JP6763096B1 - system - Google Patents

Abstract

A key information storage unit having a first storage area for storing the first decryption key information in a format that cannot be referred to from the outside and a second storage area for storing the second decryption key information input from the outside. Using a decryption key generator that generates a decryption key based on the first decryption key information stored in the first storage area and the second decryption key information stored in the second storage area, and a decryption key. Based on the decryption unit that decrypts the encrypted information, the SIM information of the SIM of the mobile terminal that receives the authentication request of the mobile terminal and is included in the authentication request, and the information decrypted by the decryption unit. Provided is an authentication device including an authentication unit that authenticates SIM.

Description

The present invention relates to authentication devices, systems, authentication methods and programs.

A mechanism for authenticating a SIM using a key information stored in a SIM (Subsystem Identity Module) and a key information stored on an HSS (Home Subsystem Server) has been known (see, for example, Patent Document 1). ..
[Prior art literature]
[Patent Document]
[Patent Document 1] Japanese Unexamined Patent Publication No. 2013-168835

The problem to be solved

It is desirable to provide a technology that can reduce the possibility of SIM information leakage.

General disclosure

According to the first aspect of the present invention, an authentication device is provided. The authentication device has a first storage area for storing the first decryption key information in a format that cannot be referred to from the outside, and a second storage area for storing the second decryption key information input from the outside. It may be provided with a key information storage unit. The authentication device may include a decryption key generator that generates a decryption key based on the first decryption key information stored in the first storage area and the second decryption key information stored in the second storage area. .. The authentication device may include a decryption unit that decrypts the encrypted information by using the decryption key. The authentication device may include an authentication unit that receives an authentication request for the mobile terminal and authenticates the SIM based on the SIM information of the SIM of the mobile terminal included in the authentication request and the information decrypted by the decryption unit. ..

The authentication device may include a second decryption key information receiving unit that receives the second decryption key information from the outside and stores it in the second storage area. The second decryption key information receiving unit may receive the second decryption key information transmitted via the Internet. The amount of data of the first decryption key information may be larger than that of the second decryption key information. The amount of data of the first decryption key information may be smaller than that of the second decryption key information.

The authentication device is a subscriber information storage unit that stores a plurality of subscriber information, and each of the plurality of subscriber information includes a subscriber identification number and a key information unique to each SIM. An information storage unit may be provided, the SIM information may include the subscriber identification number, the authentication unit may include the subscriber identification number included in the SIM information, and the subscriber information storage unit may include the subscriber identification number. The SIM authentication may be performed based on the key information stored in association with the number and the information decrypted by the decoding unit. The subscriber identification number may be IMSI (International Mobile Subscriber Identity), and the key information may be a K value.

According to the second aspect of the present invention, a system including the authentication device and a management device for managing the authentication device is provided. The management device may include a first decryption key information receiving unit that receives the first decryption key information from the outside, and the storage control unit may include the first decryption key received by the first decryption key information receiving unit. The information may be stored in the first storage area.

According to the third aspect of the present invention, an authentication method is provided. The authentication method has a first storage area for storing the first decryption key information in a format that cannot be referred to from the outside, and a second storage area for storing the second decryption key information input from the outside. It may be executed by an authentication device having a key information storage unit. The authentication method may include a decryption key generation step of generating a decryption key based on the first decryption key information stored in the first storage area and the second decryption key information stored in the second storage area. .. The authentication method may include a decryption step of decrypting the encrypted information using the decryption key. The authentication method may include an authentication step of accepting the authentication request of the mobile terminal and performing SIM authentication based on the SIM information of the SIM of the mobile terminal included in the authentication request and the information decrypted by the decoding unit. ..

According to a fourth aspect of the present invention, a program is provided. The program has a key having a first storage area for storing the first decryption key information in a format that cannot be referred to from the outside, and a second storage area for storing the second decryption key information input from the outside. A decryption key generation stage in which a computer having an information storage unit generates a decryption key based on the first decryption key information stored in the first storage area and the second decryption key information stored in the second storage area. May be executed. The program may cause the computer to perform a decryption step of decrypting the encrypted information using the decryption key. The program accepts the authentication request of the mobile terminal to the computer, and performs an authentication step of authenticating the SIM based on the SIM information of the SIM of the mobile terminal included in the authentication request and the information decrypted by the decoding unit. You may let it run.

The outline of the above invention does not list all the necessary features of the present invention. Subcombinations of these feature groups can also be inventions.

