JP5338551B2 - ID-based device authentication system - Google Patents

Description

  The present invention relates to an ID-based device authentication system that does not require a center to operate a directory service.

A system that supports secure communication using a conventional identification (ID) -based encryption method is configured as shown in FIG. The message from the sender to the receiver is encrypted using the identification of the receiver and the common parameter (public parameter) generated by the secret key generator associated with the receiver. The secret key generator associated with the recipient generates the recipient's secret key. The encrypted message is decrypted by the recipient using the recipient's private key. The system has a plurality of secret key generators, each with a separate set of common parameters (public parameters).
The directory service encrypts messages to recipients associated with different private key generators so as to provide appropriate common parameters (public parameters) to the sender associated with a private key generator. Used when.
The certificate authority is used to sign directory entries in the directory service. The clearinghouse is used to avoid duplication of directory entries.

JP 2009-44763 A

The device authentication system using a system that supports secure communication using a conventional identification-based encryption method provides the sender with individual sets of common parameters (public parameters) possessed by multiple secret key generators. There is a problem that a directory service is required for the management terminal to be able to communicate with the directory service installed in the center.
In addition, there is a problem in that the center needs to maintain and manage the directory service in a state where it can always respond to requests from the management terminal, resulting in operational costs.
In addition, the incorporation of a directory service on the management terminal side has a problem that leads to an increase in introduction cost and necessary resources.
In addition, it is necessary to additionally set the correspondence between the ID of the newly manufactured device and the common parameter, which causes a problem of resetting operation costs.

In addition, in a device authentication system using a system that supports secure communication using a conventional identification-based encryption method, a step of writing device-specific information such as a common parameter generated by a secret key and a device secret key into the device Therefore, the manufacturing time and manufacturing cost for it were required.
Also, when different centers manufacture devices based on different policies, it is necessary to prepare different secret key generators, which increases the cost.
In addition, there is a problem that even if different centers need to manufacture devices with different CPU processing performance and different security strengths, they cannot be handled because they use a fixed security level.

  The ID-based device authentication system according to the present invention relates to device authentication using ID-based encryption, and includes a device, a manufacturing facility that manufactures the device, a center having the manufacturing facility, and a management terminal that manages the device during operation. The center sends a center secret key that is secret information of the center, a device model number, an HMAC unit that generates a model number random number seed from the model number using the center secret key, and a model number that specifies the strength of the encryption key according to the model number. The model number private key that is the master key of the ID-based encryption corresponding to the security level, the model number private parameter that is the common parameter of the ID-based encryption corresponding to the model number, the model number random number seed and the model number secret key from the model number security level An ID-based encryption key generation unit that generates a model number common parameter; a model number secret key deletion unit that deletes a model number secret key; A storage medium writing unit for writing information to a storage medium such as D or a memory card, and generating a model number random number seed in association with the center secret key and the model number; The model number secret key is generated in association with the security level, and the model number secret key is erased so as not to be leaked to the outside, and the model number, the security level, and the model number common parameter are written in the storage medium.

  The present invention has been made to solve the above-described problems. The center does not need to operate a directory service, and the management terminal and the center need not always be in a communicable state. It is an object of the present invention to realize an ID-based device authentication system that does not require additional setting of correspondence between the ID of the device and the common parameter.

  In addition, the present invention has been made to solve the above-described problems, and does not require a step of writing device individual information to the device at the time of manufacturing the device, reducing manufacturing time and manufacturing cost, It is suitable for production, and when different centers manufacture equipment based on different policies, it is not necessary to use multiple secret key generators to prevent cost increase. Another object of the present invention is to realize an ID-based device authentication system that can adjust the security level of each device when it is necessary to manufacture devices having different strengths.

1 is a system configuration schematic diagram of an ID-based device authentication system of the present invention. Explanatory drawing of the operation | movement which concerns on this invention. Explanatory drawing of the operation | movement which concerns on a prior art.

Embodiment 1 FIG.
FIG. 1 is a system configuration diagram showing a device authentication system according to each claim of the present invention.
In FIG. 1, this system includes a device 12, a manufacturing facility 11 for manufacturing a plurality of devices 12, a plurality of centers 1 having a plurality of manufacturing facilities 11, and a plurality of management terminals for managing a plurality of devices 12 during operation. Consists of
The device 12 and the management terminal 15 can communicate via the network 14.

