JPH02100164A - Ic card device - Google Patents

Abstract

PURPOSE:To obtain a safety managing system with high cipher intensity by transferring enciphered data in which a random number is enciphered by the key of a PIN, etc., between an IC card and terminal equipment, and confirming the validity of the IC card and the terminal equipment based on the enciphered data. CONSTITUTION:The random number generated in the IC card 1 is inputted to the terminal equipment 2, and the random number is enciphered by using the key of the PIN, etc., held at the terminal equipment 2, and the enciphered data obtained by the above encipherment is inputted to the IC card 1. The IC card 1 decides the enciphered data based on the key of the PIN, etc., held in advance and the random number generated by itself, and judges the validity of the terminal equipment based on the presence/absence of matching with the PIN by using the PIN and the PIN used in the encipherment previously. In such a way, it is possible to secure the high cipher intensity in an encipherment managing system and the safety of the key of the PIN, etc.

Description

DETAILED DESCRIPTION OF THE INVENTION <Industrial Application Field> The present invention relates to an IC card device that performs authenticity verification between an IC card and a terminal device to which it is coupled.

<Conventional technology> IC cards can achieve a high degree of security because the type of card, card holder, type of terminal device, etc. can be confirmed using various authentication keys. It is highly rated for use in cards that require security management.

In order to achieve further security management in systems using such IC cards, an encryption method using public algorithm cryptography will be introduced for authentication of card type, card holder, type of terminal device, etc. That is what is being considered.

A conventionally proposed method using an encryption technique is as shown in FIG.

That is, in the terminal device, as shown in FIG. 6(a), the cart manufacturer PTN (Pers.
onai Identification Number
r), card issuer PIN, card holder PIN, card ID (Identifica
tion), keys for terminal device IDs, etc., using publicly available encryption algorithms (public algorithm encryption)
The data is encrypted using a parameter (encryption key) such as a random number, and the encrypted data obtained by encrypting this key such as PIN is input from the terminal device to the IC card. And the sixth
As shown in figure (b), using the same encryption key as above,
The encrypted data entered on the IC card is decrypted using the same public algorithm as above to obtain a key such as a PIN, and this key is compared with the key stored in the IC card in advance to verify the validity of the terminal device for the IC card. Check the gender. Further, to confirm the validity of the IC card with respect to the terminal device, the same operation as above is performed with the IC card and the terminal device being reversed.

<Problems to be Solved by the Invention> Even in security management that introduced the above-mentioned encryption method, there were the following problems.

The parameters used for the encryption key as well as the public algorithm encryption are standardized and published, so IC
By intercepting the encrypted data sent and received between the card and the terminal device over the line, it becomes easy to find out keys such as PIN, and it is also possible to know the encryption key used in this method. . For this reason, it is not possible to maintain the security of the entire encryption management system because the security of the PIN etc. cannot be sufficiently ensured, or the security of the entire encryption management system cannot be maintained due to the encryption key being known, leading to problems such as counterfeiting of IC cards. There was a risk that this would occur.

The present invention has been made in view of the above-mentioned conventional circumstances, and an object of the present invention is to provide an IC card device that realizes a security management system with high cryptographic strength.

<Means for Solving the Problems> The IC cart device according to the first invention of the present application encrypts random numbers from an IC card using a key such as a PIN in a terminal device, and stores the encrypted data. An IC card device that inputs data from a terminal device to an IC card and confirms the validity of the terminal device using the IC card. The IC card is equipped with a means for holding a key, a means for encrypting random numbers input from the IC card using a key such as a PIN, and a means for inputting and outputting data with a terminal device, and a PTN. means for holding keys such as;
The present invention is characterized by comprising means for generating random numbers and means for determining the validity of the terminal device based on encrypted data input from the terminal device. Further, the IC card device according to the second invention of the present application encrypts a random number from a terminal device in the IC card using a key such as a PIN, and transmits the encrypted data from the IC card to the terminal device. An IC card device for confirming the validity of an IC card in a terminal device, the IC card having a means for inputting and outputting data to and from the terminal device, a means for holding a key such as a PIN, and the like. PI random number input from terminal device
The terminal device includes a means for encrypting data using a key such as N, and a means for inputting and outputting data with the IC card;
The present invention is characterized by comprising means for holding a key such as a PIN, means for generating random numbers, and means for determining the validity of an IC card based on encrypted data input from the IC card.

A third invention of the present application is that in the first or second invention, the means for determining validity based on the encrypted data includes means for decrypting the encrypted data using a key such as a PIN. It is characterized in that the validity is determined based on the random number obtained by the decoding.

<Operation> The encryption system in the invention of the present application uses a random number as a PIN.
Encrypted data encrypted using a key such as the above is exchanged between the IC card and the terminal device. Based on this encrypted data, the validity of the IC card and the terminal device is confirmed.

That is, in the first invention, a random number generated by an IC card is input to a terminal device, and F' held in the terminal device is input.
A random number is encrypted using a key such as IN, and the resulting encrypted data is input to the jiTC card. In the IC card, the PI stored in advance
Determine the encrypted data based on a key such as N and a random number generated by yourself first, and use this PIN and the PI used for encryption earlier.
The validity of the terminal device is determined based on the presence or absence of consistency with N.

Further, in the second invention, the random numbers generated by the terminal device are
PIN entered on the C card and retained on the IC card
A random number is encrypted using a key such as , and the resulting encrypted data is input to a terminal device. The terminal device then determines the encrypted data based on a pre-held key such as a PIN and a random number generated by itself, and checks the consistency of this PIN with the PIN previously used for encryption. The validity of the IC cart is determined based on its presence.

Further, in a third invention, in each of the above inventions, when determining the encrypted data, the encrypted data is decrypted using a key such as a PIN held on the determination subject side,
Decryption is performed based on the consistency between the random number obtained by this decryption and the random number generated by itself; consistency between the key such as the PIN used in this process and the key such as the PIN used for encryption on the judgment object side. The validity of the judgment object is determined by determining the presence or absence of the judgment object.

<Example> The invention according to the present application will be specifically explained based on examples.

The IC card device has an IC card 1 as shown in FIG.
and a terminal device 2 such as a personal computer.

IC card 1 has a central processing unit (CP) in a card-like case.
U), which has a built-in memory device and input/output device,
It is connected to the terminal device 2 and accesses the memory device under the control of the CPU, and data is sent and received from each input/output device 10 and 20 via the connection device 3.

The IC card 1 includes a PIN holding means 11 that holds a key such as a PIN, a random number generation means 12 that generates random numbers, an encryption means 13 that encrypts the random numbers, and a decryption means 14 that decrypts the encrypted data. , a determining means 15 for determining the validity of the terminal device is provided, and these means are comprised of a CPU and a memory device.

In addition, the terminal device 2 includes a PI that holds keys such as PIN.
N holding means 21, random number generation means 22 for generating random numbers, encryption means 23 for encrypting random numbers, decryption means 24 for decrypting encrypted data, and determination means 25 for determining the validity of the IC card. These means are comprised of a CPU and a memory device provided in the terminal equipment.

From the IC card 1 to the terminal device 2 or from the terminal device 2 to the IC card 1, from the input/output device 10.20 to the connection device 3
As shown in FIG. 1(a), the encrypted data sent via the PIN is a random number encrypted by public algorithm encryption using a key such as a PIN as an encryption key. Also, when decrypting encrypted data into random numbers,
As shown in FIG. 1(b), this is done by public algorithm encryption using a key such as PINPIN as a decryption key.

In order to ensure the security of IC card transactions, keys such as PINs are stored for each party, each entity, or each card.
This key is assigned to each object such as a terminal device, and this key includes the card manufacturer PIN, card issuer PIN, card holder PIN to identify the person, and card identification code for each card to identify the object. ID, terminal identification code ID for each terminal device, etc. These keys such as P'IN are stored in advance in the PIN holding means 11 on the IC card side and the PIN holding means 21 on the terminal equipment side depending on their characteristics.

A case will be described in which the IC card 1 confirms the validity of the terminal device 2 in the IC card device configured as described above.

As shown in FIG. 3, first, a random number generation command is output from the terminal device 2 (step Sl), and this command is input to the IC card 1 via the input/output device 10.20 and the connection device 3 (step S2). ). As a result, IC card 1
The side executes a random number generation routine (step S3), and the random number generation means 12 generates a random number. Then, the generated random number is sent to I/O via the input/output device 10.20 and the connection device 3.
It is input from the C card 1 to the terminal device 2 (step S4.
5) This random number is encrypted by the encryption means 23 as shown in FIG. 1(a) using one of the keys such as PIN held in the PIN holding means 21 of the terminal device (
Step S6). The encrypted data obtained by this encryption is transferred from the terminal device 2 to the IC card 1 as a parameter of the AUTH command to the input/output device 10 with an identifier indicating the type of key such as a PIN to be used for decryption.
．． 20, input via the connection device 3 (step S7
．． 8). The IC card 1 performs the AUTH routine shown in FIG. 5 based on the encrypted data and the identifier, and decrypts the encrypted data using the decryption means 14 (step S
9).

That is, in the AUTH routine, it is first determined whether it is a decoding routine (steps S51 and 52), and
After confirming that it is a decryption routine, the key specified by the identifier is searched and selected from among several keys such as PINs stored in the PIN holding means 11 (step 553). Then, as shown in FIG. 1(b), the encrypted data is decrypted into random numbers by public algorithm encryption using the selected key as a decryption key (step 554). The random number obtained by the decryption and the random number generated by the random number generating means 12 in step S3 are compared by the determining means 15 (step 555), and based on whether or not these random numbers are consistent, the random numbers are used for encryption in the terminal device 2. It determines the consistency between the key and the key used for decryption in the IC card 1, that is, the validity of the key such as the PIN, and generates a response indicating whether the key such as the PIN is valid (step 556.57). . Note that step S51
．． If it is determined in step 52 that neither encryption nor decryption is performed, a command error response is generated (step 558).

The above response is input/output device 10.20, connection device 3
is input from the IC card 1 to the terminal device 2 via the IC card 1 (step S10.11), and the key such as PIN held in the IC card 1 and the terminal device 2 is valid, that is, the relationship between the IC card 1 and the terminal device 2 is confirmed. It is determined whether the key such as PIN is invalid or the command is in error, that is, whether the relationship between the IC card 1 and the terminal device 2 is abnormal (step 512). As a result of this judgment, if it is normal, the next sequence is continued (step 513); if it is abnormal, the IC card 1 is rejected from the terminal device 2 and the process ends (step 514).

Next, a case will be described in which the terminal device 2 confirms the validity of the IC card 1.

As shown in FIG. 4, first, the terminal equipment 2 side executes a random number generation routine (step 521), and the random number generation means 2
Generate a random number consisting of . The generated random number is then sent from the terminal device 2 to the IC card 1 via the input/output device 10.20 and the connection device 3 as a parameter of the AUTH command, with a key identifier such as a PIN used for encryption attached. is input (step S22.23), and this random number is I
PT held in the PIN holding means 11 of the C card 1
The encryption means 13 uses one of the keys such as N.
The UTH command routine encrypts the data as shown in FIG. 1(a) (step 524).

That is, in the AUTH routine shown in FIG. 5, it is first determined whether or not it is an encryption routine (step 55).
1) After confirming that it is an encryption routine, the PI
The key designated by the identifier is searched and selected from among several keys such as PINs stored in the N holding means 11 (step 561). Then, as shown in FIG. 1(a), using the selected key as an encryption key, the random number is encrypted into encrypted data by public algorithm encryption (step 562), and response data is generated (step 563). . Note that if it is determined in step 551.52 that neither encryption nor decryption is performed, a command error response is generated (step 558).
).

The above response is input/output device 1O120, connection device 3
The response data is input from the IC cart 1 to the terminal device 2 via the IC cart 1 (step S25, 26), and the terminal device 2 uses the key previously used for encryption as the decryption key to decrypt the response data in the decryption means 24 as shown in FIG. As shown in (b), the random numbers are obtained by decoding using public algorithm cryptography (step 527).
). Then, the judgment means 25 compares the random number obtained by this decoding with the random number previously generated in step 521 (step 828), and from the consistency of these random numbers, it is determined that the random numbers held in the IC card 1 and the terminal device 2 are Are the keys such as the PIN valid, that is, the relationship between the IC card 1 and the terminal device 2 are normal, or are the keys such as the PIN invalid, or the command is an error, that is, the relationship between the IC card 1 and the terminal device 2 is abnormal? (step S29.30).