It is explanatory drawing for demonstrating the service realized by using the AuC (Authentication Center) apparatus 100 which concerns on this embodiment. An example of the service flow realized by using the AuC apparatus 100 according to the present embodiment is schematically shown. An example of the functional configuration of the AuC device 100 is schematically shown. An example of the configuration of the key information storage unit 102 is shown schematically. An example of the processing flow by the AuC apparatus 100 is shown schematically. An example of the decryption key 610, the decryption key 620, and the decryption key 630 is shown schematically. Other examples of the decryption key 610, the decryption key 620, and the decryption key 630 are schematically shown. An example of the functional configuration of the AuC vendor device 300 is schematically shown. An example of the hardware configuration of the computer 1200 that functions as the AuC device 100 is shown schematically.

Hereinafter, the present invention will be described through embodiments of the invention, but the following embodiments do not limit the inventions claimed. Also, not all combinations of features described in the embodiments are essential to the means of solving the invention.

FIG. 1 is an explanatory diagram for explaining a service realized by using the AuC device 100 according to the present embodiment. The AuC device 100 is an example of an authentication device. This service provides a mechanism that allows a mobile communication network to be configured inside a company 50 or the like.

Here, the carrier 20 which is a telecommunications carrier provides a so-called core network in a mobile communication network to a PBX (Private Branch eXchanger) vendor 40, and the PBX vendor 40 provides a core network to a company 50 to provide a service. The case where it is realized will be described as an example. The mobile terminal 52 in the company 50 can execute wireless communication via the core network in the company 50 by the service.

The mobile terminal 52 is, for example, a mobile phone such as a smartphone. The mobile terminal 52 may be a tablet terminal, a PC (Personal Computer), or the like. It is not limited to the mobile terminal 52 that enjoys the service. For example, a so-called IoT (Internet of Things) terminal in the company 50 may execute wireless communication via the core network in the company 50.

Here, the case where the mobile communication network is an LTE (Long Term Evolution) network will be mainly described as an example. The core network may be composed of one device or a plurality of devices.

When the core network is composed of one device, the device is used as HSS, MME (Mobile Management Entry), PCRF (Police and Charging Rule Function), SGW (Serving Gateway), and PGW (Packet Data). You can do it. The device may further function as an IMS (IP Multimedia Subsystem).

When the core network is composed of a plurality of devices, the core network may be composed of an MME device, an HSS device, a PCRF device, an SGW device, and a PGW device. In addition to these devices, the core network may further consist of IMS devices.

The AuC device 100 according to the present embodiment is a device having an AuC function, and when the core network is composed of one device, the AuC device 100 may be the one device. That is, the AuC device 100 may function as a core network. When the core network is composed of a plurality of devices, the AuC device 100 may be an HSS device that constitutes the core network. Here, the case where the AuC device 100 functions as a core network will be mainly described as an example.

In the mobile communication network, the SIM of the mobile terminal 52 is authenticated using the authentication information stored in the SIM of the mobile terminal 52 and the authentication information stored in the HSS. In the so-called general mobile communication network provided by the carrier 20, the raw value of the authentication information is strictly managed by the carrier 20, and it is assumed that the raw value of the authentication information is not leaked to the outside. However, since the service provider in this embodiment is the PBX vendor 40 and the AuC device 100 is located in the company 50, that premise does not hold. If the authentication information is leaked, a clone SIM that can be used in the company 50 is generated, and the wireless communication service of the company 50 may be used irregularly.

In the service according to the present embodiment, a mechanism for suppressing the leakage of authentication information is provided. In the present embodiment, the carrier 20 divides the decryption key for decrypting the encrypted authentication information into the first decryption key information and the second decryption key information, and divides the first decryption key information into the AuC device 100. The second decryption key information is provided to the PBX vendor 40 by providing the AuC vendor 30 which is the vendor of the above. The first decryption key information and the second decryption key information are both information that can generate a decryption key, and information that cannot generate a decryption key by only one of them.

The carrier 20 uses, for example, the carrier device 200 to transmit the first decryption key information to the AuC vendor device 300 of the AuC vendor 30. The carrier device 200 transmits the first decryption key information to the AuC vendor device 300 via, for example, the network 80. The network 80 includes, for example, the Internet.

