JPH08130536A - Inter-terminal mutual authentication method and tone card system - Google Patents

Abstract

PURPOSE: To attain a communication circuit required for mutual certification by executing operation three times in a system having, for example, a tone card and a host terminal connected to each other through a communication line. CONSTITUTION: A tone card 1 sends a 1st random number code and key information to a host terminal 2 (1st processing). The terminal 2 generates a 1st authentication code by ciphering the acquired 1st random number code by the key information and sends the 1st authentication code to the card 1 together with a 2nd random number (2nd processing). The tone card 1 judges matching of the authentication code obtained by ciphering the 1st random number code by the key information with a 1st authentication code, generates a 2nd authentication code based upon the 2nd random number code and the key information at the time of matching and generates a false authentication code consisting of a 3rd random number code at the time of unmatching and sends either one of them to the host terminal 2 (3rd processing). The host terminal 2 verifies the tone card 1 based upon those authentication codes.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for mutually authenticating the validity of the other party between a first terminal and a second terminal, and a tone card system using this method.

[0002]

2. Description of the Related Art In communication between terminals requiring security, it is often practiced to mutually authenticate the validity of the other terminal using key information and a random number code. FIG. 6 is a flow chart showing an example of a procedure of a conventional mutual authentication method of this kind of terminal, and shows a main processing procedure between a host terminal and a local terminal each having unique key information.

Referring to FIG. 6, upon receipt of a random number request command from the host terminal, the local terminal generates a first random number code (S (processing step, the same applies hereinafter) 601) and the generated first random number code. The ID code of the self terminal is transmitted to the host terminal (S602). The ID code includes, in addition to the identification code of the local terminal, the individual key LK of the terminal itself or the aspiration information for the individual key LK. This invitation information is, for example, address data used for the search when the individual keys of a plurality of local terminals as communication partners are stored in the storage means on the host terminal side. In the local terminal, the confirmation code LC1 is generated by encrypting the first random number code with the individual key LK (S60).
3).

The host terminal acquires the individual key LK based on the ID code sent from the local terminal (S60).
Along with 4), the second random number code is generated and transmitted to the local terminal (S605). In addition, the second random number code is the individual key H
The confirmation code HC2 is generated by encrypting with K (S6).
06).

When the local terminal knows the individual key HK of the host terminal, the received second random number code is encrypted with this individual key HK to generate the authentication code LC2 (S6).
07), and transmits this to the host terminal (S608). The host terminal determines the matching between the received authentication code LC2 and the previously generated confirmation code HC2 (S609),
If they match (S610), the acquired first random number is encrypted with the individual key LK to generate the authentication code HC1 (S6).
11), and transmits this to the local terminal (S612).
The local terminal determines the matching between the received authentication code HC1 and the confirmation code LC1 generated in advance (S6).
13) If they match (S614), the authentication is terminated and communication is started.

As described above, in the conventional mutual authentication method between terminals, one terminal transmits a random number code, and the other terminal generates and returns an authentication code based on the random code, so that mutual authentication is completed. It was necessary to carry out communication at least twice each, for a total of four times.

[0007]

The mutual authentication method between terminals described above is a large-scale system in which each terminal automatically and rapidly performs generation of a random number code or an authentication code, input of various data to a partner terminal, and communication setting processing. In this case, even if the number of communications required for the mutual authentication is four, no problem occurs. However, for example, in a simplified system including a portable local terminal that communicates with a host terminal via a public line, etc., in which data input for mutual authentication and communication setting are manually performed, a random number code is used. If the data amount of the authentication code is large or the number of communication settings is large, there is a problem that the system user's labor becomes excessive.

[0008] Recently, when making a call from a public telephone, a card that converts a telephone number of a callee stored in advance into a tone code and automatically makes a call is becoming popular. If such a card can be used as a portable card terminal, it is possible to construct a service system that enables a consumer to easily obtain information from a host terminal and to perform automatic transactions based on electronic information. But for that,
It is necessary to solve the problem of the number of times of communication in the above mutual authentication method between terminals, and in a system that handles transaction information, the card terminal can only be used by the person himself, and conversely, those who do not have a card terminal It is indispensable to secure security such as inability to access the host terminal.

