JP5645776B2 - Authentication apparatus, authentication system, and authentication method - Google Patents

Description

  The present invention relates to an authentication device that authenticates an authentication target device such as an IC card.

The lower-level authentication device authenticates the device to be authenticated, and the higher-level authentication device authenticates the lower-level authentication device, so that the upper-level authentication of the authenticated device can be performed without direct communication between the authenticated device and the higher-level authentication device. There is an authentication system that the device authenticates.
For example, in the automatic toll collection system described in Patent Document 1 (hereinafter referred to as “ETC system”), the ETC card corresponds to the device to be authenticated, the vehicle-mounted device corresponds to the lower authentication device, and the roadside device is the upper device. It corresponds to an authentication device.

JP-A-11-205308

Cryptographic algorithms used for authentication are generally based on computational security. For this reason, as the processing capacity of the computer improves, the security of the encryption algorithm decreases.
If the encryption algorithm is broken, there is a possibility that a lower-level authentication device authenticates the forged device to be authenticated. In the authentication system as described above, when a lower-level authentication device is selected, the higher-level authentication device is also selected along with the lower-level authentication device.
To prevent this, the authentication method used for authentication between the authenticated device and the lower-level authentication device is used with a more secure encryption algorithm before the encryption algorithm is compromised and the encryption algorithm is broken. It is necessary to update to a new authentication method.

Such an authentication system may have a very large number of devices to be authenticated and a large number of authentication devices. During the operation of such an authentication system, it is practically impossible to update the authentication method used for authentication between the authentication target device and the authentication device all at once. There will be a cost.
If it is not possible to update all authentication target devices and authentication methods of the authentication device at the same time, the authentication target device and authentication device using the old authentication method and the authentication target device and authentication device using the new authentication method in the update process. Will be mixed. An authenticated device or an authentication device that uses a new authentication method needs to perform mutual authentication with an authentication device or an authenticated device that can use only the old authentication method, and therefore needs to support the old authentication method. For this reason, even after the update of the authentication method is completed, an authentication device corresponding to the old authentication method may remain.

  Assume that after the update of the authentication method is completed, the old encryption algorithm is broken and the device to be authenticated using the old authentication method is forged. If an authentication device corresponding to the old authentication method performs mutual authentication with a forged device to be authenticated using the old authentication method, the forged device to be authenticated may be trusted.

If the authentication device knows the correct current time, the use of the old authentication method can be stopped before the forged device appears by setting the expiration date of the old authentication method. It is possible to prevent the authentication device from being deceived by the device to be authenticated.
However, when the authentication device is configured to use a clock that can be arbitrarily set by the user in order to know the current time, the user who tries to authenticate the forged device to be authenticated can authenticate the clock. So it doesn't make sense.
For this reason, a configuration (for example, a GPS receiver or a radio clock) that can objectively guarantee that the current time known by the authentication device is correct is required, and the manufacturing cost of the authentication device increases.

  The present invention, for example, in an authentication device that can handle both the authentication method before update and the authentication method after update, uses the old authentication method after the update of the authentication method is completed without the authentication device knowing the correct current time. The purpose is to prevent the authenticated device from being authenticated.

The authentication device according to the present invention is:
A communication device that communicates with the device to be authenticated, a processing device that processes information, an authentication method selection unit, an authentication unit, and a time limit determination unit;
The authentication method selection unit uses the processing device to select an authentication method to be used for authentication of the authentication target device from a plurality of authentication methods,
The authentication unit uses the communication device to authenticate the authentication target device using the authentication method selected by the authentication method selection unit,
The deadline determination unit compares the update deadline determined in advance for the authentication method selected by the authentication method selection unit with the due date for the device to be authenticated using the processing device, and the due date is more than the renewal deadline. It is determined that authentication of the device to be authenticated has failed when the latter is later.

  According to the authentication device of the present invention, it is possible to prevent the authenticated device from being authenticated using the old authentication method after the update of the authentication method is completed even if the authentication device does not know the correct current time.

1 is a system configuration diagram illustrating an example of an overall configuration of an authentication system 800 according to Embodiment 1. FIG. 3 is a diagram illustrating an example of a hardware configuration of an apparatus to be authenticated 300 according to Embodiment 1. FIG. FIG. 3 illustrates an example of a functional block configuration of an apparatus to be authenticated 300 according to the first embodiment. FIG. 3 is a diagram illustrating an example of a hardware configuration of a lower-level authentication device 100 according to the first embodiment. FIG. 3 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to the first embodiment. FIG. 3 is a diagram illustrating an example of a hardware configuration of a higher-level authentication device 200 according to the first embodiment. FIG. 3 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to the first embodiment. FIG. 6 is a diagram illustrating an example of information stored in an update time limit storage unit according to the first embodiment. FIG. 6 shows an example of determination by a time limit determination unit 135 in the first embodiment. FIG. 4 is a flowchart showing an example of a flow of first authentication processing S510 in the first embodiment. FIG. 6 is a flowchart showing an example of a flow of second authentication processing S550 in the first embodiment. FIG. 6 is a diagram illustrating an example of an update schedule for an authentication method between the lower-level authentication device 100 and the authenticated device 300 in the authentication system 800 according to the first embodiment. FIG. 10 is a flowchart showing an example of a flow of first authentication processing S510 in the second embodiment. FIG. 10 shows an example of the overall configuration of an authentication system 800 in the third embodiment. FIG. 10 is a diagram illustrating an example of a functional block configuration of a setting device 350 according to Embodiment 3. FIG. 10 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to the third embodiment. FIG. 10 is a flowchart showing an example of a flow of setting processing S520 in the third embodiment. FIG. 10 is a diagram illustrating an example of a functional block configuration of a lower-level authentication device 100 according to a fourth embodiment. FIG. 18 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to the fifth embodiment. FIG. 20 shows an example of the overall configuration of an authentication system 800 in the sixth embodiment. FIG. 18 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to the sixth embodiment. FIG. 20 is a diagram illustrating an example of a hardware configuration of a higher-level authentication device 200 according to a sixth embodiment. FIG. 18 is a diagram illustrating an example of a functional block configuration of a higher-level authentication device 200 according to a sixth embodiment. FIG. 20 is a flowchart showing an example of the flow of second authentication processing S550 in the sixth embodiment. FIG. 18 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to the seventh embodiment. FIG. 18 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to the seventh embodiment. FIG. 18 is a flowchart showing an example of a flow of first authentication processing S510 in the seventh embodiment. FIG. 20 is a diagram illustrating an example of a functional block configuration of a lower-level authentication device 100 according to an eighth embodiment. FIG. 20 is a diagram illustrating an example of a functional block configuration of a higher-level authentication device 200 according to an eighth embodiment. FIG. 19 is a flowchart showing an example of the flow of first authentication processing S510 in the eighth embodiment. FIG. 20 is a flowchart showing an example of the flow of second authentication processing S550 in the eighth embodiment. FIG. 20 shows an example of a functional block configuration of the lower-level authentication device 100 according to the ninth embodiment. FIG. 20 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to the ninth embodiment. FIG. 25 is a flowchart showing an example of the flow of first authentication processing S510 in the ninth embodiment. FIG. 25 is a flowchart showing an example of the flow of second authentication processing S550 in the ninth embodiment. FIG. 18 shows an example of a functional block configuration of the lower-level authentication device 100 according to the tenth embodiment. FIG. 18 shows an example of determination by the lower-level authentication device 100 and the higher-level authentication device 200 in the tenth embodiment. FIG. 18 is a diagram showing an example of an update schedule for an authentication method between the lower-level authentication device 100 and the device to be authenticated 300 in the authentication system 800 according to the tenth embodiment. FIG. 20 shows an example of determination by the lower-level authentication device 100 and the higher-level authentication device 200 in the eleventh embodiment. [Fig. 18] Fig. 18 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 in the twelfth embodiment. FIG. 22 is a flowchart showing an example of the flow of second authentication processing S550 in the twelfth embodiment. FIG. 25 shows an example of an update schedule for an authentication method between the lower-level authentication device 100 and the device to be authenticated 300 in the authentication system 800 according to the twelfth embodiment.

Embodiment 1 FIG.
The first embodiment will be described with reference to FIGS.

  FIG. 1 is a system configuration diagram showing an example of the overall configuration of an authentication system 800 in this embodiment.

  The authentication system 800 includes, for example, a device to be authenticated 300, a lower-level authentication device 100, and a higher-level authentication device 200. In this figure, only one authentication target device 300, low-level authentication device 100, and high-level authentication device 200 are shown, but the authentication system 800 includes a large number of authentication target devices 300 and a large number of low-level authentication devices 100. And a number of higher-level authentication devices 200.

The device to be authenticated 300 is, for example, an IC card. The device to be authenticated 300 is, for example, an ETC card in an ETC system. An expiration date is set for the device to be authenticated 300. The device to be authenticated 300 stores information necessary for providing a service and information such as an expiration date. The device to be authenticated 300 is used by being connected to the lower-level authentication device 100, for example.
The lower-level authentication device 100 is, for example, an IC card reading / writing device (IC card RW). The lower-level authentication device 100 is, for example, a vehicle-mounted device in an ETC system. For example, the lower-level authentication device 100 is used by being mounted on a vehicle such as an automobile or a motorcycle. The lower-level authentication device 100 reads information stored in the connected authenticated device 300 or writes information to the authenticated device 300.
The higher-level authentication device 200 is, for example, a roadside machine in the ETC system. The higher-level authentication device 200 is installed at a predetermined location such as a toll gate, for example. When the vehicle equipped with the lower-level authentication device 100 approaches the installation location of the higher-level authentication device 200, the lower-level authentication device 100 and the higher-level authentication device 200 communicate wirelessly.

  The lower-level authentication device 100 and the device to be authenticated 300 perform mutual authentication. The lower-level authentication device 100 and the higher-level authentication device 200 perform mutual authentication.

  FIG. 2 is a diagram illustrating an example of a hardware configuration of the device to be authenticated 300 according to this embodiment.

The authentication target device 300 includes, for example, a control unit 301, a memory 302, and an interface unit 303.
The control unit 301 (processing device) processes information by executing a program and controls the entire device to be authenticated 300.
The memory 302 (storage device) stores information such as a program executed by the control unit 301 and an expiration date of the device 300 to be authenticated.
The interface unit 303 (communication device, IC card IF unit) communicates with the connected lower-level authentication device 100.

  Functional blocks of the device to be authenticated 300 described below are realized by the control unit 301 executing a program stored in the memory 302, for example.

  FIG. 3 is a diagram illustrating an example of a functional block configuration of the device to be authenticated 300 according to this embodiment.

  The device to be authenticated 300 includes, for example, a key related information storage unit 321, an authentication method storage unit 323, a notification information storage unit 324, an authentication unit 331, and an information reading unit 332.

The key related information storage unit 321 uses the memory 302 to store information (hereinafter referred to as “key related information”) used for mutual authentication with the lower-level authentication device 100.
In the case of an authentication method using a public key cryptosystem, the key related information stored in the key related information storage unit 321 includes, for example, a private key of the device to be authenticated 300, a public key certificate such as a certificate authority, and the like. .
In the case of an authentication method using a common key encryption method, the key related information stored in the key related information storage unit 321 includes, for example, a common key shared with the lower-level authentication device 100.
The authentication method storage unit 323 uses the memory 302 to store information representing authentication methods that can be used by the device to be authenticated 300. The information stored in the authentication method storage unit 323 is, for example, a list of names and identifiers of authentication methods that can be used by the device to be authenticated 300. For example, the authentication method storage unit 323 stores a list of names and identifiers of usable authentication methods in a file having a predetermined file name. Alternatively, the authentication method storage unit 323 stores a file whose file name is the name or identifier of an available authentication method in a folder having a predetermined folder name.
The notification information storage unit 324 (due date storage unit) uses the memory 302 to notify the higher-level authentication device 200 of information (hereinafter referred to as “notification information”) such as information on the device to be authenticated 300 necessary for providing the service. Memorize). The notification information stored in the notification information storage unit 324 includes information indicating the expiration date of the device to be authenticated 300. The information indicating the expiration date of the device 300 to be authenticated is, for example, a numerical value indicating the year and month of the expiration date. The expiration date of the device 300 to be authenticated is an example of a date related to the device 300 to be authenticated.

  The authentication unit 331 uses the key related information stored in the key related information storage unit 321 to communicate with the lower level authentication device 100 by communicating with the lower level authentication device 100 using the interface unit 303. To do.

The information reading unit 332 communicates with the lower-level authentication device 100 using the interface unit 303 to receive a read instruction from the lower-level authentication device 100. Based on the instruction, the authentication method storage unit 323 and the notification information storage unit 324 The stored information is read and transmitted to the lower-level authentication device 100.
The information stored in the device to be authenticated 300 includes information that can be read from outside only after authentication, information that can be read from outside without authentication, and information that can be read from outside even after authentication has been completed. There is no information. For example, among the key related information stored in the key related information storage unit 321, a secret key or a common key is information that cannot be read even after authentication.
The information reading unit 332 uses the control unit 301 to determine whether the information received from the lower-level authentication device 100 is information that can be read only after authentication is completed or can be read without authentication. Then, it is determined whether the information is unreadable even after authentication.
When it is determined that the information can be read only after the authentication is completed, the information reading unit 332 determines whether the authentication unit 331 has authenticated the lower-level authentication device 100 and has authenticated the lower-level authentication device 100. Only when it is determined, information is read from the memory 302 and transmitted to the lower-level authentication device 100.
If the information reading unit 332 determines that the information can be read without authentication, the information reading unit 332 reads the information from the memory 302 regardless of whether the authentication unit 331 has authenticated the lower-level authentication device 100 and performs lower-level authentication. It transmits to the apparatus 100.

  In this example, it is assumed that the information indicating the authentication method that can be used by the device to be authenticated 300 stored in the authentication method storage unit 323 is information that can be read without authentication. The notification information stored in the notification information storage unit 324 is information that can be read only after authentication is completed.

  FIG. 4 is a diagram illustrating an example of a hardware configuration of the lower-level authentication device 100 according to this embodiment.

The lower-level authentication device 100 includes, for example, a control unit 101, a memory 102, an interface unit 103, a wireless communication unit 104, and an output unit 105.
The control unit 101 (processing device) processes information by executing a program and controls the lower-level authentication device 100 as a whole.
The memory 102 (storage device) stores information such as a program executed by the control unit 101 and an authentication method update deadline. Note that the memory 102 may be built in the control unit 101.
The interface unit 103 (communication device, IC card IF unit) communicates with the connected device 300 to be authenticated.
The wireless communication unit 104 (second communication device) communicates with the higher-level authentication device 200.
The output unit 105 (output device) notifies the user (such as a vehicle driver) of the lower-level authentication device 100 of information. For example, the output unit 105 is a display using a light emitting diode or the like, a speaker that outputs sound, and the like. Alternatively, the output unit 105 transmits information to be notified to the user to the other system in order to notify the user of the information through another system such as a car navigation system connected to the lower-level authentication device 100. It may be a device that performs.

  The functional blocks of the lower-level authentication device 100 described below are realized by the control unit 101 executing a program stored in the memory 102, for example.

  FIG. 5 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  For example, the lower-level authentication device 100 includes a key-related information storage unit 121, an authentication method storage unit 123, an update time limit storage unit 124, an authentication method acquisition unit 131, an authentication method selection unit 132, an authentication unit 133, and a notification. The information acquisition unit 134 includes a time limit determination unit 135, a vehicle information storage unit 141, a notification information storage unit 142, a vehicle information notification unit 151, a notification information notification unit 152, and a second authentication unit 153.

