JP5101126B2 - Tamper resistant device, time information providing apparatus, information state control system, and information state control method - Google Patents

Description

  The present invention relates to a tamper resistant device that controls the state of information according to time, a time information providing device, an information state control system, and an information state control method.

  In the conventional information state control technology, access to information in a tamper resistant module (TRM) is restricted by the tamper resistance of the module, and the information state is controlled only by the device to which the module is connected. . Here, the tamper resistance refers to a property that keeps secret information in the cryptographic module confidential or makes it difficult to modify the function from an attack (tamper) on the cryptographic module. Tamper-resistant module means illegally observing and modifying secret information and secret information processing mechanisms including keys for encryption / decryption / signature generation from outside, and unfair modification of secret information processing mechanisms A hardware or software module designed to be extremely difficult to do.

  In recent years, tamper-resistant modules that have an arithmetic function and do not have a power source, such as IC cards, have become widespread, but time management is not performed in IC cards, and information control based on time is given from the outside. It is realized by trusting and applying the time information obtained immediately.

For example, a system is disclosed that controls whether or not the content can be used according to the expiration date for content on a removable medium in a computer to prevent unauthorized access to the content (see, for example, Patent Document 1).
JP 2006-85360 A

  However, the background art described above has the following problems.

  The above-described tamper resistant module does not have a clock function. For this reason, when it is intended to control the internal information, for example, the content according to the expiration date, the time is used every time the content is used to a clock device or an NTP (Network Time Protocol) server outside the tamper-resistant module. It is necessary to confirm.

  When the time is confirmed with the clock device outside the tamper-resistant module, the time of the clock device is not always correct, and the time may be misrepresented. In other words, since the time of the device to which the module is connected can often be changed / spoofed by the user, the time provided by the device cannot be trusted and the information state control based on the correct time cannot be performed. is there.

  On the other hand, when the time is confirmed with the NTP server, the tamper resistant module must always be connected to the network because the NTP server cannot be connected offline. In this case, in a mobile communication environment, there is a problem that it is not always possible to connect to a reliable time server.

  Accordingly, the present invention has been made to solve at least one of the above problems, and is a tamper resistant device, a time information providing apparatus, and an information state control system capable of controlling processing on information based on a correct time. And providing an information state control method.

In order to solve the above problems, the tamper resistant device of the present invention is
A tamper resistant device with a calculation function,
Time data acquisition means for acquiring time data from the time information providing device based on access to the self-tamper resistant device,
The acquired time data, and time calibration means for calibrating the time of self-tamper device manages,
Using the time at which the calibration, and control means for controlling the processing for the information stored in its own tamper device,
The time data acquisition unit generates a sequence number and a random number corresponding to the access, shares the sequence number and random number, the ID of the tamper resistant device, and the time information providing device, and the time information providing device. Generates an authentication request and a time data request message for requesting authentication of the self-tamper resistant device and time data to the time information providing device using a secret key used when verifying the validity of the tamper resistant device. ,
The time information providing apparatus verifies the tamper resistant device with the secret key acquired based on the ID of the tamper resistant device included in the authentication request and the time data request message, and the sequence number is the past. The tamper resistant device is authenticated by confirming that it is not in the sequence number, and time data is acquired according to the result of the authentication processing, and the time data, the sequence number and the random number, and the secret With the key, the tamper resistant device is requested to authenticate its own time information providing device, an authentication request response for providing time data and a time data request response message are generated,
The time calibration means verifies whether the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message,
When the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message, it is managed by the self-tamper resistant device by the acquired time data. Calibrate the time.

  With this configuration, the time can be managed by using the calculation function in the tamper resistant module as the tamper resistant device. Specifically, when the module is activated, the time managed by the module is calibrated with the time data acquired from the reliable time information providing device (time server), and the time when the calibration is performed is stored in the module. By controlling processing for stored information, the state of information can be autonomously managed.

