JPH0575599A - Password number collating device - Google Patents

Abstract

PURPOSE:To obtain the password number collating method capable of safe transmission to an information processing terminal by easily and quickly performing the processing in a password number input device. CONSTITUTION:A password number input device 110 operates random numbers 130 generated by an information processing terminal 100 and an inputted password number 136 by an operation means 113 and ciphers a result 137 by a cipher means 112 for the purpose of preventing it from being stolen and transmits it to the information processing terminal 100. In the same manner as the information processing terminal 110, an information processing terminal 100 operates random numbers 130 and a preliminarily stored password number 132 by an operation means 106 and ciphers a result 133 by a cipher means 104. Thus, cipher data 104 and received cipher data 138 are collated with each other.

Description

Detailed Description of the Invention

[0001]

[Industrial field of application] The present invention relates to a personal identification number collating device for inputting a personal identification number such as an electronic fund transfer terminal, an automatic teller machine, etc. to confirm the identity.

[0002]

2. Description of the Related Art In a conventional personal identification number collation device, the personal identification number input from a personal identification number input device is transmitted as plain text to an information processing terminal for collation. In recent years, it has become more and more common to perform encryption processing on data and send a plaintext over the line.
The sender wants to send the data that he wants to send to the receiver after encrypting it using the secret key data, then the receiver decrypts the received text using the same secret key data as the sender. Receive data. However, since this method generates the same password for the same data, it is not suitable for collation of the personal identification number, and the secret key data is applied every time the personal identification number is input by applying this method. It was exchanged, and different passwords were output for the same password. This personal identification number verification device will be described with reference to the drawings.

FIG. 2 is a block diagram of a conventional personal identification number collation device. Reference numeral 200 is an information processing terminal, and 210 is a personal identification number input device. The information processing terminal 200 receives the secret code 2 before the secret code 234 is input to the secret code input device 210.
Key generation means 202 generates key data 230 (hereinafter referred to as a session key) for encrypting 34. Then, in order to protect against eavesdropping during transmission to the personal identification number input device 210, the session key 230 is encrypted by the secret key data 231 stored in the memory 201 by the encryption means 206 and transmitted to the personal identification number input device 210. The personal identification number input device 210 is stored in the memory 2 by the decryption means 213.
The session key 230 is obtained by decrypting the received data 236 with the same secret key data 231 as the information processing means 200 stored in 11. The series of processes before the personal identification number 234 is input are performed again when the next personal identification number is input. The personal identification number input device 210 has an encryption means 212.
The personal identification number 234 input by is encrypted with the previously obtained session key 230 and transmitted to the information processing terminal 200. The information processing terminal 200 encrypts the personal identification number 232 stored in the memory 203 by the encryption means 204 with the session key 230. The collating means 205 compares and collates the encrypted data 233 with the received data 235.

In the conventional personal identification number collating device, the session key for encrypting and transmitting the personal identification number is changed every time the session key is collated. Therefore, the output data from the personal identification number input device to the information processing terminal will be different even with the same personal identification number, and the safety is high even if the line is tapped.

[0005]

The area between the personal identification number input device and the information processing terminal (hereinafter referred to as the line) is not physically safe, and there is a possibility that the data on the line will be tapped and the personal identification number will be known to others. There is. Further, when the conventional cryptographic processing is performed, the cryptographic processing must be performed for exchanging the secret key data, and the process of acquiring the secret key data and the process of encrypting the personal identification number in the personal identification number input device. And are necessary, and the processing becomes complicated and slow.

SUMMARY OF THE INVENTION In view of the above points, an object of the present invention is to provide a personal identification number collating device that can easily and quickly perform a cryptographic process in a personal identification number input device and can safely transmit the personal identification number.

[0007]

In order to achieve the above object, the present invention comprises an information processing terminal for collating a personal identification number and a personal identification number input device connected to the information processing terminal,
The information processing terminal includes at least a first memory that stores secret key data, a second memory that stores a personal identification number, a random number generation unit, the personal identification number, and a random number generated by the random number generation unit. First computing means for computing using the above, first cipher means for encrypting data generated by the first computing means with the secret key data, data generated by the cipher means, and the personal identification number The secret code input device includes at least a third memory for storing secret key data, and a random number obtained from the information processing terminal. And a personal identification number collating device including a second arithmetic means for performing arithmetic operation using the above and a second encryption means for encrypting the data generated by the second arithmetic means with the secret key data.

[0008]

The secret code collating method permitted by this method can safely transmit the secret code from the secret code input device to the information processing terminal, and reduces the processing in the information processing terminal and the secret code input device. In addition, high-speed processing is possible.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings.

(Embodiment 1) FIG. 1 is a block diagram showing a personal identification number collating apparatus according to an embodiment of the present invention. Reference numeral 100 is an information processing terminal, and 110 is a personal identification number input device.

Before the personal identification number 136 is input to the personal identification number input device 110, the information processing terminal 100 generates a random number 130 by the random number generation means 102 and sends it to the personal identification number input device 110. The personal identification number input device 110 calculates an exclusive logical sum from the personal identification number 136 input by the calculation means 113 and the received random number 130. Next, this calculation data 137 is transferred to the memory 111 by the encryption means 112.
The encrypted data 138 is encrypted with the same secret key data 131 as that of the information processing means 100 stored in, and the encrypted data 138 is transmitted to the information processing terminal 100. The series of processes before the personal identification number 136 is input are performed again when the next personal identification number 136 is input. The information processing terminal 100 includes a computing means 10
6, the exclusive OR is calculated from the personal identification number 132 stored in the memory 103 and the random number 130. The following calculation data 133 is stored in the memory 1 by the encryption means 104.
The secret key data 131 stored in 01 is used for encryption. The collating means 105 compares the encrypted data 134 with the received data 138.

In the method of collating the personal identification number of this embodiment, the session key for encrypting and transmitting the personal identification number and its decryption processing are not necessary, and the personal identification number itself is calculated using the calculating means 106 and 113. Therefore, the calculation amount is small. In the present invention, the calculation of the exclusive OR is used for the calculation means 106 and 113, but the processing may be only the connection to the personal identification number. That is, CBC is used for the encryption of the personal identification number.
A block cipher in the (Cipher Block Chaining) mode is used, and the received random number is used as an initial value. Also in the present invention, the output data from the personal identification number input device to the information processing terminal is different even with the same personal identification number, and the safety is high even if the line is tapped.

(Embodiment 2) An IC card connectable to an information processing terminal is used for the purpose of reducing the processing amount and the memory capacity of the personal identification number of the information processing terminal 100.
A personal identification number collating device for causing the IC card to perform the personal identification number collating method according to the first embodiment will be described.

Here, the information processing terminal 100 in FIG.
It is assumed that all the means and the memory except the random number generating means 102 are in the IC card.

In the personal identification number verification method of this embodiment, the service provider issues an IC card to the consumer under a contract. At this time, the personal identification number 132 is stored in the memory 103 and the secret key data 131 is stored in the memory 101. At the time of transaction (for example, shopping with credit), the consumer presents the IC card to the service implementer, and the personal identification number verification method of this embodiment is performed. The information processing terminal 100 causes the IC card to perform the series of processes in the first embodiment, and only receives the collation result from the IC card. Therefore, the information processing terminal 100 does not need to store the personal identification numbers of several persons, and the burden is reduced.

Further, the processing to be performed on the IC card may be only the processing of the arithmetic means 104 and the arithmetic means 106 regarding the personal identification number 131 and the secret key data 132. That is, the collation unit 105 may be performed by the information processing terminal 100 instead of the IC card.

[0017]

As described above, according to the present invention, the personal identification number can be safely and quickly transmitted from the personal identification number input device to the information processing terminal. Further, by enabling the personal information processing terminal to be connected to the personal IC card device which stores the personal identification number and carries out a part of the arithmetic processing, the information processing terminal only needs to verify the result, The burden on the information processing terminal is reduced and the safety is improved.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing a personal identification number verification device according to an embodiment of the present invention.

FIG. 2 is a configuration diagram showing a conventional personal identification number matching device.

[Explanation of reference numerals] 100 information processing terminal 110 personal identification number input device

Claims (3)

[Claims] 1. An information processing terminal for collating a personal identification number, and a personal identification number input device connected to the information processing terminal,
The information processing terminal includes at least a first memory that stores secret key data, a second memory that stores a personal identification number, a random number generation unit, the personal identification number, and a random number generated by the random number generation unit. First computing means for computing using the above, first cipher means for encrypting data generated by the first computing means with the secret key data, data generated by the cipher means, and the personal identification number The secret code input device includes at least a third memory for storing secret key data, and a random number obtained from the information processing terminal. And a second encryption means for performing an operation using the secret key data and a second encryption means for encrypting the data generated by the second operation means with the secret key data. .. 2. An information processing terminal to which an IC card for collating a personal identification number can be connected, and a personal identification number input device connected to the information processing terminal, wherein the information processing terminal includes a random number generating means, and the IC card. Has at least a central processing unit, a non-rewritable non-volatile memory, and a rewritable non-volatile memory. The central processing unit and the non-rewritable non-volatile memory provide a first computing means and a first computing means. 1
The encryption means and the collation means are constructed, the rewritable non-volatile memory stores secret key data and a secret code, and the secret code input device includes at least a memory for storing the secret key data and the inputted secret code. Second encryption means for performing an operation using a number and a random number obtained from the information processing terminal, and a second cipher for encryption using the secret key data and the data generated by the second operation means. A personal identification number collating device, characterized in that the IC card substitutes for the personal identification number collation. 3. A first procedure for inputting at least a personal identification number, a second procedure for generating a random number, and a personal identification code input by the first procedure after the first procedure and the second procedure. A third number for calculating a number and a random number generated by the second procedure, a fourth procedure for encrypting the value obtained by the third procedure after the third procedure, and recording in a memory A fifth step of calculating the secret code and the random number generated by the second step, and after the fifth step,
The sixth procedure for encrypting the value obtained by the fifth procedure is compared with the values obtained by the fourth procedure and the sixth procedure after the fourth procedure and the sixth procedure. A personal identification number verification device comprising the seventh procedure.