JPH11308212A - Identity confirmation method and its system, and record medium storing identity confirmation program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the identity confirmation method and its system where verification processing of the identity of the system is simplified to relieve the load on the system, and storage of the authentication information and information to be authenticated is not required, and to provide the record medium storing an identity confirmation program. SOLUTION: When devices A, B start the operation, the A device 100 generates a random number S and stores it to a nonvolatile storage device 120 and informs it to the B device 200, the B device 200 receives the S and stores it to a nonvolatile storage device 220, and in the case that the devices A, B start the operation after the interruption of the operation, the A device 100 generates a random number RS used to request of authenticating it that the B device 200 stores the S, informs the B device 200 of it. Upon the receipt of the RS, the B device 200 reads the S from the nonvolatile storage device 220 and uses the RS to generate a random number PS that is used to authenticate the storage of the S to the A device 100 and informs the A device 100 of it, the A device 100 reads the S and uses the S, RS to verify the PS from the B device 200 so that the B device 200 surely stores the S.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an identity verification method and apparatus for verifying and confirming the identity of apparatuses using a communication system, and more particularly, to a plurality of apparatuses connected via a communication path. Devices are disconnected due to the interruption of the device operation or the disconnection of the communication path, and when the operation is started again, the respective devices were connected to each other and the device connected to the communication path was connected before the interruption. The present invention relates to an identity confirmation method for confirming the identity as to whether or not it is the same as an apparatus, and a recording medium on which an identity confirmation program is recorded.

[0002]

2. Description of the Related Art In the case where a plurality of devices are connected by a communication path, the devices temporarily stop operating or are disconnected, and thereafter both the device and the communication path start operating. In order to ensure that each device is mutually identical to the device connected to the communication path before the interruption, each device must In each case, identify each device, verify that it is definitely the correct device, and, if started after an interruption, identify each other again and make sure that it is the correct device. Something had to be verified, thereby ensuring that each device was the same.

[0003]

In the above-mentioned prior art, each device is definitely the same before the operation of each device is interrupted or the communication path is cut off, and after they resume operation. To verify that
Since it is necessary to execute the same verification both before and after the interruption, there is a problem that the processing is complicated and the processing load on the apparatus is large.

[0004] Also, each device is capable of identifying each device and identifying and confirming that it is genuinely the correct device, and each device must be able to identify that device with respect to other devices. There has been a problem in that it is necessary to retain authentication information that can identify and confirm that the device is a correct device.

[0005] The present invention has been made in view of the above,
The objective is to simplify the process of verifying the identity of the device, reduce the burden on the device, and eliminate the need for holding authentication information and information to be authenticated. To provide a recording medium on which is recorded.

[0006]

In order to achieve the above object, according to the present invention, a plurality of apparatuses connected via a communication path are disconnected when the operation of the apparatus is interrupted or the communication path is disconnected. When the operation is started again after the state,
An identification method for mutually confirming whether or not a device connected to a communication path is the same as a device connected before the interruption, comprising a first and a second method. When the device is connected via a communication path to start operation and exchange information, the first device generates secret information, stores the secret information in its own non-volatile storage device, The second device notifies the second device of the secret information, the second device receives the notified secret information and stores it in its own nonvolatile storage device, and the first and second devices interrupt the operation or communicate. When the path is disconnected and thereafter the first and second devices and the communication path start operating, the first device holds the secret information to the second device by the second device. Request information to request that the The determined information is notified to the second device, the second
When the device receives the request information, the device reads the secret information from its own non-volatile storage device, and uses the request information to generate certification information for certifying to the first device that the device holds the secret information. Generates the certificate information and notifies the first device of the certificate information. The first device reads the secret information from its own non-volatile storage device and notifies the second device using the secret information and the request information. The gist of the present invention is to verify the provided proof information and verify that the second device surely holds the secret information.

[0007] According to the first aspect of the present invention, first,
When the second device starts operation, the first device generates secret information, stores it in a nonvolatile storage device, notifies the second device, and the second device receives the secret information. When the first device and the second device interrupt the operation and then start the operation, the first device proves that the second device holds the secret information when the first device and the second device stop the operation. Request information requesting the second device to notify the second device, and upon receiving the request information, the second device reads the necessary information from the non-volatile storage device and uses the request information to hold the confidential information. Certifying information for proving to the first device that the credential is present, notifies the first device, the first device reads the secret information, and uses the secret information and the request information to certify from the second device. Verify information and verify that the second device does hold confidential information Because the identity of the verification process is simplified, it is possible to reduce the burden on the device.

[0008] The present invention according to claim 2 is based on claim 1.
In the described invention, when the first and second devices stop operating or the communication channel is disconnected, and then the first and second devices and the communication channel start operating, the second
The device generates request information for requesting the first device to prove that the first device holds the secret information, and notifies the first device of the request information. When the first device receives the request information, the first device reads the secret information from its own non-volatile storage device and uses the request information to prove to the second device that the first device holds the secret information. Generating certification information, notifying the second device of the certification information, the second device reads the secret information from its own non-volatile storage device, and uses the secret information and the request information to perform a first The gist is to verify the proof information notified from the device and verify that the first device surely holds the secret information.

In the present invention according to claim 2, the first,
If the second device suspends operation, and then the first and second devices start operating, the second device requests to prove that the first device holds secret information. The request information is generated and notified to the first device. When the first device receives the request information, the first device reads the secret information, and uses the request information,
Generates proof information for certifying the second device that the confidential information is held, notifies the second device, the second device reads the confidential information, and uses the confidential information and the request information,
Verifying the proof information from the first device and verifying that the first device surely holds the secret information, thereby simplifying the process of verifying identity and reducing the load on the device. Can be.

Further, according to the present invention, after a plurality of devices connected via the communication path are disconnected due to the interruption of the operation of the apparatus or the disconnection of the communication path, the operation is started again. In this case, there is provided an identity confirmation method for mutually confirming whether each device connected to the communication path is the same as the device connected before the interruption. And the first device generates secret information and stores the secret information in its own non-volatile storage device when the second device and the second device are connected via a communication path to start operation and exchange information. Then, the second device notifies the second device of the secret information, the second device receives the notified secret information and stores it in its own nonvolatile storage device, and the first and second devices perform operations. Interruption or disconnection of the communication path, and then the first and second devices And a first request for requesting the second device to prove that the second device holds the secret information when the communication channel starts operating. Generating second information, notifying the first request information to a second device, and upon receiving the first request information, the second device reads the secret information from its own non-volatile storage device, and A first device that certifies to the first device that the confidential information is held by using the first request information;
, And notifies the first device of the first proof information. The first device reads the secret information from its own non-volatile storage device, and reads the secret information and the first request information. Is used to verify the first proof information notified from the second device, verify that the second device does hold the secret information, and the second device Generates second request information for requesting that the first device holds the secret information, notifies the first device of the second request information, When the first device receives the second request information, the first device reads the secret information from its own non-volatile storage device and uses the second request information to indicate that the second device holds the secret information. Generating second certifying information for certifying the second device, and notifying the second device of the second certifying information. The second device reads the secret information from its own non-volatile storage device, and verifies the second certification information notified from the first device using the secret information and the second request information; The gist is to verify that the first device does hold confidential information.

In the present invention according to claim 3, the first,
When the second device starts operation, the first device generates secret information, stores it in a nonvolatile storage device, notifies the second device, and the second device receives the secret information. When the first device and the second device interrupt the operation and then start the operation, the first device proves that the second device holds the secret information when the first device and the second device stop the operation. The first device generates first request information requesting that the first request information be transmitted to the second device, and when the second device receives the first request information, the second device reads the secret information from the non-volatile storage device, and reads the first request information. The first device generates first proof information for certifying to the first device that the confidential information is held, notifies the first device, the first device reads the confidential information, The first credential from the second device is verified using the first request information, and the second device verifies the secret information. Verifying that the second device does hold the secret information, the second device generates second request information requesting that the first device hold the confidential information, and notifies the first device of the second request information. When the first device receives the second request information, the first device reads the secret information and uses the second request information to
Generating second certification information for proving to the second device that the secret information is held, and notifying the second device, the second device reads the secret information, and reads the secret information and the second request. The information is used to verify the second credential from the first device and to verify that the first device does hold the secret information, thus simplifying the identity verification process, The burden on the device can be reduced.

The present invention according to claim 4 provides the invention according to claims 1 to 3.
In the invention described in any one of the above, the first device is:
The gist is that the secret information is encrypted, the encrypted secret information is notified to a second device, and the second device decrypts the encrypted secret information.

According to the present invention, the first device encrypts the secret information and notifies the second device of the encrypted secret information.
Because the device decrypts the encrypted secret information, the risk of the secret information being eavesdropped can be reduced.

Further, the present invention described in claim 5 is based on claim 1.
In the invention described in any one of (1) to (4), a function F having characteristics that it is extremely difficult or impossible to input information A and information B, output information C, and estimate information A from information C The method for generating the proof information that proves that the confidential information is held in the other device between the first and second devices by using the secret information as information A and the request information as As a method for verifying that the other device has the confidential information, the confidential information is provided to the input of the function F as the information B and the output information C is used as the proof information.
The gist is that the request information is given to the input of the function F as the information B, and the output information C is equal to the proof information.

According to the fifth aspect of the present invention, the one-way function F that inputs information A and B, outputs information C, and estimates information A from information C is extremely difficult. To generate proof information that proves that the other device has confidential information, and to verify that the other device does have the confidential information. Even if a third party eavesdrops, you cannot guess the secret information.

Further, according to the present invention, after a plurality of devices connected via the communication path are disconnected due to interruption of the operation of the apparatus or disconnection of the communication path, the operation is started again. In this case, each of the devices is an identity confirmation device for confirming whether or not the device connected to the communication path is the same as the device connected before the interruption. A non-volatile storage device that generates secret information when the first and second devices are connected via a communication path and starts operating and exchanges information, and stores the secret information; Secret information notifying means for notifying the second apparatus of the secret information, and after notifying the second information of the secret information by the notifying means, the first and second apparatuses interrupt the operation or disconnect the communication path. And then the first and second devices and Request information for requesting the second device to prove that the second device holds the secret information when the communication path starts operating; Request information generation notifying means for notifying the second device, and when receiving the certification information from the second device, reads the secret information from its own non-volatile storage device, using the secret information and the request information, Verification means for verifying the proof information notified from the second device and verifying that the second device surely holds the confidential information; A first storage device that receives and stores the request information, reads the secret information from its own non-volatile storage device, and uses the request information to hold the secret information. Generates certification information to prove to other devices , And summarized in that and a proof information generation notification unit for notifying the verification information to the first device.

According to the present invention as set forth in claim 6, first,
When the second device starts operation, the first device generates secret information, stores it in a nonvolatile storage device, notifies the second device, and the second device receives the secret information. When the first device and the second device interrupt the operation and then start the operation, the first device proves that the second device holds the secret information when the first device and the second device stop the operation. Request information requesting the second device to notify the second device, and upon receiving the request information, the second device reads the secret information from the non-volatile storage device, and uses the request information to hold the secret information. Certifying information for proving to the first device that the credential is present, notifies the first device, the first device reads the secret information, and uses the secret information and the request information to certify from the second device. Verify information and verify that the second device does hold confidential information Because the identity of the verification process is simplified, it is possible to reduce the burden on the device.