The key related information storage unit 121 uses the memory 102 to store key related information of the lower-level authentication device 100 used for mutual authentication with the authenticated device 300 and the higher-level authentication device 200.
In the case of an authentication method using a public key encryption method, the key related information stored in the key related information storage unit 121 is, for example, a secret key of the lower-level authentication device 100, a public key certificate such as a certificate authority, or the like. .
In the case of an authentication method using a common key encryption method, the key related information stored in the key related information storage unit 121 is, for example, a common key shared with the device to be authenticated 300 or a common key shared with the higher-level authentication device 200. Etc.
The authentication method storage unit 123 uses the memory 102 to store information representing authentication methods that can be used by the lower-level authentication device 100. The information stored in the authentication method storage unit 123 is, for example, a list of names and identifiers of authentication methods that can be used by the lower-level authentication device 100.
The update time limit storage unit 124 uses the memory 102 to store information indicating the update time limit of the authentication method that can be used by the lower-level authentication device 100. There are a plurality of authentication methods that can be used by the lower-level authentication device 100, and the update time limit storage unit 124 stores the update time limit for each authentication method. That is, the update deadline storage unit 124 stores a plurality of update deadlines respectively corresponding to a plurality of authentication methods. Note that the update time limit storage unit 124 does not need to store the update time limit for all of the authentication methods that can be used by the lower-level authentication device 100. For example, the update time limit storage unit 124 does not store the update time limit for the newest authentication method. It may be a configuration. Therefore, when there are two authentication methods that can be used by the lower-level authentication device 100, the update time limit storage unit 124 may be configured to store only one update time limit.

  The authentication method acquisition unit 131 acquires information representing an authentication method that can be used by the device to be authenticated 300 from the device to be authenticated 300 by communicating with the device to be authenticated 300 using the interface unit 103.

  The authentication method selection unit 132 uses the control unit 101 to determine a plurality of authentications that can be used by the lower-level authentication device 100 based on the information stored in the authentication method storage unit 123 and the information acquired by the authentication method acquisition unit 131. An authentication method used for authentication with the device to be authenticated 300 is selected from the methods. The authentication method selection unit 132 selects an authentication method that can be used by both the lower-level authentication device 100 and the device to be authenticated 300. When there are a plurality of authentication methods that can be used by both the lower-level authentication device 100 and the device to be authenticated 300, the authentication method selection unit 132 selects, for example, the newest authentication method. For example, the authentication method selection unit 132 determines that the authentication method with the later update deadline is newer based on the information stored in the update deadline storage unit 124. Alternatively, the name of the authentication method is set so that the new authentication method has the name of the authentication method behind in the dictionary order, and the authentication method selection unit 132 determines that the dictionary order is in the back based on the name of the authentication method. It is determined that the authentication method having the name is newer.

  The authentication unit 133 uses the key related information stored in the key related information storage unit 121 based on the authentication method selected by the authentication method selection unit 132 by communicating with the authentication target device 300 using the interface unit 103. Thus, mutual authentication is performed with the device to be authenticated 300. When mutual authentication with the device to be authenticated 300 fails, the authentication unit 133 notifies the user that the authentication of the device to be authenticated 300 has failed using the output unit 105, for example.

  The notification information acquisition unit 134 (date acquisition unit) acquires the notification information stored in the notification information storage unit 324 from the authentication target device 300 by communicating with the authentication target device 300 using the interface unit 103. The notification information acquired by the notification information acquisition unit 134 includes information representing the expiration date of the device 300 to be authenticated.

  The expiration date determination unit 135 uses the control unit 101 to determine the authentication method selected by the authentication method selection unit 132 based on the information stored in the update time limit storage unit 124 and the notification information acquired by the notification information acquisition unit 134. Are compared with the expiration date of the device to be authenticated 300. When the expiration date is later than the renewal time limit, the time limit determination unit 135 uses the control unit 101 to determine that the authentication of the device to be authenticated 300 has failed. When it is determined that the authentication of the device to be authenticated 300 has failed, the time limit determination unit 135 has failed to authenticate the device to be authenticated 300 by communicating with the device to be authenticated 300 using the interface unit 103, for example. Notify that. Further, the time limit determination unit 135 notifies the user that the authentication of the device to be authenticated 300 has failed using the output unit 105, for example.

  When the expiration date is earlier than the renewal time limit, the time limit determination unit 135 does not determine that the authentication of the device to be authenticated 300 has failed. When the authentication unit 133 has succeeded in authenticating the device to be authenticated 300, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has been successful using the control unit 101. In this example, if the authentication unit 133 does not succeed in mutual authentication with the device to be authenticated 300, the notification information acquisition unit 134 cannot acquire information indicating the expiration date of the device to be authenticated 300 from the device to be authenticated 300. Therefore, when the expiration date is earlier than the renewal time limit, the time limit determination unit 135 always determines that the authentication of the device to be authenticated 300 has succeeded.

  When the renewal time limit and the valid time limit are the same, the time limit determination unit 135 may be configured to determine that authentication has failed, or may be configured not to determine that authentication has failed. It is sufficient that there is a unified standard so that the plurality of lower-level authentication devices 100 included in the authentication system 800 do not make different determinations, and the time limit determination unit 135 may be configured to make any determination.

The vehicle information storage unit 141 uses the memory 102 to store vehicle information such as the number of the vehicle on which the lower-level authentication device 100 is mounted.
The notification information storage unit 142 (date storage unit) uses the memory 102 to store the notification information acquired from the authentication target device 300 by the notification information acquisition unit 134.

The vehicle information notification unit 151 notifies the vehicle information stored in the vehicle information storage unit 141 to the higher-level authentication device 200 by communicating with the higher-level authentication device 200 using the wireless communication unit 104.
The notification information notification unit 152 (date notification unit) notifies the higher-level authentication device 200 of the notification information stored in the notification-information storage unit 142 by communicating with the higher-level authentication device 200 using the wireless communication unit 104. .
The second authentication unit 153 communicates with the higher-level authentication device 200 using the wireless communication unit 104, thereby using the key-related information stored in the key-related information storage unit 121 and the higher-level authentication device 200. Perform mutual authentication.

  FIG. 6 is a diagram illustrating an example of the hardware configuration of the higher-level authentication device 200 according to this embodiment.

  The higher-level authentication device 200 includes, for example, a control unit 201, a memory 202, and a wireless communication unit 203.

The control unit 201 (processing device) processes information by executing a program, and controls the entire higher-level authentication device 200.
The memory 202 (storage device) stores a program executed by the control unit 201. Note that the memory 202 may be built in the control unit 201.
The wireless communication unit 203 (communication device) communicates with the lower-level authentication device 100.

  The functional blocks of the higher-level authentication device 200 described below are realized by the control unit 201 executing a program stored in the memory 202, for example.

  FIG. 7 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to this embodiment.

  The higher-level authentication device 200 includes, for example, a process providing unit 210, a key related information storage unit 221, a current time acquisition unit 232, an expiration date determination unit 233, a vehicle information acquisition unit 251, a notification information acquisition unit 252, And an authentication unit 253.

The key related information storage unit 221 uses the memory 202 to store key related information of the higher-level authentication device 200 used for mutual authentication with the lower-level authentication device 100.
In the case of an authentication method using a public key encryption method, the key related information stored in the key related information storage unit 221 includes, for example, a private key of the higher-level authentication device 200, a public key certificate such as a certificate authority, and the like. .
In the case of an authentication method using a common key encryption method, the key related information stored in the key related information storage unit 221 includes, for example, a common key shared with the lower-level authentication device 100.
The authentication unit 253 communicates with the lower-level authentication device 100 using the wireless communication unit 203, thereby performing mutual authentication with the lower-level authentication device 100 using the key-related information stored in the key-related information storage unit 221. To do.

The vehicle information acquisition unit 251 acquires vehicle information of a vehicle on which the lower-level authentication device 100 is mounted from the lower-level authentication device 100 by communicating with the lower-level authentication device 100 using the wireless communication unit 203.
The notification information acquisition unit 252 (due date acquisition unit) communicates with the lower-level authentication device 100 using the wireless communication unit 203, so that the lower-level authentication device 100 reads out the notification information read from the authenticated device 300 by the lower-level authentication device 100. get. The notification information includes information indicating the expiration date of the device 300 to be authenticated.

The current time acquisition unit 232 uses the control unit 201 to acquire information representing the current time. The current time acquisition unit 232 may be configured to acquire the current time from a clock built in the higher-level authentication device 200, or may be configured to acquire the current time from the outside using a GPS receiver or the like. .
The expiration date determination unit 233 (expiration date determination unit) uses the control unit 201 based on the notification information acquired by the notification information acquisition unit 252 and the information acquired by the current time acquisition unit 232. It is determined whether or not the expiration date has expired.

  The process providing unit 210 is based on the vehicle information acquired by the vehicle information acquisition unit 251 or the notification information acquired by the notification information acquisition unit 252 when the expiration date determination unit 233 determines that the device to be authenticated 300 is valid. And provide processing.

  FIG. 8 is a diagram illustrating an example of information stored in the update time limit storage unit 124 according to this embodiment.

  In this example, the update time limit storage unit 124 stores information indicating the update time limit of the authentication method in the form of a determination table. The determination table shows the relationship between the update deadline and the authentication method. The upper row of the determination table shows the name of the authentication method, and the lower row shows the update deadline of the authentication method shown in the same column of the upper row. The determination table in this example indicates that the update deadline of “authentication method a” is “April 2020” and the update deadline of “authentication method b” is “April 2030”.

Note that the upper row of the determination table may be configured to indicate the identifier of the authentication method instead of the name of the authentication method.
Further, in this example, the renewal deadline is expressed in a year / month format in accordance with a general credit card expiration date format. However, this is only an example, and a configuration in which the update deadline is expressed in another format may be used.
Of the two authentication methods, “authentication method b”, which is a new authentication method, may have a configuration in which an update deadline is not set.
Moreover, the structure which the authentication method which the low-order authentication apparatus 100 can use is not two but three or more may be sufficient. In that case, for example, the number of columns in the determination table may be increased.

  FIG. 9 is a diagram showing an example of determination by the time limit determination unit 135 in this embodiment.

  In this table, the top row indicates the authentication method selected by the authentication method selection unit 132, and the leftmost column indicates the expiration date of the device to be authenticated 300 acquired by the notification information acquisition unit 134. The other part indicates the determination result by the time limit determination unit 135, where “×” indicates that the authentication of the device to be authenticated 300 is determined to have failed, and “◯” indicates that the authentication of the device to be authenticated 300 has succeeded. Represents judging.

For example, when the authentication method selected by the authentication method selection unit 132 is “authentication method a” and the expiration date of the device to be authenticated 300 acquired by the notification information acquisition unit 134 is “March 2020”, the time limit determination unit No. 135 determines that authentication of the device to be authenticated 300 has succeeded.
Further, the authentication method selected by the authentication method selection unit 132 is “authentication method a”, and the expiration date of the device to be authenticated 300 acquired by the notification information acquisition unit 134 is “May 2020”, “March 2030” or In the case of “May 2030”, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed.
Alternatively, the authentication method acquired by the authentication method acquisition unit 131 is “authentication method b”, and the expiration date of the authenticated device 300 acquired by the notification information acquisition unit 134 is “March 2020”, “May 2020” or In the case of “March 2030”, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has succeeded.
In addition, when the authentication method selected by the authentication method selection unit 132 is “authentication method b” and the expiration date of the authentication target device 300 acquired by the notification information acquisition unit 134 is “May 2030”, a time limit determination unit 135 determines that authentication of the device to be authenticated 300 has failed.

  FIG. 10 is a flowchart showing an example of the flow of the first authentication processing S510 in this embodiment.

  In the first authentication process S510, the lower-level authentication device 100 authenticates the device to be authenticated 300. The first authentication process S510 includes, for example, an authentication step S511, an authentication method storage step S512, a notification information acquisition step S513, a time limit determination step S514, a normal end step S515, and an abnormal end step S516. The lower-level authentication device 100 starts the first authentication processing S510 from the authentication step S511, for example, triggered by the fact that the authenticated device 300 is connected to the lower-level authentication device 100.

In the authentication step S511, the lower-level authentication device 100 performs authentication with the device to be authenticated 300. First, the authentication method acquisition unit 131 acquires an authentication method that can be used by the device to be authenticated 300 from the device to be authenticated 300. Next, the authentication method selection unit 132 selects an authentication method to be used for authentication. Then, the authentication unit 133 performs mutual authentication with the device to be authenticated 300 using the authentication method selected by the authentication method selection unit 132.
When authentication cannot be performed due to a card reading error or the like, but when authentication is failed, the lower-level authentication device 100 advances the first authentication processing S510 to the abnormal termination step S516.
If the authentication is successful, the lower-level authentication device 100 advances the first authentication processing S510 to the authentication method storage step S512.

  In the authentication method storage step S512, the time limit determination unit 135 temporarily stores the authentication method used for authentication with the device to be authenticated 300 in the authentication step S511.

  In the notification information acquisition step S513, the notification information acquisition unit 134 acquires notification information such as an expiration date from the device to be authenticated 300.

In the time limit determination step S514, the time limit determination unit 135 temporarily stores the information stored in the update time limit storage unit 124, the notification information acquired by the notification information acquisition unit 134 in the notification information acquisition step S513, and the authentication method storage step S512. Based on the stored authentication method, the authentication unit 133 determines whether or not the authentication method used for authentication with the device to be authenticated 300 is valid. If the expiration date of the device to be authenticated 300 is before the update time limit of the authentication method used for authentication with the device to be authenticated 300, the time limit determination unit 135 determines that the authentication method is valid, and If the expiration date of the apparatus 300 is after the update deadline of the authentication method, the time limit determination unit 135 determines that the authentication method is invalid.
If it is determined that the authentication method is valid, the lower-level authentication device 100 advances the first authentication processing S510 to the normal end step S515.
If it is determined that the authentication method is invalid, the lower-level authentication device 100 advances the first authentication processing S510 to the abnormal end step S516.

  In the normal completion step S515, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has succeeded, and normally ends the first authentication processing S510. When the first authentication process S510 is normally completed, the lower-level authentication device 100 notifies the user of the lower-level authentication device 100 that the authentication of the authenticated device 300 has been successful.

  In the abnormal termination step S516, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed, and abnormally ends the first authentication processing S510. If the first authentication process S510 ends abnormally, the lower-level authentication device 100 indicates that the authentication of the device to be authenticated 300 has failed, and the user of the lower-level authentication device 100 (for example, a driver of a vehicle equipped with the lower-level authentication device). To notify.

  FIG. 11 is a flowchart showing an example of the flow of the second authentication processing S550 in this embodiment.

  The second authentication process S550 includes, for example, an authentication process S551, a vehicle information acquisition process S552, a notification information acquisition process S553, an expiration date determination process S555, an authentication success process S556, and an authentication failure process S557. When the vehicle equipped with the lower-level authentication device 100 approaches the place where the higher-level authentication device 200 is installed and the lower-level authentication device 100 and the higher-level authentication device 200 enter the communication area, the higher-level authentication device 200 performs the second authentication process S550. Starts from the authentication step S551.

In the authentication step S551, the second authentication unit 153 of the lower-level authentication device 100 and the authentication unit 253 of the higher-level authentication device 200 authenticate each other.
If the authentication is successful, the higher-level authentication device 200 advances the second authentication processing S550 to the vehicle information acquisition step S552.
If the authentication fails, the higher-level authentication device 200 advances the second authentication process S550 to the authentication failure process S557.

  In the vehicle information acquisition step S552, the vehicle information notification unit 151 of the lower-level authentication device 100 notifies the higher-level authentication device 200 of vehicle information. The vehicle information acquisition unit 251 of the higher-level authentication device 200 acquires the vehicle information notified by the lower-level authentication device 100.

