JPH02311946A - Dynamic confirming device - Google Patents

Abstract

PURPOSE:To improve safety to misconfirmation by updating the confirmation informa tion for each confirmation and therefore attaining the safe and continuous application of a confirming device even if the data applied at confirmation is leaked out by the tapping, etc. CONSTITUTION:A portable storage medium 501 consists of an interface part 510 which secures the interface with a dynamic confirming device 401 via a circuit 185, a control part 500 which controls an entire action of the medium 501, a calculation part 520, a confirmation information generating part 580, a random number generating part 570, and a storage part 530. The part 530 includes a confirmation information storage part 540, a confirmation function identifier storage part 551, a confirmation function table 550 containing a 1st confirmation function storage part 552 and a 2nd confirma tion function storage part 553, a detection function identifier storage part 555, and a detection function storage part 554 including a 1st detection function storage part 556 and a 2nd detection function storage part 557. In such a constitution, the informa tion used for the confirmation of this time and the second confirmation are detected separately from each other out of those information inputted for the confirmation information. Thus plural confirming actions are attained with no second use of the same confirmation information to the confirmation.

Description

[Detailed Description of the Invention] [Object of the Invention] (Industrial Application Field) The present invention stores authentication information of an individual and performs authentication by matching the authentication information with the authentication information input by the user. The present invention relates to a dynamic authentication device that is managed electronically.

(Prior art) Authentication for bank cards, credit cards, etc. is a method in which encrypted authentication information is stored in advance and the user is asked to enter the authentication information to confirm that the user is the principal. is taken. Furthermore, in the future, as more social functions become computerized due to advances in computers, it will become increasingly important to electronically authenticate a person's identity and provide services. These social trends have made it necessary to prevent unauthorized persons from receiving such services. Conventional cryptographic systems have been devised for this purpose, but their security has sometimes been threatened by eavesdropping on the line or theft during input.

FIG. 3 is a configuration diagram showing an example of a conventional authentication device. In the authentication device shown in the figure, authentication information is input manually from the human power section 140 according to instructions from the control section 100. This input authentication information is sent to the input unit 140 according to instructions from the control unit 100.
The data is sent to the comparison unit 160 from. On the other hand, the authentication information of the corresponding user is read from the authentication information storage section 303 according to an instruction from the control section 100 and is supplied to the comparison section 160 .

The authentication information storage unit 303 stores identification information 301 for identifying each user and corresponding individual authentication information 302 in pairs. For example, a user name is stored as the identification information 301, and a password is stored as the individual authentication information 302.

If stored in this way, it is possible to store and refer to different authentication information for each identification information.

The comparison unit 160 inputs the input unit 140 according to instructions from the control unit 100.
The authentication information inputted from the authentication information storage unit 303 is compared with the authentication information read out from the authentication information storage unit 303, and if they match, an authentication completion message is sent to the output unit 120, and if they do not match, an authentication failure is sent to the output unit 120. Send.

Note that the human power section 140 and the comparison section 160 may be connected via a communication means such as a communication line or a local area network. In such a case, the entire authentication device 101
A line 185 is connected to it via an interface 180, allowing access via the line.

Alternatively, the same effect can be obtained by encrypting the input information, storing it, and comparing it with previously encrypted authentication information.

For example, the authentication information of a certain user is [angou J, and the encrypted result of the authentication information is rPxXwapqr2s
J, and the encrypted result of r PxXwapnqr2s J is r angou J, then r
If you memorize PxXvapnqr2s J, if the encryption method is a sufficiently secure encryption method (for example, DES, etc.), r PxXvapnqrs2
It is practically difficult to decipher the authentication information r angou J from sJ.

When the user enters "angou J", the rPxXvapnq stored in the user-compatible authentication information storage unit is
r2s J is read and encrypted and r angou
Get J. Since this result matches the input rangouJ, an authentication completion message is output.

(Problems to be Solved by the Invention) In the conventional authentication device described above, since the authentication information is fixed, security may be compromised if the data is detected on the line or photographed by a camera or the like during manual operation. The disadvantage was that it was lost. That is, the conventional technology has a problem in that it does not have a sufficient function to maintain safety against the risk of data being monitored during data transfer and authentication information being leaked.