According to a seventh aspect of the present invention, in the sixth aspect of the present invention, the second device interrupts the operation of the first and second devices or disconnects the communication path, and thereafter performs the first and second operations. Request information for requesting the first device to prove that the first device holds the secret information when the second device and the communication channel start operating; Request information generation notifying means for notifying the request information to the first device; and reading the secret information from its own non-volatile storage device, and using the secret information and the request information, Verify your credentials,
Verification means for verifying that the first device does hold the secret information, wherein the first device receives the request information notified from the second device, Read out the secret information from the security storage device, generate proof information for certifying to the second device that the confidential information is held using the request information, and notify the second device of the proof information. The gist of the present invention is that it further includes a proof information generation notifying means for performing the above.

According to the present invention described in claim 7, first,
If the second device suspends operation, and then the first and second devices start operating, the second device requests to prove that the first device holds secret information. The request information is generated and notified to the first device. When the first device receives the request information, the first device reads the secret information, and uses the request information,
Generates proof information for certifying the second device that the confidential information is held, notifies the second device, the second device reads the confidential information, and uses the confidential information and the request information,
Verifying the proof information from the first device and verifying that the first device surely holds the secret information, thereby simplifying the process of verifying identity and reducing the load on the device. Can be.

Further, according to the present invention, a plurality of devices connected via a communication path are disconnected after the operation of the apparatus is interrupted or the communication path is disconnected, and then the operation is started again. In this case, each of the devices is an identity confirmation device for confirming whether or not the device connected to the communication path is the same as the device connected before the interruption. A non-volatile storage device that generates secret information when the first and second devices are connected via a communication path and starts operating and exchanges information, and stores the secret information; Secret information notifying means for notifying the second device of the secret information; and first and second communication means for notifying the second information of the secret information by the secret information notifying means.
Device stopped working or the communication path was disconnected,
A first device for requesting the second device to prove that the second device holds the secret information when the first and second devices and the communication channel start operating; Request information generating and notifying means for generating request information and notifying the first request information to the second device; and receiving the first certification information from the second device, receiving the secret information from its own non-volatile storage device. Reading the information, using the secret information and the first request information, verifying the first proof information notified from the second device, and the second device surely holds the secret information Verification means for verifying that the secret information is read from its own non-volatile storage device when the second request information is received from the second device, and the secret information is held using the second request information. To prove to the second device that And a non-volatile storage device for generating certification information and notifying the second device of the second certification information, wherein the second device receives and stores the secret information. , Upon receiving the first request information,
Reading the secret information from its own non-volatile storage device,
Using the first request information, generate first certification information for proving to the first device that the secret information is held, and notify the first certification information to the first device. The proof information generation notifying means and the first device when the first and second devices stop operating or the communication channel is disconnected, and thereafter the first and second devices and the communication channel start operating. Request information generating a second request information for requesting that the first device holds the secret information, and notifying the first device of the second request information. A notifying unit, upon receiving the second certification information, reads out the secret information from its own non-volatile storage device, and uses the secret information and the second request information to notify the secret information notified from the first device. The second credential is verified, and the first device verifies the secret information. It is summarized in that and a verification means for verifying that held in the.

According to the present invention as set forth in claim 8, first,
When the second device starts operation, the first device generates secret information, stores it in a nonvolatile storage device, notifies the second device, and the second device receives the secret information. When the first device and the second device interrupt the operation and then start the operation, the first device proves that the second device holds the secret information when the first device and the second device stop the operation. The first device generates first request information requesting that the first request information be transmitted to the second device, and when the second device receives the first request information, the second device reads the secret information from the non-volatile storage device, and reads the first request information. The first device generates first proof information for certifying to the first device that the confidential information is held, notifies the first device, the first device reads the confidential information, The first credential from the second device is verified using the first request information, and the second device verifies the secret information. Verifying that the second device does hold the secret information, the second device generates second request information requesting that the first device hold the confidential information, and notifies the first device of the second request information. When the first device receives the second request information, the first device reads the secret information and uses the second request information to
Generating second certification information for proving to the second device that the secret information is held, and notifying the second device, the second device reads the secret information, and reads the secret information and the second request. The information is used to verify the second credential from the first device and to verify that the first device does hold the secret information, thus simplifying the identity verification process, The burden on the device can be reduced.

Further, the present invention described in claim 9 is based on claim 6.
In the invention as set forth in any one of Claims 1 to 8, the first device has encryption means for encrypting the secret information and notifying the second device of the secret information, and the second device encrypts the secret information from the first device. The gist of the present invention is to have a decryption means for decrypting the secret information.

According to the ninth aspect of the present invention, the first device encrypts the secret information and notifies the second device of the encrypted secret information.
Because the device decrypts the encrypted secret information, the risk of the secret information being eavesdropped can be reduced.

According to a tenth aspect of the present invention, in the invention of the sixth to ninth aspects, the proof information generation notifying means includes:
Using the function F, which has information A and information B as input, information C as output, and the fact that it is extremely difficult or impossible to estimate information A from information C, the first and second functions are used. As a method of generating the proof information for proving that the other device holds the secret information, the secret information is given as information A, the request information is given as information B to an input of a function F, and the output is performed. The information C is used as the proof information, and as a method of verifying that the other party's device has the secret information, the secret information is set as the information A, and the request information is set as the information B when the function F is input. The point is that the output information C is equal to the certification information.

According to the tenth aspect of the present invention, the one-way function F that inputs information A and B, outputs information C, and estimates information A from information C is extremely difficult. To generate proof information that proves that the other device has confidential information, and to verify that the other device does have the confidential information. Even if a third party eavesdrops, you cannot guess the secret information.