  In the notification information acquisition step S553, the notification information notification unit 152 of the lower-level authentication device 100 notifies the higher-level authentication device 200 of notification information. The notification information acquisition unit 252 of the higher-level authentication device 200 acquires notification information notified by the lower-level authentication device 100.

In the expiration date determination step S555, the current time acquisition unit 232 of the higher-level authentication device 200 acquires the current time. The expiration date determination unit 233 of the higher-level authentication device 200 acquires the expiration date of the device to be authenticated 300 from the notification information acquired by the notification information acquisition unit 252 in the notification information acquisition step S553. The expiration date determination unit 233 determines whether or not the device to be authenticated 300 is valid based on the acquired expiration date and the current time acquired by the current time acquisition unit 232.
When the current time is before the expiration date of the device to be authenticated 300, the expiration date determination unit 233 determines that the device to be authenticated 300 is valid. The higher-level authentication device 200 advances the second authentication process S550 to the authentication success process S556.
When the current time is after the expiration date of the device to be authenticated 300, the expiration date determination unit 233 determines that the device to be authenticated 300 is invalid. The higher-level authentication device 200 advances the second authentication process S550 to the authentication failure process S557.

  In the authentication success process S556, the process providing unit 210 is based on the vehicle information acquired by the vehicle information acquisition unit 251 in the vehicle information acquisition step S552 and the notification information acquired by the notification information acquisition unit 252 in the notification information acquisition step S553. Provide processing when authentication is successful. Thereafter, the higher-level authentication device 200 ends the second authentication process S550.

  In the authentication failure process S557, the process providing unit 210 provides a process at the time of authentication failure. Thereafter, the higher-level authentication device 200 ends the second authentication process S550.

  FIG. 12 is a diagram showing an example of an update schedule of an authentication method between the lower-level authentication device 100 and the device to be authenticated 300 in the authentication system 800 of this embodiment.

Prior to the start of updating the authentication method, all of the authenticated devices 300 are authenticated devices 300 that can use only the old authentication method. All the lower-level authentication devices 100 are lower-level authentication devices 100 that can use only the old authentication method.
After the update of the authentication method is started, the device to be authenticated 300 that can use both the old and new authentication methods is issued. In addition, the lower-level authentication device 100 that can use both the new and old authentication methods is sold. However, at this stage, the device to be authenticated 300 that can use only the old authentication method and the lower-level authentication device 100 that can use only the old authentication method still remain.
Note that the issue start time of the device to be authenticated 300 corresponding to the new authentication method and the sales start time of the lower-level authentication device 100 corresponding to the new authentication method are not necessarily the same, and either one may be earlier. .

The authenticated device 300 has an expiration date. When the device to be authenticated 300 reaches the expiration date, a new device to be authenticated 300 with an updated expiration date is issued, and the old device to be authenticated 300 is discarded. As a result, the number of devices to be authenticated 300 that can only use the old authentication method gradually decreases.
If all the devices to be authenticated 300 issued before the start of updating the authentication method expire, there is no device 300 to be authenticated that can use only the old authentication method. At this point, the first stage of authentication method update is completed.

This eliminates the need for the lower-level authentication device 100 to support the old authentication method, and after the first stage is completed, the lower-level authentication device 100 that cannot use the old authentication method is sold.
However, since the lower-level authentication device 100 has no expiration date, it is unknown when there is no lower-level authentication device 100 that can use only the old authentication method. The old lower-level authentication device 100 can use the new authentication method by rewriting the authentication program, but there is a possibility that there is a lower-level authentication device 100 that can use only the old authentication method even after the end of the first stage. There is.

Therefore, after the first stage is completed, the device 300 to be authenticated that cannot use the old authentication method is issued.
The lower-level authentication device 100 that cannot use the new authentication method cannot authenticate the device 300 to be authenticated. For this reason, the user of the lower-level authentication device 100 takes measures such as rewriting the authentication program of the lower-level authentication device 100 or replacing the lower-level authentication device 100 itself. As a result, the number of lower-level authentication devices 100 that can use only the old authentication method gradually decreases.

  Thereafter, some of the devices to be authenticated 300 that have been issued after the start of the update will expire. When all the devices to be authenticated 300 that can use both the old and new authentication methods have expired, there is no device to be authenticated 300 that can use the old authentication method. Thereby, the update of the authentication method is completed.

  The administrator of the authentication system 800 sets an update period for the old authentication method in advance before starting to update the authentication method. The renewal deadline of the old authentication method is set at the end of the first stage or at an arbitrary time later than that. The update time limit storage unit 124 of the lower-level authentication device 100 stores a predetermined update time limit of the old authentication method. In the example of this figure, the update deadline is a time earlier than the completion of the update, but the update deadline may be a time when the update is completed or later.

  For the lower-level authentication apparatus 100 that cannot use the new authentication method, the old authentication method is the newest authentication method. For this reason, the lower-level authentication device 100 authenticates the authenticated device 300 that cannot use the new authentication method and the authenticated device 300 that can use both the old and new authentication methods using the old authentication method. If the expiration date of the device to be authenticated 300 is later than the update time limit of the old authentication method, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed, so the lower-level authentication device 100 uses the old authentication method. Even if the authentication target device 300 is possible, the authentication target device 300 whose expiration date is later than the update time limit of the old authentication method is not authenticated. As a result, the user of the lower-level authentication device 100 takes measures such as rewriting the authentication program of the lower-level authentication device 100 or replacing the lower-level authentication device 100 itself.

  For the lower-level authentication apparatus 100 that cannot use the new authentication method, since the old authentication method is the newest authentication method, the update time limit storage unit 124 may not store the update time limit of the old authentication method. In this case, if the authentication target device 300 is compatible with the old authentication method, the lower-level authentication device 100 authenticates the authentication target device 300 even if the expiration date is later than the update time limit of the old authentication method. However, as described above, since the authenticated device 300 corresponding to the old authentication method does not exist after the update is completed, the user of the lower-level authentication device 100 rewrites the authentication program of the lower-level authentication device 100. Alternatively, a countermeasure such as replacement of the lower-level authentication device 100 itself is taken.

  The lower-level authentication device 100 that can use both the old and new authentication methods can authenticate to the device to be authenticated 300 that can use both the old and new authentication methods by using the new authentication method. You can also authenticate using the method. The authentication method selection unit 132 selects the new authentication method, and in this case, selects the new authentication method. For this reason, even if the expiration date of the device to be authenticated 300 is later than the update time limit of the old authentication method, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has succeeded.

  Further, the lower-level authentication device 100 that can use both the new and old authentication methods performs authentication using the old authentication method with the authentication target device 300 that cannot use the new authentication method. However, since the expiration date of the device 300 to be authenticated that cannot use the new authentication method is earlier than the end of the first stage of the authentication method update, it cannot be later than the update time limit of the old authentication method. Therefore, the time limit determination unit 135 determines that authentication of the device to be authenticated 300 has succeeded.

  Since the lower-level authentication device 100 does not know the current time, the lower-level authentication device 100 does not determine whether the authentication target device 300 has expired. For this reason, even when the valid period of the device to be authenticated 300 has expired, the lower-level authentication device 100 succeeds in authenticating the device to be authenticated 300. Therefore, after the renewal time limit, the lower-level authentication device 100 can succeed in authentication using the old authentication method with the authentication target device 300 that cannot use the new authentication method (that is, the expiration date has already expired). There is sex.

  The lower-level authentication device 100 performs mutual authentication with the higher-level authentication device 200 by communicating with the higher-level authentication device 200 using the wireless communication unit 104. If mutual authentication is successful, the lower-level authentication device 100 communicates with the higher-level authentication device 200 using the wireless communication unit 104, whereby the notification information acquisition unit 134 acquires the higher-level authentication device 200 from the authenticated device 300. Notification information is sent. The upper authentication apparatus 200 acquires the notification information notified by the lower authentication apparatus 100. The higher-level authentication device 200 checks the expiration date included in the acquired notification information. Unlike the lower-level authentication device 100, the higher-level authentication device 200 knows the accurate current time, and therefore can determine whether the authentication target device 300 has expired. If the higher-level authentication device 200 determines that the device 300 to be authenticated has expired, the authentication system 800 fails to authenticate the device 300 to be authenticated.

  As described above, the higher-level authentication device 200 checks the expiration date of the device to be authenticated 300, whereby the authentication system 800 by the device to be authenticated 300 that succeeds in authentication with the lower-level authentication device 100 using the old authentication method after the update time limit. Can be eliminated. The higher-level authentication device 200 only needs to check the expiration date of the device to be authenticated 300. The authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is the new authentication method or the old authentication method. There is no need to check if it is.

  Next, after the renewal deadline, the authentication target device 300 that succeeds in authentication with the lower-level authentication device 100 is counterfeited if the old authentication method is used because the security of the encryption algorithm used in the old authentication method decreases. The case where it becomes possible will be described.

As described above, when the expiration date of the device to be authenticated 300 is later than the update time limit of the old authentication method, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed.
Further, if the validity period of the device to be authenticated 300 is earlier than the update time limit of the old authentication method, the lower-level authentication device 100 succeeds in authenticating the device to be authenticated 300 using the old authentication method. It is determined that the device to be authenticated 300 has expired.
Since the expiration date of the device to be authenticated 300 is a part of the notification information notified to the higher-level authentication device 200, if the expiration date is falsified to deceive the lower-level authentication device 100, the upper-level authentication device 200 excludes it. If the expiration date is set so that it is not excluded by the authentication device 200, it is excluded by the lower-level authentication device 100.
Therefore, even if the forger of the device to be authenticated 300 sets the expiration date of the device to be authenticated 300 before or after the renewal time limit of the old authentication method, the authentication system using the forged device 300 to be authenticated is used. 800 cannot be used.

  As described above, when the expiration date of the authentication method is compared with the expiration date of the device 300 to be authenticated, and the expiration date is later than the expiration date, the authentication unit 133 successfully authenticates with the device 300 to be authenticated. Even so, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed. Thereby, even if the lower-level authentication device 100 does not know the current time, the authenticated device 300 can be prevented from receiving authentication of the lower-level authentication device 100 using an authentication method whose update deadline has passed.

  Therefore, a configuration for the lower-level authentication device 100 to know the correct current time is unnecessary, and the manufacturing cost of the lower-level authentication device 100 can be suppressed.

  Since the authentication system 800 includes such a lower-level authentication device 100, it is not necessary to update the authentication methods used in the authentication system 800 all at once, and the authentication system 800 can be updated little by little. Thereby, the cost concerning the update of the authentication method used with the authentication system 800 can be held down.

  The higher-level authentication device 200 does not need to know what authentication method is used for authentication between the lower-level authentication device 100 and the authentication target device 300, and simply determines whether or not the authentication target device 300 has expired. It is only necessary to determine whether or not. Therefore, there is no need to update the higher-level authentication device, and the introduction cost of the new authentication system 800 corresponding to the gradual update of the authentication method can be suppressed.

The encryption algorithm update method (authentication method update method) in this embodiment is a method for updating the authentication encryption algorithm (authentication method) of the IC card (authenticated device 300).
In the encryption algorithm update method, the validity of the encryption algorithm used for authentication is determined by combining an update table (determination table) indicating the update expiration date of the encryption algorithm and the expiration date information of the IC card.

The encryption algorithm update system (authentication system) in this embodiment is a system that updates the authentication encryption algorithm (authentication method) of the IC card (300).
The apparatus includes an IC card and an IC card RW (lower authentication apparatus 100).
An update table (determination table) indicating the update deadline of the encryption algorithm is stored in the IC card RW.
IC card expiration date information is stored in the IC card.
The IC card RW reads the expiration date information of the IC card, and the validity of the encryption algorithm is determined from the encryption algorithm used for authentication by the IC card RW, the update table, and the expiration date information.

  The lower-level authentication device holds a judgment table in which the update period of the encryption algorithm of the entire system is associated with the expiration date of the IC card, and is used for authentication between the lower-level authentication device and the IC card or the validity of the encryption algorithm used By using the old encryption algorithm and the new encryption algorithm in combination, the old encryption algorithm can be disabled after the update deadline. As a result, the encryption algorithm can be updated without affecting the communication between the higher-level authentication device and the lower-level authentication device. Further, since the validity of the encryption algorithm is performed using the expiration date of the IC card and the determination table of the lower-level authentication device, it is not necessary for the lower-level authentication device to hold a clock function. That is, it is possible to update the encryption algorithm without significantly increasing the cost such as mounting a clock function to the lower-level authentication device. Thereby, it is possible to update the cryptographic algorithm safely while reducing the cost for updating the cryptographic algorithm.

Embodiment 2. FIG.
Embodiment 2 will be described with reference to FIG.
In addition, about the part which is common in Embodiment 1, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In this embodiment, a case will be described in which the lower-level authentication apparatus 100 can read the expiration date of the authenticated apparatus 300 even before the lower-level authentication apparatus 100 and the authenticated apparatus 300 perform mutual authentication.

  The overall configuration of the authentication system 800 and the hardware configuration and block configuration of the authentication target device 300 and the lower-level authentication device 100 in this embodiment are the same as those described in the first embodiment, and a description thereof will be omitted.

  FIG. 13 is a flowchart showing an example of the flow of the first authentication processing S510 in this embodiment.

  The first authentication process S510 includes, for example, an expiration date acquisition step S517, an authentication method selection step S518, an expiration date determination step S514, an authentication step S511, a notification information acquisition step S513, a normal end step S515, and an abnormal end step. S516. The lower-level authentication device 100 starts the first authentication processing S510 from the expiration date acquisition step S517.

  In the expiration date acquisition step S517, the notification information acquisition unit 134 communicates with the device to be authenticated 300 using the interface unit 103, so that the notification information stored in the notification information storage unit 324 of the device to be authenticated 300 is authenticated. Information representing the expiration date of the device 300 is acquired.

  In the authentication method selection step S518, the authentication method acquisition unit 131 acquires information representing the authentication method stored in the authentication method storage unit 323 of the device to be authenticated 300 by communicating with the device to be authenticated 300 using the interface unit 103. To do. The authentication method selection unit 132 uses the control unit 101 to authenticate the authentication target device 300 based on the information acquired by the authentication method acquisition unit 131 and the information stored in the authentication method storage unit 123. Select a method. The expiration date determination unit 135 uses the memory 102 to temporarily store information representing the authentication method selected by the authentication method selection unit 132.

In the time limit determination step S514, the time limit determination unit 135 uses the control unit 101 to store the information stored in the update time limit storage unit 124, the information acquired by the notification information acquisition unit 134 in the expiration date acquisition step S517, and the authentication method selection. Based on the information temporarily stored in step S518, it is determined whether or not the authentication method selected by the authentication method selection unit 132 in the authentication method selection step S518 is valid. If the expiration date of the device to be authenticated 300 is earlier than the update time limit of the authentication method selected by the authentication method selection unit 132, the time limit determination unit 135 determines that the authentication method is valid, and If the expiration date is after the update time limit of the authentication method, the time limit determination unit 135 determines that the authentication method is invalid.
If it is determined that the authentication method is valid, the lower-level authentication device 100 advances the first authentication processing S510 to the authentication step S511.
If it is determined that the authentication method is invalid, the lower-level authentication device 100 advances the first authentication processing S510 to the abnormal end step S516.

In the authentication step S511, the authentication unit 133 communicates with the authentication target device 300 using the interface unit 103, thereby using the authentication method selected by the authentication method selection unit 132 in the authentication method selection step S518. Mutual authentication with 300 is performed.
When authentication cannot be performed due to a card reading error or the like, or when authentication has failed but the authentication has failed, the lower-level authentication device 100 advances the first authentication processing S510 to the abnormal termination step S516.
If the authentication is successful, the lower-level authentication device 100 advances the first authentication processing S510 to the notification information acquisition step S513.