The present invention has been made in view of the above, and its purpose is to provide a dynamic authentication device that strengthens security against authentication failure by updating authentication information.

[Structure of the Invention] (Means for Solving the Problem) In order to achieve the above object, the dynamic authentication device of the present invention stores personal authentication information and uses the authentication information and the authentication information input by the user. A dynamic authentication device that performs authentication based on a match with the authentication information, comprising: an action function storage means for storing a different action function each time to act on authentication information for each object to be authenticated; a detection function storage means for storing a detection function for extracting a portion that is not detected; a calculation means for performing calculations on input authentication information and pre-stored authentication information based on the operation function; a determining means for determining whether the authentication information matches the authentication information stored in advance based on the detection function; a detecting means for detecting update information to the action function storage means based on the detection function; The gist of the present invention is to include an action function storage means and an update means for writing into the detection function storage means.

(Operation) The dynamic authentication device of the present invention can separately detect the information used for authentication and the information used for the next authentication process from among the information input for authentication information. You can authenticate multiple times without using the same authentication information twice.

(Example) Embodiments of the present invention will be described below with reference to the drawings.

The dynamic authentication device of this embodiment mixes updated information into a part of the authentication information, and uses a function agreed upon in advance between the input side and the authentication side as a parameter for the updated information, and uses it for authentication. is updated each time authentication is successful. In order to improve security, the information needed to recognize the function (for example, if the functions are numbered, what kind of action does function number 1 have) should be kept secret. can be easily inferred.

First, a sequence when authentication is successful in the dynamic authentication device according to an embodiment of the present invention shown in FIG. 1 will be described.

In FIG. 1, input is first requested (step 3'
In response to this, the user requests authentication by inserting a portable storage medium such as an IC card. As a result, authentication manual information is generated and transmitted in accordance with information preset by the authentication requesting side (step 312). Upon receiving the transmission, the authentication side accepts the input information (step 313). After this,
The authentication part is calculated using the authentication function and a match is confirmed (step 314). Furthermore, update information is detected using the detection function (step 315). After this, step 314
Based on the result, if the authentication is successful, an authentication success is output (step 316). Further, the authentication requesting side that has been notified of the successful authentication updates the authentication management information based on the updated information (step 317). At the same time, the authentication side also updates the authentication management information based on the update information detected in step 315 (step 318).

FIG. 2 is a block diagram showing the configuration of a dynamic authentication device according to an embodiment of the present invention. Dynamic authentication device 40 shown in the figure
1 is a portable storage medium 50 such as an IC card.
This is realized using 1. Dynamic authentication device 401
includes an interface section 180 for interfacing with the portable storage medium 501 via a line 185, a control section 400 for controlling the overall operation, an output section 120, and an input section 1.
40, a comparison section 420, a calculation section 450, a detection section 460, an update section 465, and a storage section 299.

The storage section 299 includes an authentication information storage section 300 consisting of an identification information storage section 310, individual authentication function information 360, individual detection function information 370, and a function storage section 380, an authentication function identifier storage section 391, and a first authentication function storage section. Authentication function table 3 consisting of 392 and second authentication function storage section 39゜3
90, and a detection function table 394 consisting of a detection function identifier storage section 395, a first detection function storage section 396, and a second detection function storage section 397.

Furthermore, the portable storage medium 501 is a dynamic authentication device 401
an interface section 510 that interfaces with the computer via a line 185, and a control section 500 that controls the overall operation.
, calculation section 520, authentication information generation section 580, random number generation section 5
70 and a storage section 530. The storage unit 530 is
Authentication information storage unit 540 and authentication function identifier storage unit 551
, an authentication function table 550 consisting of a first authentication function storage section 552 and a second authentication function storage section 553, a detection function identifier storage section 555, a 1'#tL output function storage section 556, and a second detection function storage section 557. The detection function storage unit 554 is comprised of a detection function storage unit 554.

The authentication information storage section 300 stores authentication information corresponding to the user, and the same authentication information as the authentication information corresponding to the user stored in the authentication information storage section 300 is stored in the portable storage medium 501. It is also stored in the authentication information storage unit 540 of . Further, the same authentication function information is stored in the authentication function table 390 and the authentication function table 550 in the portable storage medium 501 so as not to be read out to the outside. This authentication function consists of, for example, a first authentication function and a second authentication function, and matrices A and B with n columns are given to the authentication information divided into n parts, and each A
can be created such that B is the first authentication function and B is the second authentication function.