According to the eleventh aspect of the present invention, after a plurality of devices connected via the communication path are disconnected due to the interruption of the operation of the device or the disconnection of the communication path, the operation is started again. In this case, the respective devices are mutually recorded on a recording medium that stores an identity confirmation program for confirming whether or not the devices connected to the communication path are the same as the devices connected before the interruption. Accordingly, when the first and second devices are connected via a communication path to start operation and exchange information, the first device generates secret information and stores the secret information in its own non-volatile memory. Stored in the sex storage device,
The second device notifies the second device of the secret information, the second device receives the notified secret information and stores it in its own nonvolatile storage device, and the first and second devices interrupt the operation or communicate. When the path is disconnected and thereafter the first and second devices and the communication path start operating, the first device holds the secret information to the second device by the second device. Request information for making a request to certify that the secret information is transmitted to the second device. When the second device receives the request information, the second device reads the secret information from its nonvolatile storage device. Is used to generate certification information for certifying to the first device that the secret information is held by using the request information, and notifies the first device of the certification information. Reads the secret information from its own non-volatile storage device, Information and the request information, verifying the proof information notified from the second device, and verifying that the second device surely holds the confidential information on the recording medium. It shall be recorded.

According to the present invention, when the first and second devices start operating, the first device generates secret information and stores the secret information in the nonvolatile storage device. The second device receives the secret information and stores it in the non-volatile storage device, and when the first and second devices interrupt the operation and thereafter start the operation, the first device The device generates request information requesting that the second device hold the confidential information and notifies the second device, and the second device receives the request information, and stores the request information in the nonvolatile storage device. , And uses the request information to generate proof information for certifying the first device that the confidential information is held, notifies the first device of the proof information, and the first device reads the secret information. ,
Using the secret information and the request information, verify the certification information from the second device, and record on the recording medium an identity confirmation program for verifying that the second device surely holds the secret information. Therefore, the distribution of the recording medium can be improved by using the recording medium.

Further, the present invention according to claim 12 is the invention according to claim 11, wherein the operation of the first and second devices is interrupted or the communication path is cut off, and thereafter the first and second devices and When the channel starts operating,
The second device generates request information for requesting the first device to prove that the first device holds the secret information, and sends the request information to the first device. When the first device receives the request information, the first device reads the secret information from its own non-volatile storage device, and uses the request information to inform the second device that the secret information is held. Generating proof information to certify, notifying the proof information to the second device, the second device reads the secret information from its own nonvolatile storage device, and uses the secret information and the request information, The gist is to record the identity confirmation program for verifying the certification information notified from the first device and verifying that the first device surely holds the secret information on a recording medium.

In the twelfth aspect of the present invention, when the first and second devices stop operating and then the first and second devices start operating, the second device is kept secret. Generates request information requesting that the information is held by the first device and notifies the first device, and upon receiving the request information, the first device reads the secret information and uses the request information to Then, certifying information for certifying to the second device that the confidential information is held is generated and notified to the second device. The second device reads the confidential information, and uses the confidential information and the request information to generate the certifying information. Since the identity verification program for verifying the certification information from the first device and verifying that the first device surely holds the confidential information is recorded on the recording medium, Thus, its distribution can be improved.

According to a thirteenth aspect of the present invention, when a plurality of devices connected via a communication path are disconnected due to interruption of the operation of the device or disconnection of the communication path, the operation starts again. A recording medium that stores an identity confirmation program for confirming whether or not each device is mutually identical to a device connected to a communication path with a device connected before the interruption. , When the first and second devices are connected via a communication path to start operation and exchange information, the first device generates secret information and stores the secret information in its own non-volatile storage. A second device for notifying the second device of the secret information; a second device receiving the notified secret information and storing it in its own non-volatile storage device; and a first and a second device. Interrupted the operation or cut off the communication path, When the first and second devices and the communication channel start operating, the first device requests the second device to prove that the second device holds the secret information. Request information for the first device, and notifies the second device of the first request information. When the second device receives the first request information, the second device receives the first request information from its non-volatile storage device. Read the information, and use the first request information to determine that the secret information is held.
Generates first proof information for certifying the first device, notifies the first device of the first proof information, reads the secret information from its own non-volatile storage device, and reads the secret information. And verifying the first proof information notified from the second device by using the first request information, verifying that the second device does hold secret information, The second device generates second request information for requesting the first device to prove that the first device holds the secret information, and generates the second request information by the second device. When the first device receives the second request information, the first device reads the secret information from its own non-volatile storage device, and retains the secret information using the second request information. Generating second proof information to prove to the second device that
Notifying the second device of the second certification information, the second device reads the secret information from its non-volatile storage device,
Using the secret information and the second request information, verify the second certification information notified from the first device,
The gist is that an identity confirmation program for verifying that the device in question holds the secret information is recorded on a recording medium.

According to the thirteenth aspect of the present invention, when the first and second devices start operating, the first device generates secret information and stores the secret information in the nonvolatile storage device. The second device receives the secret information and stores it in the non-volatile storage device, and when the first and second devices interrupt the operation and thereafter start the operation, the first device Device generates first request information requesting that the second device hold the secret information and notifies the second device, and the second device receives the first request information Then, the confidential information is read from the non-volatile storage device, and the first request information is used to generate first proof information for certifying to the first device that the confidential information is held, and to the first device. Notifying, the first device reads the secret information and uses the secret information and the first request information to perform a second Verifying the first credential from the device, verifying that the second device does hold the secret information, and verifying that the second device holds the secret information by the first device. Generating second request information for requesting proof and notifying the first device, the first device reads the secret information upon receiving the second request information, and uses the second request information to read the secret information. The second device generates second certification information for proving to the second device that the second device is held, and notifies the second device of the second certification information.
The device reads the secret information, verifies the second certification information from the first device using the secret information and the second request information, and the first device surely holds the secret information. Since the identity confirmation program for verifying the fact is recorded on the recording medium, the distribution can be enhanced by using the recording medium.

According to a fourteenth aspect of the present invention, in the first aspect of the present invention, the first device encrypts the secret information and transmits the encrypted secret information to the first secret device. The second device is notified that the second device records an identity confirmation program for decrypting the encrypted secret information on a recording medium.

In the present invention according to claim 14, the first aspect
Device encrypts the secret information to notify the second device, and the second device records the identity confirmation program for decrypting the encrypted secret information on the recording medium. It can be used to increase its distribution.

The present invention according to claim 15 is the invention according to claims 11 to 14, wherein the information A and the information B
As input, information C as output, and information C to information A
Using a function F having a feature that it is extremely difficult or impossible to estimate the secret information between the first and second devices. As a method of generating information, the secret information is used as information A, the request information is provided to the input of the function F as information B, and the output information C is used as the proof information. As a method of verifying possession, confidential information is assumed to be information A,
The gist is that the request information is given to the input of the function F as the information B, and the identity confirmation program executed when the output information C is equal to the certification information is recorded on the recording medium.

According to the fifteenth aspect of the present invention, the one-way function F that inputs information A and B, outputs information C, and estimates information A from information C is extremely difficult. Generates proof information that proves that the other device has the confidential information, and records the identity confirmation program on the recording medium that verifies that the other device has the confidential information. Therefore, even if the request information and the proof information are intercepted by a third party, the secret information cannot be guessed.
Its distribution can be improved.

[0036]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an identity confirmation device according to an embodiment of the present invention.
In the identity verification device shown in FIG. 6, between the A device 100 and the B device 200 connected to each other via a communication channel, both the A device 100 and the B device 200 interrupt the operation or disconnect the communication channel. After that, the A device 100 and the B device 2
When the two devices and the communication path connecting the two devices start operating, are the respective devices mutually the same as the device connected before the interruption, with the other device connected to the communication path being the same? To confirm the identity of
A device 100 includes a control unit 110 that controls the entire operation,
A random number generation unit 170 that generates a random number S that is secret information, an encryption unit 160 that encrypts the random number S, a nonvolatile storage device 120 that stores the random number S, and a random number generation unit 130 that generates a random number RS that is request information , The response verification unit 1 that verifies the hash value PS that is the verification information transmitted from the B device 200
40, and a response creation unit 150 that creates a hash value PS that is request information to be transmitted to the B device 200. The B device 200 includes a control unit 210 that controls the entire operation, and an encryption unit of the A device 100. A decryption unit 260 that decrypts the encrypted random number S that is secret information from
The nonvolatile storage device 22 that stores the decrypted random number S
0, a response creation unit 250 that creates a hash value PS that is verification information to be transmitted to the A device 100, a random number generation unit 230 that generates a random number RS that is request information, and the A device 100
And a response verification unit 240 that verifies the hash value PS, which is verification information from the server.

Next, the operation of the identity confirmation device configured as described above will be described. In the following description, 2
There is a description that a hash value of two random numbers A and B is calculated, but this replaces the random numbers A and B with a data sequence, combines the data sequences in the order of A and B, and combines it with a one-way function F Means to disturb the value. The function F has a feature that the random number A and the random number B are input, the information C is output, and it is extremely difficult or impossible to estimate the random number A from the information C. A device 1 using F
As a method for generating a random number PS which is proof information for proving that the other device has a random number S as secret information between the device 200 and the B device 200, the random number S is represented by information A
This is performed by giving the random number RS as the request information to the input of the function F as the information B, and making the output information C the random number PS as the proof information, and the other device surely holds the random number S as the secret information. As a way to verify that
The random number S is assumed to be information A, and the random number RS which is request information is assumed to be information B.
Is given to the input of the function F, and the output information C and the random number PS as the proof information are equal to each other.

In FIG. 1, the B apparatus 200 is the A apparatus 10
When the connection is made for the first time to 0, the control unit 210 of the B apparatus sends a notification 1 to the control unit 110 of the A apparatus. As a result, the control unit 110 causes the random number generation unit 170 to generate a random number S, which is encrypted by the encryption unit 160 and transmitted to the B apparatus via the communication path. In the device B, the decryption unit 260 decrypts S and stores it in the nonvolatile storage device 220.

Next, if one of the A device 100 and the B device 200 interrupts the operation for some reason and then starts the operation, the control unit 210 of the B device sends the control unit 110 of the A device to the control unit 110 of the A device. Notification 2 is performed. Thereby, the control unit 110 causes the random number generation unit 130 to generate a random number RS, and this RS is transmitted to the B apparatus. In the B device, R
When receiving the S, the response creation unit 250 is used to calculate the RS and the hash value PS of the S stored in the nonvolatile storage device 220, and transmit this to the A device.

Upon receiving the PS, the device A calculates the hash values of the S stored in the non-volatile storage device 120 and the RS transmitted to the device B using the response verification unit 140, Check the match of the transmitted PS. If the confirmation by the response verification unit 140 matches, the control unit 110 determines that the device B is the same as the device connected before the interruption of the operation.

The control unit 210 of the device B notifies the control unit 110 of the device A, and at the same time,
30 to generate a random number RS, which is transmitted to the A device. Upon receiving the RS, the device A uses the response creating unit 150 to send the RS and the non-volatile storage device 120
, And calculates the hash value PS of S stored in the B device, and transmits this to the B device. Upon receiving the PS, the B apparatus calculates the hash values of the S stored in the non-volatile storage device 220 and the RS transmitted to the B apparatus using the response verification unit 240, and transmits the hash value of the S and the RS transmitted from the A apparatus. Check PS matches. If the confirmation by the response verification unit 240 matches, the control unit 210 determines that the device A is the same as the device connected before the interruption of the operation.

FIG. 2 is a block diagram showing a configuration of an identity confirmation device according to another embodiment of the present invention. The identity confirmation device shown in FIG. 3 uses a removable nonvolatile storage device 220a, which is a removable storage device, as the nonvolatile storage device 220 used for the B device 200 in the embodiment shown in FIG. And the other components and operations are the same.

As described above, the removable nonvolatile storage device 22
0a, the control unit 210
Confirms whether or not the random number S is stored in the removable nonvolatile storage device 220a.
In the embodiment of FIG. 1, it is determined that the interrupt has not occurred, the random number S is generated and stored in the nonvolatile storage devices 120 and 220a. If the random number S is stored, it is determined that the interrupt has occurred.
And whether the B device 200 is the same as before the interruption. With this configuration, A
The device 100 can determine whether the removable nonvolatile storage device 220a attached to the B device 200 is the same before and after the interruption.

[0044]

As described above, according to the present invention,
The first device notifies the second device of request information requesting that the second device holds the secret information, and the second device reads the secret information upon receiving the request information, Using the request information, certifying information for certifying to the first device that the confidential information is held is generated and notified to the first device, and the first device uses the confidential information and the request information to generate the second information. Since the verification information from the second device is verified and the second device verifies that the confidential information is held, the process of verifying the identity is simplified, and the burden on the device can be reduced. At the same time, each device identifies authentication information that can identify each device and identify and confirm that it is a correct device, and authentication information that can identify and confirm that it is a correct device with respect to other devices. All are stored in each device in advance No necessity, it is possible to verify the identity of the device.

Further, according to the present invention, the second device notifies the first device of request information for requesting that the first device holds confidential information. Receives the request information, reads the secret information, and uses the request information to notify the second device of proof information for proving to the second device that the secret information is held. The information and the request information are used to verify the certification information from the first device, and to verify that the first device surely holds the secret information, thereby simplifying the identity verification process,
It is possible to reduce the burden on the devices, and each device must be able to identify each device and identify and confirm that it is the correct device. It is not necessary for each device to previously hold any information to be authenticated that can identify and confirm the same, and the identity of the devices can be verified.

Further, according to the present invention, the first device notifies the second device of request information for requesting that the secret information is held by the second device, Receives the request information, reads the secret information, uses the request information to generate certification information for proving to the first device that the secret information is held, notifies the first device, and notifies the first device Verifies the certification information from the second device using the secret information and the request information, verifies that the second device does hold the secret information, and the second device verifies the secret information in the second device. 1
The first device notifies the first device of request information requesting proof that the device holds the secret information, and upon receiving the request information, the first device reads the secret information and uses the request information to hold the secret information. The second device notifies the second device of proof information for certifying that the second device has performed the authentication, the second device verifies the proof information from the first device using the secret information and the request information,
Since the first device verifies that the confidential information is held, the process of verifying identity can be simplified, the burden on the devices can be reduced, and each device can identify each device. It is necessary for each device to have in advance all the authentication information that can identify and confirm that it is the correct device and the information that is to be authenticated that can identify and confirm that it is the correct device for other devices. Instead, the identity of the device can be verified.

According to the present invention, when a plurality of devices are connected by a communication path, each device
Authentication information that can identify each device and identify and confirm that it is definitely the correct device, and authenticated information that can identify and confirm to other devices that it is definitely the correct device. When each device starts operation, it verifies the validity of the device using the authentication information and the information to be authenticated, and temporarily stops operation or In the case where the path is disconnected and then both the device and the communication path start operating, the identity verification according to the present invention can be performed to simplify the validity verification process performed after the interruption. It is.

Also, according to the present invention, the first device encrypts the secret information and notifies the second device of the encryption, and the second device decrypts the encrypted secret information. The risk of eavesdropping can be reduced.

Further, according to the present invention, the information A and B are input, the information C is output, and the information A is estimated by using the one-way function F, which makes it extremely difficult to estimate the information A. Generates proof information that proves that the device has confidential information, and verifies that the other device does have confidential information. Even if eavesdropping, secret information cannot be guessed. Also, if a function is used that can infer confidential information from proof information and request information, it is necessary to take all measures such as encryption to exchange information between devices. The use of such a one-way function makes such measures unnecessary.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an identity confirmation device according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of an identity confirmation device according to another embodiment of the present invention.

[Explanation of symbols]

 100 A device 110, 210 Control unit 120, 220 Nonvolatile storage device 130, 170, 230 Random number generation unit 140, 240 Response verification unit 150, 250 Response creation unit 160 Encryption unit 200 B device 260 Decryption unit

Claims (15)

[Claims] When a plurality of devices connected via a communication path are brought into a non-connected state due to an interruption of the operation of the device or a disconnection of the communication channel, and the devices start operating again, the respective devices are mutually connected. An identity confirmation method for confirming whether or not an apparatus connected to a communication path is the same as an apparatus connected before interruption, wherein the first and second apparatuses establish a communication path. The first device generates secret information, stores the secret information in its own non-volatile storage device, and stores the secret information in the second device. Notifying the secret information, the second device receives the notified secret information and stores it in its own non-volatile storage device, and the first and second devices stop operating or the communication path is disconnected. , The first and second devices and the communication path start operating In the case, the first device generates request information for requesting the second device to prove that the second device holds the secret information, and stores the request information in the second device. When the second device receives the request information, the second device reads the secret information from its own non-volatile storage device, and uses the request information to indicate that the second device holds the secret information. The first device reads out the secret information from its own non-volatile storage device, and uses the secret information and the request information to generate the certification information for proving to the first device. hand,
Verifying the proof information notified from the second device;
A method of verifying identity, comprising verifying that the device in question holds confidential information. 2. In a case where the first and second devices stop operating or the communication path is disconnected, and then the first and second devices and the communication path start operating, the second device operates as the first device. Request information for requesting the first device to prove that the first device holds the secret information, notify the first device of the request information, Receives the request information, reads the secret information from its own non-volatile storage device, and uses the request information to generate certification information for proving to the second device that the secret information is held. Notifying the proof information to a second device, the second device reads the secret information from its own non-volatile storage device, and uses the secret information and the request information,
Verifying the certification information notified from the first device;
2. The method according to claim 1, further comprising verifying that the device in question holds the secret information. 3. When a plurality of devices connected via a communication path are disconnected due to an interruption of the operation of the device or a disconnection of the communication channel, and the devices start operating again, the respective devices are mutually connected. An identity confirmation method for confirming whether or not an apparatus connected to a communication path is the same as an apparatus connected before interruption, wherein the first and second apparatuses establish a communication path. The first device generates secret information, stores the secret information in its own non-volatile storage device, and stores the secret information in the second device. Notifying the secret information, the second device receives the notified secret information and stores it in its own non-volatile storage device, and the first and second devices stop operating or the communication path is disconnected. , The first and second devices and the communication path start operating In the case, the first device generates first request information for requesting the second device to prove that the second device holds the secret information, When the second device receives the first request information, the second device reads the secret information from its own non-volatile storage device, and uses the first request information to The first device generates first proof information for certifying the first device that the confidential information is held, notifies the first device of the first proof information, and the first device has its own non-volatile memory. The secret information is read from a storage device, the first certification information notified from the second device is verified using the secret information and the first request information, and the second device verifies the secret information. The second device verifies that the secret is held by the first device. Generating second request information for requesting that the first device hold the information, and notifying the first device of the second request information; Upon receiving the second request information, the secret information is read from its own non-volatile storage device, and the second device is used to prove to the second device that the secret information is held. Generating second credential information, notifying the second credential information to a second device, wherein the second device reads the secret information from its own non-volatile storage device, and reads the secret information and the second Using the request information, verifying the second certification information notified from the first device, and verifying that the first device surely holds the secret information. Method. 4. The first device encrypts the secret information, notifies the second device of the encrypted secret information,
4. The method according to claim 1, wherein the second device decrypts the encrypted secret information. 5. Information A and information B are input and information C is input.
And the function F having the characteristic that it is extremely difficult or impossible to estimate the information A from the information C
The method for generating the proof information that proves that the confidential information is held in the other device between the first and second devices is as follows. This is performed by giving the function F as input to the input of the function F as information B, and using the output information C as the proof information. As a method of verifying that the other device has the secret information, the secret information is referred to as information A, 5. The method according to claim 1, wherein the request information is given to the input of the function F as information B, and the output information C is equal to the proof information. 6. When a plurality of devices connected via a communication path are disconnected due to an interruption of the operation of the device or a disconnection of the communication channel, and the devices start operating again, the respective devices are mutually connected. An identity confirmation device for confirming whether or not the device connected to the communication path is the same as the device connected before the interruption, wherein the first device includes first and second devices. Device is connected via a communication path to start operation, generates secret information when exchanging information, a non-volatile storage device for storing the secret information, and the secret information to a second device Secret information notifying means for notifying, and after notifying the second apparatus of the secret information by the notifying means, the first and second devices interrupt the operation or disconnect the communication path, and thereafter, the first and second devices When the device and communication path of the device have started operation Request information for requesting the second device to prove that the second device holds the secret information, and requesting the second device to notify the second device of the request information. An information generation notifying unit, when receiving the certification information from the second device, reads out the secret information from its own non-volatile storage device, and is notified from the second device using the secret information and the request information. Verification means for verifying the proof information, and verifying that the second device does hold the secret information, wherein the second device receives and stores the secret information. A storage device, proof information for receiving the request information, reading the secret information from its own non-volatile storage device, and using the request information to prove to the first device that the secret information is held. Is generated, and the certification information is stored in the first device. Identity verification device characterized by having a proof information generation notifying means for notifying. 7. The second device, wherein when the first and second devices stop operating or the communication path is cut off, and then the first and second devices and the communication line start operating, the first device may perform the first operation. Request information generating and notifying means for generating request information for requesting the first device to prove that the first device holds the secret information, and notifying the first device of the request information Read the secret information from its own non-volatile storage device, verify the certification information notified from the first device using the secret information and the request information, and confirm the secret information by the first device. The first device receives the request information notified from the second device, and reads the secret information from its own non-volatile storage device. , Using the request information, 7. A certifying information generating and notifying means for generating certifying information for certifying to the second device that the certifying information is held, and for notifying the certifying information to the second device. Identification device. 8. When a plurality of devices connected via a communication channel are disconnected from each other due to a suspension of device operation or a disconnection of the communication channel, and when the devices start operating again, the devices are mutually connected. An identity confirmation device for confirming whether or not the device connected to the communication path is the same as the device connected before the interruption, wherein the first device includes first and second devices. Device is connected via a communication path to start operation, generates secret information when exchanging information, a non-volatile storage device for storing the secret information, and the secret information to a second device A secret information notifying unit for notifying, and after notifying the second device of the secret information by the secret information notifying unit, the first and second devices interrupt the operation or cut off the communication path. The second device and the communication channel start operating In this case, first request information for requesting the second device to prove that the secret information is held by the second device is generated, and the first request information is transmitted to the second device. Request information generation notifying means for notifying the second device, and upon receiving the first certification information from the second device, reads the secret information from its own non-volatile storage device, and reads the secret information and the first request information. Verification means for verifying the first proof information notified from the second device and verifying that the second device surely holds the secret information, 2 receives the request information, reads out the secret information from its own nonvolatile storage device,
Generating second proof information for certifying to the second device that the confidential information is held by using the request information of
Certifying information generation notifying means for notifying the certifying information to the second device, wherein the second device receives and stores the confidential information and the first request information. Then, the confidential information is read from its own non-volatile storage device, and the first request information is used to generate first certification information for certifying to the first device that the confidential information is held. Certifying information generation notifying means for notifying the first device of the first certifying information; and interrupting the operation of the first and second devices or cutting off the communication path, and thereafter, the first and second devices and Generating second request information for requesting the first device to prove that the first device holds the secret information when the communication channel starts operating; Request information generation notification for notifying the first device of the second request information Means, upon receiving the second certification information, reads out the secret information from its own non-volatile storage device, and uses the secret information and the second request information to notify the second information notified from the first device. Verification means for verifying the proof information of claim 2 and verifying that the first device surely holds the secret information. 9. The first device includes an encrypting unit that encrypts the secret information and notifies the second device of the encrypted secret information, and the second device encrypts the secret information from the first device. 9. The identity verification device according to claim 6, further comprising a decryption unit that decrypts the secret information. 10. The proof information generation notifying means has a feature that it is extremely difficult or impossible to input information A and information B, output information C, and estimate information A from information C. As a method for generating the proof information that proves that the other device between the first and second devices has the confidential information using the function F, the secret information is set as information A, Information is given to the input of the function F as information B and output information C is used as the proof information. As a method of verifying that the other device has the secret information, the secret information is transmitted to the information A. The identity verification device according to any one of claims 6 to 9, wherein the request information is given to the input of the function F as information B, and the output information C is equal to the proof information. 11. When a plurality of devices connected via a communication path are brought into a non-connected state due to an interruption of the operation of the device or a disconnection of the communication channel, and the devices start operating again, the respective devices are mutually connected. A storage medium storing an identity confirmation program for confirming whether or not the device connected to the communication path is the same as the device connected before the interruption, wherein the first and the second In a case where the device is connected via a communication path to start operation and exchange information, the first device generates secret information, stores the secret information in its own non-volatile storage device, The second device receives the notified secret information and stores it in its own non-volatile storage device, and the first and second devices interrupt the operation or the communication path. Is cut off and then the first and second devices And when the communication channel starts operating, the first device generates request information for requesting the second device to prove that the second device holds the secret information. Notifying the request information to the second device, upon receiving the request information, the second device reads the secret information from its own non-volatile storage device, and uses the request information to read the secret information. Generating certification information for certifying the held information to the first device, notifying the first device of the certification information, the first device reads the secret information from its own non-volatile storage device, Using the secret information and the request information,
Verifying the proof information notified from the second device;
A recording medium for recording an identity confirmation program, which verifies that the device of claim 1 holds the secret information. 12. In a case where the first and second devices stop operating or the communication path is cut off, and then the first and second devices and the communication path start operating, the second device is connected to the first device. Request information for requesting the first device to prove that the first device holds the secret information, notify the first device of the request information, Receives the request information, reads the secret information from its own non-volatile storage device, and uses the request information to generate certification information for proving to the second device that the secret information is held. Notifying the proof information to a second device, the second device reads the secret information from its own non-volatile storage device, and uses the secret information and the request information,
Verifying the certification information notified from the first device;
12. The recording medium according to claim 11, wherein the verification device verifies that the device does hold confidential information. 13. When a plurality of devices connected via a communication path are brought into a non-connection state due to an interruption of the operation of the device or a disconnection of the communication channel, and the devices start operating again, the respective devices are mutually connected. A storage medium storing an identity confirmation program for confirming whether or not the device connected to the communication path is the same as the device connected before the interruption, wherein the first and the second In a case where the device is connected via a communication path to start operation and exchange information, the first device generates secret information, stores the secret information in its own non-volatile storage device, The second device receives the notified secret information and stores it in its own non-volatile storage device, and the first and second devices interrupt the operation or the communication path. Is cut off and then the first and second devices And a first request for requesting the second device to prove that the second device holds the secret information when the communication channel starts operating. Information, and notifies the first request information to a second device. When the second device receives the first request information, the second device reads the secret information from its own non-volatile storage device, and The first request information is used to generate first certification information for proving to the first device that the secret information is held, and the first certification information is notified to the first device. The first device reads the secret information from its own non-volatile storage device, verifies the first proof information notified from the second device using the secret information and the first request information, Verify that the second device does hold confidential information, and the second device Generating second request information for requesting one device to prove that the first device holds the secret information; and transmitting the second request information to the first device. Notifying, when the first device receives the second request information, the first device reads out the secret information from its own non-volatile storage device, and holds the secret information using the second request information. To the second device, and notifies the second device of the second proof information. The second device reads the secret information from its non-volatile storage device, Using the secret information and the second request information, verify the second certification information notified from the first device, and verify that the first device surely holds the secret information. A recording medium on which an identity confirmation program is recorded. 14. The first device encrypts the secret information, notifies the second device of the encrypted secret information, and the second device decrypts the encrypted secret information. 14. A recording medium on which the identity confirmation program according to claim 11 is recorded. 15. Using the function F having a feature that information A and information B are input, information C is output, and it is extremely difficult or impossible to estimate information A from information C, As a method of generating the proof information for proving that the other device has the secret information between the first and second devices, the secret information is information A, the request information is information B, and the function F As a method of verifying that the other device has the secret information, the secret information is referred to as information A, and the request information is referred to as information B. 15. The recording medium according to claim 11, wherein the identification information is given to an input of a function F and the output information C is equal to the certification information.