The AuC vendor 30 stores the first decryption key information in the AuC device 100. The AuC vendor 30 stores, for example, the AuC vendor device 300 stores the first decryption key information received from the carrier device 200 in the AuC device 100. The AuC vendor device 300 transmits, for example, the first decryption key information to the AuC device 100 via the network 32 and stores it. The network 32 may be a LAN (Local Area Network) or the like owned by the AuC vendor 30. The AuC vendor device 300 may be directly connected to the AuC device 100. The AuC device 100 that stores the first decryption key information is sold from the AuC vendor 30 to the PBX vendor 40, and is arranged in the company 50, for example.

The carrier 20 uses, for example, the carrier device 200 to transmit the second decryption key information to the PBX vendor device 400 of the PBX vendor 40. The carrier device 200 transmits the second decryption key information to the PBX vendor device 400 via, for example, the network 80.

The PBX vendor 40 uses the PBX vendor device 400 to transmit the second decryption key information to the AuC device 100. The PBX vendor device 400 transmits, for example, the second decryption key information to the AuC device 100 arranged in the company 50 via the network 80.

The AuC device 100 generates a decryption key from the stored first decryption key information and the second decryption key information received from the PBX vendor device 400. Then, when the AuC device 100 receives the encrypted authentication information, the AuC device 100 acquires the authentication information by decrypting the encrypted authentication information using the generated decryption key.

In this way, the decryption key is divided into two key information and transmitted to each of the AuC vendor 30 and the PBX vendor 40, so that one of the key information is assumed to be in the AuC vendor 30 or the PBX vendor 40. Even if it leaks or leaks on the network 80, it is possible to prevent the decryption key from being generated. As a result, it is possible to reduce the risk that the decryption key is leaked and the encrypted authentication information is decrypted and leaked.

Various methods can be adopted as a method for storing the first decryption key information in the AuC device 100. For example, the operator of the AuC vendor 30 may manually store the first decryption key information received by the AuC vendor device 300 from the carrier device 200 in the AuC device 100. Further, for example, the AuC vendor 30 may provide the carrier 20 with a mechanism capable of writing data to the AuC device 100, and the carrier 20 may write the first decryption key information to the AuC device 100 using the mechanism. ..

FIG. 2 schematically shows an example of a service flow realized by using the AuC device 100 according to the present embodiment. Here, the carrier 20 encrypts the first authentication information used for SIM authentication, and divides the decryption key for decrypting the encrypted first authentication information into two to obtain KeyA and KeyB. The state will be described as a start state.

The decryption key may be the same as the encryption key for encrypting the first authentication information. In this case, the carrier 20 encrypts the first authentication information using the key for the first authentication information, and divides the key for the first authentication information into two. Further, the decryption key may be different from the encryption key that encrypts the first authentication information. In this case, the carrier 20 encrypts the first authentication information using the encryption key for the first authentication information, and the first authentication information is different from the encryption key for the first authentication information. The decryption key for is divided into two. Here, the case where the encryption key and the decryption key are the same will be described mainly by taking as an example.

The first authentication information includes, for example, various parameters used when performing SIM authentication. As a specific example, the first authentication information includes OP, c, r and the like defined in 3GPP (3rd Generation Partnership Project). The first authentication information may further include a key for the second authentication information. The second authentication information is used when performing SIM authentication. The second authentication information may be information unique to each SIM. As a specific example, the second authentication information is a K value, which is key information unique to each SIM. The key for the second authentication information may be a key for encrypting and decrypting the second authentication information. The K value encrypted by using the key for the second authentication information may be described as eKI.

In step 102 (the step may be abbreviated as S) 102, the carrier device 200 transmits the KeyA to the AuC vendor device 300. KeyA is an example of the first decryption key information. In S104, the carrier device 200 transmits the KeyB to the PBX vendor device 400. KeyB is an example of the second decryption key information.

In S106, the AuC vendor device 300 stores the KeyA received in S102 in the AuC device 100 in a format that cannot be referred to from the outside. In S108, the PBX vendor device 400 transmits the KeyB received in S104 to the AuC device 100. In S110, the AuC device 100 generates a decryption key based on KeyA and KeyB.

In S112, the carrier 20 provides the SIM manufactured by the SIM vendor to the PBX vendor 40, and the carrier device 200 encrypts the first authentication information and the SIM information including the eKI and the IMSI. To the PBX vendor 40. The first authentication information may be stored in the SIM provided by the carrier 20 to the PBX vendor 40. The term "offer" as used herein is a concept that includes lending, transfer, and other rentals.

For example, the carrier 20 notifies the SIM vendor of the first authentication information, and causes the SIM vendor to manufacture the SIM in which the first authentication information is stored. The carrier 20 notifies the SIM vendor of the first authentication information by a specific method that does not leak to the outside. The SIM vendor writes the first authentication information to the SIM in a format that cannot be referred to from the outside.

In S114, the PBX vendor device 400 transmits the encrypted information to the AuC device 100. In S116, the AuC device 100 decrypts the encryption information received in S114 by using the decryption key generated in S110.

In S118, the PBX vendor device 400 transmits the SIM information received in S112 to the AuC device 100. In S120, the subscriber information is registered in the AuC device 100. The AuC device 100 has the K value acquired by decoding the eKI included in the SIM information received in S118 by using the key for the second authentication information included in the authentication information decoded in S116. , Register in association with the IMSI included in the SIM information.

The service flow shown in FIG. 2 is an example, and the order of each step may be different. For example, the order in which the carrier device 200 transmits KeyA and KeyB may be reversed. Further, for example, the carrier device 200 may not transmit the encryption information and the SIM information to the PBX vendor device 400 at the same time, but may transmit the encryption information and the SIM information at different times. Further, for example, the AuC device 100 may transmit the encrypted information and the SIM information at the same time instead of transmitting the encrypted information and the SIM information to the AuC device 100 at different times.

FIG. 3 schematically shows an example of the functional configuration of the AuC device 100. The AuC device 100 includes a key information storage unit 102, a decryption key information reception unit 110, a decryption key generation unit 112, an encryption information reception unit 114, a decryption unit 116, a subscriber information acquisition unit 118, a subscriber information storage unit 120, and an authentication. It includes a request receiving unit 122 and an authentication unit 124.

The key information storage unit 102 stores a first storage area that stores the first decryption key information in a format that cannot be referred to from the outside, and a second storage area for storing the second decryption key information input from the outside. And have. The storage of the first decryption key information in the first storage area is performed by, for example, the AuC vendor device 300. The storage of the first decryption key information in the first storage area may be performed by the operator of the AuC vendor 30. The storage of the first decryption key information in the first storage area may be performed by the carrier 20 by using the mechanism provided by the AuC vendor 30 to the carrier 20 so that the data can be written to the AuC device 100. .. The second storage area may be a predetermined area as an area for storing the second decryption key information.

The decryption key information receiving unit 110 receives the second decryption key information. The decryption key information receiving unit 110 may receive the second decryption key information from the outside. The decryption key information receiving unit 110 receives, for example, the second decryption key information from the PBX vendor device 400 via the network 80. The decryption key information receiving unit 110 stores the received second decryption key information in the second storage area of the key information storage unit 102.

The decryption key generation unit 112 generates a decryption key based on the first decryption key information and the second decryption key information stored in the key information storage unit 102. Any method can be adopted as a method of dividing the decryption key into the first decryption key information and the second decryption key information and a method of generating the decryption key based on the first decryption key information and the second decryption key information. For example, the decryption key is generated by dividing the decryption key into the first half and the second half and combining the first half and the second half. Further, for example, the decryption key is divided based on a predetermined rule, and the decryption key generation unit 112 generates a decryption key from the first decryption key information and the second decryption key information with reference to the rule.

The amount of data may be different between the first decryption key information and the second decryption key information. For example, the first decryption key information may have a larger amount of data than the second decryption key information, and the second decryption key information may have a smaller amount of data than the first decryption key information. As a result, the carrier device 200 to the PBX vendor device 400 and the PBX vendor device 400 to the AuC device 100 are compared with the case where the data amount of the first decryption key information and the data amount of the second decryption key information are the same. It is possible to reduce the amount of key information data transmitted to the user.

Further, for example, the first decryption key information may have a smaller amount of data than the second decryption key information, and the second decryption key information may have a larger amount of data than the first decryption key information. As a result, as compared with the case where the data amount of the first decryption key information and the data amount of the second decryption key information are the same, for example, the first decoding written in the plurality of AuC devices 100 in the AuC vendor 30. The amount of key information data can be reduced, and the communication load and processing load within the AuC vendor 30 can be reduced.

The encryption information receiving unit 114 receives the encryption information. The encryption information receiving unit 114 receives the encryption information from, for example, the PBX vendor device 400.