In view of the above background, the first object of the present invention is to
A second object is to provide a method that can be applied to a simplified system by reducing the number of communications required for mutual authentication between terminals to less than four times. A second problem is to provide a card terminal and a host terminal with improved security. Is to provide a tone card system that realizes various services by connecting to each other via a communication path.

[0010]

A mutual authentication method between terminals according to the present invention for solving the first problem includes the following processing steps in a system in which first and second terminals are connected via a communication path. It is characterized by having. (A) A step in which the first terminal transmits the individual information including the key information or the aspiration information and the first random number code to the communication path, (b) the second terminal transmits the individual information from the communication path. And a first random number code are received, key information is obtained based on this individual information, and the first random number code is encrypted with the key information to generate a first authentication code.
A step of transmitting a communication code corresponding to the combination of the authentication code and the second random number code to the communication path; (c) the first terminal acquires the first authentication code included in the communication code and, It is determined whether the first confirmation code obtained by encrypting the first random number code with the key information and the obtained first authentication code are coincident with each other. A step of generating an authentication code, and transmitting a newly generated third random number code as a false second authentication code when the two do not match, and transmitting one of them to the communication path; (d) the second terminal A step of receiving the second authentication code from a communication channel and determining the consistency between the second confirmation code obtained by encrypting the second random number code with the key information and the received second authentication code.

In the first terminal, the first random number code, the individual information, and the second authentication code are converted into a tone code to which a different frequency is assigned for each code data and transmitted to the communication path. In the second terminal, the communication code may be converted into an audible sound and transmitted to the communication path. Further, as the key information, only one common to each terminal may be used, or two unique key information may be used for each terminal. In the latter case, for example, the first authentication code is generated based on the first random number code and the first key information, and the second authentication code is generated based on the second random number code and the second key information.

The tone card system of the present invention for solving the above second problem is constructed by connecting a card terminal and a host terminal through a communication path. In this system, the card terminal has an individual information storage unit that stores individual information including key information or its aspiration information, a random number generation unit that generates a random number code, and input information with tone codes of different frequencies for each code data. The host authentication processing unit includes a data conversion unit that converts the data into the output to the communication path and a host authentication processing unit, and the host authentication processing unit reads the first random number code generated by the random number generation unit and the individual information storage unit. Random code sending means for inputting individual information to the data conversion section, and acquiring the first authentication code and the second random code generated by the host terminal based on the key information and the first random code, and The confirmation code obtained by encrypting the first random number code with the key information and the obtained first authentication code are judged to be in agreement. A second authentication code based on the code and key information and input to the data conversion unit, and when they do not match, the third random number code generated by the random number generation unit is input to the data conversion unit as the second authentication code. Authentication result sending means for

The host terminal performs mutual authentication with the card terminal by using a random number code,
A tone code conversion unit for converting the tone code received from the communication channel from the card terminal into code data,
A random number generation unit that generates a random number code, an audible sound generation unit that converts input information into audible sound and transmits the audible sound to the communication path, and a card authentication processing unit. The generated individual information and the first random number code are acquired through the tone code conversion unit, key information is further obtained from this individual information, and the first random number code is encrypted with the key information to generate the first authentication code. A first card authenticating means for inputting to the audible sound generating section a communication code formed by, for example, abbreviated conversion of a combination of the first authentication code and the second random number code generated by the random number generating section; The second verification code obtained by encrypting the second authentication code and the second random number code with the key information while obtaining the second authentication code generated by the card terminal based on Having a second card authentication means for determining the consistency of the.

[0014]

According to the mutual authentication method between terminals of the present invention, the first terminal is used as a local terminal and the second terminal is used as a host terminal in correspondence with FIG. 6, and individual keys LK and HK unique to each terminal are used as key information. If it is used, it is represented by the processing procedure as shown in FIG.