In this case, when the stored authentication information is an n-row vector It is something.

However, "*" here represents the multiplication of a vector and a matrix. Furthermore, when the maximum value that an element of a vector can take is 2, it is also possible to take a remainder calculation mod z in the calculation. The existence of such a remainder operation does not interfere with the uniqueness of authentication.

In this case, for example, if n is 3 and the authentication information is (111), then no matter what the second column of the input authentication information is (
Authentication is successful with 2p 1). xA no matter what p is
This is because -yB= (401).

In this case, since p can contain arbitrary information, an appropriate detection function (also an n-by-n matrix C
. can be used to select. For example, it is possible to number the sets of A and B and select them by the first element of pl.

The feature of this dynamic authentication device is that X is the individual authentication information corresponding to the user that is stored, and the function f, which is agreed upon by both authentication parties in advance, is
Using g + h, Xt fr for user support
g + ) 1 (remember x, f, g, h can be set individually for each user), and when human power is y, f (x)
-g (y) to authenticate, put information that can change the combination of f and g on y, and use the function h
The information is authenticated using (y), and f, g, and h are updated each time. The functions f, g, h are the same x, f,
It is possible to configure settings such that multiple y can be successfully authenticated for g and h. y can be multiple, and the functions f, g, and h change each time, so that the user's fixed value of X and the current f can be determined by continuously eavesdropping on the input of y.
, g, and h become difficult to estimate, improving safety.

In order to operate this dynamic authentication device, first, the control unit 400
In response to the instruction, a signal is sent 11 to the output unit 120 to notify the user that authentication can be accepted. The output section 120 sends a signal to the interface section 180 according to instructions from the control section 400. Note that the connection between the interface section 180 and the interface section 510 of the portable storage medium 501 may be, for example, wireless, or may be a direct physical connection.

For authentication, the user inserts a portable storage medium 501, such as an IC card, into the interface section 180. As a result, in the portable storage medium 501,
According to instructions from the control unit 500, authentication information stored in advance in the authentication information storage unit 540 is read out, and the authentication information generation unit 580
Send to.

The authentication information storage unit 540 stores information for identifying the user, authentication information for the user, identification information for the authentication function stored in the system at this point, and identification information for the detection function. At the same time, identification information of the corresponding authentication function and detection function is also stored in the portable storage medium 501. Note that the information that identifies the user is information that distinguishes the user, such as a user code and user name, which is different from what is referred to as authentication information in the present invention. Authentication information serves as evidence to determine whether a user identified by the information is truly an authorized user, and this includes a PIN number used in a banking system, etc.

Based on the authentication function information and detection function information read from the authentication information storage section 540 of the storage section 530 according to instructions from the control section 500, the corresponding current authentication function is read from the authentication function table 550, and the detection function is set as the detection function. Storage section 55
4 and sends it to the authentication information generation unit 580. Further, according to instructions from the control section 500, the random number generation section 570 generates random numbers and sends them to the authentication information generation section 580. In this way, the authentication information generation unit 580 generates the authentication information of the user, the authentication function currently registered for the user, the detection function currently registered for the user, and Receive random numbers. This random number is used by the authentication information generation unit 580 to generate authentication information without being known to a third party.

Based on the received information, the authentication information generation section 580 generates an authentication information vector necessary for authentication using the user's authentication information and authentication function information in accordance with instructions from the control section 500. Furthermore, a random number is set in the authentication input information section that is not used for authentication by the detection function.

The authentication information generation unit 580 stores the input information according to instructions from the control unit 500.

When authentication input information is generated in this way, the control unit 500
According to the instruction, the authentication information generation section 580 transmits the authentication information to the interface section 180 of the dynamic authentication device 410 via the interface section 510 and the line 185.

At this time, the control unit 500 reads information identifying the user from the authentication information storage unit 540 and transmits it to the interface unit 180. This information for identifying the user is, for example, a user number or a user name, and may be different from the above-mentioned user authentication information and may be publicly known information.