  The center 1 is an information processing apparatus including a CPU 2, a RAM 3, a ROM 4, a storage device 5, a communication I / F 6, a display device 7, an input I / F 8, and a storage medium writing device 9.

  The device 12 is an information processing apparatus including a CPU 2, a RAM 3, a ROM 4, a storage device 5, an IC chip 13, and a communication I / F 6.

The management terminal 15 is an information processing apparatus including a CPU 2, a RAM 3, a ROM 4, a storage device 5, a communication I / F 6, a display device 7, an input I / F 8, and a storage medium reading device 16.
The storage medium 10 in which information is written by the storage medium writing device 9 of the center 1 can be read by the storage medium reading device 16 of the management terminal 15.

FIG. 2 is a diagram showing the internal configuration of the center C11, the manufacturing facility 11, the device 112, and the management terminal 15 constituting the device authentication system according to each claim of the present invention.
In FIG. 2, the center C1 1 generates a model number random number seed21 from the model number TYPE_A20 using the center secret key C1_SK 19 which is secret information of the center C1 1, the model number TYPE_A 20 of the device 1 12, and the center secret key C1_SK 19. HMAC means 18, a model number security level SECL_A 22 that specifies the strength of the encryption key according to the model number TYPE_A 20, a model number secret key MS_A 24 that is an ID-based encryption master key corresponding to the model number TYPE_A 20, and a model number TYPE_A 20 ID-based encryption that generates a model number secret key MS_A 24 and a model number common parameter PK_A 25 from the model number common parameter PK_A 25, the model number random number seed 21, and the model number security level SECL_A 22. It has a key generation means 23, a model number secret key erasure means 31 for erasing the model number secret key MS_A 24, and a storage medium writing means 33 for writing information to the storage medium 10 such as a CD or a memory card.

  The management terminal 15 stores a storage medium reading unit 34 that reads information from the storage medium 10 provided from the center C11 1, a model number TYPE_A 20, a model number security level SECL_A 22, and a model number common parameter PK_A 25 read from the storage medium 10. The model number table 35, the model number TYPE_A 20 of the device 1 12 obtained from the device 1 12 to be managed, the model number security level SECL_A 22 and the model number common parameter PK_A 25 corresponding to the model number TYPE_A 20 are retrieved from the model number table 35. ID_ 1 27 which is unique information (MAC address or serial number which is a physical address of the network H / W) of the search unit 36, the device 1 12 obtained from the device 1 12 to be managed, and the model number TYPE_A 20 A device ID generating means 26 for generating a model number device ID 28 based on ID — 127, a profile 38 (device operation parameters, a device temporary key, a device ID parameter 28, a model number security level SECL_A 22 and a model number common parameter PK_A25) And encryption means 37 in ID-based encryption to obtain a ciphertext 39 by encrypting a device certificate or the like by ID-based encryption.

The device 112 includes a center secret key C1_SK 19 that is secret information of the center C1 1, a model number TYPE_A 20 of the device, an HMAC unit 18 that generates a model number random number seed21 from the model number TYPE_A 20 using the center secret key C1_SK 19, and a model number Common to the model number security level SECL_A22 that specifies the strength of the encryption key according to TYPE_A, the model number secret key MS_A 24 that is the master key of the ID base encryption corresponding to the model number TYPE_A 20, and the ID base encryption corresponding to the model number TYPE_A 20 ID-based encryption key generation means 23 for generating a model number secret key MS_A 24 and a model number common parameter PK_A 25 from the model number common parameter PK_A 25, the model number random number seed21, and the model number security level SECL_A22; Model secret key erasure means 31 for erasing the number secret key MS_A 24, center secret key erasure means 32 for erasing the center secret key C1_SK 19, and device-specific information (MAC address or physical address of the network H / W) ID_ 1 27, which is a serial number), the IC chip 13 storing ID_ 1, the device ID generation means 26 for generating the model number device ID 28 based on the model number TYPE_A and ID_ 1 27, and the ID-based encryption corresponding to the model number device ID 28 A device secret key SK_1 30 which is a user key, a model number device ID 28, a model number secret key SK_1 30, and a model number common parameter PK_A 25, an ID-based secret key derivation means 29 for generating a device secret key SK_1 30, and a device secret key SK_1 30 and model number security level SECL_A 22 And a decoding unit 40 in the ID-based encryption to obtain the decoded profile 41 ciphertext 39 received from the management terminal 15 by the ID-based cryptography.

  The manufacturing facility 11 includes an initialization instruction unit 17 that instructs initialization after the assembly of the device 112 is completed.

Next, the operation will be described.
In the device manufacturing stage, the center C1 1 determines the model number TYPE_A 20 to be assigned to the device 1 12 manufactured by the manufacturing facility 11, and sets the model number security level SECL_A 22 to be assigned to the device 1 12 manufactured by the manufacturing facility 11. The model number TYPE_A 20 and the model number security level SECL_A 22 are stored in the storage device 5, the HMAC means 18 is used to generate the model number random number seed 21 from the model number TYPE_A 20 using the center secret key C 1 SK 19, and the ID-based encryption key generation means 23 Is used to generate a model number secret key MS_A 24 and a model number common parameter PK_A 25 from the model number random number seed 21 and the model number security level SECL_A 22, store the model number common parameter PK_A 25 in the storage device 5, and the model number secret key erasing means 31 stores the model number secret. Key MS Clear the A 24, and writes the storage medium writing unit 33 by a CD or a memory card model number TYPE_A 20 and model security level in the storage medium 10 are stored in the storage device 5 such as a SECL_A 22 and model common parameters PK_A 25.

The manufacturing facility 11 uses the initialization instruction means 17 to instruct initialization of the device 112 after completion of assembly.
This means can be omitted in the form of the first power-on of the device 112.

The device 112 stores the IC chip 13 in which ID_1 127 is stored in advance, the storage device 5 in which the center secret key C1_SK 19 is stored, the ROM 4 in which the model number security level SECL_A 22 and the model number TYPE_A 20 are stored. The following processing is started in response to an initialization instruction from the facility 11, the model number random number seed 21 is generated from the model number TYPE_A 20 using the center secret key C 1 _SK 19 using the HMAC unit 18, and the model number random number seed is generated by the key generation unit 23 in the ID-based encryption. The model number secret key MS_A24 and the model number common parameter PK_A25 are generated from the model number security level SECL_A22 that specifies the strength of the key, the model number secret key MS_A 24 and the model number common parameter PK_A25 are stored in the storage device 5, and the device ID generation unit 26 is used. Equipment The model number device ID 28 is synthesized by the model number TYPE_A 20 and the device ID_ 1 27 stored in the IC chip 13, and the model number device ID 28, the model number secret key MS_A 24, and the model number common parameter PK_A 25 are generated by the secret key derivation means 29 in the ID base encryption. The device secret key SK_1 30 corresponding to the model number device ID 28 is generated, the device secret key SK_1 30 is stored in the storage device 5, the model number secret key MS_A 24 is erased by the model number secret key erasing unit 31, and the center secret key erasing unit The center secret key C1_SK 19 is erased by 32.
Inside the device 112, the ID — 1 127 stored in the IC chip 13, the model number security level SECL_A 22 held in the ROM 4, the model number common parameter PK_A 25 stored in the storage device 5, and the storage device 5 are stored. The device secret key SK_1 30 and the model number YTPE_A 20 held in the ROM 4 are shipped.

  In the operation stage of the device, the management terminal 15 reads and reads the model number TYPE_A 20, the model number security level SECL_A 22, and the model number common parameter PK_A 25 from the storage medium 10 provided from the center C11 using the storage medium reading unit 34 in advance. The model number TYPE_A 20, the model number security level SECL_A 22, and the model number common parameter PK_A 25 are stored in the model number table 35 of the storage device 5, the device ID_ 1 27 and the device model number TYPE_A 20 are obtained from the device 1 12, and the model number table search means 36, the model number security level SECL_A 22 and the model number common parameter PK_A 25 corresponding to the model number TYPE_A 20 are retrieved from the model number table 35, and the model number TYPE_A 20 and the ID_ 127 generates a model number device ID 28 and prepares a profile 38 (device operating parameter, device temporary key, device certificate, etc.) to be set in the device 112, and uses the encryption means 37 in ID-based encryption. The profile 38 is encrypted by ID-based encryption using the model number device ID 28, the model number security level SECL_A 22, and the model number common parameter PK_A 25 to generate a ciphertext 39, and the ciphertext 39 is sent to the device 112.

  The device 112 receives the ciphertext 39 from the management terminal 15 and uses the ID-based encryption decryption means 40 to transmit the ciphertext 39 received from the management terminal 15 with the device secret key SK_1 30 and the model number security level SECL_A 22 to the ID-based encryption. Decrypted by

Accordingly, only the legitimate device 112 can decrypt the ciphertext 39 sent from the management terminal 15 and obtain the profile 38.
Similarly, the device 2 12 having the same model number TYPE_A having a different ID — 2 27 can also decrypt the ciphertext 39 sent from the management terminal 15 and obtain the profile 38.
Further, after the management terminal 15 reads the model number TYPE_A 20, the model number security level SECL_A 22, and the model number common parameter PK_A 25 from the storage medium 10 provided from the center C11 1, and stores it in the model number table 35 of the storage device 5, a new ID_X Even when the device 212 having the same model number TYPE_A having 27 is manufactured, the system can be operated without changing the model number table 35 of the management terminal 15.

As the HMAC means 18 in this embodiment, a method disclosed as RFC2104 (HMAC: Keyed-Hashing for Message Authentication) can be used.
In addition, as the key generation means 23, the secret key derivation means 29, the encryption means 37, and the decryption 40 in the ID-based encryption, a method disclosed as IEEE P1363.3 (Standard for Identity-Based Cryptographic Techniques using Pairings) is used. Can be used.

In the first embodiment, the management terminal holds a common parameter list for managing the correspondence between the model number and the common parameter, so that the center does not need to operate the directory service, and the management terminal can communicate with the directory service. It is not necessary for the center to always be able to communicate, and it is necessary to additionally set the correspondence between the ID of the newly manufactured device and the common parameter by obtaining the corresponding common parameter from the model number by the common parameter search means. Absent.
Also, at the device manufacturing stage, an IC chip, center secret key C1_SK, model security level SECL_A, and model number TYPE_A, in which an ID is stored in advance, are held in the device, and the device secret key can be derived by the device alone. Yes, since the center secret key is erased by the center secret key erasure unit and the model number secret key is erased by the model number secret key erasure unit, the process of writing the device individual information to the device is not required when the device is manufactured, and the manufacturing time This is suitable for mass production and can prevent the center secret key and the model number secret key from leaking outside.
Furthermore, by generating a key seed according to the model number from the center secret key and using it as the key generation input, it is not necessary to use a secret key generator when different centers manufacture devices based on different policies. Prevent increase.
Then, the model number security level corresponding to the model number is used, the model number security level is managed in accordance with the model number, and is used in the ID-based encryption key generation process, secret key derivation process, encryption process, and decryption process. However, the security level can be adjusted when it is necessary to manufacture devices having different CPU processing performance and required security strength.

1 center, 2 CPU, 3 RAM, 4 ROM, 5 storage device, 6 communication I / F, 7 display device, 8 input I / F, 9 storage medium writing device, 10 storage medium, 11 manufacturing facility, 12 device, 13 IC chip, 14 network, 15 management terminal, 16 storage medium reader, 17 initialization instruction means, 18 HMAC means, 19 center secret key C1_SK, 20 model number TYPE_A, 21 model number random number seed, 22 model number security level SECL_A, 23 key Generating unit, 24 Model number secret key MS_A, 25 Model number common parameter PK_A, 26 Device ID generating unit, 27 ID_1, 28 Model number device ID, 29 Secret key derivation unit, 30 Model number secret key SK_1, 31 Model number secret key erasing unit, 32 Center Secret key erasure means, 33 Storage medium writing means, 34 Storage medium Reading means 35 Part Number Table 36 Part Number Table search means 37 encrypting means 38 profile, 39 ciphertext, 40 decoding section, 41 profiles.

Claims (3)

Regarding device authentication using ID-based encryption,
A device, a manufacturing facility for manufacturing the device, a center having the manufacturing facility, and a management terminal for managing the device during operation;
The center is
A center secret key which is secret information of the center;
The model number of the device;
HMAC means for generating a model number random number seed from the model number using the center secret key;
A model number security level that specifies the strength of the encryption key according to the model number;
A model number private key that is a master key of ID-based encryption corresponding to the model number;
A model number common parameter that is a common parameter of the ID-based encryption corresponding to the model number;
ID-based encryption key generation means for generating the model number secret key and the model number common parameter from the model number random number seed and the model number security level;
A model number secret key erasing means for erasing the model number secret key;
Storage medium writing means for writing information to a storage medium such as a CD or a memory card,
The model number random number seed is generated in association with the center secret key and the model number,
The model number secret key and the model number common parameter are generated in association with the model number random number seed and the model number security level,
The model number secret key is erased so as not to leak the model number secret key to the outside,
An ID-based device authentication system, wherein the model number, the security level, and the model number common parameter are written in the storage medium. Regarding device authentication using ID-based encryption,
A device, a manufacturing facility for manufacturing the device, a center having the manufacturing facility, and a management terminal for managing the device during operation;
The management terminal
Storage medium reading means for reading information from the storage medium provided by the center;
A model number table storing the model number read from the storage medium, the model number security level, and the model number common parameter;
The model number of the device obtained from the device to be managed;
A model number table search means for searching the model number security level corresponding to the model number and the model number common parameter from the model number table;
An ID that is unique information of the device (a MAC address or serial number that is a physical address of the network H / W) obtained from the device to be managed;
Device ID generation means for generating a model number device ID from the model number and the ID;
ID for obtaining a ciphertext by encrypting a profile (device operation parameter, device temporary key, device certificate, etc.) set in the device by the model number device ID, the model number security level, and the model number common parameter using ID-based encryption Encryption means in the base cipher,
Search the model number security level corresponding to the model number of the device and the model number common parameter from the model number table using the model number table search means,
Using the device ID generating means, the model number device ID is synthesized from the model number and the ID of the device,
Encrypt the profile with the model number device ID, the model number security level and the model number common parameter using the encryption means to obtain the ciphertext,
An ID-based device authentication system, wherein the ciphertext is sent to a device in the previous period. Regarding device authentication using ID-based encryption,
A device, a manufacturing facility for manufacturing the device, a center having the manufacturing facility, and a management terminal for managing the device during operation;
The equipment is
A center secret key which is secret information of the center;
The model number of the device;
HMAC means for generating a model number random number seed from the model number using the center secret key;
A model number security level that specifies the strength of the encryption key according to the model number;
A model number private key that is a master key of ID-based encryption corresponding to the model number;
A model number common parameter that is a common parameter of the ID-based encryption corresponding to the model number;
ID-based encryption key generation means for generating the model number secret key and the model number common parameter from the model number random number seed and the model number security level;
A model number secret key erasing means for erasing the model number secret key;
Center secret key erasing means for erasing the center secret key;
An ID that is unique information of the device (MAC address or serial number, which is a physical address of the network H / W);
Device ID generation means for generating a model number device ID from the model number and the ID;
A device secret key which is a user key of ID-based encryption corresponding to the model number device ID;
A secret key derivation means for ID-based encryption that generates the device secret key from the model number device ID, the model number secret key, and the model number common parameter;
A decryption unit in an ID-based cipher that obtains a profile by decrypting the ciphertext received from the management terminal in the previous period according to the device secret key and the model number security level;
The model random number seed is generated from the model number by the center secret key using the HMAC means,
The model number secret key and the model number common parameter are generated from the previous model number random number seed and the model number security level by the key generation unit in the ID-based encryption,
Erasing the center secret key by the center secret key erasure means;
Using the device ID generating means, a model number device ID is synthesized from the model number and the ID,
The device secret key corresponding to the model number device ID is generated from the model number device ID, the model number secret key, and the model number common parameter by the secret key derivation unit in ID-based encryption,
The model number secret key is erased by the model number secret key erasure means,
An ID-based device authentication system that obtains the profile by decrypting the ciphertext with an ID-based encryption using the device secret key and the model number security level using the decryption means in ID-based encryption.

Images