In the notification information acquisition step S513, the notification information acquisition unit 134 acquires notification information other than the expiration date by communicating with the authentication target device 300 using the interface unit 103.
The notification information acquisition unit 134 may be configured to acquire all notification information including the expiration date. In that case, the notification information acquisition unit 134 checks whether the expiration date included in the acquired notification information matches the expiration date acquired in the expiration date acquisition step S517. It may be configured to determine that the authentication of the device 300 has failed.

  In the normal termination step S515, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has been successful using the control unit 101, and normally ends the first authentication processing S510.

  In the abnormal termination step S516, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed using the control unit 101, and abnormally ends the first authentication processing S510.

As described above, before the authentication unit 133 performs mutual authentication with the device to be authenticated 300, the notification information acquisition unit 134 reads the expiration date of the device to be authenticated 300 from the device to be authenticated 300, and the time limit determination unit 135 performs the mutual authentication. The update deadline of the authentication method to be used is compared with the expiration date of the device to be authenticated 300.
If the expiration date is later than the renewal date, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed, and ends the first authentication processing S510 without performing mutual authentication by the authentication unit 133. To do.
If the expiration date is earlier than the update expiration date, the authentication unit 133 performs mutual authentication with the device to be authenticated 300, and if successful, the notification information acquisition unit 134 reads other notification information from the device to be authenticated 300. .

  Thereby, since useless mutual authentication can be omitted, the energy consumed by the lower-level authentication device 100 can be reduced.

The encryption algorithm update method (authentication method update method) in this embodiment is a method of updating the authentication encryption algorithm of the IC card (authenticated device 300).
In the encryption algorithm update method, the validity of the encryption algorithm used for authentication is determined by combining an update table (determination table) indicating the update expiration date of the encryption algorithm and the expiration date information of the IC card.

The encryption algorithm update system (authentication system) in this embodiment is a system that updates the authentication encryption algorithm of the IC card (300).
The apparatus includes an IC card and an IC card RW (lower authentication apparatus 100).
An update table (determination table) indicating the update deadline of the encryption algorithm is stored in the IC card RW.
IC card expiration date information is stored in the IC card.
The IC card RW reads the expiration date information of the IC card, and the validity of the encryption algorithm is determined from the encryption algorithm used by the IC card RW for authentication, the update table, and the expiration date information.

  The lower-level authentication device holds a judgment table in which the update period of the encryption algorithm of the entire system is associated with the expiration date of the IC card, and is used for authentication between the lower-level authentication device and the IC card or the validity of the encryption algorithm used By using the old encryption algorithm and the new encryption algorithm in combination, the old encryption algorithm can be disabled after the update deadline. As a result, the encryption algorithm can be updated without affecting the communication between the higher-level authentication device and the lower-level authentication device. Further, since the validity of the encryption algorithm is performed using the expiration date of the IC card and the determination table of the lower-level authentication device, it is not necessary for the lower-level authentication device to hold a clock function. That is, it is possible to update the encryption algorithm without significantly increasing the cost such as mounting a clock function to the lower-level authentication device. Thereby, it is possible to update the cryptographic algorithm safely while reducing the cost for updating the cryptographic algorithm.

Embodiment 3 FIG.
A third embodiment will be described with reference to FIGS.
Note that portions common to Embodiment 1 or Embodiment 2 are denoted by the same reference numerals and description thereof is omitted.

  FIG. 14 is a diagram showing an example of the overall configuration of the authentication system 800 in this embodiment.

The authentication system 800 further includes a setting device 350 in addition to the devices described in the first embodiment.
The setting device 350 is an IC card, for example, like the device to be authenticated 300. The setting device 350 is, for example, a setup card in the ETC system. The setting device 350 stores information to be stored in the lower-level authentication device 100 (hereinafter referred to as “setting information”). The setting device 350 is used by connecting to the lower-level authentication device 100.

  When the setting device 350 is connected to the lower-level authentication device 100, the lower-level authentication device 100 reads and stores the setting information stored in the setting device 350 by communicating with the setting device 350.

  Since the hardware configuration of the setting device 350 is the same as the hardware configuration of the device to be authenticated 300 described in the first embodiment, the description thereof is omitted.

  FIG. 15 is a diagram illustrating an example of a functional block configuration of the setting device 350 according to this embodiment.

The functional blocks of the setting device 350 are almost the same as the functional blocks of the device to be authenticated 300 described in the first embodiment. The difference is that the device to be authenticated 300 has a notification information storage unit 324, whereas the setting device 350 does not have the notification information storage unit 324, but instead has a setting information storage unit 325.
The setting information storage unit 325 uses the memory 302 to store setting information. The setting information includes vehicle information such as the number of the vehicle on which the lower-level authentication device 100 is mounted, for example. Further, the setting information includes information representing the update deadline of the authentication method such as a determination table.

  Note that the setting information storage unit 325 may be configured to store the setting information in an encrypted state for safety. Alternatively, the configuration may be such that when the information reading unit 332 notifies the setting information to the lower-level authentication device 100, the setting information is encrypted and transmitted.

  FIG. 16 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

The lower-level authentication device 100 further includes a setting information acquisition unit 136 in addition to the functional blocks described in the first embodiment.
The setting information acquisition unit 136 acquires setting information from the setting device 350 by communicating with the setting device 350 using the interface unit 103.

  It is assumed that the renewal deadline has not been determined for some of the plurality of authentication methods that can be used by the lower-level authentication device 100 at the manufacturing stage of the lower-level authentication device 100. At the time of factory shipment, the update time limit storage unit 124 does not store the update time limit for an authentication method for which the update time limit has not been determined. Alternatively, the update deadline storage unit 124 may be configured to store an arbitrary deadline as an update deadline for an authentication method for which the update deadline has not been determined.

The update time limit storage unit 124 uses the memory 102 to store information representing the update time limit of the authentication method included in the setting information acquired by the setting information acquisition unit 136, thereby updating the stored information. For example, the update time limit storage unit 124 stores the determination table included in the setting information by overwriting the stored determination table.
As a result, the update deadline storage unit 124 stores the update deadline of the authentication method that has not been determined at the manufacturing stage of the lower-level authentication device 100.

  The vehicle information storage unit 141 stores the vehicle information included in the setting information acquired by the setting information acquisition unit 136 using the memory 102.

  FIG. 17 is a flowchart showing an example of the flow of the setting process S520 in this embodiment.

In the setting process S520, the lower-level authentication device 100 reads and stores the setting information stored by the setting device 350. The setting process S520 includes, for example, a first authentication process S510, a setting information acquisition process S521, and a setting information storage process S522.
When the setting device 350 is connected to the lower-level authentication device 100, the lower-level authentication device 100 starts the setting processing S520 from the first authentication processing S510.

The lower-level authentication device 100 does not know that the connected device is the setting device 350. Therefore, in the first authentication process S510, the lower-level authentication device 100 performs authentication with the connected device. The details of the first authentication process S510 are the same as those described in the first embodiment, and a description thereof will be omitted.
If the authentication fails, the lower-level authentication device 100 ends the setting process S520.
When the authentication is successful, the lower-level authentication device 100 determines whether the connected device is the setting device 350 or the authenticated device 300 based on the information read from the connected device.
If it is determined that the connected device is the device to be authenticated 300, the lower-level authentication device 100 ends the setting process S520 and performs normal processing for the device to be authenticated 300.
If it is determined that the connected device is the setting device 350, the lower-level authentication device 100 advances the setting process S520 to the setting information acquisition step S521.

In the setting information acquisition step S <b> 521, the setting information acquisition unit 136 acquires setting information from the setting device 350.
In the setting information storage step S522, the lower-level authentication device 100 stores the setting information acquired by the setting information acquisition unit 136 in the setting information acquisition step S521. For example, the update time limit storage unit 124 stores information indicating the update time limit of the authentication method. The vehicle information storage unit 141 stores vehicle information.
Thereafter, the lower-level authentication device 100 ends the setting process S520.

  The lower-level authentication device 100 can communicate with the setting device 350 by using the interface unit 103 provided to communicate with the device to be authenticated 300. Therefore, in order for the lower-level authentication device 100 to acquire the update deadline of the authentication method, it is not necessary to change the hardware configuration such as providing an interface such as a new communication device in the lower-level authentication device 100. Thereby, the manufacturing cost of the low-order authentication apparatus 100 can be suppressed.

The setting process S520 (setup) is originally performed when the lower-level authentication device 100 is sold in order to store vehicle information and the like in the lower-level authentication device 100. The authentication system 800 in this embodiment uses this to set the update period of the authentication method.
Thereby, the update deadline of the authentication method can be set in the lower-level authentication device 100 without taking a new effort to the user of the lower-level authentication device 100.

  In addition, even when it is necessary to advance the preset update deadline, such as when the processing capacity of the computer is improved at a speed exceeding expectations, the update deadline storage unit 124 can execute the setting process S520 again (re-setup). The stored information can be updated to change the update period of the authentication method.

  The encryption algorithm update method (authentication method update method) in this embodiment can be set after the update table (determination table) is constructed.

  In the cryptographic algorithm update system (authentication system) in this embodiment, the update table (determination table) can be arbitrarily set after the system construction.

  By combining the setting of the update deadline with the setup, the update completion date of the cryptographic algorithm can be set after manufacturing the lower-level authentication device at low cost and safely.

Embodiment 4 FIG.
The fourth embodiment will be described with reference to FIG.
In addition, about the part which is common in Embodiment 1- Embodiment 3, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In this embodiment, the setting information stored in the setting device 350 is not only necessary for the authentication unit 133 to use the authentication method, such as an authentication method parameter and an encryption program, as well as information indicating the update period of the authentication method. A case where various parameters are included will be described.

  FIG. 18 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  The lower-level authentication device 100 further includes an authentication procedure storage unit 125 in addition to the functional blocks described in the third embodiment.

The authentication procedure storage unit 125 uses the memory 102 and, for each authentication method used by the authentication unit 133, parameters, programs, etc. (hereinafter referred to as “authentication procedure information”) for the authentication unit 133 to use the authentication method. .) Is stored in advance.
The authentication unit 133 performs authentication with the device to be authenticated 300 using the authentication procedure information stored in the authentication procedure storage unit 125.

  The authentication procedure storage unit 125 acquires authentication procedure information from the setting information acquired by the setting information acquisition unit 136 and stores it. When the acquired authentication procedure information is authentication procedure information for an authentication method that has already been stored, the authentication procedure storage unit 125 updates the stored authentication procedure information. When the acquired authentication procedure information is authentication procedure information for a new authentication method that has not yet been stored, the authentication procedure storage unit 125 newly adds a new authentication method in addition to the stored authentication procedure information. The authentication procedure information about is stored.

  In this way, since the authentication information is included in the setting information, a new authentication method that cannot be used by the lower-level authentication device 100 can be used by the lower-level authentication device 100 by performing setting processing (re-setup processing). Can do. As a result, even when all the authentication methods that can be used by the lower-level authentication device 100 have passed the update deadline, and there are no more authentication methods that can be used, the lower-level authentication device 100 can use the new authentication method by the setting process. be able to. Therefore, it is not necessary for the user to replace the lower-level authentication device 100 that has become old, and the lifetime of the lower-level authentication device 100 can be extended.

Embodiment 5 FIG.
Embodiment 5 will be described with reference to FIG.
In addition, about the part which is common in Embodiment 1- Embodiment 4, the same code | symbol is attached | subjected and description is abbreviate | omitted.

In this embodiment, a configuration will be described in which the lower-level authentication device 100 determines the necessity of updating the lower-level authentication device 100 itself.
The case where the lower-level authentication device 100 needs to be updated is a case where the authentication method is updated and an authentication method newer than the authentication method that can be used by the lower-level authentication device 100 is used. When the lower-level authentication device 100 needs to be updated, for example, the user performs a re-setup process, and acquires authentication procedure information about a new authentication method from the setting device 350 as described in the fourth embodiment. For example, the lower-level authentication device 100 can use a new authentication method. Alternatively, the user may replace the lower-level authentication device 100 itself with a lower-level authentication device 100 that can use a new authentication method.

  FIG. 19 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  In addition to the functional blocks described in the first embodiment, the lower-level authentication device 100 further includes an update necessity determination unit 137.

The update necessity determination unit 137 needs to update the lower-level authentication device 100 using the control unit 101 based on the information stored in the authentication method storage unit 123 and the information acquired by the authentication method acquisition unit 131. It is determined whether or not. The update necessity determination unit 137 is an authentication method that cannot be used by the lower-level authentication device 100 among authentication methods that can be used by the device to be authenticated 300, and is an authentication method that is newer than the authentication method that can be used by the lower-level authentication device 100. If there is, it is determined that the lower-level authentication device 100 needs to be updated.
When the update necessity determination unit 137 determines that the lower-level authentication device 100 needs to be updated, the lower-level authentication device 100 uses the fact that the lower-level authentication device 100 needs to be updated using the output unit 105, for example. The person in charge.

  Even if the authenticated device 300 can use a new authentication method that is not supported by the lower-level authentication device 100, if the authenticated device 300 can also use the old authentication method, the lower-level authentication device 100, the authenticated device 300, Can be authenticated between. However, as described in the first embodiment, there is no authentication target device 300 that can use the old authentication method. For this reason, it is necessary to update the lower-level authentication device 100 before that.

  The update necessity determination unit 137 determines that the lower-level authentication device 100 needs to be updated when the authentication target device 300 that can use the new authentication method appears. The device 100 can be updated.

Embodiment 6 FIG.
The sixth embodiment will be described with reference to FIGS.
In addition, about the part which is common in Embodiment 1- Embodiment 5, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In this embodiment, a configuration will be described in which the lower-level authentication device 100 acquires the update deadline from the higher-level authentication device 200 instead of acquiring it from the setting device 350.

  FIG. 20 is a system configuration diagram showing an example of the overall configuration of the authentication system 800 in this embodiment.

The authentication system 800 further includes a server device 400 in addition to the devices described in the first embodiment.
The server device 400 (management device) notifies the higher-level authentication device 200 of information indicating the update deadline of the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300.

  FIG. 21 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

In addition to the functional blocks described in the first embodiment, the lower-level authentication device 100 further includes an update time limit acquisition unit 154.
The update time limit acquisition unit 154 acquires information indicating the update time limit of the authentication method from the higher-level authentication device 200 by communicating with the higher-level authentication device 200 using the wireless communication unit 104.
The update deadline storage unit 124 stores information representing the update deadline of the authentication method acquired by the update deadline acquisition unit 154 using the memory 102.

  FIG. 22 is a diagram illustrating an example of the hardware configuration of the higher-level authentication device 200 according to this embodiment.

The higher-level authentication device 200 further includes a second communication unit 204 in addition to the hardware described in the first embodiment.
The second communication unit 204 (communication device) communicates with the server device 400.

  FIG. 23 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to this embodiment.

  In addition to the functional blocks described in the first embodiment, the higher-level authentication device 200 further includes an update time limit storage unit 224, an update time limit acquisition unit 234, and an update time limit notification unit 254.

The renewal time limit acquisition unit 234 communicates with the server device 400 using the second communication unit 204, so that the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is transmitted from the server device 400. Acquires information indicating the update deadline.
The update time limit storage unit 224 uses the memory 202 to store information representing the update time limit acquired by the update time limit acquisition unit 234.
The update time limit notification unit 254 notifies the information indicating the update time limit stored by the update time limit storage unit 224 to the lower level authentication device 100 by communicating with the lower level authentication device 100 using the wireless communication unit 203.

  FIG. 24 is a flowchart showing an example of the flow of the second authentication processing S550 in this embodiment.

  The second authentication processing S550 further includes an update time limit notification step S554 in addition to the steps described in the first embodiment.

After the notification information acquisition step S553 ends, the higher-level authentication device 200 advances the second authentication processing S550 to the update time limit notification step S554.
In the update time limit notification step S554, the update time limit notification unit 254 of the higher-level authentication device 200 notifies the lower-level authentication device 100 of the update time limit of the authentication method. The update time limit acquisition unit 154 of the lower level authentication device 100 acquires the update time limit notified by the higher level authentication device 200. The update deadline storage unit 124 of the lower-level authentication device 100 stores the update deadline acquired by the update deadline acquisition unit 154.
Thereafter, the higher-level authentication device 200 advances the second authentication processing S550 to the expiration date determination step S555.

  In this way, the upper authentication apparatus 200 stores the authentication method update deadline in advance, and notifies the lower authentication apparatus 100 of the authentication method update deadline when communicating with the lower authentication apparatus 100. The lower-level authentication device 100 stores the notified update deadline, and determines whether or not the authentication method with the device to be authenticated 300 is valid based on the stored update deadline.

  Thereby, the update time limit stored in the lower-level authentication device 100 can be changed without re-setup of the lower-level authentication device 100 or the like.

  Since the second authentication process S550 is executed after the authentication of the device to be authenticated 300 in the first authentication process S510, the update deadline notified in the update deadline notification step S554 is the current first authentication process. It is not used in S510, but is used in the first authentication process S510 after the next time. Usually, since the update deadline is changed with a time margin, it is not necessary to immediately use the update deadline notified this time in the first authentication process S510 of this time.

  Further, the update time limit acquisition unit 234 may be configured to acquire the update time limit from another device instead of acquiring it from the server device 400.

  Further, the configuration may be such that not only the update deadline but also the authentication procedure information is notified from the upper level authentication device 200 to the lower level authentication device 100.

Embodiment 7 FIG.
The seventh embodiment will be described with reference to FIGS.
In addition, about the part which is common in Embodiment 1- Embodiment 6, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In this embodiment, a configuration will be described in which the lower-level authentication device 100 does not acquire the update period of the authentication method from the higher-level authentication device 200 but acquires whether or not the authentication method is currently valid.

  FIG. 25 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to this embodiment.

  Of the functional blocks described in the sixth embodiment, the higher-level authentication device 200 does not include the update time limit notification unit 254, but instead includes a validity determination unit 238 and a validity notification unit 256.

  The validity determination unit 238 uses the control unit 201 to determine whether the lower-level authentication device 100 and the device to be authenticated 300 are based on the information stored in the update time limit storage unit 224 and the information acquired by the current time acquisition unit 232. For each of the authentication methods used for authentication, the current time is determined whether or not the update time limit of the authentication method has passed. If the current time has not passed the update deadline of the authentication method, the validity determination unit 238 determines that the authentication method is valid. If the current time has passed the update deadline of the authentication method, the validity determination unit 238 determines that the authentication method is invalid.

  The validity notification unit 256 communicates with the lower-level authentication device 100 using the wireless communication unit 203, thereby indicating information indicating a determination result determined by the validity determination unit 238 to the lower-level authentication device 100 (hereinafter referred to as “effectiveness”. Information ”).

  FIG. 26 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  Of the functional blocks described in the sixth embodiment, the lower-level authentication device 100 does not include the update time limit acquisition unit 154, the update time limit storage unit 124, and the time limit determination unit 135. Instead, the validity acquisition unit 156 And an effectiveness storage unit 126 and an effectiveness determination unit 138.

The validity acquisition unit 156 acquires authentication method validity information from the higher-level authentication device 200 by communicating with the higher-level authentication device 200 using the wireless communication unit 104.
The validity storage unit 126 stores the validity information acquired by the validity acquisition unit 156 using the memory 102.
The validity determination unit 138 uses the control unit 101 to determine whether or not the authentication method selected by the authentication method selection unit 132 is valid based on the validity information stored in the validity storage unit 126.

  FIG. 27 is a flowchart showing an example of the flow of the first authentication processing S510 in this embodiment.

  The first authentication processing S510 does not include the expiration date acquisition step S517 and the expiration date determination step S514 among the steps described in the second embodiment, but includes an effectiveness determination step S519 instead.

The lower-level authentication device 100 starts the first authentication processing S510 from the authentication method selection step S518.
After the authentication method selection step S518 ends, the lower-level authentication device 100 advances the first authentication processing S510 to the validity determination step S519.

In the validity determination step S519, the validity determination unit 138 determines whether the authentication method selected by the authentication method selection unit 132 in the authentication method selection step S518 is valid based on the validity information stored in the validity storage unit 126. Determine whether or not.
If the authentication method is valid, the validity determination unit 138 determines that the authentication method is valid. The lower-level authentication device 100 advances the first authentication processing S510 to the authentication step S511.
When the authentication method is invalid, the validity determination unit 138 determines that the authentication method is invalid. The lower-level authentication device 100 advances the first authentication processing S510 to the abnormal end step S516.

  As described above, the higher-level authentication device 200 determines the validity of the authentication method in advance, and notifies the lower-level authentication device 100 of the validity of the authentication method when communicating with the lower-level authentication device 100. The lower-level authentication device 100 stores the notified validity, and determines whether or not the authentication method with the authenticated device 300 is valid based on the stored validity.

  Thus, the lower-level authentication device 100 determines whether or not the authentication method used for authentication with the device to be authenticated 300 is valid without using the expiration date of the device to be authenticated 300 or the current time. Can do.

Embodiment 8 FIG.
An eighth embodiment will be described with reference to FIGS.
In addition, about the part which is common in Embodiment 1- Embodiment 7, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In this embodiment, a configuration will be described in which the higher-level authentication device 200, not the lower-level authentication device 100, determines the validity of the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300.

  FIG. 28 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  Of the functional blocks described in the first embodiment, the lower-level authentication device 100 does not include the update time limit storage unit 124 and the time limit determination unit 135, but instead includes an authentication method notification unit 155.

  The authentication method notification unit 155 communicates with the higher-level authentication device 200 using the wireless communication unit 104, thereby notifying the higher-level authentication device 200 of information representing the authentication method selected by the authentication method selection unit 132.

  FIG. 29 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to this embodiment.

  Of the functional blocks described in the sixth embodiment, the higher-level authentication device 200 does not have the update deadline notification unit 254, but instead has an authentication method acquisition unit 255 and an update deadline determination unit 235.

  The authentication method acquisition unit 255 communicates with the lower-level authentication device 100 using the wireless communication unit 203, so that the authentication method used for authentication between the lower-level authentication device 100 and the authenticated device 300 is received from the lower-level authentication device 100. Get representing information.

  The update time limit determination unit 235 (time limit determination unit) uses the control unit 201 to acquire information acquired by the authentication method acquisition unit 255, information stored by the update time limit storage unit 224, and information acquired by the current time acquisition unit 232 Based on the above, the update time limit of the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is compared with the current time. When the update deadline is later than the current time, the update deadline determination unit 235 determines that the authentication of the device to be authenticated 300 has failed. When the update deadline is ahead of the current time, the update deadline determination unit 235 determines that the authentication of the device to be authenticated 300 has succeeded.

  FIG. 30 is a flowchart showing an example of the flow of the first authentication processing S510 in this embodiment.

  The first authentication processing S510 does not have the time limit determination step S514 among the steps described in the first embodiment.

In the authentication method storage step S512, the authentication method notification unit 155 stores the authentication method selected by the authentication method selection unit 132.
After the notification information acquisition step S513 ends, the lower-level authentication device 100 advances the first authentication processing S510 to the normal end step S515.

  That is, the lower-level authentication device 100 does not determine the update period of the authentication method with the device to be authenticated 300 in the first authentication processing S510.

  FIG. 31 is a flowchart showing an example of the flow of the second authentication processing S550 in this embodiment.

  The second authentication process S550 further includes an authentication method acquisition step S558 and an update time limit determination step S559 in addition to the steps described in the first embodiment.

  If the authentication between the lower-level authentication device 100 and the higher-level authentication device 200 is successful in the authentication step S551, the higher-level authentication device 200 advances the second authentication processing S550 to the authentication method acquisition step S558.

  In the authentication method acquisition step S558, the authentication method notification unit 155 of the lower-level authentication device 100 notifies the higher-level authentication device 200 of the authentication method stored in the authentication method storage step S512 of the first authentication process S510. The authentication method acquisition unit 255 of the higher-level authentication device 200 acquires the authentication method notified by the lower-level authentication device 100.

In the update time limit determination step S559, the current time acquisition unit 232 of the higher-level authentication device 200 acquires the current time. Based on the authentication method acquired by the authentication method acquisition unit 255 in the authentication method acquisition step S558, the update time limit determination unit 235 of the higher-level authentication device 200 uses the lower-level authentication device 100 based on the update time limit stored by the update time limit storage unit 224. And an update deadline for the authentication method used for authentication between the device 300 and the device 300 to be authenticated. The update time limit determination unit 235 determines whether the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is valid based on the current time acquired by the current time acquisition unit 232. .
If the current time has not passed the update deadline, the update deadline determination unit 235 determines that the authentication method is valid. The higher-level authentication device 200 advances the second authentication processing S550 to the vehicle information acquisition step S552.
When the current time has passed the update deadline, the update deadline determination unit 235 determines that the authentication method is invalid. The higher-level authentication device 200 advances the second authentication process S550 to the authentication failure process S557.

  In this way, the lower-level authentication device 100 notifies the higher-level authentication device 200 of the authentication method used for authentication with the authenticated device 300, and the higher-level authentication device 200 determines the validity of the authentication method. Unlike the lower-level authentication device 100, the higher-level authentication device 200 knows an accurate current time. For this reason, the higher-level authentication device 200 determines the validity of the authentication method by comparing the update time limit of the authentication method with the current time instead of the expiration date of the device 300 to be authenticated.

  Since the lower-level authentication device 100 does not need to know the update deadline of the authentication method, even if the update time limit of the authentication method is changed, it is not necessary to notify the lower-level authentication device 100 of the updated update time limit.

The encryption algorithm update method (authentication method update method) in this embodiment is a method for updating the authentication encryption algorithm (authentication method) of the IC card (authenticated device 300).
Using the update table (determination table) indicating the update deadline of the encryption algorithm and the current time information, the validity of the encryption algorithm used (or used) for authentication is determined.

The encryption algorithm update system (authentication system) in this embodiment is a system that updates the authentication encryption algorithm (authentication method) of the IC card (authenticated device 300).
The apparatus includes an IC card, an IC card RW (lower authentication apparatus 100), and an IC card RW authentication apparatus (upper authentication apparatus 200).
An update table (determination table) indicating the update deadline of the encryption algorithm is stored in the IC card RW authentication apparatus.
The IC card RW transmits an encryption algorithm identifier indicating an encryption algorithm used (or used) for authentication to the IC card RW authentication apparatus.
The IC card RW authentication device verifies the validity of the encryption algorithm from the update table, the time information of the IC card RW authentication device, and the encryption algorithm identifier indicating the encryption algorithm used (or used) by the IC card RW for authentication. The IC card RW authentication device determines.

The encryption algorithm update system (authentication system) in this embodiment is a system that updates the authentication encryption algorithm of the IC card (authenticated device 300).
The apparatus includes an IC card, an IC card RW (lower authentication apparatus 100), an IC card RW authentication apparatus (upper authentication apparatus 200), and a server (server apparatus 400).
An update table (determination table) indicating the update deadline of the encryption algorithm is stored in the server.
The IC card RW transmits an encryption algorithm identifier indicating an encryption algorithm used (or used) for authentication to the IC card RW authentication apparatus.
The IC card RW authentication apparatus receives the update table from the server.
Thereafter, the validity of the encryption algorithm is determined from the update table, the time information of the IC card RW authentication device, and the encryption algorithm identifier indicating the encryption algorithm used or used by the IC card RW. Judgment.

  The lower-level authentication device stores an encryption algorithm identifier indicating the encryption algorithm used for authentication with the IC card and notifies the higher-level authentication device of it. Further, the upper authentication apparatus determines that the old encryption algorithm is invalid after the update deadline by using the encryption algorithm identifier notified from the lower authentication apparatus, the determination table received from the server, and the current time. By doing so, the old encryption algorithm cannot be used after the update deadline, and the encryption algorithm can be updated safely. Further, the clock function is not required for the lower-level authentication device. That is, it does not significantly increase the cost such as mounting a clock function to the lower-level authentication device. The determination table can be freely changed by distributing it from the server to the higher-level authentication device. As a result, the encryption algorithm can be updated even if the update deadline for the encryption algorithm is not set in advance. In addition, the encryption algorithm can be updated safely while reducing the cost for updating the encryption algorithm.

Embodiment 9 FIG.
The ninth embodiment will be described with reference to FIGS.
In addition, about the part which is common in Embodiment 1- Embodiment 8, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In this embodiment, the information indicating the authentication method that can be used by the device to be authenticated 300 is included in the notification information that is read from the device to be authenticated 300 and notified to the upper device 200. The case will be described.

  The functional block configuration of authenticated apparatus 300 is the same as that described in the first embodiment.

  The notification information stored in the notification information storage unit 324 includes information representing authentication methods that can be used by the device to be authenticated 300. The notification information storage unit 324 stores information representing an authentication method that can be used by the device to be authenticated 300, in addition to the information stored in the authentication method storage unit 323.

  FIG. 31 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  Of the functional blocks described in the first embodiment, the lower-level authentication apparatus 100 does not include the update time limit storage unit 124 and the time limit determination unit 135, but instead includes a consistency determination unit 139.

  The notification information acquisition unit 134 acquires notification information stored in the device to be authenticated 300 by communicating with the device to be authenticated 300 using the interface unit 103. The notification information acquired by the notification information acquisition unit 134 includes information indicating an authentication method that can be used by the device to be authenticated 300.

The consistency determination unit 139 uses the control unit 101 to determine whether or not they are matched based on the information acquired by the authentication method acquisition unit 131 and the notification information acquired by the notification information acquisition unit 134. To do. The consistency determination unit 139 uses the authentication method that can be used by the device to be authenticated 300 represented by the information acquired by the authentication method acquisition unit 131 and the device to be authenticated 300 represented by the notification information acquired by the notification information acquisition unit 134. It is determined whether or not the possible authentication methods match. If the two match, the consistency determination unit 139 determines that both are consistent. When there is a discrepancy between the two, the consistency determination unit 139 determines that there is no consistency between the two.
When it is determined that there is no consistency, the consistency determination unit 139 determines that the authentication of the device to be authenticated 300 has failed. When it is determined that the authentication of the device to be authenticated 300 has failed, the consistency determination unit 139 fails to authenticate the device to be authenticated 300 by communicating with the device to be authenticated 300 using, for example, the interface unit 103. Notify you. In addition, the consistency determination unit 139 uses the output unit 105 to notify the user that the authentication of the authentication target device 300 has failed.

  Note that when there are a plurality of authentication methods that can be used by the device to be authenticated 300, the consistency determination unit 139 determines that both are consistent only when the authentication methods represented by the two pieces of information match. If there is even one that does not match, the consistency determination unit 139 determines that the two do not match.

  FIG. 33 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to this embodiment.

  The higher-level authentication device 200 does not have the authentication method acquisition unit 255 among the functional blocks described in the eighth embodiment.