After this transmission, the interface unit 510 waits for an authentication success signal to be returned (according to instructions from the control unit 500). When the success signal is returned, the interface unit 510 transmits the signal to the control unit. 500. When the control unit 500 receives the signal, the control unit 500 sends a notification to the storage unit 53.
0, and the storage unit 53° C. is stored in advance in the authentication information storage unit 5.
40, the detection function storage section 554 is used to search for a detection function, the detection function is called, and the detection function is sent to the authentication information generation section 580. Authentication information generation unit 5
Reference numeral 80 operates the detection function on the authentication input information sent from the interface unit 510 this time, which was previously stored in the generation of the authentication input information described above, according to instructions from the control unit 500, and generates the next authentication function information and the next detection function. The information is generated and transmitted to the authentication information storage section 540 to be stored therein.

The authentication information storage unit 540 stores the next authentication function information and the next detection function information according to instructions from the control unit 500. These next authentication function information and next detection function information can be used when performing the next authentication as described above.

When the authentication information is transmitted from the portable storage medium 501 in this way, the control unit 400 of the dynamic authentication device 401
In response to the instruction, the interface unit 180 receives the authentication information and transmits it to the input unit 140. Input section 140
Upon receiving the authentication input information according to instructions from the control unit 400, the authentication input information is transmitted to the calculation unit 450. When the calculation unit 450 receives the authentication input information, it reads out the individual detection function information 370 in the authentication information storage unit 300 according to instructions from the control unit 400 . The information that identifies the user required for this reading is the information that identifies the user transmitted from the interface section 510 of the portable storage medium 501, and is stored in the identification information storage section 310 of the authentication information storage section 300. Individual authentication function information for the user can be searched by searching for information that matches the information identifying the user sent from the user. After reading the individual authentication information,
The individual authentication function information is transmitted to the calculation unit 450 according to instructions from the control unit 400 . After receiving the individual authentication function information, the calculation unit 450 applies the function to the authentication input ↑h information that has already been received by the interface unit 180. In performing the function, necessary function information is read from the authentication function table 390 according to instructions from the control unit 500 based on the received individual authentication function information. For example, if the authentication information function table is realized by storing an n-by-n matrix representing the authentication information based on the authentication information function number registered in advance, the individual authentication function information is based on the authentication function number. The calculation unit 450 reads out the matrix indicated by the authentication function number from the authentication function table 390, and
This functional action is possible by performing matrix-vector multiplication with the n-row vector that is the authentication information.

For example, a matrix for input authentication information can be stored in the first authentication function storage unit 392. The individual authentication function information is held by the calculation unit 450 for calculations to be described later according to instructions from the control unit 400.

After the calculation, the calculation unit 450 transmits the calculation result to the comparison unit 420 according to an instruction from the control unit 400. Comparison section 42
0 stores the calculation result taken by the receiver for comparison according to the instruction from the control unit 400.

At the same time, the authentication information of the user is read out from the individual authentication function information 360 according to an instruction from the control unit 400,
It is sent to calculation section 450. After receiving the individual authentication information, the calculation unit 450, in response to an instruction from the control unit 400, calculates second authentication function information from the second authentication function storage unit 393 based on the individual authentication function information acquired and stored in the above-mentioned calculation. It is read out and applied to the individual authentication information simultaneously with the calculation of the first authentication function, and after the calculation is completed, it is sent to the comparison unit 420. The comparison unit 420 performs the calculation unit 45 according to instructions from the control unit 400.
The receiver compares the two calculation results obtained from 0, and if they match, the authentication result is regarded as an authentication success and the authentication success information is outputted to the output unit 12.
Send to 0. If they do not match, the authentication result is determined as an authentication failure, and authentication failure information is transmitted to the output unit 120. In either case, the output unit 120 transmits the authentication result information to the interface unit 510 of the portable storage medium 501 via the interface unit 180 according to instructions from the control unit 400. If the authentication is successful, the input unit 140 further transmits the authentication input information input in the successful authentication to the detection unit 460 according to an instruction from the control unit 400 . Detector 46
0 reads the detection function information of the user from the individual detection function information storage section 380 according to an instruction from the control section 400, and reads the detection function information from the detection function table 394 based on the detection function information. The detection function is a function that determines the next authentication function and next detection function in the next authentication,
Consisting of a first detection function that determines the next authentication function and a second detection function that determines the next detection function, the first detection function is stored in the first detection function storage section 396 in the detection function table 394, and the second detection function is the second in the detection function table 394
Since the detection function information is stored in the detection function storage unit 397, each detection unit 460 stores the detection function information in the detection function table 394.
It can be read by finding a match with the matching detection function identifier storage unit 395 as index information in . By applying the detection function read in this way, the next authentication function information and the next detection function information are calculated to the detection unit 460, and the update unit 46
Send to 5.

The update unit 465 sends an instruction to the authentication information storage unit 300 based on the received next authentication function information and next detection function information to update the individual authentication function information 360 corresponding to the user with new next authentication function information, The individual detection function information 370 is updated with new next detection function information. The authentication information storage unit 300 receives the instruction and stores new authentication function information and detection function information according to the instruction from the control unit 400.

The authentication information storage section 300, the authentication function table 390, and the detection function table 394 can be realized by a storage section such as an IC memory, for example. Authentication function table 390 and detection function table 394 may be ROM.

In this way, each time we create a different part of the information that is not used for authentication depending on the settings of the authentication function, and by using this part to send updated information, we update the authentication information for each authentication. This makes it impossible to infer the legitimate human authentication information.

It can be easily inferred that this dynamic authentication device can also be realized by software.

Also, by treating a vector of n lines used for authentication information, such as a 4-digit bank PIN number, as separate lines of authentication information, it is easy to have the user treat the authentication information as if it were only a single number. This can be inferred by analogy to

It is practically difficult to thoroughly investigate these matters. Of course, in order to further increase the level of confidentiality, it is also possible to secretly define an update mechanism between the authentication receiver and the authentication side.

As can be seen from this example, there is no exchange of information other than the input of authentication information, so authentication is performed, and information related to authentication is updated each time, and the next authentication information is transferred manually to a third party. can be updated so that it appears to be random.

Furthermore, as shown in this example, it is possible to change the entire authentication information, so even if you speak the authentication information over the phone and the call is overheard by the public, the authentication information itself will not be updated. safety is not compromised. Therefore, there are fewer restrictions on the manual means of authentication information, and there is an advantage that it can be applied to an authentication device using human voice power. The feature of this authentication device is that it can control authentication information on a per-time basis, so it is easy to infer that this device can be applied to any input method with low confidentiality other than voice input. . In addition, if a special agreement is made between the parties involved in the authentication, it is possible to include the option not to update the information as a type of update information, which does not change depending on the selection of the update information, considering the update as an action function. It can be easily inferred that it is also possible to apply a function.

In this embodiment, new authentication information is obtained by applying the given update information by multiplication, but this part can be replaced by any calculation f. By using well-known cryptographic functions such as DES and FEAL in this part, if we sufficiently spread each piece of information, we can observe, for example, that the same number appears by observing several human efforts in succession. This makes it extremely difficult to extrapolate current authentication information. It is known that if such an encryption method is used, if one bit is changed, almost all bits of information will change, and the original form will no longer be retained.

In this embodiment, each piece of authentication information is a single digit number, but it can be easily inferred that this information can be spread. For example, if authentication information in which one authentication information consists of a 32-bit bit string is used as an element of a vector used for authentication, the number of updated information when each inputted authentication information is assumed to be updated information. is the number obtained by subtracting 1 from 2 to the 32nd power, making brute force guessing extremely difficult in practice.

The authentication function information and detection function information of this dynamic authentication device are updated every time, and in order to decipher this information in a systematic way, it would be necessary to steal information a large number of times. Since it will not be successful unless a large number of information inputs are accepted, it is possible to increase the probability of detecting this and strengthen the function for detecting fraudulent acts.

The present invention is characterized in that it is possible to perform authentication by mixing information other than the authentication information into the previous authentication information, so it is possible to improve security by using information other than the scattered information next time. What can be done can be easily deduced.