The decryption unit 116 decrypts the encryption information received by the encryption information receiving unit 114 by using the decryption key generated by the decryption key generation unit 112. The decrypted information is authentication information. The authentication information may be the above-mentioned first authentication information.

The subscriber information acquisition unit 118 acquires a plurality of subscriber information. For example, the subscriber information acquisition unit 118 includes the IMSI included in the SIM information received from the PBX vendor device 400 and the eKI included in the SIM information in the second authentication information decrypted by the decoding unit 116. The K value decrypted using the key for information is acquired.

The subscriber information storage unit 120 stores the subscriber information acquired by the subscriber information acquisition unit 118. The subscriber information storage unit 120 stores the K value and the IMSI in association with each other.

The authentication request receiving unit 122 receives the authentication request of the mobile terminal 52. The authentication request includes SIM information of the SIM of the mobile terminal 52. The SIM information of the mobile terminal 52 may include the IMSI of the mobile terminal 52.

The authentication unit 124 receives the authentication request received by the authentication request receiving unit 122. The authentication unit 124 is based on the IMSI included in the authentication request, the K value stored in association with the IMSI in the subscriber information storage unit 120, and the authentication information decrypted by the decryption unit 116. Authenticate the SIM of the mobile terminal 52.

FIG. 4 schematically shows an example of the configuration of the key information storage unit 102. The key information storage unit 102 stores a storage area 104 that stores the first decryption key information in a format that cannot be referred to from the outside, and a storage area 106 that stores the second decryption key information input from the outside. Have. The storage area 104 is an example of the first storage area. The storage area 106 is an example of the second storage area.

FIG. 5 schematically shows an example of the processing flow by the AuC apparatus 100. Here, the flow of SIM authentication processing of the mobile terminal 52 by the AuC device 100 arranged in a certain company 50 will be schematically described.

In S202, the subscriber information acquisition unit 118 acquires the subscriber information assigned to the company 50 in which the AuC device 100 is arranged, and stores it in the subscriber information storage unit 120. In S204, the authentication request receiving unit 122 receives the authentication request of the mobile terminal 52 in the company 50. The authentication unit 124 receives the authentication request received by the authentication request receiving unit 122.

In S206, the authentication unit 124 reads the K value corresponding to the IMSI included in the authentication request from the subscriber information storage unit 120. In S208, the authentication unit 124 generates RAND, which is a random number, and generates an assumed response by using the RAND and K values and the authentication information decoded by the decoding unit 116.

In S210, the authentication unit 124 transmits RAND to the mobile terminal 52. The SIM of the mobile terminal 52 receives the RAND. The SIM generates response information using the received RAND, the stored K value, and the authentication information, and transmits the response information to the AuC device 100.

In S212, the authentication unit 124 receives the response information transmitted by the mobile terminal 52. In S214, SIM authentication is performed by comparing the assumed response generated in S208 with the response information received in S212.

Here, the case where the AuC device 100 plays the role of the entire core network has been described as an example, but when the core network is composed of a plurality of devices and the AuC device 100 is an HSS device, the authentication unit 124 May transmit the assumed response generated in S208 and RAND to the MME. Then, the MME may transmit the RAND to the mobile terminal 52 and authenticate the SIM by comparing the response information transmitted by the mobile terminal 52 with the assumed response.

FIG. 6 schematically shows an example of a decryption key prepared in the carrier 20. The carrier 20 may prepare different decryption keys for each of the plurality of PBX vendors 40. FIG. 6 illustrates a decryption key 610 for company a 41, which is a PBX vendor, a decryption key 620 for company b 42, which is a PBX vendor, and a decryption key 630 for company c 43, which is a PBX vendor.

In the decryption key 610, the decryption key 620, and the decryption key 630, the first decryption key information is common to the KeyA650, and the second decryption key information is different from each other. The second decryption key information in the decryption key 610 is KeyBa612, the second decryption key information in the decryption key 620 is KeyBb622, and the second decryption key information in the decryption key 630 is KeyBc632.

In this way, by preparing different decryption keys for each of the plurality of PBX vendors 40, one of the decryption keys is leaked as compared with the case where a common decryption key is used by the plurality of PBX vendors 40. The range of influence can be narrowed.

FIG. 7 schematically shows another example of the decryption key prepared in the carrier 20. Here, the points different from those in FIG. 6 will be mainly described.

In the example shown in FIG. 7, the decryption key 610, the decryption key 620, and the decryption key 630 are different from each other in the first decryption key information and the second decryption key information. The first decryption key information in the decryption key 610 is KeyAa651, and the second decryption key information is KeyBa612. The first decryption key information in the decryption key 620 is KeyAb652, and the second decryption key information is KeyBb622. The first decryption key information in the decryption key 630 is KeyAc653, and the second decryption key information is KeyBc632.

As described above, by making the first decryption key information different for each of the plurality of PBX vendors 40, the first decryption key information is compared with the case where the first decryption key information common to the plurality of PBX vendors 40 is used. It is possible to narrow the range of influence when the leak occurs.

FIG. 8 schematically shows an example of the functional configuration of the AuC vendor device 300. The AuC vendor device 300 includes a decryption key information acquisition unit 302, a decryption key information storage unit 304, and a storage control unit 306.

The decryption key information acquisition unit 302 acquires the first decryption key information. The decryption key information acquisition unit 302 receives, for example, the first decryption key information from the carrier device 200. Further, the decryption key information acquisition unit 302 acquires, for example, the first decryption key information input by the operator of the AuC vendor 30. Further, the decryption key information acquisition unit 302 provides, for example, a mechanism for writing data to the AuC device 100 from the outside, and acquires the first decryption key information input through the mechanism. The decryption key information storage unit 304 stores the first decryption key information acquired by the decryption key information acquisition unit 302.

The storage control unit 306 stores the first decryption key information stored in the decryption key information storage unit 304 in the AuC device 100 in a format that cannot be referred to from the outside. The storage control unit 306 stores, for example, the first decryption key information in the AuC device 100 being manufactured. Further, the storage control unit 306 stores, for example, the first decryption key information in the AuC device 100 before shipment after the production is completed.

FIG. 9 schematically shows an example of the hardware configuration of the computer 1200 that functions as the AuC device 100. A program installed on the computer 1200 causes the computer 1200 to function as one or more "parts" of the device according to the present embodiment, or causes the computer 1200 to perform an operation associated with the device according to the present embodiment or the one or more. A plurality of "parts" can be executed and / or a computer 1200 can be made to perform a process according to an embodiment of the present invention or a stage of the process. Such a program may be run by the CPU 1212 to cause the computer 1200 to perform certain operations associated with some or all of the blocks of the flowcharts and block diagrams described herein.

The computer 1200 according to this embodiment includes a CPU 1212, a RAM 1214, and a graphic controller 1216, which are interconnected by a host controller 1210. The computer 1200 also includes input / output units such as a communication interface 1222, a storage device 1224, a DVD drive 1226, and an IC card drive, which are connected to the host controller 1210 via an input / output controller 1220. The DVD drive 1226 may be a DVD-ROM drive, a DVD-RAM drive, or the like. The storage device 1224 may be a hard disk drive, a solid state drive, or the like. The computer 1200 also includes a legacy I / O unit such as a ROM 1230 and a keyboard, which are connected to the I / O controller 1220 via an I / O chip 1240.

The CPU 1212 operates according to the programs stored in the ROM 1230 and the RAM 1214, thereby controlling each unit. The graphic controller 1216 acquires the image data generated by the CPU 1212 in a frame buffer or the like provided in the RAM 1214 or itself so that the image data is displayed on the display device 1218.

Communication interface 1222 communicates with other electronic devices via a network. The storage device 1224 stores programs and data used by the CPU 1212 in the computer 1200. The DVD drive 1226 reads the program or data from the DVD-ROM 1227 or the like and provides it to the storage device 1224. The IC card drive reads the program and data from the IC card and / or writes the program and data to the IC card.

The ROM 1230 stores in it a boot program or the like executed by the computer 1200 at the time of activation and / or a program depending on the hardware of the computer 1200. The input / output chip 1240 may also connect various input / output units to the input / output controller 1220 via a USB port, a parallel port, a serial port, a keyboard port, a mouse port, and the like.

The program is provided by a computer-readable storage medium such as a DVD-ROM 1227 or an IC card. The program is read from a computer-readable storage medium, installed in a storage device 1224, RAM 1214, or ROM 1230, which is also an example of a computer-readable storage medium, and executed by the CPU 1212. The information processing described in these programs is read by the computer 1200 and provides a link between the program and the various types of hardware resources described above. The device or method may be configured to implement the operation or processing of information in accordance with the use of computer 1200.

For example, when communication is executed between the computer 1200 and an external device, the CPU 1212 executes a communication program loaded in the RAM 1214, and performs communication processing on the communication interface 1222 based on the processing described in the communication program. You may order. Under the control of the CPU 1212, the communication interface 1222 reads and reads the transmission data stored in the transmission buffer area provided in the recording medium such as the RAM 1214, the storage device 1224, the DVD-ROM 1227, or the IC card. The data is transmitted to the network, or the received data received from the network is written to the reception buffer area or the like provided on the recording medium.

Further, the CPU 1212 makes the RAM 1214 read all or necessary parts of the files or databases stored in the external recording medium such as the storage device 1224, the DVD drive 1226 (DVD-ROM1227), the IC card, etc. Various types of processing may be performed on the data of. The CPU 1212 may then write back the processed data to an external recording medium.

Various types of information such as various types of programs, data, tables, and databases may be stored in recording media and processed. The CPU 1212 describes various types of operations, information processing, conditional judgment, conditional branching, unconditional branching, and information retrieval described in various parts of the present disclosure with respect to the data read from the RAM 1214, and is specified by the instruction sequence of the program. Various types of processing may be performed, including / replacement, etc., and the results are written back to the RAM 1214. Further, the CPU 1212 may search for information in a file, a database, or the like in the recording medium. For example, when a plurality of entries each having an attribute value of the first attribute associated with the attribute value of the second attribute are stored in the recording medium, the CPU 1212 is the first of the plurality of entries. The attribute value of the attribute of is searched for the entry that matches the specified condition, the attribute value of the second attribute stored in the entry is read, and the first attribute that satisfies the predetermined condition is selected. You may get the attribute value of the associated second attribute.

The program or software module described above may be stored on a computer 1200 or in a computer-readable storage medium near the computer 1200. In addition, a recording medium such as a hard disk or RAM provided in a dedicated communication network or a server system connected to the Internet can be used as a computer-readable storage medium, whereby the program can be transferred to the computer 1200 via the network. provide.

The blocks in the flowchart and block diagram of this embodiment may represent a stage of the process in which the operation is performed or a "part" of the device responsible for performing the operation. Specific stages and "parts" are supplied with dedicated circuits, programmable circuits supplied with computer-readable instructions stored on a computer-readable storage medium, and / or with computer-readable instructions stored on a computer-readable storage medium. It may be implemented by the processor. Dedicated circuits may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. Programmable circuits include logical products, logical sums, exclusive logical sums, negative logical products, negative logical sums, and other logical operations, such as, for example, field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), and the like. , Flip-flops, registers, and reconfigurable hardware circuits, including memory elements.

The computer-readable storage medium may include any tangible device capable of storing instructions executed by the appropriate device, so that the computer-readable storage medium having the instructions stored therein is in a flow chart or block diagram. It will include a product that contains instructions that can be executed to create means for performing the specified operation. Examples of computer-readable storage media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer-readable storage media include floppy (registered trademark) disks, diskettes, hard disks, random access memory (RAM), read-only memory (ROM), and erasable programmable read-only memory (EPROM or flash memory). , Electrically Erasable Programmable Read Only Memory (EEPROM), Static Random Access Memory (SRAM), Compact Disc Read Only Memory (CD-ROM), Digital Versatile Disc (DVD), Blu-ray® Disc, Memory Stick , Integrated circuit cards and the like may be included.

Computer-readable instructions are assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state-setting data, or object-oriented programming such as Smalltalk, JAVA®, C ++, etc. Includes either source code or object code written in any combination of one or more programming languages, including languages and traditional procedural programming languages such as the "C" programming language or similar programming languages. Good.

Computer-readable instructions are used to generate means for a general-purpose computer, a special-purpose computer, or the processor of another programmable data processing device, or a programmable circuit, to perform an operation specified in a flowchart or block diagram. General purpose computers, special purpose computers, or other programmable data processing locally or via a local area network (LAN), a wide area network (WAN) such as the Internet, etc. to execute the computer readable instructions. It may be provided in the processor of the device or in a programmable circuit. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers and the like.

In the above embodiment, the case where the mobile communication network is an LTE network has been mainly described as an example, but the present invention is not limited to this. The mobile communication network supported by the core network may be, for example, a 3G (3rd Generation) network, a 5G (5th Generation) network, and a mobile communication network after 5G. When the core network corresponds to the 3G network and the core network is composed of a plurality of devices, the AuC device 100 may be a device of HLR (Home Location Register). When the core network corresponds to a 5G network and the core network is composed of a plurality of devices, the AuC device 100 may be a device of UDM (Unified Data Management). Further, the AuC device 100 according to the present embodiment may be applied to LTE over Wi-Fi (registered trademark).