First, upon receiving a random number request command from the host terminal, the local terminal generates a first random number code (S101), and the generated first random number code and its own ID.
The code (individual information) is transmitted to the host terminal (S10
2). In addition to the identification code of the local terminal, the ID code includes the individual key LK or the inducement information of the individual key LK. The invitation information is, for example, address data used for the search when the host terminal stores the individual keys of each of the plurality of local terminals that are communication partners, in the storage means. The local terminal also generates the confirmation code LC1 by encrypting the first random number code with the individual key LK (S103). The host terminal acquires the individual key LK based on the ID code received from the local terminal (S104) and also generates a second random number code (S105). Further, the received first random number code is encrypted with the individual key LK to generate the first authentication code HC1 (S1
06), and sends the first authentication code and the second random number code to the local terminal (S107). At this time, the confirmation code HC2 is generated by the second random number code and the individual key HK (S108). The local terminal determines the matching between the received first authentication code HC1 and the previously generated confirmation code LC1 (S109). When the two match, the second random number code is encrypted with the individual key HK to generate the authentication code LC2 (S110, S111). When the two do not match, a false random number code X is generated and the false authentication code LCX is generated. (S110, S112). After that, one of these authentication codes LC2 / LCX is sent to the host terminal (S11).
3). At the host terminal, the received authentication code LC2 / L
The matching between the CX and the confirmation code HC2 generated in advance is determined (S114). If they match, the authentication result is valid (S115), and if they do not match, the authentication result is recognized as invalid (S116).

As described above, since the number of times of communication between terminals is reduced from 4 times in the past to 3 times, the communication setting labor is reduced and a method suitable for mutual authentication of a simplified system can be realized. Also,
At the local terminal, the validity / invalidity of the authentication result can be known when the matching between the first authentication code HC1 and the confirmation code LC1 sent from the host terminal is judged, but when it is incorrect, a false authentication code (third random number code) ) Since the LCX is sent to the host terminal, even if a third party simulates communication, the individual key L
It becomes impossible to analyze K and HK, and security is secured.

Further, the tone card system of the present invention is
The above-mentioned terminal-to-terminal mutual authentication method is realized by the following cooperative processing by a card terminal which is a local terminal and a host terminal, for example. First, the host authentication processing unit of the card terminal converts the first random number code generated by the random number generation unit of its own terminal and the individual information read from the individual information storage unit into a tone code by the data conversion unit, and this is converted into a tone code. Send to the side. The card authentication processing unit of the host terminal acquires the key information and the first random number code from the received tone code, encrypts the first random number code with the key information to generate the first authentication code, and the first authentication code. And an audible sound is generated based on a communication code corresponding to the second random number code generated by the random number generator, preferably a communication code formed by shortening and converting a combination of both codes, and the audible sound is transmitted to the communication path. The host authentication processing unit of the card terminal acquires the first authentication code and the second random number code included in the communication code, and also obtains the confirmation code obtained by encrypting the first random number code with the key information and the first acquired code. Determine the match with the authentication code. When they match, the second random number code from the host terminal and the second authentication code based on the key information are generated, and when they do not match, the random number generation unit generates the third random number code, and one of these is used as the second authentication code. Each is converted into a tone code by the data converter and sent to the host terminal side. This allows the card terminal side to authenticate the host terminal. On the other hand, in the host terminal, the tone code received from the communication channel is converted into the second authentication code by the tone code conversion unit, and the second confirmation code obtained by encrypting the second random number code with the key information is converted into the second verification code. 2 Judge the conformity with the authentication code. As a result, the card terminal can be authenticated.

[0018]

Next, an embodiment of the present invention will be described in detail with reference to the drawings. FIG. 2 shows a tone card system according to an embodiment of the present invention, and shows an example of a block configuration of a part required for mutual authentication processing. In the figure, reference numeral 1 is a tone card which is one of card terminals, 2 is a host terminal, 3 is a public communication network, and 31 is a general-purpose telephone. This example is an example of a simple system in which the owner of the tone card 1 inputs data, and it is assumed that the tone card 1 is assigned an individual key LK and the host terminal is assigned another individual key HK for convenience.

The tone card 1 is an application of, for example, a multi-function IC card, and its IC section has a CPU (main control section) 11, an individual information storage section 12, and a system information storage section 1
3 and a publicly known random number generation unit 14 for generating a random number code, and a data input unit 15 including a ten-key pad, an input button, a call button, etc. on a card substrate, an LCD (liquid cry
stal display) and its display means 16,
, A DTMF (Digital tone multi-frequency) generator, etc., the input information is converted into a tone code of a different frequency for each code data, and the speaker 18 is converted.
There is provided a data conversion unit 17 that leads to.

The individual information storage unit 12 is, for example, EEPRO.
The ID code unique to the card is stored in a rewritable memory such as M, and the ID code includes, for example, the agitation information (address information) of the individual key LK of the user and the telephone number of the host terminal 2. . The system information storage unit 13 is configured by storing common information such as service processing information in this tone card system in a ROM or a RAM.

Although the above is an example of the case where the IC section and the card substrate are integrated, a known portable IC card reader / writer having the IC section and a tone card excluding the IC section are interfaced. A configuration in which they are connected via a circuit is also possible.

The host terminal 2 also includes a communication control unit 21,
It has a key information storage unit 22, a card authentication processing unit 23, and a communication code generation unit 24. The communication control unit 21 controls communication with the tone card 1 connected via the public communication network 3, and has an additional function of converting a received tone code into code data. 211 and an audible sound generation unit 212 that converts the communication code generated by the communication code generation unit 24, which will be described later, into audible sound and transmits the audible sound to the public communication network 3.

The key information storage unit 22 stores the individual key of each of a plurality of tone cards to be communicated, in addition to its own key information HK, and stores the key information of the tone card by the address information described above. Is configured to be obtainable. When the individual key LK is included in the ID code sent from the tone card 1, it is not necessary to store the key information of each tone card. The card authentication processing unit 23 controls each unit required for mutual authentication. The control procedure will be described later. The communication code generator 24
The input information is converted into a predetermined communication code.

Next, the procedure for performing the owner authentication process, the line connection process, the card authentication process, and the service process in the tone card system having the above configuration will be described with reference to FIGS.

(Owner Authentication and Line Connection Processing) FIG. 3 is an explanatory diagram of the procedure of these processings. First, the tone card 1 performs an activation processing upon the turning on of the power by the owner (S3).
01), and the request for inputting the personal identification number is displayed on the display unit 16 (S
302). When the owner inputs the personal identification number from the ten-key pad and presses the input button, the tone card 1 determines a PIN (personal identity number) match based on this personal identification number (S303), and counts the number of errors when they do not match. If the count value reaches a predetermined value, for example, 10 or more (S304), the card is locked (S306). When they match, the PIN error count value is cleared (S3
07), and displays the telephone call request on the display unit 16 (S30).
8). The owner who saw this display picks up the receiver, designates the host terminal 2, and presses the call button. As a result, the tone card 1 automatically transmits a tone transmission process, that is, a tone code corresponding to the telephone number of the host terminal 2, and the host terminal 2 receives this tone code after off-hook (S310). After that, the process proceeds to the host authentication process.

(Host Authentication Process) FIG. 4 is a diagram for explaining the procedure of this process. The tone code 1 automatically generates a random number R1 (first random number code, the same applies hereinafter) (S401), and the above-mentioned ID code The preparation for transmission is displayed on the display unit 16 (S402). On the other hand, the host terminal 2 side requests the tone card 1 side to input the ID code (S403). This request is communicated to the owner, for example in an audible voice message. When the owner who hears this message presses the call button, the tone card 1 transmits the prepared ID code and random number R1 by tone code (S404), and displays the communication code listening request on the display unit 16. The host terminal 2 acquires the individual key LK from the received ID code (S406),
Generate a random number R2 (second random number code, same below) (S
407) together with the random number R1 and the individual key LK, an authentication code CDC (first authentication code, the same applies hereinafter) is generated, and a communication code is generated from the random number R2 and the authentication code CDC (S409). This communication code is a random number R2
Corresponding to a combination of the authentication code CDC and the authentication code CDC, and includes a shortened code having a shorter data length than the combination code, for the convenience of the owner in data input. This communication code is converted into, for example, audible voice and sent to the communication path. The owner hears this communication code and inputs the serial number from the ten-key pad of the tone card 1. Here, the serial number is a code to be entered guided by the communication code, and includes the random number 2 and the authentication code CDC.

The tone card 1 displays a call request on the display unit 16 (S411), and when the owner presses the call button, the confirmation code CDL based on the random number 1 and the individual key LK.
(First confirmation code, the same applies hereinafter) is generated (S412),
The agreement between this and the above authentication code CDC is determined (S
413). If they do not match, the communication code error is counted (S414). If the count value is a predetermined value, for example, less than 10, the process proceeds to the card authentication process, and if it is 10 or more, the card is locked (S415, S416). When both codes CDC and CDL match, the above count value is cleared (S417) and the process proceeds to the card authentication process.

(Card Authentication Processing and Service Processing) FIG. 5
Is a diagram for explaining the procedure of these processes.
When C and CDL match, the tone card 1 uses the individual key HK based on the serial number and the random number R2, and the authentication code LC
(Second authentication code, the same applies hereinafter) is generated. On the other hand, when the codes CDC and CDL do not match and the communication error count value is less than 10, a random number R3 (third random number code, the same applies hereinafter) is generated as a false authentication code (S5).
02). After that, the authentication code LC or the random number 3 is sent to the host terminal 2 as a tone code (S503).

The host terminal 2 receives these (S50
5) Generate a confirmation code HC (second confirmation code, hereinafter the same) HC using the individual key HK based on the random number R2 (S5
05), then this confirmation code HC and the received random number R
3 / Judgment of conformity with the authentication code LC (S50
6). If they match, the scheduled service processing is started. On the other hand, if they do not match, the processing from S504 onward is repeated up to twice and the processing returns to S405 at three times or more.

As described above, in the tone card system of this embodiment, the number of times of communication between the tone card 1 and the host terminal 2 is 3 when the host authentication process and the card authentication process are performed. This is a smaller number of times than when performing mutual authentication between terminals. Moreover, since all such communication is performed by automatically converting the tone code and the audible voice, the convenience of the owner can be improved. Further, the legitimacy of the host terminal 2 can be known on the tone card 1 side at the stage of host authentication processing, but if the host terminal 2 is improper, the tone card 1 generates a false authentication code (random number R3). The correct authentication code LC is not sent to the host terminal 2, and the card is locked in the process of S416. Therefore, an unauthorized person is surely prevented from accessing the host terminal 2, and security in using the system is ensured. In addition, the random number R from the host terminal 2 to the tone card 1
Since 2 and the authentication code CDC are shortened and transmitted, the labor for the owner to re-input them is reduced, and suppression of input errors can be expected.

In the above, the tone card 1 and the host terminal 2 have their own individual keys LK and HK, and the tone card 1 is set in advance so that the individual key HK of the host terminal 2 which is the communication destination can be selected. However, the system for realizing the inter-terminal authentication method of the present invention is
A configuration may be adopted in which only one individual key is set on the tone card 1 side or the host terminal 2 side. Also, S
In the processing of 410, the communication code is guided by audible voice, but any method may be used as long as it can be recognized by the tone card 1 or the owner. Further, in this embodiment, the tone card 1 is used as the first terminal and the host terminal is used as the second terminal.
Of course, this relationship may be reversed.

[0032]

As is apparent from the above description, according to the terminal mutual authentication method of the present invention, the number of communications when performing mutual authentication between the first terminal and the second terminal is four times that of the conventional communication. From 3
Since it has the effect of reducing the number of times and the communication is all performed by automatically converted tone codes and audible sounds, it is possible to provide a method suitable for a simplified system in which communication is performed manually. it can.

In particular, when the improperness of one terminal is found in the second communication, a false authentication code is generated from the other terminal, and this false authentication code is a random number, so that a third party can communicate with it. Even if one tries to find the individual key by simulating, it is extremely difficult to decrypt it, and security can be secured at the same time.

Further, the tone card system of the present invention is
As the first terminal, a card terminal having the above-mentioned security structure is used, for example, a tone card, and the host terminal which is the second terminal is configured to realize the above mutual authentication processing with the card terminal. Therefore, mutual authentication can be surely performed by a simple process, and various security service systems can be constructed in consideration of convenience of use by system users.

[Brief description of drawings]

FIG. 1 is a flowchart showing a processing procedure of an inter-terminal authentication processing method of the present invention.

FIG. 2 is a configuration diagram of a main part of a tone card system according to an embodiment of the present invention.

FIG. 3 is a flowchart showing procedures of owner authentication processing and line connection processing in the system of the present embodiment.

FIG. 4 is a flowchart showing the procedure of host authentication processing in the system of this embodiment.

FIG. 5 is a flowchart showing a procedure of card authentication processing and service processing in the system of this embodiment.

FIG. 6 is a flowchart showing a processing procedure of a conventional mutual authentication method between terminals.

[Explanation of symbols]

 1 tone card (first terminal) 11 CPU (host authentication processing unit) 12 individual information storage unit 13 system information storage unit 14 random number generation unit 15 data input unit 16 display unit 17 code conversion unit 18 speaker 2 host terminal (second 21) Communication control unit 211 Tone code conversion unit 212 Audible sound generation unit 22 Key information storage unit 23 Card authentication processing unit 3 Public communication network (communication path) 31 General-purpose telephone

Continuation of the front page (51) Int.Cl. ⁶ Identification number Office reference number FI Technical display location G06F 19/00 G09C 1/00 7259-5J

Claims (6)

[Claims] 1. In a system in which a first terminal and a second terminal are connected via a communication path, the first terminal uses individual information including key information or its aspiration information and a first random number code as a communication path. A step of transmitting, the second terminal receives the individual information and the first random number code from the communication path, acquires key information based on the individual information, and uses the key information that acquired the first random number code. Encrypting to generate a first authentication code and transmitting a communication code corresponding to a combination of the first authentication code and the second random number code to the communication path; and the first terminal based on the communication code. A second representing the result of the first authentication code being obtained, the coincidence between the first confirmation code obtained by previously encrypting the first random number code with the key information and the obtained first authentication code is determined, and the result is represented. Generate authentication code A step of transmitting the second authentication code to the communication path, wherein the second terminal receives the second authentication code from the communication path and obtains the second random number code by encrypting the second random number code with the key information. And a step of determining the matching between the second confirmation code and the received second authentication code, the mutual authentication method between terminals. 2. The first terminal judges the match between the first confirmation code and the first authentication code, and if they match, encrypts the second random number code with the key information and The mutual authentication method between terminals according to claim 1, wherein the second authentication code is generated, and when the two do not match, the newly generated third random number code is used as a false second authentication code. 3. The first terminal converts the first random number code, the individual information, and the second authentication code into tone codes to which different frequencies are assigned for respective code data, and the second terminal The mutual authentication method between terminals according to claim 1 or 2, wherein the communication code is converted into an audible sound and transmitted to the communication path. 4. A card terminal for performing mutual authentication with a host terminal connected via a communication path by using a random number code, wherein individual information storage for storing individual information including key information or aspiration information thereof. Unit, a random number generation unit that generates a random number code, a data conversion unit that converts input information into a tone code of a different frequency for each code data and transmits the tone code to the communication path, and a host authentication processing unit, The host authentication processing unit is a random number code sending unit that inputs the first random number code generated by the random number code and the individual information read from the individual information storage unit to the data conversion unit, the individual information and the first random number code. A first verification code obtained by encrypting the first random number code with the key information while obtaining the first authentication code and the second random number code generated by the host terminal based on And the acquired first authentication code are matched, and when they match, the second authentication code obtained by encrypting the second random number code with the key information is input to the data conversion unit, and a mismatch occurs. In this case, an authentication result sending means for inputting the third random number code generated by the random number generating section to the data converting section as a false second authentication code, the card terminal. 5. A host terminal for mutual authentication using a random number code with the card terminal according to claim 4, which is connected through a communication path, wherein the host terminal receives from the card terminal through the communication path. A tone data conversion unit that converts a tone code into code data that can be processed by the terminal, a random number generation unit that generates a random number code, and an audible sound generation unit that converts input information into audible sound and transmits it to the communication path. , A card authentication processing unit, the card authentication processing unit acquires the individual information and the first random number code generated by the card terminal via the tone code conversion unit, and further obtains key information from the individual information. , A first random number code is encrypted with the key information to generate a first authentication code, and a communication code corresponding to the first authentication code and the second random number code generated by the random number generation unit is used as the audible sound generation unit. A first card authenticating means for inputting, a second authentication code generated by a card terminal based on the communication code, is obtained through the tone code converting section, and the second random number code is encrypted with the key information. A host terminal, comprising: a second card authenticating unit that determines whether the obtained second confirmation code matches the acquired second authentication code. 6. The first card authentication means is the first card authentication means.
The host terminal according to claim 5, wherein the combination of the authentication code and the second random number code is shortened and converted to generate a communication code.