It can be easily inferred that such a combination of authentication function and detection function can be set in any way based on a secret agreement between the user side and the authentication device side, and that it can also be changed for each user. The method of realizing this is that the usage method is publicly known and that it is impossible to determine all the bits used in the known usage method from the input without knowing the correct information. This can be realized by using a difference with stored human power information or an XOR operation.

In this way, by sending information other than the information necessary for authentication using the authentication function as a parameter within the range detected by the detection function, the authentication function information and detection function information are updated for each authentication, and the next time the authentication data is eavesdropped. This has the effect of making it impossible to guess valid authentication information.

A portable storage medium such as an IC card incorporating an authentication information storage unit and an update unit of the dynamic human power device allows the user to authenticate each time by inserting the IC card into something like an IC card input device. , Generate update information by generating an appropriate random number in the IC card, and also generate information for selecting authentication information to embed the update information using the random number, and update the authentication information stored in the IC card each time authentication is successful. It can be easily inferred that preparations for the next authentication can be made by updating the information as well. I like this
Since the C-card can be physically separated so that the internal authentication information cannot be read, the user can easily use it without being aware of it, and the authentication information is automatically updated.
Safety can be guaranteed even if lines are wiretapped.

In addition, this dynamic authentication device differs from conventional authentication devices in that it uses part of the input authentication information for authentication and the other part for updating the authentication information, and which part is used for authentication. However, the difference is that whether to use other parts for updating can be determined at the same time as the authentication information is input for each authentication. Additionally, security is strengthened by making it difficult for outsiders who do not know the authentication information to guess how the authentication information was updated. Because of these characteristics, even if the information necessary for authentication is stolen by another user over the line,
This also prevents immediate and illegal access to the system.

That is, in the present invention, in order to prevent theft, etc., an action function used for authentication and a detection function used for detecting information other than authentication are stored together with authentication information, and the authentication information detected by this detection function is stored. Update the authentication information by updating the relevant action function and detection function using information other than the information used for the purpose. By updating the input information by inserting information, the next time a fake system intervenes and steals the information. This is what prevents this from happening.

Note that even if the portable storage medium part in this embodiment is calculated manually, it is possible to achieve the purpose of ensuring security against eavesdropping of authentication information by sending authentication information in a different pattern each time. This can be easily inferred.

[Effects of the Invention] As explained above, according to the present invention, by updating the authentication information for each authentication, even if the data used for authentication is leaked due to eavesdropping or the like, the device can continue to be used safely as an authentication device. This increases the security against authentication breaches.

[Brief explanation of drawings]

FIG. 1 is a diagram showing a sequence when authentication is successful in a dynamic authentication device according to an embodiment of the present invention, and FIG. 2 is a block diagram showing the configuration of a dynamic authentication device according to an embodiment of the present invention. , FIG. 3 is a block diagram of a conventional authentication device. 299...Storage unit 300...Authentication information storage unit 310...Identification information storage unit 360...Individual authentication function information 370...Individual detection function information 380...Function storage unit 390...Authentication Function table 391...Authentication function identification storage section 392...First authentication function storage section 393...Second authentication function storage section 394...Detection function table 395...Detection function identifier storage section 396...・First detection function storage unit 400...Control unit 401...Dynamic authentication device 420...Comparison unit 450...Calculation unit 460...Detection unit 465...Update unit 500...Control unit 501... Portable storage medium 520... Calculation unit 530... Storage unit 540... Authentication information storage unit 550... Authentication function table 554... Detection function storage unit 570... Random number generation unit 580... Authentication Information Generation Department Representative Patent Attorney Hidekazu Miyoshi Authentication Requesting Side Authenticating Side 1st Page

Claims (1)

[Claims] A dynamic authentication device that stores personal authentication information and performs authentication based on a match between the authentication information and the authentication information input by the user, and uses a different function each time to act on the authentication information for each object to be authenticated. an action function storage means for storing, a detection function storage means for storing a detection function for extracting a portion that does not affect the result of the action function for each object to be authenticated, and authentication information input based on the action function and stored in advance. a calculation means for calculating the authentication information obtained by the calculation means; a determination means for determining a match with the authentication information stored in advance based on the calculation result of the calculation means; A dynamic authentication device comprising: a detection means for detecting updated information; and an update means for writing into the action function storage means and the detection function storage means based on the detection information of the detection means. .