The time information providing apparatus of the present invention is
Tamper device comprising an arithmetic function generates a sequence number and a random number corresponding to the access for resistant tamper device, and the sequence number and the random number, the ID of the tamper-resistant device, said tamper-resistant device and time information by a secret key shared between the providing apparatus transmits the authentication request and the time data request message requesting the authentication and time data of the tamper resistance device,
The time information providing apparatus verifies the validity of the tamper resistant device by using a secret key acquired based on an ID of the tamper resistant device included in the authentication request and time data request message , and the sequence number is Authentication processing means for performing authentication processing of the tamper resistant device by confirming that it is not in the sequence number of
Time data acquisition means for acquiring time data according to the result of the authentication process;
Notification means for notifying the acquired tamper resistant device to the tamper resistant device,
The notification means requests the tamper resistant device to authenticate its own time information providing device using the acquired time data, the sequence number and random number, and the secret key, and provides an authentication request response for providing time data. and that generates a time data request response message.

  With this configuration, time data can be provided based on the authentication request and the time data request message transmitted by the tamper resistant device.

The information state control system of the present invention
An information state control system comprising a tamper resistant device having an arithmetic function and a time information providing device for providing time information to the tamper resistant device,
The tamper resistant device is
Generating a sequence number and a random number corresponding to the access for its own tamper device, and the sequence number and the random number, the ID of the own tamper device, a secret key shared between said time information providing apparatus, wherein Generates an authentication request and a time data request message for requesting authentication of the tamper resistant device and time data to the time information providing device, and a sequence number included in a response signal to the authentication request and the time data request message includes the authentication by verifying whether the request and time data request sequence number and whether the same contained in the message, and time data acquisition means for acquiring the time data from the time information providing apparatus,
Time calibration means for calibrating the time managed by the self-tamper resistant tamper device with the acquired time data;
Control means for controlling processing for information stored in the self-tamper resistant tamper device using the calibrated time,
The time information providing device includes:
The validity of the tamper device verifies the authentication request and the time data request private key that is obtained based on the ID of the tamper-resistant device messages included in the sequence number, not in the past of the sequence number Authentication processing means for performing authentication processing of the tamper resistant device by checking
Time data acquisition means for acquiring time data according to the result of the authentication process;
An authentication request response and a time data request response message for requesting the tamper resistant device to authenticate its own time information providing device using the acquired time data, the sequence number and the random number, and the secret key, and providing the time data It generates the time data acquired Ru and a notifying means for notifying the tamper device.

The information state control method of the present invention
An information state control method in a tamper-resistant device having an arithmetic function,
A time data acquisition step in which the calculation unit acquires time data from the time information providing device based on access to the self-tamper resistant tamper device
The arithmetic unit, the acquired time data, and time calibration step for calibrating the time of self-tamper device manages,
The calculation unit, by using the time at which the calibration, and a control step of controlling processing to information stored in the own tamper device,
In the time data acquisition step, the calculation unit generates a sequence number and a random number corresponding to the access, shares the sequence number and random number, the ID of the tamper resistant device, and the time information providing apparatus, and An authentication request and time data requesting the time information providing apparatus to authenticate the self-tamper resistant device and time data by using a secret key used when the time information providing apparatus verifies the validity of the tamper resistant device. Generate a request message,
The time information providing apparatus verifies the tamper resistant device with the secret key acquired based on the ID of the tamper resistant device included in the authentication request and the time data request message, and the sequence number is the past. The tamper resistant device is authenticated by confirming that it is not in the sequence number, and time data is acquired according to the result of the authentication processing, and the time data, the sequence number and the random number, and the secret With the key, the tamper resistant device is requested to authenticate its own time information providing device, an authentication request response for providing time data and a time data request response message are generated,
In the time calibration step, it is verified whether the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message,
When the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message, it is managed by the self-tamper resistant device by the acquired time data. Calibrate the time.

  By doing in this way, time can be managed using the calculation function in the tamper resistant module as a tamper resistant device. Specifically, when the module is activated, the time managed by the module is calibrated with the time data acquired from the reliable time information providing device (time server), and the time when the calibration is performed is stored in the module. By controlling processing for stored information, the state of information can be autonomously managed.

  According to the embodiment of the present invention, it is possible to realize a tamper resistant device, a time information providing device, an information state control system, and an information state control method that can control processing for information based on correct time.