  The update time limit determination unit 235 (time limit determination unit) uses the control unit 201 to notify the notification information acquired by the notification information acquisition unit 252, the information stored by the update time limit storage unit 224, and the current time acquisition unit 232. Based on the information, the update time limit of the newest authentication method among the authentication methods that can be used by the device to be authenticated 300 is compared with the current time. When the current time is later than the update time limit, the update time limit determination unit 235 determines that the authentication of the device to be authenticated 300 has failed. When the update deadline is later than the current time, the update deadline determination unit 235 determines that the authentication of the authenticated device 300 has been successful.

  FIG. 34 is a flowchart showing an example of the flow of the first authentication processing S510 in this embodiment.

  The first authentication processing S510 does not have the time limit determination step S514 among the steps described in the first embodiment, but has a consistency determination step S531 instead.

  After the notification information acquisition step S513 is completed, the lower-level authentication device 100 advances the first authentication processing S510 to the consistency determination step S531.

In the consistency determination step S531, the consistency determination unit 139 determines an authentication method that can be used by the device to be authenticated 300 based on the notification information acquired by the notification information acquisition unit 134 in the notification information acquisition step S513. The consistency determination unit 139 determines an authentication method that can be used by the device to be authenticated 300 based on the information acquired by the authentication method acquisition unit 131 in the authentication step S511. The consistency determination unit 139 determines whether the determined two authentication methods match.
If the two authentication methods match, the consistency determination unit 139 determines that there is consistency. The lower-level authentication device 100 advances the first authentication processing S510 to the normal end step S515.
If the two authentication methods do not match, the consistency determination unit 139 determines that there is no consistency. The lower-level authentication device 100 advances the first authentication processing S510 to the abnormal end step S516.

  FIG. 35 is a flowchart showing an example of the flow of the second authentication processing S550 in this embodiment.

  The second authentication process S550 does not have the update deadline notification step S554 among the steps described in the sixth embodiment, but instead has an update deadline determination step S559.

  After the notification information acquisition step S553 ends, the higher-level authentication device 200 advances the second authentication processing S550 to the update time limit determination step S559.

In the update time limit determination step S559, the current time acquisition unit 232 acquires the current time. The update time limit determination unit 235 determines an authentication method that can be used by the device to be authenticated 300 based on the notification information acquired by the notification information acquisition unit 252 in the notification information acquisition step S553. The update time limit determination unit 235 selects the newest authentication method from the determined authentication methods. The update deadline determination unit 235 acquires the update deadline for the selected authentication method from the update deadlines stored in the update deadline storage unit 224. The update time limit determination unit 235 determines whether the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is valid based on the current time acquired by the current time acquisition unit 232. .
If the current time has not passed the update deadline, the update deadline determination unit 235 determines that the authentication method is valid. The higher-level authentication device 200 advances the second authentication processing S550 to the expiration date determination step S555.
When the current time has passed the update deadline, the update deadline determination unit 235 determines that the authentication method is invalid. The higher-level authentication device 200 advances the second authentication process S550 to the authentication failure process S557.

  In this way, the information representing the authentication method that can be used by the device to be authenticated 300 is included in the notification information that the lower device 100 reads out from the device 300 to be authenticated and notifies the higher device 200, so that the lower authentication is performed. There is no need for the lower-level authentication device 100 to notify the higher-level authentication device 200 of the authentication method actually used for authentication between the device 100 and the device to be authenticated 300.

  When the device to be authenticated 300 is forged, the authentication method represented by the information stored in the authentication method storage unit 323 and the authentication method represented by the notification information stored in the notification information storage unit 324 do not match. there is a possibility. By checking the consistency between the lower-level authentication devices 100, it is possible to detect fraud by a forger and prevent unauthorized device 300 from being authenticated.

Embodiment 10 FIG.
The tenth embodiment will be described with reference to FIGS.
In addition, about the part which is common in Embodiment 1- Embodiment 9, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  FIG. 36 is a diagram illustrating an example of a functional block configuration of the lower-level authentication device 100 according to this embodiment.

  The consistency determination unit 139 uses the control unit 101 to compare the authentication method selected by the authentication method selection unit 132 with the notification information acquired by the notification information acquisition unit 134 to determine whether there is consistency. Determine. The consistency determination unit 139 uses the control unit 101, for example, based on the notification information acquired by the notification information acquisition unit 134 and the information stored in the authentication method storage unit 123, and the lower-level authentication device 100 and the device to be authenticated. The latest authentication method is selected from among the authentication methods that can be used by both of them. The consistency determination unit 139 compares the selected authentication method with the authentication method selected by the authentication method selection unit 132. When the two authentication methods match, the consistency determination unit 139 determines that there is consistency. When the two authentication methods are different, the consistency determination unit 139 determines that there is no consistency.

  The functional block configuration of the higher-level authentication device 200 is the same as that described in the ninth embodiment.

  FIG. 37 is a diagram showing an example of determination by the lower-level authentication device 100 and the higher-level authentication device 200 in this embodiment.

When there are two new and old authentication methods, the device 300 to be authenticated can use only the old authentication method, can use both the old and new authentication methods, and can use only the new authentication method. .
The same applies to the lower-level authentication device 100. In this example, it is assumed that the lower-level authentication device 100 can use both new and old authentication methods.

When the authentication method selected by the authentication method selection unit 132 and the authentication method used by the authentication unit 133 to authenticate the authentication target device 300 is the old authentication method, the consistency determination unit 139 uses the notification information acquired by the notification information acquisition unit 134. When the authentication method that can be used by the device 300 to be authenticated is only the old authentication method, it is determined that there is consistency, and in other cases, it is determined that there is no consistency.
In addition, when the authentication method selected by the authentication method selection unit 132 and the authentication method used by the authentication unit 133 for authentication of the authentication target device 300 is the new authentication method, the consistency determination unit 139 notifies the notification acquired by the notification information acquisition unit 134. When the authentication methods that can be used by the device to be authenticated 300 represented by the information are both old and new, and only the new authentication method, it is determined that there is consistency, and in other cases, the consistency is Judge that there is no.

  Therefore, when the check by the consistency determination unit 139 passes and the authentication of the device to be authenticated 300 is successful, if the authentication method usable by the device to be authenticated 300 represented by the notification information is only the old authentication method, the lower-level authentication It is guaranteed that the old authentication method is used for authentication between the device 100 and the device to be authenticated 300. In addition, if the new authentication method is included in the authentication method that can be used by the device to be authenticated 300 represented by the notification information, the new authentication method has been used for authentication between the lower-level authentication device 100 and the device to be authenticated 300. Guaranteed.

When the authentication method that can be used by the device to be authenticated 300 represented by the notification information is only the old authentication method, the update deadline determination unit 235 of the higher-level authentication device 200 determines that the authentication method is valid before the update deadline of the old authentication method. Yes, it is determined that the authenticated device 300 has been successfully authenticated. Further, if it is after the renewal time limit of the old authentication method, the renewal time determination unit 235 determines that the authentication method is invalid and the authentication of the device to be authenticated 300 has failed.
When the new authentication method is included in the authentication method that can be used by the device to be authenticated 300 represented by the notification information, the update time limit determination unit 235 determines that the authentication method is valid regardless of the update time limit of the old authentication method. It is determined that the authentication of the device 300 is successful.

  As described above, the consistency determination unit 139 checks the consistency between the authentication method used for authentication and the notification information, so that the authentication method used without being notified to the higher-level authentication device 200 can be obtained. The legitimacy apparatus 200 can determine the validity.

The encryption algorithm update method (authentication method update method) in this embodiment is a method for updating the authentication encryption algorithm (authentication method) of the IC card (authenticated device 300).
The validity of the encryption algorithm identifier of the IC card from the update table (determination table) indicating the update deadline of the encryption algorithm, the current time information, the encryption algorithm identifier of the IC card, and the encryption algorithm used (or used) for authentication Determine gender.

The encryption algorithm update system (authentication system) in this embodiment is a system that updates the authentication encryption algorithm (authentication method) of the IC card (authenticated device 300).
The apparatus includes an IC card, an IC card RW (lower authentication apparatus 100), and an IC card RW authentication apparatus (upper authentication apparatus 200).
A cryptographic algorithm identifier is stored in the IC card.
An update table indicating the update deadline of the encryption algorithm is stored in the IC card RW authentication apparatus.
The IC card RW receives the encryption algorithm identifier from the IC card.
Next, the IC card RW determines the validity of the encryption algorithm identifier using the encryption algorithm used or used by the IC card RW and the encryption algorithm identifier received from the IC card.
If it is determined to be valid, the IC card RW sends an encryption algorithm identifier to the IC card RW authentication device.
The IC card RW authentication apparatus determines the validity of the encryption algorithm identifier of the IC card from the update table, the time information of the IC card RW authentication apparatus, and the encryption algorithm identifier received from the IC card RW. .

The encryption algorithm update system (authentication system) in this embodiment is a system that updates the authentication encryption algorithm (authentication method) of the IC card (authenticated device 300).
The apparatus includes an IC card, an IC card RW (lower authentication apparatus 100), an IC card RW authentication apparatus (upper authentication apparatus 200), and a server (server apparatus 400).
A cryptographic algorithm identifier is stored in the IC card.
An update table (determination table) indicating the update deadline of the encryption algorithm is stored in the server.
The IC card RW receives the encryption algorithm identifier from the IC card.
Next, the IC card RW determines the validity of the encryption algorithm identifier using the encryption algorithm used (or used) by the IC card RW for authentication and the encryption algorithm identifier received from the IC card.
If it is determined to be valid, the IC card RW sends an encryption algorithm identifier to the IC card RW authentication device.
The IC card RW authentication apparatus receives the update table from the server.
The IC card RW authentication apparatus determines the validity of the encryption algorithm identifier of the IC card from the update table, the time information of the IC card RW authentication apparatus, and the encryption algorithm identifier received from the IC card RW. .

  The lower-level authentication device stores the encryption algorithm used or used for authentication with the IC card, and uses the encryption algorithm identifier read from the IC card and uses the encryption algorithm used or used for authentication with the IC card. Determine validity. Further, the upper authentication apparatus determines the validity of the encryption algorithm identifier using the encryption algorithm identifier notified from the lower authentication apparatus, the determination table received from the server, and the current time. By doing so, it is possible to determine that the old encryption algorithm is invalid after the update deadline. That is, after the update deadline, the old encryption algorithm cannot be used, and the encryption algorithm can be updated safely. Further, a clock function is not required for the lower-level authentication device. That is, there is no significant cost increase such as mounting a clock function to the lower-level authentication device. The determination table can be freely changed by distributing it from the server to the higher-level authentication device. As a result, it is possible to update the encryption algorithm even if the update deadline of the encryption algorithm is not set in advance, and it is possible to update the encryption algorithm safely while reducing the cost for updating the encryption algorithm.

Embodiment 11 FIG.
The eleventh embodiment will be described with reference to FIGS.
In addition, about the part which is common in Embodiment 1- Embodiment 10, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  The functional blocks of the lower-level authentication device 100 and the higher-level authentication device 200 are the same as those described in the tenth embodiment.

  The consistency determination unit 139 of the lower-level authentication device 100 uses the control unit 101 to compare the authentication method selected by the authentication method selection unit 132 with the notification information acquired by the notification information acquisition unit 134, thereby matching the consistency. It is determined whether or not there is. The consistency determination unit 139 uses, for example, the control unit 101, based on the notification information acquired by the notification information acquisition unit 134, the authentication method selection unit 132, among the authentication methods that can be used by the device to be authenticated 300. It is determined whether or not the selected authentication method is included. When the authentication method selected by the authentication method selection unit 132 is included in the authentication methods that can be used by the device to be authenticated 300 represented by the notification information, the consistency determination unit 139 determines that there is consistency and includes the authentication method. If not, the consistency determination unit 139 determines that there is no consistency.

  The update time limit storage unit 224 of the higher-level authentication device 200 stores two update time limits for one authentication method using the memory 202. The first update time limit is a time limit when there is no authenticated device 300 that cannot use an authentication method newer than the authentication method. The second update time limit is a time limit when there is no authenticated device 300 that can use the authentication method.

The update time limit determination unit 235 of the higher-level authentication device 200 uses the control unit 201 to acquire an authentication method that can be used by the device to be authenticated 300 based on the notification information acquired by the notification information acquisition unit 252.
When the authentication target apparatus 300 can use only one authentication method, the update time limit determination unit 235 uses the control unit 201 to determine the authentication method from the update time limit stored in the update time limit storage unit 224. Get the first renewal deadline. The update time limit determination unit 235 uses the control unit 201 to compare the acquired first update time limit with the current time acquired by the current time acquisition unit 232 to determine whether the update time limit has passed. . When the update deadline has passed, the update deadline determination unit 235 uses the control unit 201 to determine that the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is invalid, and the device to be authenticated 300 It is determined that the authentication of the failed.
When there are two or more authentication methods that can be used by the device to be authenticated 300, the update time limit determination unit 235 uses the control unit 201 to determine whether the device to be authenticated 300 uses the update time limit stored in the update time limit storage unit 224. The first renewal deadline for the latest authentication method among the available authentication methods is acquired. Further, the update deadline determination unit 235 uses the control unit 201 to select an authentication method other than the latest authentication method among the authentication methods that can be used by the device to be authenticated 300 from the update deadlines stored in the update deadline storage unit 224. Get a second renewal deadline for. The update deadline determination unit 235 uses the control unit 201 to select the earliest acquired update deadline (usually, the second update deadline for the oldest authentication method is applicable). The update deadline determination unit 235 uses the control unit 201 to compare the selected update deadline with the current time acquired by the current time acquisition unit 232 and determine whether or not the update deadline has passed. When the update deadline has passed, the update deadline determination unit 235 uses the control unit 201 to determine that the authentication method used for authentication between the lower-level authentication device 100 and the device to be authenticated 300 is invalid, and the device to be authenticated 300 It is determined that the authentication of the failed.

  FIG. 38 is a diagram illustrating an example of an update schedule of an authentication method between the lower-level authentication device 100 and the device to be authenticated 300 in the authentication system 800.

  The first update deadline is set after completion of the first stage of authentication method update and before completion of update of the authentication method. The second update deadline is set after the update of the authentication method is completed.

  FIG. 39 is a diagram showing an example of determination by the lower-level authentication device 100 and the higher-level authentication device 200 in this embodiment.

When the authentication method selected by the authentication method selection unit 132 and the authentication method used by the authentication unit 133 to authenticate the authentication target device 300 is the old authentication method, the consistency determination unit 139 uses the notification information acquired by the notification information acquisition unit 134. When the authentication method that can be used by the device to be authenticated 300 is only the old authentication method and both the old and new authentication methods, it is determined that there is consistency, and in other cases, there is no consistency. judge.
In addition, when the authentication method selected by the authentication method selection unit 132 and the authentication method used by the authentication unit 133 for authentication of the authentication target device 300 is the new authentication method, the consistency determination unit 139 notifies the notification acquired by the notification information acquisition unit 134. When the authentication methods that can be used by the device to be authenticated 300 represented by the information are both old and new, and only the new authentication method, it is determined that there is consistency, and in other cases, the consistency is Judge that there is no.

  Therefore, when the check by the consistency determination unit 139 passes and the authentication of the device to be authenticated 300 is successful, if the authentication method usable by the device to be authenticated 300 represented by the notification information is only the old authentication method, the lower-level authentication It is guaranteed that the old authentication method is used for authentication between the device 100 and the device to be authenticated 300. If the authentication method that can be used by the device to be authenticated 300 represented by the notification information is only the new authentication method, the new authentication method is used for authentication between the lower-level authentication device 100 and the device to be authenticated 300. Guaranteed. However, when the authentication methods that can be used by the device to be authenticated 300 represented by the notification information are both old and new, it is not known which authentication method was used.

When the authentication method that can be used by the device to be authenticated 300 represented by the notification information is only the old authentication method, the update deadline determination unit 235 of the higher-level authentication device 200 determines the authentication method before the first update deadline of the old authentication method. Is valid and it is determined that authentication of the device to be authenticated 300 has succeeded. In addition, if it is after the first update deadline of the old authentication method, the update deadline determination unit 235 determines that the authentication method is invalid and the authentication of the device 300 to be authenticated has failed.
When the authentication methods that can be used by the device to be authenticated 300 represented by the notification information are both old and new, the update time limit determination unit 235 determines that the authentication method is valid and the authentication target is valid before the second update time limit of the old authentication method. It is determined that the authentication of the device 300 is successful. Further, if the second update deadline of the old authentication method is after, it is determined that the authentication method is invalid and the authentication of the device to be authenticated 300 has failed.
When the authentication method that can be used by the device to be authenticated 300 represented by the notification information is the new authentication method, the update time limit determination unit 235 determines whether the authentication method is valid regardless of the renewal time limit of the old authentication method. It is determined that the authentication apparatus 300 has been successfully authenticated.

As described above, the consistency determination unit 139 checks the consistency between the authentication method used for authentication and the notification information, so that the authentication method used without being notified to the higher-level authentication device 200 can be obtained. The legitimacy apparatus 200 can determine the validity.
Further, by providing two authentication method update deadlines, the higher-level authentication device 200 can determine the validity of the authentication method even if the lower-level authentication device 100 does not know whether the authentication method is new or old.

  When the lower-level authentication device 100 can use only the old authentication method, the old authentication method is also used for authentication with the authenticated device 300 that can use both the old and new authentication methods. In this case, since the upper authentication apparatus 200 determines that the authentication method is invalid after the second renewal deadline, the old authentication method will not be used forever.

Embodiment 12 FIG.
The twelfth embodiment will be described with reference to FIGS.

  In this embodiment, a configuration will be described in which the lower-level authentication device 100 determines the validity of the authentication method based on the issue date of the device to be authenticated 300 rather than the expiration date of the device to be authenticated 300.

  The overall configuration of authentication system 800 and the configuration of functional blocks of authenticated device 300 and lower-level authentication device 100 are the same as those described in the first embodiment.

  The notification information stored in the notification information storage unit 324 of the device to be authenticated 300 includes information representing the issue date of the device to be authenticated 300. The issue date of the device to be authenticated 300 is an example of a date related to the device to be authenticated 300.

  The expiration date determination unit 135 of the lower-level authentication device 100 uses the control unit 101 to determine whether the authentication method selection unit 132 uses the information stored in the update expiration date storage unit 124 and the notification information acquired by the notification information acquisition unit 134. The update deadline for the selected authentication method is compared with the issue date of the device to be authenticated 300. When the issue date is later than the renewal time limit, the time limit determining unit 135 uses the control unit 101 to determine that the authentication of the device to be authenticated 300 has failed.

  FIG. 40 is a diagram illustrating an example of a functional block configuration of the higher-level authentication device 200 according to this embodiment.

  Of the functional blocks described in Embodiment 1, the higher-level authentication device 200 does not have the update deadline notification unit 254 but instead has an issue date determination unit 239.

The issue date determination unit 239 uses the control unit 201 to check whether the issue date of the device to be authenticated 300 is correct based on the notification information acquired by the notification information acquisition unit 252 and the information acquired by the current time acquisition unit 232. Determine whether or not.
For example, if the length of the validity period of the device to be authenticated 300 is a maximum of 3 years, the device to be authenticated 300 that has passed 3 years or more from the date of issue has already expired. Therefore, the expiration date determination unit 233 determines that the device to be authenticated 300 is not valid.
However, if the device to be authenticated 300 is forged, the validity period may be set to more than 3 years. That is, there is a possibility that there is an authenticated device 300 whose expiration date has not yet passed, even though the issue date is three years or more ago.
Therefore, when the issue date of the device to be authenticated 300 is a date that should have already expired, the issue date determination unit 239 determines that the issue date is not correct.

  When the issue date determination unit 239 determines that the issue date of the device to be authenticated 300 is not correct, the process providing unit 210 uses the control unit 201 to control the device to be authenticated 300 regardless of the determination result of the expiration date determination unit 233. Is determined to be invalid.

  Since the flow of the first authentication process S510 is the same as that of the first embodiment, only the differences will be described.

  In the time limit determination step S514, the time limit determination unit 135 temporarily stores the information stored in the update time limit storage unit 124, the notification information acquired by the notification information acquisition unit 134 in the notification information acquisition step S513, and the authentication method storage step S512. Based on the stored authentication method, the authentication unit 133 determines whether or not the authentication method used for authentication with the device to be authenticated 300 is valid. If the issuance date of the device to be authenticated 300 is before the renewal time limit of the authentication method used for authentication with the device to be authenticated 300, the time limit determination unit 135 determines that the authentication method is valid, and If the issuance date of the device 300 is after the update deadline of the authentication method, the time limit determination unit 135 determines that the authentication method is invalid.

  FIG. 41 is a flowchart showing an example of the flow of the second authentication processing S550 in this embodiment.

  The second authentication process S550 includes an issue date determination step S560 in addition to the steps described in the first embodiment.

  In the expiration date determination step S555, when the expiration date determination unit 233 determines that the device to be authenticated 300 is valid, the higher-level authentication device 200 advances the second authentication processing S550 to the issue date determination step S560.

In the issue date determination step S560, the issue date determination unit 239 passes the issue date of the authenticated device 300 based on the notification information acquired by the notification information acquisition unit 252 and the information acquired by the current time acquisition unit 232. The period is calculated. The issue date determination unit 239 compares the calculated elapsed period with a predetermined reference period set in advance.
When the elapsed period is shorter than the reference period, the issue date determination unit 239 determines that the issue date of the device to be authenticated 300 is correct. The higher-level authentication device 200 advances the second authentication process S550 to the authentication success process S556.
When the elapsed period is longer than the reference period, the issue date determination unit 239 determines that the issue date of the device to be authenticated 300 is not correct. The higher-level authentication device 200 advances the second authentication process S550 to the authentication failure process S557.

  FIG. 42 is a diagram showing an example of an update schedule of an authentication method between the lower-level authentication device 100 and the authenticated device 300 in the authentication system 800 of this embodiment.

  The administrator of the authentication system 800 sets an update period for the old authentication method in advance before starting to update the authentication method. The renewal deadline of the old authentication method is determined at the time of starting renewal or at an arbitrary time later than that. The update time limit storage unit 124 of the lower-level authentication device 100 stores a predetermined update time limit of the old authentication method. In the example of this figure, the update deadline is before the end of the first stage, but the update deadline may be at the end of the first stage or later.

  The lower-level authentication device 100 that cannot use the new authentication method performs authentication using the old authentication method between the authenticated device 300 that cannot use the new authentication method and the authenticated device 300 that can use both the old and new authentication methods. To do. When the issue date of the device to be authenticated 300 is later than the update deadline of the old authentication method, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed, so the lower-level authentication device 100 uses the old authentication method. Even if the authentication target device 300 is possible, the authentication target device 300 whose issue date is later than the update period of the old authentication method is not authenticated.

  The lower-level authentication device 100 that can use both the old and new authentication methods performs authentication using the old authentication method with the device to be authenticated 300 that cannot use the new authentication method. When the issuance date of the device to be authenticated 300 is later than the update due date of the old authentication method, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed, so the lower-level authentication device 100 uses the new authentication method. Among the authentication target devices 300 that cannot be authenticated, the authentication target device 300 whose issue date is later than the update time limit of the old authentication method is not authenticated.

  A case will be described in which, after the reference period elapses from the renewal deadline of the old authentication method, the authenticated device 300 that succeeds in authentication with the lower-level authentication device 100 can be forged if the old authentication method is used.

As described above, when the issue date of the device to be authenticated 300 is later than the update time limit of the old authentication method, the time limit determination unit 135 determines that the authentication of the device to be authenticated 300 has failed.
Further, if the issue date of the device to be authenticated 300 is earlier than the renewal deadline of the old authentication method, since the period longer than the reference period has elapsed from the issue date, the higher-level authentication device 200 has the issue date of the device to be authenticated 300 correctly Judge that there is no.
Since the issue date of the device to be authenticated 300 is included in the notification information notified to the higher-level authentication device 200, if the issue date is falsified to deceive the lower-level authentication device 100, the higher-level authentication device 200 is excluded. If the issue date is set so as not to be excluded, the lower-level authentication apparatus 100 is excluded.
Therefore, even if the forger of the device to be authenticated 300 sets the issue date of the device to be authenticated 300 before or after the renewal deadline of the old authentication method, the authentication system using the forged device to be authenticated 300 is used. 800 cannot be used.

  As described above, even if the authentication system 800 is configured to determine the validity of the authentication method using the issue date of the device to be authenticated 300 instead of the expiration date of the device to be authenticated 300, the same as in the first embodiment. The effect of.

The issue date determination unit 239 does not determine the validity of the issue date based on the issue date and the current time, but determines the validity of the issue date based on the issue date and the expiration date. May be.
For example, the issue date determination unit 239 uses the control unit 201 to calculate a period (length) from the issue date of the authenticated device 300 to the expiration date based on the notification information acquired by the notification information acquisition unit 252. To do. The issue date determination unit 239 uses the control unit 201 to compare the calculated length of the period with the reference period. When the length of the calculated period is longer than the reference period, the issue date determination unit 239 uses the control unit 201 to determine that the issue date of the device to be authenticated 300 is not correct.

Further, instead of the expiration date and issue date of the device to be authenticated 300, an authentication method using a date that can be associated in some way with an authentication method that can be used by the device to be authenticated 300 based on the update schedule of the authentication method. It may be configured to determine the legitimacy.
The lower-level authentication device 100 determines the validity of the authentication method by comparing the date related to the device 300 to be authenticated and the update time limit of the authentication method.
The lower-level authentication device 100 notifies the upper-level authentication device 200 of the date information used for the determination.
The higher-level authentication device 200 determines whether or not the device to be authenticated 300 is valid based on the notified date information and the current time.

  As a result, the same effects as those of the first embodiment can be obtained.

  As described above, the configuration described in each embodiment is an example, and another configuration may be used. For example, the structure which combined the structure demonstrated in different embodiment may be sufficient, and the structure which replaced the structure of the non-essential part with the other structure may be sufficient.

The authentication device (lower authentication device 100) described above includes a communication device (interface unit 103) that communicates with an authenticated device (authenticated device 300), a processing device that processes information (control unit 101), and an authentication method selection. Part (132), an authentication part (133), and a time limit determination part (135).
The authentication method selection unit uses the processing device to select an authentication method to be used for authentication of the authentication target device from among a plurality of authentication methods.
The authentication unit authenticates the device to be authenticated using the communication device, using the authentication method selected by the authentication method selection unit.
The deadline determination unit compares the update deadline determined in advance for the authentication method selected by the authentication method selection unit with the due date for the device to be authenticated using the processing device, and the due date is more than the renewal deadline. If it is later, it is determined that authentication of the device to be authenticated has failed.

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

  The date related to the device to be authenticated (300) is an expiration date of the device to be authenticated or an issue date of the device to be authenticated.

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

The authentication device (100) further includes a storage device (memory 102) that stores information, an update time limit acquisition unit (setting information acquisition unit 136), and an update time limit storage unit (124).
In addition to communicating with the device to be authenticated, the communication device (103) communicates with a setting device (350) that notifies the update deadline.
The update time limit acquisition unit acquires the update time limit notified by the setting device from the setting device using the communication device.
The update deadline storage unit stores the update deadline acquired by the update deadline acquisition unit using the storage device.
The deadline determination unit (135) compares the update deadline stored in the update deadline storage unit with the due date.

  Thereby, the update time limit of the authentication method stored in the authentication device can be changed later. Since the communication device provided for communicating with the device to be authenticated is also used for communication with the setting device, it is not necessary to separately provide a configuration for communicating with the setting device, and the manufacturing cost of the authentication device can be reduced.

The authentication device (100) further includes a date acquisition unit (notification information acquisition unit 134).
The said date acquisition part acquires the date regarding the said to-be-authenticated apparatus from the said to-be-authenticated apparatus (300) using the said communication apparatus (103).
The time limit determination unit (135) compares the update time limit with the date acquired by the date acquisition unit.

  If the device to be authenticated is forged, the due date can be falsified, but in order to deceive the time limit determination unit, it is necessary to set the due date for the device to be authenticated before the renewal time limit of the authentication method. For this reason, a contradiction arises, such as the validity period of the device to be authenticated being expired after the update period of the authentication method (or after the reference period has elapsed). For this reason, even if it determines using the date acquired from the to-be-authenticated apparatus, the safety | security of an authentication system can be maintained.

  The date acquisition unit (134) acquires the date from the device to be authenticated when the authentication unit (133) succeeds in authenticating the device to be authenticated (300).

  If the authentication device cannot acquire the due date for the device to be authenticated unless authentication by the authentication unit is successful, the authentication unit first authenticates the device to be authenticated. The due date for the authentication device is acquired, and the term determining unit determines. Thereby, it is possible to prevent the authentication target apparatus from being authenticated using the old authentication method after the update of the authentication method is completed.

  The authentication unit (133) authenticates the device to be authenticated when the time limit determination unit (135) does not determine that the authentication of the device to be authenticated (300) has failed.

  If the authentication device is configured to acquire the date related to the device to be authenticated before authentication by the authentication unit, first, the date acquisition unit acquires the date related to the device to be authenticated, and the time limit determination unit determines, If successful, the authenticator authenticates. Thereby, useless authentication processing can be omitted.

The authentication device (100) described above includes a communication device (103) that communicates with the device to be authenticated (300), and a second communication device (wireless communication unit 104) that communicates with a higher-level authentication device (upper authentication device 200). , A processing apparatus (101) for processing information, an authentication method selection unit (132), an authentication unit (133), and an authentication method notification unit (155).
The authentication method selection unit uses the processing device to select an authentication method to be used for authentication of the authentication target device from among a plurality of authentication methods.
The authentication unit authenticates the device to be authenticated using the communication device, using the authentication method selected by the authentication method selection unit.
The authentication method notification unit uses the second communication device to authenticate the higher-level authentication device selected by the authentication method selection unit when the authentication unit succeeds in authenticating the device to be authenticated. Notify the method.

  By notifying the higher-level authentication device of the authentication method used for authenticating the device to be authenticated, the upper-level authentication device can determine the update time limit of the authentication method. There is no need to know. For this reason, when the update deadline of the authentication method is changed, it is not necessary to notify the authentication device of the changed update deadline, and the update deadline of the authentication method is flexibly changed depending on the degree of decrease in the security of the authentication method. be able to.

The authentication device (100) described above includes a communication device (103) that communicates with the device to be authenticated (300), a second communication device (104) that communicates with the higher-level authentication device (200), and a process that processes information. It has an apparatus (101), an authentication method selection unit (132), an authentication unit (133), and an authentication method notification unit (notification information notification unit 152).
The authentication method selection unit uses the processing device to select an authentication method to be used for authentication of the authentication target device from among a plurality of authentication methods.
The authentication unit authenticates the device to be authenticated using the communication device, using the authentication method selected by the authentication method selection unit.
The authentication method notification unit uses the second communication device to authenticate the higher-level authentication device to the authentication target device when the authentication unit successfully authenticates the authentication target device. Notify the method.

  By notifying the upper authentication device of the authentication methods that can be used by the device to be authenticated, the upper authentication device can determine the update deadline of the authentication method, so the authentication device needs to know the update deadline of the authentication method. There is no. For this reason, when the update deadline of the authentication method is changed, it is not necessary to notify the authentication device of the changed update deadline, and the update deadline of the authentication method is flexibly changed depending on the degree of decrease in the security of the authentication method. be able to.

