JPH11126192A - Id authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a high-safety ID authentication system by providing an authenticated means which sends a ciphered ID, obtained by ciphering an ID by using a random number received from an authenticating means, to the authenticating means. SOLUTION: A signal processing circuit part 24 once detecting a push button 21a being pressed modulates an answer request signal and a sub-ID and sends corresponding infrared rays. When infrared rays based upon a random number is received from the side of a lock 30 as a response to the answer request signal, the infrared rays are demodulated to obtain the random number and it is confirmed that a mode changeover switch is already switched to 'normal'. Then a registered ID number is read out of a memory part 22 and ciphered with the random number, and the obtained ciphered ID is modulated to send corresponding infrared rays. In this constitution, the lock 30 is an authenticating means and a lock 20 which ciphers the ID number read out of the memory part 22 and modulates and sends the obtained ciphered ID to the side of the lock 30 is an authenticated means.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an ID authentication system, and more particularly to an ID authentication system for collating registered IDs.

[0002]

2. Description of the Related Art As a conventional ID authentication system, an ID authentication system disclosed in Japanese Patent Application Laid-Open No. 5-35678 is known. As shown in FIG. 7, the ID authentication system 1 transmits a user name and a password to the user side means 2 and transmits the user name and the computer name, and encrypts the encrypted ticket created based on the ID. Computer 3 that decrypts with a password and obtains the corresponding ID
And a user information management computer 4 that transmits to the computer 3 an encrypted ticket obtained by encrypting the user name received from the computer 3 and the ID corresponding to the computer name with a password.

With this configuration, when a user inputs a user name and a password, the computer 3 transmits the user name and the computer name of the user to the user information management computer 4. The user information management computer 4 encrypts the IDs corresponding to the user name and the computer name of the user with a password, and transmits the obtained encrypted ticket to the computer 3. Then, the computer 3 decrypts the encrypted ticket with the password input from the user and acquires a corresponding ID.

[0004]

The conventional ID authentication system described above has the following problems.

When the computer 3 obtains the ID, the encrypted ticket is decrypted with the password input from the user means, so that the security is low in that it must rely on the password input from the user means. Was.
The present invention has been made in view of the above problems, and has as its object to provide a highly secure ID authentication system.

[0006]

To achieve the above object, the invention according to claim 1 is an ID authentication system comprising an authentication device communicable via a signal transmission medium and a device to be authenticated. The authentication device generates and transmits a random number and, when receiving the encrypted ID encrypted using the random number, decrypts the encrypted ID using the random number and outputs the ID.
The authenticated device is configured to include an authenticated unit that transmits an encrypted ID obtained by encrypting an ID using a random number received from the authenticating unit to the authenticating unit. .

That is, when a random number is generated and transmitted by the authentication means, the authenticated means receives the random number, encrypts the ID using the random number, and transmits the obtained encrypted ID to the authentication means. . Then, the authentication means performs the encryption I
Upon receiving D, the encrypted ID is decrypted using the random number to obtain the ID. The ID authentication system only needs to be configured with an authentication device and a device to be authenticated that can communicate via a signal transmission medium, and includes a keyless entry system, an information management system, and the like. The signal transmission medium may be any medium that can communicate between the authentication device and the device to be authenticated, and includes infrared rays, radio waves, and the like.

The authentication means generates and transmits a random number and, when receiving an encrypted ID encrypted using the random number, decrypts the encrypted ID using the random number and outputs the ID.
Any configuration may be used as long as it is capable of acquiring a keyless entry system, and includes a configuration including a lock attached to a door or the like of a keyless entry system, a configuration including an authentication card reader of an information management system, and the like. The authenticated means only needs to be able to transmit an encrypted ID obtained by encrypting the ID using the random number received from the authenticating means to the authenticating means, and is used for opening and closing a door of a keyless entry system. It includes a key composed of keys and a card composed of an authentication card for accessing the information management system.

The means to be authenticated may be any means as long as it can cause the authenticating means to acquire an ID, as described above, and includes those having an ID set at the time of manufacture and those capable of newly registering an ID. . As an example of the configuration in the latter case, the invention according to claim 2 is an ID according to claim 1.
In the authentication system, the authentication means generates a new registration ID based on the new registration code, transmits an encrypted new registration ID obtained by encrypting the new registration ID using the random number, and The means is a new registration ID obtained by decrypting when the encrypted new registration ID is received.
Is registered.

That is, when the authentication means generates a new registration ID based on the new registration code and transmits an encrypted new registration ID obtained by encrypting the new registration ID using the random number, the The means is the same as the newly registered encryption I
D is received, and a new registration ID obtained by decoding is registered. This new registration code may be any code that can generate a new registration ID by the authentication means.
This includes those transmitted from the authenticated means and those directly input to the authentication means.

[0011] As an example of the structure of the means to be authenticated in this case, the invention according to claim 3 is characterized in that in the ID authentication system according to claim 2, the means to be authenticated registers an initial registration ID. When the personal identification new registration ID is transmitted from the authentication means, the initial registration ID is rewritten with the new registration ID obtained by decrypting the personalization new registration ID. In other words, if the initial registration ID is registered in the authenticated means, and the password is transmitted from the authentication means, the initial registration is performed using the new registration ID obtained by decrypting the password. ID
Rewrite and register.

The initial registration ID only needs to indicate that the new registration ID has not yet been registered.
This includes those set when the authentication system is manufactured or shipped, and those in which the ID used for another authentication means has been deleted. As an example of the configuration of the authentication means in the former case, the invention according to claim 4 is based on claim 3.
In the ID authentication system described in 1 above, the means to be authenticated may be a password newly registered from the authentication means.
D is decrypted, and the initial registration ID is rewritten with the obtained new registration ID.

That is, when the initial registration ID is registered in the means to be authenticated, the encrypted new registration ID first received from the authentication means is decrypted, and the initial registration ID is rewritten with the obtained new registration ID and registered. I do. By the way, the new registration ID generated by the authentication means only needs to be one which can be encrypted and transmitted to the means to be authenticated, and is based on a random number generated by the authentication means or arbitrarily set by the user. Etc. are included. As an example of the configuration of the authentication means in the latter case, the invention according to claims 5 to 7
In the ID authentication system according to any one of claims 2 to 4, the authentication unit inputs a new registration ID,
The encrypted new registration ID obtained by encrypting the new registration ID using the random number is transmitted.

That is, when the user inputs a new registration ID, the new registration ID is encrypted using the random numbers, and the obtained encrypted new registration ID is transmitted to the means to be authenticated.

[0015]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a key opening / closing system as an ID authentication system according to an embodiment of the present invention. The key opening / closing system 10 includes a key 2
0 and the lock 30, and the ID corresponding to the lock 30 is a key 2
The key 30 is used to open and close the lock 30.

The key 20 includes a switch unit 21 for inputting a locking / unlocking operation, a memory unit 22 for storing an ID number, an infrared transmitting / receiving unit 23 for transmitting / receiving infrared rays, and encryption / decryption of ID numbers. A signal processing circuit unit 24 for controlling transmission and reception of infrared rays. The key 20 is provided with a battery 25 for supplying power to each circuit, and supplies power according to a change in the operation state of the switch unit 21. On the other hand, the lock 30 includes an infrared transmitting / receiving unit 31 for transmitting / receiving infrared rays, a random number generating unit 32 for generating a random number, a memory unit 33 for storing an ID number, a driving unit 34 for locking / unlocking, an ID number, And a signal processing circuit unit 35 for controlling the encryption / decryption of infrared rays and the transmission and reception of infrared rays. In addition,
The lock 30 includes a battery 36 for supplying power to each circuit,
A timer unit 37 is provided for controlling a period of power supply from the battery 36 to each circuit, and supplies power to each circuit at a predetermined cycle to start the circuit.

With this configuration, when the user performs a locking / unlocking operation with the key 20, the lock 30 generates a random number based on the locking / unlocking operation and transmits an infrared ray based on the random number. When the key 20 receives and demodulates the infrared ray and obtains a random number, it encrypts the ID number using the random number, modulates the encrypted ID obtained to the corresponding infrared ray, and transmits it. Upon receiving the infrared ray based on the encrypted ID, the lock 30 modulates and decodes the infrared ray to obtain an ID number. Then, after confirming that the acquired ID number is the corresponding ID number, locking / unlocking is performed.

The switch section 21 has a push button 21a which can be operated for locking / unlocking, and the user pushes down the push button 21a when locking / unlocking. Accordingly, when the lock button is in the locked state, pressing down the push button 21a results in an unlocking operation, and when the lock side is in the unlocked state, pressing down the push button 21a performs the locking operation. In this case, the locking / unlocking operation is performed with one push button, but the invention is not necessarily limited to such a configuration, and a plurality of push buttons may be provided,
It may be configured by another type of switch such as a slide switch.

The memory section 22 is composed of an EEPROM and stores an ID number. The memory unit 22 may be any nonvolatile storage element that can write at least an ID number and can read it out as needed.
It is also possible to use a flash memory or the like backed up by M or a battery. The infrared transmission / reception unit 23 includes a demodulation circuit that modulates the encrypted ID and the like and demodulates the received infrared radiation, and a transmission / reception circuit that transmits and receives the infrared radiation, and transmits and receives the infrared radiation to and from the lock 30. ing.

The signal processing circuit section 24 is composed of a microcomputer and controls various signal processes on the key 20 side. Here, the operation of the signal processing circuit unit 24 when a normal locking / unlocking operation is performed will be described with reference to FIGS. FIG. 4 is a time chart showing the operation of the key 20 and the lock 30 when performing the locking / unlocking operation. When the signal processing circuit unit 24 detects that the press button 21a has been pressed (step S1 in FIG. 2, step S1 in FIG. 3).
10), as shown in FIG. 4A, modulate the response request signal and the sub ID and transmit the corresponding infrared ray (S in FIG. 2).
2, S11 in FIG. 3). As shown in (b) and (c) of FIG. 4, when an infrared ray based on a random number is received from the lock 30 as a response to the response request signal (S12 to S12 of FIG. 3).
In step S15, the infrared ray is demodulated to obtain a random number (S3 in FIG. 2), and it is confirmed that a mode switch (not shown) is switched to “normal” (S in FIG. 2).
4). Then, the registered ID number is stored in the memory unit 22.
And encrypts it with the random number, modulates the obtained encrypted ID, and transmits the corresponding infrared ray (S in FIG. 2).
5, S16 and S17 in FIG. 3).

The ID number is not set at the manufacturing stage or shipping stage of the key 20 and the lock 30, but is set for the first time when the user uses it. Therefore, the key 20 and the lock 3
This eliminates the need for production management at the manufacturing stage 0, etc., and improves manufacturing efficiency. Here, the operation of the signal processing circuit unit 24 when a user registers an ID number will be described with reference to FIGS. In addition, I before registration
The D number is set to “00000000” in the process of manufacturing the key, and the user sets the mode switch to “ID”
When switching to "registration", ID registration is permitted. Therefore, once the ID has been registered, this key
Since the number is no longer “00000000”, the registration change of the ID is prohibited.

The signal processing circuit section 24 includes a push button 21a.
Is detected (step S1 in FIG. 2, step S30 in FIG. 5), the response request signal and the sub-ID are modulated, and the corresponding infrared rays are transmitted (S2 in FIG. 2, S31 in FIG. 5). As a response to this response request signal, the lock side receives a random number “10
Upon receiving an infrared ray based on “110101”, the infrared ray is demodulated to obtain a random number “10110101” (S3 in FIG. 2, S32 to S34 in FIG. 5), and the mode changeover switch is switched to “ID registration”. Is confirmed (S4 in FIG. 2). Then, the ID number “00” before registration
000000 ”and a command“ 00010001 ”for newly registering an ID number are stored in the random number“ 1011010 ”.
EXOR operation (scramble) with "1" (S3 in FIG. 5).
5), the obtained encrypted newly registered data "0100101"
001011011 ”is transmitted (FIG. 2
S6 in FIG. 5). Then, as a response to the encrypted new registration data “0100101001011011”, the encrypted new registration ID “111” is received from the lock 30 side.
00000 ”(S in FIG. 2)
7, S37 to S41 in FIG. 5), demodulates this infrared ray, and obtains the newly obtained encrypted new registration ID “11100000”.
Is decrypted, and the new registration ID “10101010” is written in the memory unit 22 and registered (S8 in FIG. 2 and S8 in FIG. 5).
42).

On the other hand, the infrared transmission / reception unit 31 includes a demodulation circuit for modulating a random number or the like and demodulating the received infrared radiation, and a transmission / reception circuit for transmitting and receiving the infrared radiation.
The transmission / reception of infrared rays is performed with the infrared transmission / reception unit 23 on the side. The random number generation unit 32 includes a random number generation circuit,
When the random number generation is requested from the signal processing circuit unit 35, for example, when the response request signal is transmitted from the 0 side, a random number is generated and output to the signal processing circuit unit 35.

The memory unit 33 is composed of an EEPROM, like the memory unit 22, and stores an ID number. Similarly, the memory unit 33 may be any nonvolatile storage element that can write at least an ID number and can be read as needed, and may be configured by another PROM, a Flash memory backed up by a battery, or the like. It is possible. The driving unit 34 is disposed on the door and the door frame, and locks / unlocks the door.

The signal processing circuit section 35 is constituted by a microcomputer and controls various signal processes on the lock 30 side. Here, the operation of the signal processing circuit unit 35 when a normal locking / unlocking operation is performed will be described with reference to FIGS. When the signal processing circuit unit 35 receives the response request signal and the infrared ray based on the sub ID from the key 20 (step S12 in FIG. 3 and step S50 in FIG. 6), the random number generation unit 3
2 generates a random number, modulates the random number, and transmits a corresponding infrared ray to the key 20 side (S13 and S1 in FIG. 3).
4, S51 in FIG. 6). Then, the encryption ID from the key 20 side
When receiving an infrared ray based on the infrared ray, the infrared ray is demodulated and decoded to obtain an ID number (S18 and S19 in FIG. 3, and S52 in FIG. 6). This ID number is stored in the memory unit 33
And confirms that the ID number is applicable (S20 in FIG. 3, S53 and S5 in FIG. 6).
4) causing the drive unit 34 to perform locking / unlocking (S2 in FIG. 3).
1, S55 in FIG. 6).

The operation of the signal processing circuit unit 35 when the ID number is registered on the key 20 side as described above will be described with reference to FIGS. When receiving the response request signal and the infrared ray based on the sub ID from the key 20 (step S32 in FIG. 5 and step S50 in FIG. 6), the signal processing circuit unit 35 sends the random number “10110
101 ”and the same random number“ 1011010 ”
1 is transmitted to the key 20 side (S3 in FIG. 5).
3, S51 in FIG. 6). When receiving the infrared ray based on the encrypted newly registered data “0100101001011011”, the infrared ray is demodulated and decrypted (descrambled) to obtain the newly registered data “00000000”.
00010001 "(S37 in FIG. 5, S52 and S56 in FIG. 6). This new registration data "00000
0000000010001 "is the ID number before registration" 0000
0000 ”and a command“ 0 ”for newly registering an ID number.
001001 "is confirmed (S38 in FIG. 5, S57 in FIG. 6). Then, a new registration ID “10101010” is generated by the random number generation unit 32 and E
Encrypted new registration ID “1110 obtained by XOR operation
0000 ”and transmits the corresponding infrared ray (FIG. 5
S39 and S40, and S58 in FIG. 6). At this time, the new registration ID “10101010” is written and registered in the memory unit 33 (S43 in FIG. 5, S5 in FIG. 6).
9).

In this embodiment, the new registration ID is registered based on the random number generated by the random number generator 32, but is not necessarily limited to the new registration ID created in this manner. For example, the lock 30 may be provided with an input unit such as a numeric keypad so that a user can input an arbitrary ID. A plurality of different IDs may be registered as long as the capacity of the memory unit 33 of the lock 30 allows, or a configuration in which these IDs can be added or deleted freely is also possible.

In the above description, 8-bit data is used for convenience for the sake of simplicity. However, it is sufficient that at least information necessary for registering the ID can be transmitted and received, and the data length can be appropriately changed as necessary. Things. In the above encryption, the operation by the logical expression EXOR is applied.
The arithmetic method and the like can be changed as appropriate as long as appropriate encryption can be performed at least according to the security level. In addition, if the memory unit 22 is normally configured by an EEPROM externally attached to the microcomputer, fraud may occur due to replacement of the EEPROM or the like. Therefore, in the lock opening / closing system 10 according to this embodiment, as a countermeasure against this fraud, the data at a predetermined address of the memory unit 22 is updated from the initial data at the shipment stage, and the mode changeover switch is set to the “registration mode”. When registering a new registration ID, the lock 30 detects the data at the predetermined address and identifies whether the memory unit 22 has been shipped properly or is incorrect, and if not, registers the ID number. Not to do.

Therefore, the random number is generated by the random number generation unit 32 and the infrared ray modulated is transmitted to the key 20 side, and the encryption I obtained by demodulating the infrared ray received from the key 20 side is obtained.
The lock 30 that decrypts D using the same random number and obtains an ID number constitutes an authentication means in this sense. On the other hand, the ID number read from the memory unit 22 is encrypted using a random number obtained by demodulating the infrared light received from the lock 30, and the obtained encrypted ID is modulated and transmitted to the lock 30. The key 20 constitutes a means to be authenticated in this sense.

Next, the operation of the lock opening / closing system according to this embodiment will be described. When newly registering an ID, when the user switches the mode changeover switch to “ID registration” and presses down the push button 21a, the signal processing circuit unit 24 detects this push (step S1 in FIG. 2) and outputs a response request signal. , And transmits the corresponding infrared ray to the lock 30 side (step S2 in the figure). The signal processing circuit unit 35 includes the key 2
When the infrared ray transmitted from the 0 side is received (step S50 in FIG. 6), the random number
01 ”and the same random number“ 10110101 ”
Is transmitted to the key 20 side based on the
51).

Then, the signal processing circuit section 24 receives and demodulates the infrared rays and demodulates the random numbers “10110101”.
(Step S3 in FIG. 2), and confirms that the mode changeover switch has been switched to “ID registration” (step S4 in FIG. 2). Then, the ID number “000 before registration”
00000 "and a command" 00010001 "for newly registering an ID number are stored in the random number" 1011010 ".
Infrared based on the newly registered data "0100101001011011" obtained by the EXOR operation in "1" is transmitted to the lock 30 side (step S6 in the figure).

The signal processing circuit 35 receives the infrared rays, demodulates and decodes them, and newly registers the newly registered data “000”.
0000000010001 ". Then, the new registration data “000000000000001000
It is confirmed that "1" is composed of an ID number "00000000" before registration and a command "00010001" for newly registering the ID number (step S57 in FIG. 6).
Here, the signal processing circuit unit 35 generates a new registration ID “10101010” in the random number generation unit 32 and writes and registers it in the memory unit 33 (step S5 in FIG. 5).
9), new encrypted registration ID obtained by EXOR operation
"11100000" is modulated and the corresponding infrared ray is transmitted (step S58 in the figure).

Upon receiving this infrared ray (step S7 in FIG. 2), the signal processing circuit section 24 demodulates the infrared ray and obtains the newly obtained encrypted new registration ID "11100000".
And the new registration ID “10101010” is written and registered in the memory unit 22 (step S8 in the figure).
Normal lock / lock based on the registered ID number
When performing the unlocking operation, when the user switches the mode changeover switch to the “normal” side and presses down the push button 21a, the signal processing circuit unit 24 detects this push (step S1 in the figure) and outputs a response request signal. And transmits the corresponding infrared ray to the lock 30 side (step S
2).

Upon receiving the infrared ray transmitted from the key 20 side (step S50), the signal processing circuit section 35 generates a random number in the random number generation section 32, modulates the random number, and transmits the corresponding infrared ray to the key 20 side. (Step S51 in FIG. 6). Then, the signal processing circuit unit 24 receives and demodulates the infrared ray to obtain a random number (step S3 in FIG. 2), and confirms that the mode switch is set to “normal” (step in FIG. 2). S4). Then, the registered ID number is read from the memory unit 22 and encrypted with this random number, the obtained encrypted ID is modulated, and the corresponding infrared ray is transmitted (step S5 in the figure).
5).

When receiving the infrared ray, the signal processing circuit section 35 demodulates and decodes the infrared ray to obtain an ID number (step S52 in FIG. 6). This ID number is stored in the memory unit 3
No. 3 is checked against the ID number registered in step S5 to determine whether the ID number is the corresponding ID number (steps S53 and S5 in FIG.
4) If the ID number can be confirmed,
The driving unit 34 locks / unlocks the door (step S
55). If it is not the corresponding ID number, the locking / unlocking operation is terminated without responding to the pressing operation of the pressing button 21a.

At this time, if the mode changeover switch is set to the “ID registration” side, as described above, an infrared ray based on the password new registration data is transmitted in order to newly register the ID. After confirming that this ID number is not "00000000" before registration, the locking / unlocking operation is terminated (step S57 in the figure). in this way,
When performing the locking / unlocking operation, when the key 20 creates the encryption ID with the random number transmitted from the lock 30 and returns it, the lock 30 decrypts the encryption ID with the same random number, and Since the locking / unlocking operation is performed only when the number is confirmed, the security of the lock opening / closing system can be improved.

[0037]

As described above, the present invention can provide a highly secure ID authentication system. According to the second aspect of the present invention, since a user can newly register an ID, there is no need for production management at the manufacturing stage or shipping stage of the ID authentication system. Further, according to the third aspect of the present invention, since the new registration ID is rewritten and registered to the initial registration ID in which the new registration ID has not been registered yet, it is possible to prevent another ID from being registered by mistake.

Furthermore, according to the invention of claim 4, since ID registration can be performed only once in each means to be authenticated,
Unauthorized rewriting of the ID can be prevented. Furthermore, according to the invention according to claim 5, a desired ID can be registered in the authenticated means.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a lock opening / closing system according to this embodiment.

FIG. 2 is a flowchart showing a key-side signal processing procedure.

FIG. 3 is an operation flowchart showing an operation when performing a locking / unlocking operation.

FIG. 4 is a time chart showing an operation when performing a locking / unlocking operation.

FIG. 5 is an operation flowchart showing an operation when newly registering an ID.

FIG. 6 is a flowchart showing a signal processing procedure on the lock side.

FIG. 7 is a block diagram showing a configuration of a lock opening / closing system according to a conventional example.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 10 ... Key opening / closing system, 20 ... Key, 21 ... Switch part, 22 ... Memory part, 23 ... Infrared transmitting / receiving part, 2
Reference numeral 4: signal processing circuit section, 30: lock, 31: infrared transmission / reception section, 32: random number generation section, 33: memory section, 34
... Drive unit, 35 ... Signal processing circuit unit.

Claims (7)

[Claims] 1. An ID authentication system comprising an authentication device capable of communicating via a signal transmission medium and a device to be authenticated, wherein the authentication device generates and transmits a random number and encrypts the same using the random number. An authentication unit that decrypts the encrypted ID using the same random number to obtain the ID when the encrypted ID is received, wherein the device to be authenticated uses the random number received from the authentication unit to identify the ID. An ID authentication system comprising: an authenticated unit that transmits an encrypted ID obtained by encryption to the authentication unit. 2. The ID authentication system according to claim 1, wherein said authentication means generates a new registration ID based on a new registration code and uses the random number to generate the new registration ID.
Transmitting an encrypted new registration ID obtained by encrypting the encrypted new registration ID, and when the encrypted new registration ID is received, registers the newly registered ID obtained by decrypting the encrypted new registration ID. ID authentication system. 3. The ID authentication system according to claim 2, wherein the authenticated means, when registering the initial registration ID, transmits a new encrypted ID from the authentication means.
New registration I obtained by decrypting the password
D. rewriting the initial registration ID by D. 4. The ID authentication system according to claim 3, wherein the authenticated means decrypts the encrypted new registration ID first received from the authentication means, and obtains the initial registration ID by the obtained new registration ID. An ID authentication system characterized by: 5. The ID authentication system according to claim 2, wherein the authentication means inputs a new registration ID and encrypts the new registration ID using the random number. An ID authentication system, wherein: 6. The ID authentication system according to claim 3, wherein said authentication means inputs a new registration ID and encrypts said new registration ID using said random number. An ID authentication system, wherein: 7. The ID authentication system according to claim 4, wherein said authentication means inputs a new registration ID and encrypts said new registration ID using said random number. An ID authentication system, wherein: