JP5141099B2 - Automatic access key distribution system - Google Patents

Description

  The present invention relates to a technique for distributing an access key necessary for information processing. In particular, the present invention relates to a technique for settlement using a storage medium including a so-called IC card. The storage medium includes an information processing device such as a mobile phone. The settlement includes settlement of a fee including the fare of a transportation facility such as a railway. The settlement includes a so-called small payment service.

  In the service system for payment of traffic fees and small payments using contact / contactless IC cards that have become widespread in recent years, in order to prevent the data in the IC card from being rewritten illegally, charging and withdrawal of value information is required. The IC card handling equipment that is used holds an access key to access important information.

  In the IC card system as described above, once the access key is leaked or falsified to a third party and used for falsification of the amount data or card ID in the card, forged copy of the card itself, etc., security is restored. Is very difficult. In order to restore security, it is necessary to transfer the entire system to a new access key that is secured, and enormous time and cost such as collection and exchange of all cards, collection and change of access keys of all related devices, etc. Will occur.

  In recent years, a system for performing multi-service between a plurality of business operators using the same IC card has been devised. In such a system, since it is necessary to use a different access key for each type of equipment for each business operator, the absolute number of access keys increases, and the leakage risk that occurs when exchanging access keys and the time that is required when exchanging access keys And the cost increases further.

In the case of such a technology, when exchanging access keys, each IC card handling device is manually stored via an external medium, which requires enormous costs for preparation and storage work. Yes. (Problem 1) Furthermore, since the access key itself is confidential information, its management method and distribution method need to sufficiently consider security. (Problem 2)
In addition, in order to transfer the entire system from the old access key to the new access key without losing the convenience of the user, both the old and new IC cards can be used by the user during the collection period of the old card. After the elapse of time, a mechanism that disables only the old card is required. (Problem 3)
In contrast to Problem 1 and Problem 2, Patent Document 1 proposes a system for distributing access keys to devices using secure communication.

  More specifically, Japanese Patent Application Laid-Open No. 2004-133867 aims to ensure security and enable operation even when a reader / writer terminal is installed in a bad environment where there is a threat of theft or eavesdropping. In order to achieve this object, in Patent Document 1, a reader / writer terminal that performs secure communication with an IC medium (10) using an access key (4) distributed from a central management device temporarily stores an access key. The access key stored in the storage area is erased when a power interruption or an external attack is detected.

  Further, in Patent Document 2, the purpose is to make it possible to easily rewrite old key data to new key data without requiring much time and cost. A system in which key data for accessing the non-contact medium is held in a non-contact medium that can be communicated with the device in a non-contact manner, and the station data is used when the station equipment accesses the non-contact medium. When the non-contact medium is operated with the station service device, the old key data for permitting access to the non-contact medium is rewritten to the new key data.

JP 2004-295502 A JP 2004-46332 A

  However, in the technologies disclosed in Patent Documents 1 and 2, it is necessary to re-create access keys for all devices of each business operator in the distribution management server and prepare them in advance. Time and cost are required. Further, since the access key data itself is stored in the distribution server, the risk of access key leakage depends on the security of the distribution server.

  In order to solve the above-described problems, the present invention generates and distributes a generation key required for the request every time request information requesting an access key is received from a device. For this reason, in the present invention, in the access key management device, the generation number for specifying the generation and the access key definition information are stored in the access key definition table in association with each other, and the generation to be distributed is determined. It also includes managing. Here, for each generation (number), the time (date / time: distribution start date, distribution end date) for generating the corresponding access key for each generation is recorded in the access key definition table. It also includes specifying the generation number by comparing this with the time when the information is received.

  In order to realize these processes, the present invention may employ the following configuration. A central management device, an intermediate processing device, and a plurality of IC card handling devices are connected to each other via a network. The central management device has various data and logic. The central management apparatus includes a network IF unit for connecting to a network, an encryption processing unit, an access key generation logic unit, a device authentication unit, a database, and a table editing unit. The database includes an access key definition table in which an access key definition that is a source of an access key, a distribution start date for determining whether to distribute the generated access key, and a distribution end date are registered. There is a device table in which the public key of each device that is an encryption key for authentication and access key data encryption is registered. The IC card handling device also has a network IF unit for connecting to the network, an access key distribution request unit, an access key receiving unit, a decryption processing unit, and a secret key that holds a unique secret key for each IC card handling device. A storage unit; and an access key storage unit that temporarily holds a plurality of generations of access keys distributed from the central management apparatus. The access key storage unit is a volatile memory, and the contents are lost when the power is turned off. The IC card handling device transmits an access key distribution request message to the central management device when it is activated (at the start of business). The central management apparatus that has received the request message transmits a challenge message (arbitrary data) for device authentication. The IC card handling device encrypts the received challenge message with the private key it holds and sends a response message to the central management unit. The central management device decrypts the received response message with the public key of the corresponding device stored in the device table. If the decrypted data matches the transmitted challenge message, the device authentication is successful and subsequent processing is executed. If they do not match, an error response is sent to the IC card handling device. After device authentication is successful, the access key generation logic section refers to the access key definition table and device table, and the current date of the access key definition information linked to the requested IC card handling device is the distribution start date. Access key data within the period of the distribution end date (for example, all) is generated.

After generating the access key data, the encryption processing unit refers to the device table, obtains the public key of the device, encrypts the access key data with the obtained public key, and sends it to the requested IC card handling device. To deliver. In the IC card handling device, the received access key data is decrypted with the stored secret key and stored in the access key storage unit.
When the IC card is input to the IC card handling device by the user, the IC card handling device tries to access the IC card sequentially with the access key data of all generations held. If access is successful, the process proceeds to the subsequent process. If access is not successful for any generation of access key data that is held, an access key authentication error is generated and appropriate error processing is performed for each IC card handling device.

In the conventional system, when exchanging access keys, it is necessary to prepare and distribute new access keys in advance for each IC card handling device, and it is necessary to collect old access keys after a certain period of time Therefore, a great deal of time and cost are required when exchanging access keys.
On the other hand, in the present invention, whenever an access key is requested from the IC card handling device to the central management device, the access key defined in the access key definition table in the central management device is defined in advance. Only the access key of the generation within the period is generated and stored in the volatile memory of the IC card handling device. As a result, the IC card handling device always holds only the necessary generation of access keys, so that the operation cost associated with access key exchange can be kept low and the access keys can be managed efficiently.

Also, the access key data is not stored in the central management unit, only the definition information is stored, and the access key is generated and distributed only when there is a request from the correct device. The risk of doing is very small. Furthermore, since device authentication and access key encryption / decryption are performed using a public key cryptosystem at the time of distribution, the risk of access key leakage from the network is extremely low. By this method, the access key can be safely distributed to a reader / writer terminal of a store that is assumed to be a bad environment, and centralized management can be performed by the central management device.
If the system to which the present invention is applied before and after the system test before the system operation where the access key will be exchanged or the monitor test is applied, the access key and the production key for the test card and the monitor area card are used. Since the access key of the card can be switched easily, the system test can proceed smoothly.

Hereinafter, embodiments of the present invention will be described.
<Overview>
The present invention makes it possible to easily exchange access keys of all IC card handling devices in consideration of security. The configuration and operation outline are shown below.
First, in the present invention, an access key definition table in which an access key definition that is a source of an access key and a distribution start date and a distribution end date for determining whether or not to distribute the generated access key is registered is centralized. Place in the management device.

  Each IC card handling device has its own secret key and is connected to the central management unit via a network. When each IC card handling device starts up, it requests the central management device to distribute an access key, and the central management device authenticates the IC card handling device using a challenge / response method. After successful authentication, an access key is generated for the requested IC card handling device. The generated access key is encrypted with the public key of the IC card handling device and distributed. After receiving the encrypted access key, the IC card handling device decrypts it with the private key held by the IC card handling device and stores it in the volatile memory.

  In this embodiment, every time an access key is requested from a device, only a necessary generation of access keys is generated and distributed. Thereby, the operation cost at the time of access key exchange can be suppressed low. In addition, since the access key data itself is not stored in the central management device, but only the definition information is stored, the risk of the access key leaking from the central management device is very small (however, the key data itself should be retained). May be good). Furthermore, since device authentication and access key encryption / decryption are performed using a public key cryptosystem at the time of distribution, the risk of access key leakage from the network is extremely low.

<Structure of the invention>
FIG. 1 is a diagram illustrating the configuration of the present embodiment. As shown in the figure, the system of the present embodiment is configured such that a central management device 1, at least one intermediate processing device 9 and a plurality of IC card handling devices 10 are connected to each other via a network 8. FIG. 2 is a diagram for explaining the outline of the present embodiment. The central management device 1 has various data and logic. As shown in the figure, the central management apparatus 1 includes a network IF unit 7 for connecting to a network 8, an encryption processing unit 2, an access key generation logic unit 3, a device authentication unit 4, a database 5, and a table edit. Part 6. The database 5 includes an access key definition table 5-1 that defines an access right to an IC card of each IC card handling device that is a source of an access key and a distribution start date and a distribution end date that are used to determine whether or not to distribute. And a device table 5-2 in which the public key of each device, which is an encryption key for device authentication and access key data encryption, is registered.
The IC card handling device 10 has a network IF unit 11, an access key distribution request unit 14, an access key receiving unit 12, a decryption processing unit 13, and a private key unique to each IC card handling device for connecting to the network 8. It has a private key storage unit 15 to hold and an access key storage unit 16 to temporarily hold an access key distributed from the central management apparatus.

<Operation of the invention>
FIG. 3 is a diagram for explaining the flow of processing of this embodiment.
S3-1: The device is activated when the IC card handling device is turned on.
S3-2: The IC card handling device 10 transmits an access key distribution request message to the central management apparatus 1 at the time of activation (at the start of business).
S3-3: The central management apparatus 1 that has received the request message transmits a challenge message (arbitrary data) for device authentication.
S3-4: The IC card handling device 10 encrypts the received challenge message with the stored secret key,
S3-5: A response message is transmitted to the central management device 1.
S3-6: The central management apparatus 1 decrypts the received response message with the public key 5-2-3 of the corresponding device stored in the device table 5-2.
S3-7: If the decrypted data matches the transmitted challenge message, the device authentication is successful and the subsequent process S3-10 is executed.
S3-8: If there is a discrepancy, send an error response to the IC card handling device 10,
S3-9: Appropriate error processing is performed by the IC card handling device 10.
S3-10: After successful device authentication, the access key generation logic unit 3 refers to the access key definition table 5-1 and the device table 5-2, and generates an access key for the requested IC card handling device.
Details of this processing will be described with reference to FIG.
S3-11: After generating the access key, the encryption processing unit 2 refers to the device table 5-2 (shown in FIG. 5), encrypts the access key generated with the public key of the corresponding device,
S3-12: Deliver to IC card handling device 10.
S3-13: The IC card handling device 10 decrypts the received access key with the stored secret key,
S3-14: Store in the access key storage unit 16. Since the access key storage unit 16 is a volatile memory,
It is assumed that the access key is lost when the IC card handling device 10 is powered off.

FIG. 6 is a diagram for explaining the outline of the access key generation logic S3-10.
S6-1: Referring to the device table 5-2, the access key ID 5-2-2 associated with the device ID 5-2-1 set in the request message received in S3-2 is acquired.
S6-2: Referring to the access key definition table 5-1, the record (generation number 5-1-2, access key definition information 5-1-3, distribution start date) associated with the access key ID acquired in S6-1. 5-1-4, distribution end date 5-1-5).
S6-3: The following processing is repeated for the number of records acquired in S6-2.
S6-4: Today's date (system date) is after the distribution start date 5-1-4 and
If it is within the distribution end date 5-1-5, the process of S6-5 is executed. In cases other than the above, the processing is continued without doing anything.
S6-5: Area code 5-1-3-1 of access key definition information 5-1-3,
The service code 5-1-3-2 and the decryption key 5-1-3-3 are converted into the format of the access key data decided by the system, and the access key data is generated and stored in the storage area.

FIG. 7 is a diagram for explaining the IC card processing logic of the IC card handling device.
S7-1: The user inputs the IC card to the reader / writer unit of the IC card handling device.
S7-2: The processes from S7-3 to S7-5 are repeated for the number of generations of access key data held by the IC card handling device.
S7-3: Access to the IC card with access key data generation X (initial value 1).
S7-4: If the process of S7-3 is successful, the process ends normally.

If unsuccessful, the process of S-7-5 is executed.
S7-5: The generation of the access key data used in S7-3 is changed to the next generation. (X = X + 1)
S7-6: If the processing of S7-3 fails with all the generation access keys held, it is determined that the access key is invalid, and appropriate error processing is performed for each IC card handling device.

It is a figure explaining the composition of the system of this embodiment. It is a figure explaining the outline | summary of the system of this embodiment. It is a figure explaining the flow of processing of the present invention. It is a figure explaining the example of an access key definition table. It is a figure explaining the example of an apparatus table. It is a figure explaining the outline | summary of an access key production | generation logic. It is a figure explaining the IC card processing logic of an IC card handling apparatus.

Explanation of symbols

1: Network 2: Cryptographic processing part 3: Access key generation logic part 4: Device authentication part
5: Database 5-1: Access key definition table 5-2: Device table
6: Table editor 7: Network IF 8: Network 9: Intermediate processing device 10: IC card handling equipment 11: Network IF 12: Access key receiver
13: Decryption processing unit 14: Access key distribution request unit 15: Secret key storage unit
16: Access key storage unit 17: IC medium

Claims (4)

In an automatic access key distribution system that decrypts encrypted information and distributes the access key for decryption to a device that executes predetermined information processing,
Means for receiving request information for requesting delivery of an access key from the device;
Means for identifying a generation of an access key corresponding to reception of the received request information using a generation number corresponding to time information of a time when the request information is received ;
Means for generating an access key of a plurality of identified generations from the definition information for each of the plurality of generations ;
An access key automatic generation system, comprising: means for distributing the generated plurality of access keys to the device. In the access key automatic generation system according to claim 1,
The access key automatic generation system, wherein the receiving means receives the request information transmitted when the device is activated. In the access key automatic generation system according to claim 1 or 2 ,
Furthermore, it has means for authenticating the device,
The access key automatic generation system characterized in that the means for specifying the generation executes the specification when the device is authenticated by the means for performing authentication. In the access key automatic generation system according to any one of claims 1 to 3 ,
The access key automatic generation system, wherein the distributing means encrypts and distributes the access key.

Images