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various changes or improvements can be made to the above embodiments. It is clear from the description of the claims that the form with such modifications or improvements may also be included in the technical scope of the present invention.

The execution order of each process such as operation, procedure, step, and step in the device, system, program, and method shown in the claims, the specification, and the drawing is particularly "before" and "prior to". It should be noted that the output of the previous process can be realized in any order unless it is used in the subsequent process. Even if the claims, the specification, and the operation flow in the drawings are explained using "first", "next", etc. for convenience, it means that it is essential to carry out in this order. is not.

20 Carrier 30 AuC Vendor 32 Network 40 PBX Vendor 41 a company 42 b company 43 c company 50 company 52 mobile terminal 80 network 100 AuC device 102 key information storage unit 104 storage area 106 storage area 110 decryption key information receiver 112 decryption key generation Unit 114 Encryption information reception unit 116 Decryption unit 118 Subscriber information acquisition unit 120 Subscriber information storage unit 122 Authentication request reception unit 124 Authentication unit 200 Carrier device 300 AuC vendor device 302 Decryption key information acquisition unit 304 Decryption key information storage unit 306 Storage control unit 400 PBX vendor device 610 Decryption key 612 KeyBa
620 Decryption key 622 KeyBb
630 Decryption key 632 KeyBc
650 KeyA
651 KeyAa
652 KeyAb
653 KeyAc
1200 computer 1210 host controller 1212 CPU
1214 RAM
1216 Graphic controller 1218 Display device 1220 Input / output controller 1222 Communication interface 1224 Storage device 1226 DVD drive 1227 DVD-ROM
1230 ROM
1240 I / O chip

Claims (8)

Authentication device and
With carrier equipment
It is a system equipped with
The carrier device has a transmission unit that transmits the first decryption key information to the management device that manages the authentication device, and transmits the second decryption key information to the PBX vendor device.
The authentication device is
A second decryption key information receiving unit that receives the second decryption key information from the PBX vendor device, and
According to the control of the management device, the first decryption key information is stored in the first storage area in a format that cannot be referred to from the outside, and the second decryption key information received by the second decryption key information receiving unit is stored in the second storage. a key information storage unit that stores in the area,
And wherein the first stored in the storage area first decryption key information, the decryption key generating unit which generates a decryption key based on the said second stored in the storage area a second decryption key information,
A decryption unit that decrypts the encrypted information using the decryption key,
Authentication that accepts the authentication request of the mobile terminal and authenticates the SIM based on the SIM information of the SIM (Subscriber Identity Module) of the mobile terminal included in the authentication request and the information decoded by the decoding unit. Has a part and
The carrier device is a system that generates the first decryption key information common to the plurality of PBX vendor devices and the second decryption key information different for each of the plurality of PBX vendor devices . The system according to claim 1 , wherein the second decryption key information receiving unit receives the second decryption key information transmitted via the Internet. The system according to claim 1 or 2 , wherein the first decryption key information has a larger amount of data than the second decryption key information. The system according to claim 1 or 2 , wherein the first decryption key information has a smaller amount of data than the second decryption key information. The authentication device is
It is a subscriber information storage unit that stores a plurality of subscriber information, and each of the plurality of subscriber information includes a subscriber information storage unit that includes a subscriber identification number and key information unique to each SIM. ,
The SIM information includes the subscriber identification number and includes the subscriber identification number.
The authentication unit includes a subscriber identification number included in the SIM information, key information stored in the subscriber information storage unit in association with the subscriber identification number, and information decrypted by the decryption unit. The system according to any one of claims 1 to 4 , which authenticates the SIM based on the above. The subscriber identification number is IMSI (International Mobile Subscriber Identity), and is
The key information is a K value.
The system according to claim 5 . Equipped with the management device
The management device has a storage control unit that stores the first decryption key information in the first storage area of the authentication device.
The system according to any one of claims 1 to 6 . The management device is
A first decryption key information receiving unit for receiving the first decryption key information from the outside is provided.
The system according to claim 7 , wherein the storage control unit stores the first decryption key information received by the first decryption key information receiving unit in the first storage area.

Images