Next, the best mode for carrying out the present invention will be described based on the following embodiments with reference to the drawings.
In all the drawings for explaining the embodiments, the same reference numerals are used for those having the same function, and repeated explanation is omitted.

  A configuration of an information state control system to which a tamper resistant device and a time information providing apparatus according to an embodiment of the present invention are applied will be described with reference to FIG.

  In this embodiment, as an example, when information stored in a tamper resistant module 1200 as a tamper resistant device connected to the mobile device 1100 is accessed after a preset time limit, the information is The case where the process to delete is performed is demonstrated.

  The information state control system according to the present embodiment includes a mobile device 1100, a tamper resistant module 1200 connected to the mobile device 1100, and a time server 1400 as a time information providing device. The mobile device 1100 and the time server 1400 are connected via a mobile communication network 1300 by wire or wireless.

  The tamper resistant module 1200 uses the communication function of the mobile device 1100 to send an authentication request for requesting self-tamper resistant module and time data and a time data request message to the time server 1400 (authentication & time). Data request). Upon receiving the authentication request and the time data request message, the time server 1400 authenticates the tamper resistant module 1200, requests the tamper resistant module 1200 to authenticate the own time server 1400, and provides an authentication request for providing time data. A response and a time data request response message are returned (authentication & time data response).

  The tamper resistant module 1200 that has received the authentication request response and the time data request response message authenticates the time server 1400 and then includes time information (time data) included in the authentication request response and the time data request response transmitted from the time server 1400. ) Is used to control processing of information, thereby controlling the state of information.

  Next, the tamper resistant module 1200 will be described with reference to FIG. FIG. 2 shows an example of the configuration of the tamper resistant module 1200.

  The tamper resistant module 1200 includes a power supply detection unit 1210 as a detection unit, a calculation unit 1220 as a time data acquisition unit and a control unit, a storage unit 1230, a clock function unit 1240 as a time calibration unit, and a communication control unit. 1250.

  The power application detection unit 1210 detects access to the tamper resistant module 1200. For example, the power application detection unit 1210 determines whether or not an access has been made by detecting whether or not power (voltage) has been applied. When the power supply detection unit 1210 detects access to the self-tamper resistant tamper module 1200, that is, when a power supply (voltage) is applied, the authentication request message and time for authenticating the time server 1400 to the arithmetic unit 1220. A command for generating a time data request message for requesting time data to the server 1400 is input. Further, the power application detection unit 1210 may determine whether or not an access is made based on whether or not a time adjustment request signal for requesting time adjustment is detected. Here, the time adjustment request includes a time adjustment request to the self-tamper resistant tamper module 1200 by an operator and a time adjustment request from a device (mobile device) to which the self-tamper resistant tamper module 1200 is connected.

Based on the command for generating the authentication request and the time data request message input by the power application detection unit 1210, the calculation unit 1220 uses a previously used sequence number SQN (Sequence Number) _OLD stored in the storage unit 1230 and Call random number nonce _OLD . In addition, the calculation unit 1220 generates a new sequence number and random number nonce based on the called sequence number SQN _OLD and random number nonce _OLD , and stores the generated sequence number SQN and random number nonce in the storage unit 1230.

  In addition, the operation unit 1220 generates an authentication request and a time data request message using the generated sequence number SQN and random number nonce, and inputs the generated authentication request and time data request message to the communication control unit 1250. The communication control unit 1250 sends the input authentication request and time data request message to the time server 1400 via the mobile communication network 1300.

  Thereafter, the communication control unit 1250 waits until an authentication request response and a time data request response message transmitted from the time server 1400 are received.

  When the communication control unit 1250 receives the authentication request response and the time data request response message, the communication control unit 1250 inputs the received authentication request response and time data request response message to the arithmetic unit 1220.

  Based on the input authentication request response and time data request response message, the arithmetic unit 1220 includes the sequence number SQN included in the authentication request response and time data request response message, and the sequence number SQN stored in the storage unit 1230. Is verified, that is, the validity of the sequence number SQN included in the authentication request response and the time data request response message is verified. That is, by checking whether the sequence number SQN included in the authentication request response and the time data request response message is in the sequence number SQN stored in the storage unit 1230, in some cases, the authentication request response and the time data request It is determined that the sequence number SQN included in the response message is valid.

  When the validity of sequence number SQN can be verified, arithmetic unit 1220 extracts time information (time data) included in the time data request response message and inputs the time information to clock function unit 1240.

  The clock function unit 1240 has a clock function, and manages the time by an arithmetic function. When the time information is input by the calculation unit 1220, the clock function unit 1240 synchronizes the time to be managed with the input time information, thereby matching the time to be managed with the input time information. In this way, the time managed by the own tamper module is calibrated.

  Thereafter, when the control target information stored in the storage unit 1230 is accessed, the calculation unit 1220 is calibrated as managed by the clock function unit 1240 and the expiration date set in the control target information of the access target. When the expiration date of the control target information to be accessed has passed after collating with the time, the control target information is deleted and the access is invalidated.

  Next, the time adjustment process performed by the tamper resistant module 1200 will be described in detail with reference to FIG.

  The tamper resistant module 1200 determines whether or not a power supply (voltage) application and / or time adjustment request is detected in the power supply detection unit 1210 (step S3110).

If the power applied and / or time-setting request has been detected (step S3110: YES), the arithmetic unit 1220 sets the value of the time-setting completion flag _{F t} to 0 (step S3120). On the other hand, when the application of power and / or the time adjustment request is not detected (step S3110: NO), the process returns to the initial state.

Next, the operation unit 1220 increments the previously used sequence number SQN _OLD stored in the storage unit 1230 by 1 to generate a new sequence number SQN (step S3130), and also uses the previously used random number nonce _OLD. A new random number nonce is generated based on (step S3140).

Next, in addition to the newly generated sequence number SQN and random number nonce, the arithmetic unit 1220 includes ID information uniquely assigned to each module when the tamper resistant module is issued, and a secret key S shared with the time server 1400. _The authentication request and time data request message shown in Expression (1) are generated by _K (step S3150).

式（１）において、「｜｜」はデータの連接を示し、記号（２）は排他的論理和を示す。

In Expression (1), “||” indicates data concatenation, and symbol (2) indicates exclusive OR.

式（１）は、認証要求及び時刻データ要求メッセージとして、シーケンス番号ＳＱＮと乱数ｎｏｎｃｅの連接データと、秘密鍵Ｓ_Ｋとの排他的論理和を計算し、ＩＤ情報と、計算された排他的論理和と、ＩＤ情報と乱数ｎｏｎｃｅとをハッシュ関数で演算したものとの連接データを生成することを示している。

Equation (1) is, as the authentication request and the time data request message, calculates the concatenated data of the sequence number SQN and a random number nonce, the exclusive OR of the secret key S _K, and the ID information, the calculated exclusive It shows that concatenated data of the sum, ID information, and random number nonce calculated by a hash function is generated.

  The computing unit 1220 transmits the generated authentication request and time data request message to the time server 1400 via the communication control unit 1250 (step S3160).

  Thereafter, the arithmetic unit 1220 determines whether or not a response (authentication request response and time data request response message) from the time server 1400 has been received during a preset waiting time (step S3170).

  When a response from time server 1400 is received during a preset waiting time (step S3170: YES), operation unit 1220 determines that sequence number SQN included in the authentication request response and time data request response message is the first one. It is verified whether or not it is the same as that transmitted to (step S3180). On the other hand, when the response from the time server 1400 is not received during the preset waiting time (step S3170: NO), the process returns to the initial state.

When the sequence number SQN included in the authentication request response and the time data request response message is the same as that transmitted earlier (step S3180: YES), the arithmetic unit 1220 determines that the sequence number SQN has been successfully verified. In addition to performing the time adjustment process described above, the value of the time adjustment completion flag F _t is set to 1 (step S3190), and the process returns to the initial state. On the other hand, if the sequence number SQN included in the authentication request response and the time data request response message is not the same as that transmitted earlier (step S3180: NO), the process returns to the initial state. Information state management processing performed in the tamper resistant module 1200 will be described in detail with reference to FIG. 4. The tamper resistant module 1200 determines whether or not the control target information inside the module has been accessed in the arithmetic unit 1220. (Step S4110). Specifically, the calculation unit 1220 confirms whether or not the information to be accessed is the control target information from the information indicating the control target included in the header of the control target information inside the module.

When it is not access to control object information (step S4110: NO), operation part 1220 accesses information used as the object of access (step S4150). On the other hand, if the access to the controlled object information (step S4110: YES), the arithmetic unit 1220, the value of the time-setting completion flag _{F t} is confirmed whether or not it is 1 (step S4120).

When the value of the time adjustment completion flag F _t is 1 (step S4120: YES), the calculation unit 1220 includes the expiration date information included in the header of the control target information stored in the storage unit 1230, and the clock function unit 1240. Based on the time managed by (1), it is confirmed whether or not the deletion deadline (expiration date) of the control target information has passed (step S4130). The header of information stored in the storage unit 1230 includes information indicating whether or not the information is control target information and information indicating an expiration date. On the other hand, if the value of the time-setting completion flag _{F t} is not 1 (step S4120: NO), the arithmetic unit 1220 terminates without access to the control target information.

  When the deletion deadline of the control target information has been exceeded (step S4130: YES), the calculation unit 1220 deletes the control target information (step S4140) and does not perform access. On the other hand, when the deletion deadline of the control target information has not been exceeded (step S4130: NO), the calculation unit 1220 accesses the control target information (step S4150).

  Next, a time server 1400 according to an embodiment of the present invention will be described with reference to FIG.

  The time server 1400 according to the present embodiment includes a time management unit 1410, a calculation unit 1420 as an authentication processing unit and a time data acquisition unit, a storage unit 1430, and a communication control unit 1440 as a notification unit.

  When the communication control unit 1440 receives the authentication request and the time data request message from the tamper resistant module 1200 via the mobile communication network 1300, the communication control unit 1440 inputs the message to the calculation unit 1420.

Calculating unit 1420, based on the inputted authentication request and the time data request message, it calls the secret key S _K stored in the storage unit 1430 based on the ID included in the authentication request and the time data request message. The storage unit 1430 is stored in association and the ID of the private key S _k and tamper-resistant module. The arithmetic unit 1420 extracts a random number nonce by performing an exclusive OR operation with respect to the authentication request and the time data request message with the secret key S _K, verifies the validity of the ID using a hash function.

  In addition, the calculation unit 1420 collates the past sequence number stored in the storage unit 1430 with the sequence number included in the authentication request and the time data request message, confirms that there is no similar sequence number, and repeatedly attacks. The time information is read from the time management unit 1410, an authentication request response and a time data request response message are generated, and the generated authentication request response and time data request response message are input to the communication control unit 1440. .

  The communication control unit 1440 sends the input authentication request response and time data request response message to the tamper resistant module 1200 via the mobile communication network 1300.

  Next, the time information provision process performed in the time server 1400 will be described in detail with reference to FIG.

  Time server 1400 determines in communication control unit 1440 whether an authentication request and a time data request message have been received (step S6110).

  When the authentication request and the time data request message are received (step S6110: YES), the calculation unit 1420 verifies whether or not the ID included in the message is a valid ID (step S6120). On the other hand, when the authentication request and the time data request message are not received (step S6110: NO), the process returns to the initial state.

  As a result of the verification, when it is determined that the ID is not valid (step S6120: NO), the calculation unit 1420 discards the received authentication request and time data request message and returns to the standby state. On the other hand, when it is verified that the ID is valid (step S6120: YES), the calculation unit 1420 uses the sequence number included in the received authentication request and time data request message and the past stored in the storage unit 1430. The obtained sequence number is checked to verify that it is not a repeated attack (step S6130). For example, when it is verified that the sequence number is the same as that used in the past and the attack is repeated (step S6130: NO), the calculation unit 1420 discards the received authentication request and time data request message, and is in a standby state. Return to. On the other hand, when it is verified that the attack is not a repetitive attack (step S6130: YES), the time management unit 1410 issues time information (step S6140).

  Next, the computing unit 1420 generates an authentication request response and a time data request response message shown in Expression (3), and transmits them to the tamper resistant module 1200 (step S6150).

式（３）は、認証要求応答及び時刻データ要求応答メッセージとして、時間情報とシーケンス番号ＳＱＮの連接データと乱数ｎｏｎｃｅとの排他的論理和を計算し、さらに、計算された排他的論理和と秘密鍵Ｓ_Ｋとの排他的論理和を計算することを示している。

Expression (3) calculates an exclusive OR of the time information, the concatenated data of the sequence number SQN, and the random number nonce as the authentication request response and the time data request response message, and further calculates the exclusive OR and the secret It denotes to compute the exclusive OR of the key S _K.

  Next, an authentication and time data exchange sequence between the tamper resistant module 1200 and the time server 1400 will be described with reference to FIG.

In this embodiment, the secret key _SK is shared between the tamper resistant module 1200 and the time server 1400 in advance, and the sequence number SQN _OLD used last time is stored in the register on the tamper resistant module 1200 side. It is assumed that a predetermined number of past sequence numbers SQN _OLD are stored on the time server 1400 side, and that the tamper resistant module 1200 side has a random number generation function and a clock function. Will be described.

  The tamper resistant module 1200 receives, via the mobile device 1100, a detection that the power has been applied and / or a time adjustment request.

  The tamper resistant module 1200 generates a sequence number SQN and a random number nonce (steps S7110 and S7120).

  The tamper resistant module 1200 transmits the authentication request and time data request message shown in Expression (4) to the time server 1400 (step S7130).

式（４）は、認証要求及び時刻データ要求メッセージとして、シーケンス番号ＳＱＮと乱数ｎｏｎｃｅの連接データと、秘密鍵Ｓ_Ｋとの排他的論理和を計算し、ＩＤ情報と、計算された排他的論理和と、ＩＤ情報と乱数ｎｏｎｃｅとをハッシュ関数で演算したものとの連接データを生成することを示している。

Equation (4), as the authentication request and the time data request message, calculates the concatenated data of the sequence number SQN and a random number nonce, the exclusive OR of the secret key S _K, and the ID information, the calculated exclusive It shows that concatenated data of the sum, ID information, and random number nonce calculated by a hash function is generated.

  When receiving the authentication request and the time data request message, the time server 1400 confirms the validity of the ID information and the sequence number SQN (steps S7140 and S7150). For example, based on the authentication request and the time data request message, the nonce is decrypted with the public key of the tamper resistant module, and it is determined whether or not the decrypted nonce is the same as the nonce generated by the random number generation function provided in the time server 1400 If they are the same, the tamper resistant module is authenticated. Further, when the ID information and the random number nonce are calculated by a hash function and the calculation result is compared with the hash value H (ID, nonce) included in the authentication request and the time data request message, It is determined that the ID is valid.

  Next, when the validity of the ID information and the sequence number SQN can be confirmed, the time server 1400 issues time information (time information) (step S7160), and the authentication request response and time data shown in Expression (5) A request response message is transmitted to the tamper resistant module 1200 (step S7170).

式（５）は、認証要求応答及び時刻データ要求応答メッセージとして、時間情報とシーケンス番号ＳＱＮの連接データと、乱数ｎｏｎｃｅとの排他的論理和を計算し、さらに、計算された排他的論理和と秘密鍵Ｓ_Ｋとの排他的論理和を計算することを示している。

Equation (5) calculates an exclusive OR of the time information, the concatenated data of the sequence number SQN, and the random number nonce as an authentication request response and a time data request response message, and further calculates the exclusive OR It denotes to compute the exclusive OR of the secret key S _K.

The tamper resistant module 1200 verifies the validity of the sequence number SQN based on the authentication request response and the time data request response message (step S7180).
The tamper resistant module 1200 extracts time information from the time data request response message when the validity of the sequence number SQN is confirmed (step S7190).

  The tamper resistant module 1200 performs time adjustment in the clock function unit 1240 (step S7200).

  Thereafter, when information stored in the tamper resistant module 1200 is accessed via the mobile device 1100 (step S7210), if the access target information is control target information, the expiration date of the control target information is reached. Based on this, it is determined whether or not to delete (step S7220).

  If it is a deletion target (step S7220: YES), the information is deleted (step S7240). On the other hand, if it is not a deletion target (step S7220: NO), the information is transmitted via the mobile device (step S7230).

  In this way, information whose expiration date has passed can be deleted, and access to information can be permitted for information within the expiration date.

  In this embodiment, the case where information whose expiration date has expired is deleted has been described as an example. However, in addition to deletion, processing such as copying, moving, or changing information is also possible. Also, the information stored in the tamper-resistant module has been described, but the encrypted information that is outside the tamper-resistant module is decrypted with the key stored in the tamper-resistant module. Can be realized in a similar manner.

  Further, although the case where the time data is requested to the time server when the application of the power supply (voltage) and / or the time adjustment request is detected has been described, the time data may be requested at a predetermined cycle.

  According to the embodiment of the present invention, when a clock function is provided in the tamper resistant module, when the internal information is controlled according to the expiration date, the clock device or NTP (Network Time) outside the tamper resistant module is controlled. There is no need to check the time every time the content is used in the Protocol) server. In addition, information stored in the memory of a tamper-resistant module that has a calculation function and does not have a power source, such as time limit management of information (license etc.), is based on the time calibrated by the time information of a reliable external server. It becomes possible to manage.

  In the above-described embodiments, the case where the tamper resistant module is configured by a hardware module has been described. However, the tamper resistant module may be configured as a software module.

It is explanatory drawing which shows the information state control system with which the information state control apparatus which concerns on the Example of this invention is applied. It is a partial block diagram which shows the tamper resistant module which concerns on one Example of this invention. It is a flowchart which shows operation | movement of the tamper resistant module which concerns on one Example of this invention. It is a flowchart which shows operation | movement of the tamper resistant module which concerns on one Example of this invention. It is a partial block diagram which shows the time server which concerns on one Example of this invention. It is a flowchart which shows operation | movement of the time server which concerns on one Example of this invention. It is a sequence diagram which shows the authentication process and time data transmission / reception process which are performed between the tamper-resistant module and time server which concern on one Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1100 Mobile device 1200 Tamper-resistant module 1210 Power supply detection part 1220 Operation part 1230 Storage part 1240 Clock function part 1250 Communication control part 1300 Mobile communication network 1400 Time server 1410 Time management part 1420 Operation part 1430 Storage part 1440 Communication control part

Claims (7)

A tamper resistant device with a calculation function,
Time data acquisition means for acquiring time data from the time information providing device based on access to the self-tamper resistant device,
The acquired time data, and time calibration means for calibrating the time of self-tamper device manages,
Using the time at which the calibration, and control means for controlling the processing for the information stored in its own tamper device,
The time data acquisition unit generates a sequence number and a random number corresponding to the access, shares the sequence number and random number, the ID of the tamper resistant device, and the time information providing device, and the time information providing device. Generates an authentication request and a time data request message for requesting authentication of the self-tamper resistant device and time data to the time information providing device using a secret key used when verifying the validity of the tamper resistant device. ,
The time information providing apparatus verifies the tamper resistant device with the secret key acquired based on the ID of the tamper resistant device included in the authentication request and the time data request message, and the sequence number is the past. The tamper resistant device is authenticated by confirming that it is not in the sequence number, and time data is acquired according to the result of the authentication processing, and the time data, the sequence number and the random number, and the secret With the key, the tamper resistant device is requested to authenticate its own time information providing device, an authentication request response for providing time data and a time data request response message are generated,
The time calibration means verifies whether the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message,
When the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message, it is managed by the self-tamper resistant device by the acquired time data. A tamper resistant device characterized by calibrating The tamper resistant device according to claim 1,
The time data acquisition means transmits the authentication request and the time data request message and receives the time data from the time information providing device by a communication function provided in a device to which a self-tamper resistant device is connected. Tamper resistant device. The tamper resistant device according to claim 1 or 2 ,
A tamper-resistant device, comprising: a detecting unit that detects a time adjustment request by an operator and a time adjustment request by an apparatus connected to the tamper-resistant device as an access to the tamper-resistant device. The tamper resistant device according to claim 1 or 2 ,
The tamper-resistant device, wherein the time data acquisition means acquires time data from the time information providing device when the time managed by the self-tamper resistant device is not calibrated. A tamper resistant device having a calculation function generates a sequence number and a random number corresponding to access to the tamper resistant device, and the sequence number and random number, the ID of the tamper resistant device, the tamper resistant device and time information providing device An authentication request and a time data request message for requesting authentication of the tamper resistant device and time data by a secret key shared with
The time information providing apparatus verifies the validity of the tamper resistant device by using a secret key acquired based on an ID of the tamper resistant device included in the authentication request and time data request message, and the sequence number is Authentication processing means for performing authentication processing of the tamper resistant device by confirming that it is not in the sequence number of
Time data acquisition means for acquiring time data according to the result of the authentication process;
Notification means for notifying the acquired tamper resistant device to the tamper resistant device,
The notification means requests the tamper resistant device to authenticate its own time information providing device using the acquired time data, the sequence number and random number, and the secret key, and provides an authentication request response for providing time data. And a time data providing apparatus, which generates a time data request response message. An information state control system comprising a tamper resistant device having an arithmetic function and a time information providing device for providing time information to the tamper resistant device,
The tamper resistant device is
A sequence number and a random number corresponding to access to the self-tamper resistant tamper device are generated, and the time is determined by the sequence number and random number, the ID of the self-tamper resistant tamper device, and a secret key shared between the time information providing devices. An authentication request for requesting self-tamper resistant tamper device and time data request message to the information providing device and a time data request message are generated, and a sequence number included in a response signal to the authentication request and the time data request message includes the authentication request And time data acquisition means for acquiring time data from the time information providing device by verifying whether or not the sequence number included in the time data request message is the same.
Time calibration means for calibrating the time managed by the self-tamper resistant tamper device with the acquired time data;
Control means for controlling processing for information stored in the self-tamper resistant tamper device using the calibrated time,
The time information providing device includes:
Validate the tamper resistant device with a secret key acquired based on the ID of the tamper resistant device included in the authentication request and the time data request message, and confirm that the sequence number is not in the past sequence number. Authentication processing means for performing authentication processing of the tamper resistant device by checking;
Time data acquisition means for acquiring time data according to the result of the authentication process;
Based on the acquired time data, the sequence number and the random number, and the secret key, the tamper resistant device is requested to authenticate its own time information providing device, and an authentication request response and a time data request response for providing time data are provided. An information state control system comprising: a notification unit that generates a message and notifies the acquired tamper resistant device to the tamper resistant device. An information state control method in a tamper-resistant device having an arithmetic function,
A time data acquisition step in which the calculation unit acquires time data from the time information providing device based on access to the self-tamper resistant tamper device
The arithmetic unit, the acquired time data, and time calibration step for calibrating the time of self-tamper device manages,
The calculation unit, by using the time at which the calibration, and a control step of controlling processing to information stored in the own tamper device,
In the time data acquisition step, the calculation unit generates a sequence number and a random number corresponding to the access, shares the sequence number and random number, the ID of the tamper resistant device, and the time information providing apparatus, and An authentication request and time data requesting the time information providing apparatus to authenticate the self-tamper resistant device and time data by using a secret key used when the time information providing apparatus verifies the validity of the tamper resistant device. Generate a request message,
The time information providing apparatus verifies the tamper resistant device with the secret key acquired based on the ID of the tamper resistant device included in the authentication request and the time data request message, and the sequence number is the past. The tamper resistant device is authenticated by confirming that it is not in the sequence number, and time data is acquired according to the result of the authentication processing, and the time data, the sequence number and the random number, and the secret With the key, the tamper resistant device is requested to authenticate its own time information providing device, an authentication request response for providing time data and a time data request response message are generated,
In the time calibration step, it is verified whether the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message,
When the sequence number included in the authentication request response and the time data request response message is the same as the sequence number included in the authentication request and the time data request message, it is managed by the self-tamper resistant device by the acquired time data. An information state control method characterized by calibrating time.

Images