The authentication device (100) further includes an authentication method acquisition unit (131), a notification information acquisition unit (134), and a consistency determination unit (139).
The authentication method acquisition unit uses the communication device (103) to acquire an authentication method that can be used by the device to be authenticated from the device to be authenticated (300).
The authentication method selection unit selects an authentication method to be used for authentication of the device to be authenticated based on the authentication method acquired by the authentication method acquisition unit.
The notification information acquisition unit is notification information to be notified from the authentication target device to the authentication device (200) using the communication device, and an authentication method that can be used by the authentication target device. Get notification information including information to represent.
The consistency determination unit uses the processing device (101) to authenticate the authentication method acquired by the authentication method acquisition unit or the authentication method selected by the authentication method selection unit, and the notification information acquired by the notification information acquisition unit. It is determined whether or not there is consistency with the authentication method represented by the information included in the information, and when it is determined that there is no consistency, it is determined that the authentication of the device to be authenticated has failed.
The authentication method notification unit notifies the higher-level authentication device of the authentication method included in the notification information acquired by the notification information acquisition unit.

  Since the notification information notified to the higher-level authentication device includes information representing an authentication method that can be used by the device to be authenticated, there is no need to change the communication sequence between the authentication device and the higher-level authentication device. Further, the consistency determination unit determines whether there is consistency between the authentication method acquired by the authentication method acquisition unit or the authentication method selected by the authentication method selection unit and the authentication method represented by the information included in the notification information. Therefore, it is possible to prevent the authentication device from authenticating the forged device to be authenticated.

  The authentication method selection unit (132) is used by the device to be authenticated as an authentication method used for authentication of the device to be authenticated (300) among a plurality of authentication methods that can be used by the authentication unit (133). Select a possible authentication method.

  By selecting an authentication method that can be used by the authentication apparatus and that can be used by the apparatus to be authenticated, the authentication unit can authenticate the apparatus to be authenticated.

  The authentication method selection unit (132) is the most suitable among the plurality of authentication methods that can be used by the device to be authenticated (300) among the plurality of authentication methods that can be used by the authentication unit (133). Select a new authentication method.

  As a result, it is possible to authenticate the device to be authenticated using an authentication method that is as secure as possible.

The authentication device (100) further includes an authentication method acquisition unit (131).
The authentication method acquisition unit uses the communication device (103) to acquire an authentication method that can be used by the device to be authenticated from the device to be authenticated (300).
The authentication method selection unit (132) selects an authentication method to be used for authentication of the authentication target device based on the authentication method acquired by the authentication method acquisition unit.

  By acquiring an authentication method that can be used by the device to be authenticated from the device to be authenticated, it is possible to reliably select an authentication method that can be used by the device to be authenticated even if the authentication method that can be used differs depending on the device to be authenticated. it can.

The authentication device (100) further includes an update necessity determination unit (137).
The update necessity determination unit is an authentication method in which the authentication unit (133) cannot be used among the authentication methods acquired by the authentication method acquisition unit (132) using the processing device (101). If there is an authentication method newer than the authentication method usable by the authentication unit, it is determined that the authentication device needs to be updated.

  As a result, it is possible to determine that the authentication device needs to be updated before an authentication method that can be used by the authentication device becomes unusable, so that the authentication device can be updated with sufficient time.

The authentication device (upper authentication device 200) described above includes a communication device (wireless communication unit 203) that communicates with a lower authentication device (lower authentication device 100), a processing device (control unit 201) that processes information, and an authentication. It has a method acquisition unit (255) and a time limit determination unit (update time limit determination unit 235).
The authentication method acquisition unit acquires the authentication method used by the lower-level authentication device to authenticate the device to be authenticated from the lower-level authentication device using the communication device.
The time limit determination unit compares the current update time with a predetermined update time limit for the authentication method acquired by the authentication method acquisition unit using the processing device, and the current time is greater than the update time limit. If it is later, it is determined that authentication of the device to be authenticated has failed.

  The higher-level authentication device determines the update deadline of the authentication method used by the lower-level authentication device to authenticate the device to be authenticated, so the lower-level authentication device does not need to make the determination and knows the correct current time. There is no need. Thereby, the manufacturing cost of a low-order authentication apparatus can be suppressed.

The authentication device (upper authentication device 200) described above includes a communication device (203) that communicates with a lower authentication device (100), a processing device (201) that processes information, and an authentication method acquisition unit (notification information acquisition unit). 252) and a time limit determination unit (update time limit determination unit 235).
The authentication method acquisition unit acquires an authentication method that can be used by the authentication target device authenticated by the lower-level authentication device from the lower-level authentication device, using the communication device.
The time limit determination unit compares the current update time with a predetermined update time limit for the authentication method acquired by the authentication method acquisition unit using the processing device, and the current time is greater than the update time limit. If it is later, it is determined that authentication of the device to be authenticated has failed.

  Since the upper authentication device determines the update deadline of the authentication method that can be used by the device to be authenticated, the lower authentication device does not need to make the determination and does not need to know the correct current time. Thereby, the manufacturing cost of a low-order authentication apparatus can be suppressed.

  The authentication system (800) described above includes the authentication device (lower authentication device 100) and the device to be authenticated (authenticated device 300) authenticated by the authentication device.

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

  The authentication system (800) further includes an authentication device (upper authentication device 200) that exists above the authentication device (100).

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

  The authentication device (lower authentication device 100; higher authentication device 200) described above is implemented by a computer program that functions as the authentication device when executed by a computer having a processing device that processes information. Can do.

  According to the computer program, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

The authentication method (first authentication process S510) described above has the following procedure.
The authentication device (lower authentication device 100) selects an authentication method to be used for authentication of the device to be authenticated (authenticated device 300) from among a plurality of authentication methods.
The authentication device authenticates the device to be authenticated using the selected authentication method.
The authentication device compares a predetermined renewal deadline for the selected authentication method with a date related to the device to be authenticated, and if the date is later than the renewal time limit, the authentication of the device to be authenticated It is determined that failed.

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

The authentication method described above (first authentication processing S510, second authentication processing S550) has the following procedure.
The authentication device (lower authentication device 100) selects an authentication method to be used for authentication of the device to be authenticated (authenticated device 300) from among a plurality of authentication methods.
The authentication device authenticates the device to be authenticated using the selected authentication method.
When the authentication device succeeds in authenticating the device to be authenticated, the authentication device notifies the upper authentication device (upper authentication device 200) of the selected authentication method.
The higher-level authentication device acquires the authentication method notified by the authentication device from the authentication device.
The higher-level authentication device compares a predetermined update deadline for the acquired authentication method with the current time, and if the current time is later than the update deadline, the authentication device authenticates the device to be authenticated. Judge that it failed.

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

The authentication method described above (first authentication processing S510, second authentication processing S550) has the following procedure.
The authentication device (lower authentication device 100) selects an authentication method to be used for authentication of the device to be authenticated (300) from among a plurality of authentication methods.
The authentication device authenticates the device to be authenticated using the selected authentication method.
When the authentication device succeeds in authenticating the device to be authenticated, the authentication device notifies the higher-level authentication device (higher-level authentication device 200) of authentication methods that can be used by the device to be authenticated.
The higher-level authentication device acquires the authentication method notified by the authentication device from the authentication device.
The higher-level authentication device compares a predetermined update deadline for the acquired authentication method with the current time, and if the current time is later than the update deadline, the authentication device authenticates the device to be authenticated. Judge that it failed.

  Accordingly, even if the authentication device does not know the correct current time, it is possible to prevent the authentication target device from being authenticated using the old authentication method after the update of the authentication method is completed. Since the authentication device does not need to know the correct current time, the manufacturing cost of the authentication device can be reduced.

  100 Low-level authentication device, 101, 201, 301 Control unit, 102, 202, 302 Memory, 103, 303 Interface unit, 104 Wireless communication unit, 105 Output unit, 121, 221, 321 Key related information storage unit, 123, 323 Authentication Method storage unit, 124, 224 Renewal time limit storage unit, 125 Authentication procedure storage unit, 126 Validity storage unit, 131,255 Authentication method acquisition unit, 132 Authentication method selection unit, 133,253,331 Authentication unit, 134,252 Notification Information acquisition unit, 135 time limit determination unit, 136 setting information acquisition unit, 137 update necessity determination unit, 138 validity determination unit, 139 consistency determination unit, 141 vehicle information storage unit, 142 notification information storage unit, 151 vehicle information notification , 152 Notification information notification unit, 153 Second authentication unit, 154, 234 Acquisition unit, 155 authentication method notification unit, 156 validity acquisition unit, 200 upper authentication device, 203 wireless communication unit, 204 second communication unit, 210 processing providing unit, 232 current time acquisition unit, 233 expiration date determination unit, 235 update Expiration date determination unit, 238 Validity determination unit, 239 Issue date determination unit, 251 Vehicle information acquisition unit, 254 Update expiration date notification unit, 256 Validity notification unit, 300 Device to be authenticated, 324 Notification information storage unit, 325 Setting information storage unit 332 Information reading unit, 350 setting device, 400 server device, 800 authentication system, S510 first authentication process, S511, S551 authentication step, S512 authentication method storage step, S513, S553 notification information acquisition step, S514 time limit determination step, S515 Normal termination process, S516 Abnormal termination process, S517 Expiration date acquisition work S518 authentication method selection step, S519 validity determination step, S531 consistency determination step, S520 setting processing, S521 setting information acquisition step, S522 setting information storage step, S550 second authentication processing, S552 vehicle information acquisition step, S554 update Expiration date notification step, S555 expiration date determination step, S556 authentication success processing, S557 authentication failure processing, S558 authentication method acquisition step, S559 update expiration date determination step, S560 issue date determination step.

Claims (18)

A communication device that communicates with the device to be authenticated, a processing device that processes information, an authentication method selection unit, an authentication unit, and a time limit determination unit;
The authentication method selection unit uses the processing device to select an authentication method to be used for authentication of the authentication target device from a plurality of authentication methods,
The authentication unit uses the communication device to authenticate the authentication target device using the authentication method selected by the authentication method selection unit,
The deadline determination unit compares the update deadline determined in advance for the authentication method selected by the authentication method selection unit with the due date for the device to be authenticated using the processing device, and the due date is more than the renewal deadline. An authentication apparatus characterized by determining that authentication of the apparatus to be authenticated has failed when the latter is later.   2. The authentication apparatus according to claim 1, wherein the date related to the device to be authenticated is an expiration date of the device to be authenticated or an issue date of the device to be authenticated. The authentication device further includes a storage device that stores information, an update time limit acquisition unit, and an update time limit storage unit,
In addition to communicating with the device to be authenticated, the communication device communicates with a setting device that notifies the update deadline,
The update deadline acquisition unit acquires the update deadline notified by the setting device from the setting device using the communication device,
The update deadline storage unit stores the update deadline acquired by the update deadline acquisition unit using the storage device,
The authentication apparatus according to claim 1, wherein the time limit determination unit compares the update time limit stored in the update time limit storage unit with the date. The authentication device further includes a date acquisition unit,
The date acquisition unit acquires a date related to the device to be authenticated from the device to be authenticated using the communication device,
The date determination unit, the updated date and authentication device according to any one of claims 1 to 3, characterized by comparing the date to the date acquisition unit has acquired.   The authentication device according to claim 4, wherein the date acquisition unit acquires the date from the device to be authenticated when the authentication unit succeeds in authenticating the device to be authenticated. The authentication unit, when the time limit judgment unit has not determined that the authentication has failed for the apparatus to be authenticated, to any one of claims 1 to 3, characterized in that to authenticate the prover The authentication device described. The authentication method selection unit selects an authentication method that can be used by the device to be authenticated from among a plurality of authentication methods that can be used by the authentication unit. The authentication device according to any one of claims 1 to 6 , wherein the authentication device is characterized in that: The authentication method selection unit selects a newest authentication method from among a plurality of authentication methods that can be used by the device to be authenticated among a plurality of authentication methods that can be used by the authentication unit. The authentication device according to claim 7 . The authentication device further includes an authentication method acquisition unit,
The authentication method acquisition unit uses the communication device to acquire an authentication method that can be used by the device to be authenticated from the device to be authenticated,
The authentication apparatus according to claim 8 , wherein the authentication method selection unit selects an authentication method to be used for authentication of the authentication target device based on the authentication method acquired by the authentication method acquisition unit. The authentication device further includes an update necessity determination unit,
The update necessity determination unit is an authentication method in which the authentication unit cannot be used among the authentication methods acquired by the authentication method acquisition unit using the processing device, and the authentication unit can use the authentication method. The authentication apparatus according to claim 9 , wherein when there is an authentication scheme newer than the scheme, it is determined that the authentication apparatus needs to be updated. A communication device that communicates with a lower-level authentication device, a processing device that processes information, an authentication method acquisition unit, and a time limit determination unit;
The authentication method acquisition unit acquires the authentication method used by the lower-level authentication device to authenticate the device to be authenticated from the lower-level authentication device using the communication device,
The time limit determination unit compares the current update time with a predetermined update time limit for the authentication method acquired by the authentication method acquisition unit using the processing device, and the current time is greater than the update time limit. An authentication device characterized in that if it is later, it is determined that authentication of the device to be authenticated has failed. A communication device that communicates with a lower-level authentication device, a processing device that processes information, an authentication method acquisition unit, and a time limit determination unit;
The authentication method acquisition unit acquires an authentication method that can be used by the authenticated device authenticated by the lower-level authentication device from the lower-level authentication device, using the communication device,
The time limit determination unit compares the current update time with a predetermined update time limit for the authentication method acquired by the authentication method acquisition unit using the processing device, and the current time is greater than the update time limit. An authentication device characterized in that if it is later, it is determined that authentication of the device to be authenticated has failed. 11. An authentication system comprising: the authentication device according to claim 1; and a device to be authenticated that is authenticated by the authentication device. The authentication system according to claim 13 , further comprising the authentication device according to claim 11 or 12 , wherein the authentication device is a lower-level authentication device. An authentication program in which the computer functions as the authentication device according to any one of claims 1 to 12 when executed by a computer having a processing device for processing information. The authentication device selects the authentication method to be used for authenticating the device to be authenticated from among multiple authentication methods,
The authentication device authenticates the device to be authenticated using the selected authentication method,
The authentication device compares a predetermined renewal deadline for the selected authentication method with a date related to the device to be authenticated, and if the date is later than the renewal time limit, the authentication of the device to be authenticated An authentication method characterized in that it is determined that the authentication has failed. The authentication device selects the authentication method to be used for authenticating the device to be authenticated from among multiple authentication methods,
The authentication device authenticates the device to be authenticated using the selected authentication method,
When the authentication device succeeds in authenticating the device to be authenticated, it notifies the selected authentication method to the upper authentication device,
The upper authentication device acquires the authentication method notified by the authentication device from the authentication device,
The higher-level authentication device compares a predetermined update deadline for the acquired authentication method with the current time, and if the current time is later than the update deadline, the authentication device authenticates the device to be authenticated. An authentication method characterized in that it is determined that a failure has occurred. The authentication device selects the authentication method to be used for authenticating the device to be authenticated from among multiple authentication methods,
The authentication device authenticates the device to be authenticated using the selected authentication method,
When the authentication device succeeds in authenticating the device to be authenticated, the authentication method that can be used by the device to be authenticated is notified to a higher-level authentication device,
The upper authentication device acquires the authentication method notified by the authentication device from the authentication device,
The higher-level authentication device compares a predetermined update deadline for the acquired authentication method with the current time, and if the current time is later than the update deadline, the authentication device authenticates the device to be authenticated. An authentication method characterized in that it is determined that a failure has occurred.

Images