data indicating that “the reader 200 cannot read the wireless authentication device 100” because mutual authentication is not established, and an example is shown in FIG.

 Note that, if the common key is encrypted and cannot be decrypted in S14 and S18 and data cannot be obtained at all, the control unit 211 similarly stores in the memory 214 that mutual authentication has failed. The read media data is read out and displayed on the display unit 218.

 On the other hand, by performing a specific operation from the input unit 117 on the wireless authentication device 100 in a state where the common key has been encrypted after being dropped, the common key can be decrypted even if the encrypted common key is decrypted. Can be returned to. Specifically, the specific operation is, for example, an input of a predetermined password preset by the user, and an encrypted common key is input by inputting the predetermined password from the input unit 117 (S105). Returns to the original common key even after decryption (S106).

 As described above, by detecting the fall of the wireless authentication device 100 and encrypting the common key for mutual authentication with the reader 200, the wireless authentication device 100 is dropped and left without being noticed by the user. If this happens, even if a third party picks up the wireless authentication device 100 and reads it into the reader 200 to misuse the data, the mutual authentication with the reader 200 is not established, so the data in the memory 114 can be read out. Therefore, misuse can be prevented.

 In addition, when mutual authentication is not established between the wireless authentication device 100 and the reader 200, the fact is displayed on the display unit 218 on the reader 200 side, so that this wireless authentication device 100 is illegally used by a third party. For example, it is possible to notify a store clerk or the like of a store where the reader 200 is installed and operated for payment.

 Furthermore, even if the wireless authentication device 100 is dropped once and the common key is encrypted, the encrypted common key is decrypted by inputting a predetermined password set in advance by the user, and the original common key is again restored. The key can be returned to the original state where mutual authentication with the reader 200 can be performed.

<Second Embodiment>
Next, a second embodiment will be described. In this embodiment, after the impact detection unit 116 detects an impact in S100 of the first embodiment, the user is first notified and noticed that the wireless authentication device 100 has been dropped, and still dropped without the user's awareness. The common key is encrypted only when the wireless authentication device 100 is left unattended.

 As shown in FIG. 7, the control unit 111 is further connected to a display unit 118 and a timer unit 119 (timer).

 As shown in FIG. 8, when the impact detection unit 116 detects an impact (S100), the time measuring unit 119 starts counting down for a predetermined time (for example, 15 seconds), and for example, FIG. By displaying such a display on the display unit 118, the user is notified that the wireless authentication device 100 has been dropped (S107). If the user performs a predetermined countdown canceling operation such as inputting a preset password by the user during the countdown for a predetermined time (YES in S108), the countdown is stopped and the original state is restored. On the other hand, when the countdown for a predetermined time is completed without the user performing a predetermined operation, the control unit 111 determines that the wireless authentication device 100 is left dropped and uses the common key stored in the memory 114. Encryption is performed (S101).

  Thereafter, similarly to the first embodiment, the processes of S102 to S106 are performed.

 As described above, even when the wireless authentication device 100 is dropped, the common key is not counted when the countdown is performed for a predetermined time and the countdown is stopped by performing a predetermined operation within the predetermined time. Even if the wireless authentication device 100 is dropped, if the user notices immediately, the encryption of the common key can be prevented.

In the first embodiment and the second embodiment, even if the common key is encrypted and decrypted in S14 and S18, in the second embodiment, the screen display of the display unit 118 allows the user to wirelessly Although the user is notified that the authentication device 100 has been dropped, the present invention is not limited to this. For example, the control unit 111 and the speaker 104 may be connected and a warning sound may be emitted from the speaker 104. Good.

 In the first embodiment and the second embodiment of the present invention, an example is shown in which the control unit 111 is provided as a control unit that performs processing related to wireless authentication including encryption and decryption of a common key. For example, the wireless authentication processing may be performed by a control unit (not shown) that controls processing (such as incoming call processing and outgoing call processing) of the entire mobile phone normally provided in the mobile phone.

 In the first embodiment and the second embodiment of the present invention, the example in which the wireless authentication device 100 is applied to a mobile phone has been described. However, the present invention is not limited to this, and for example, a PDA (Personal Digital Assistant), digital The present invention can be applied to all devices such as a camera, a portable game machine, and a personal computer. Further, it may be in the form of a card called a “wireless IC card” or in the form of a tag called a “wireless IC tag”.

It is a perspective view which shows the opposing surface of the radio | wireless authentication apparatus which concerns on embodiment of this invention. It is a perspective view which shows the outer surface of the portable authentication apparatus which concerns on embodiment of this invention. 1 is a block diagram of a wireless authentication device and a reading device (reader) according to a first embodiment of the present invention. It is a sequence diagram which shows the process sequence of the mutual authentication between the radio | wireless authentication apparatus which concerns on this invention, and a reader (reader). It is a sequence diagram which shows the operation | movement procedure of the radio | wireless authentication apparatus and reader (reader) which concern on the 1st Embodiment of this invention. It is the schematic which shows an example of the screen display of the reader (reader) of this invention. It is a block diagram of the radio | wireless authentication apparatus and reader (reader) which concern on the 2nd Embodiment of this invention. It is a sequence diagram which shows the operation | movement procedure of the radio | wireless authentication apparatus and reader (reader) which concern on the 2nd Embodiment of this invention. It is the schematic which shows an example of the screen display of the radio | wireless authentication apparatus of this invention. It is a block diagram of the conventional radio | wireless authentication apparatus and a reader (reader).

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Wireless authentication apparatus 101 1st housing | casing 102 2nd housing | casing 103 Hinge part 104 Speaker part 105 Microphone 106 Radio | wireless authentication part 107 Antenna 110 IC chip 111 Control part 112 Encoding process part 113 Decoding process part 114 Memory 116 Impact Detection unit 117 Input unit 118 Display unit 119 Timing unit 120 Antenna 200 Reading device (reader)
211 Control Unit 212 Encoding Processing Unit 213 Decoding Processing Unit 214 Memory 215 Power Supply 218 Display Unit 220 Antenna

Claims (3)

A wireless authentication device that performs mutual authentication with a reading device using a common key,
Storage means for storing the common key;
An impact detection means for detecting an impact;
A time measuring means for measuring time;
Input means;
When the impact detection means detects an impact, the timing means is driven after the impact is detected, and if there is no input by the input means before the time measurement means counts a predetermined time, the reading device Control means for controlling to encrypt the common key so that mutual authentication cannot be performed,
A wireless authentication device comprising: The wireless authentication device according to claim 1 ,
The control unit controls to decrypt the common key so that mutual authentication with the reading device can be performed when a specific operation is performed by the input unit after the common key is encrypted. A wireless authentication device. A method of controlling a device that performs mutual authentication with a reading device using a common key,
When the impact detection means for detecting the impact detects the impact, the common key is encrypted so that mutual authentication with the reading device cannot be performed unless there is an input by the input means between the detection of the impact and the timing of a predetermined time. A control method characterized by comprising:

Images