As a result of this judgment, if the key such as PIN is valid, proceed to the next sequence (step 531); if it is invalid, reject the IC card 1 from the terminal device 2 and end the process (step 532). ).

The above is a case where the IC card 1 or the terminal device 2 unilaterally authenticates the other party, but when the IC card 1 and the terminal device 2 mutually authenticate each other, the above two authentication processes are performed.

In addition, when the IC card 1 or the terminal device 2 unilaterally authenticates the other party, random number generation means, encryption means,
The decoding means and the determining means need only be provided on either side to perform their respective functions as described above, and the configuration of the IC card device can be simplified.

In the above embodiment, the validity is determined by decrypting the encrypted data, but it may be determined without decrypting the encrypted data. That is, IC card 1 or terminal device 2
A random number generated by a random number generating means is encrypted using a key such as a PIN held in a PIN holding means and sent to the authentication party (
It may also be possible to compare the encrypted data input from the terminal device 2 or the IC card 1) and determine the validity of the authentication partner based on the consistency of the data. Therefore, in this case, the decryption means used to decrypt the encrypted data can be omitted, and the configuration of the IC card device can be simplified.

In addition, all PINs held in the terminal device 2 are PINs.
There is no need to store the PIN in advance in the N holding means 21, and even if the user inputs the PIN into the terminal device 2 using a numeric keypad or the like when the IC card 1 is connected to the terminal device 2 and used. good.

<Effects> According to the present invention, the IC card and/or terminal device which is the subject of judgment are compared to the terminal device and/or terminal device which is the judgment object.
Alternatively, the validity of an IC card can be determined by exchanging encrypted data using a key such as a PIN arbitrarily set for each individuality as an encryption key, so a third party can Even if the exchanged encrypted data is intercepted, it can be made difficult to find out the key such as the PIN, and the high encryption strength of the encryption management system and the safety of the key such as the PIN can be ensured.

Even in the unlikely event that the PTN or other key used as an encryption key is discovered, problems such as forgery of IC cards will only arise with respect to the individuality of the person using the PIN or other key. Since the security of keys such as PIN can still be maintained, a highly secure management system can be realized.

This is a mental image.

1 is an IC card, 2 is a terminal device, 10.20 is the input/output device, 11.21 is a PIN holding means, 12.22 is a random number generation means, 13.23 is an encryption means, 14.24 is a decoding means, 15.25 is a judgment means.

[Brief explanation of the drawing]

Figures 1(a) and (b) are conceptual diagrams showing the encryption method and decryption method according to the present invention, respectively. Figure 2 is a schematic configuration diagram of an IC card device according to the present invention. Figure 3 is an IC card Flowchart when confirming the validity of a terminal device, Part 4
The figure is a flowchart when the terminal device confirms the validity of the IC cart, Figure 5 is a flowchart showing the AUTH routine of the IC card, and Figures 6 (a) and (b) are encryption methods according to conventional examples. , applicant for a general patent showing a decoding method Agent for Toppan Printing Co., Ltd.
Patent Attorney Kiyoshi Kuwai PIN PIN Figure 1 Figure 6 Figure 3

Claims (3)

[Claims] (1) An IC that encrypts random numbers from an IC card using a key in a terminal device, transmits the encrypted data from the terminal device to the IC card, and confirms the validity of the terminal device in the IC card. The terminal device is a card device, and includes a means for inputting and outputting data to and from the IC card, a means for holding a key, and a means for encrypting random numbers input from the IC card using the key. An IC card has a means for inputting and outputting data to and from a terminal device, a means for holding a key, a means for generating a random number, and a means for inputting and outputting data from a terminal device based on encrypted data input from the terminal device. An IC card device comprising: means for determining validity. (2) Encrypt the random numbers from the terminal device using a key on the IC card, and transmit the encrypted data to the
An IC card device that transmits data from a C card to a terminal device and confirms the validity of the IC card in the terminal device. and a means for encrypting random numbers input from the terminal device using a key, the terminal device includes a means for inputting and outputting data to and from the IC card, a means for holding the key, A means for generating random numbers and an I
An IC card device comprising means for determining the validity of a C card. (3) The means for determining validity based on encrypted data includes means for decrypting encrypted data using a key, and determining validity based on a random number obtained by the decryption. An IC card device according to claim 1 or 2, characterized in that: