Classifications

• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
  • G06K17/00—Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/388—Payment protocols; Details thereof using mutual authentication without cards, e.g. challenge-response
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
  • G06F12/14—Protection against unauthorised use of memory or access to memory
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
  • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
  • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
  • G06F21/77—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in smart cards
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
  • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
  • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
  • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
  • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
  • G06K19/073—Special arrangements for circuits, e.g. for protecting identification code in memory
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/357—Cards having a plurality of specified features
  • G06Q20/3576—Multiple memory zones on card
  • G06Q20/35765—Access rights to memory zones
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07F—COIN-FREED OR LIKE APPARATUS
  • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
  • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
  • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
  • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2153—Using hardware token as a secondary aspect

Definitions

• the present invention relates to an IC card capable of internally creating a rights-value file, and an access control method for controlling access to the IC card and the created rights-value file.
• Patent Document 1 JP-A-2000-163533
• an issuer of an e-value file has generally been able to freely set rules for using the e-value file issued by himself and operate the e-value file based on the use rules.
• the owner of the IC card holding the right-value file must follow the usage rules set by the issuer when using the right-value file. For this reason, for example, the owner of an IC card holding multiple types of e-value files may wish to freely select which e-value file to use when using these e-value files.
• the issuer has previously set use rules, the use rules may have to be obeyed and may not be as desired by the owner himself.
• the present invention has been made to solve the above-described problems, and has flexible access control to the rights-value file while ensuring the security of the rights-value file in the IC card. It is an object of the present invention to provide an IC card and an access control method capable of performing the above.
• an IC card in response to a request for creation of an e-value file from a communication partner, creates a file for e-rights using the communication partner as an eligibility issuer.
• file access authority setting means for setting access authority to the created authority value file in response to an access authority setting request from the communication partner as the authority value issuer
• Folder creation means for creating a folder in response to a folder creation request from the owner requesting creation of a folder containing files, and the created folder in response to an access right setting request from the owner.
• a folder access right setting means for setting an access right to the folder, and an access to the set rights / value file.
• Authority and at least one on based V access authority for the folder including the voucher file Te characterized that you with an access control means for controlling access to the voucher file.
• the access control method provides a file creation step in which, in response to a request for creating an e-value file from a communication partner, an e-value file is created in the IC card using the communication partner as an e-rights issuer.
• a folder creation step of creating a folder in the IC card and an access right setting request from the owner Set access rights to the created folder accordingly
• a folder access right setting step and when there is a request for access to the right / value file in the IC card, the set access right to the right / value file and access to the folder including the right / value file
• a folder including one or more e-rights-value files can be created in response to a folder creation request from the owner, and the folder can be created in response to an access authority setting request from the owner. Access rights can be set. Then, based on at least one of the set access rights to the rights-value file and the folders, the access to the rights-value file is controlled.
• access control to the e-value file is controlled not only based on the access right to the e-value file set by the e-value issuer but also based on the access right to the folder set by the owner of the IC card. Is performed. In other words, it is possible to control the access to the e-rights file according to the wishes of the owner of the IC card while ensuring the security of the e-rights file in the IC card.
• FIG. 1 is a functional block diagram showing a configuration of an IC card according to an embodiment of the present invention.
• FIG. 2 is a flowchart showing the contents of an access control process.
• FIG. 3 is a diagram showing an example of an access control list of a folder.
• FIG. 4 is a diagram showing an example of an access control list of a file in folder 1;
• FIG. 1 is a functional block diagram showing a configuration of the IC card 10.
• the IC card 10 includes an authentication unit 11 that authenticates both or one of the communication partner 20 and the owner 30 of the IC card 10 according to an authentication mode described later,
• a file creation unit 12 that creates an e-rights-value file (hereinafter simply referred to as “file”) using the correspondent 20 as the e-rights issuer in response to the e-value file creation request, and a correspondent as the e-values issuer
• file access authority setting unit 13 that sets the access authority to the file in response to the access authority setting request from 20, and the folder creation request from the owner 30 that requests the creation of a folder containing one or more files Folder creation unit 14 to create a folder, and a folder access authority setting to set the access authority to the folder in response to an access authority setting request from the owner 30.
• an access control unit 16 for controlling access to the file based on at least one of the set access right to the file and the access right to the folder, and stores the folder and the files included in the folder. It is configured to include a file storage unit 17 and an access control list storage unit 18 that stores information on the access right to the set file and the access right to the folder in a list format.
• the authentication unit 11 stores an ID certificate 11A for certifying the ID.
• the communication by the IC card 10 includes communication in which the IC card 10 authenticates the communicating party and communication in which the IC card 10 does not authenticate the communicating party.
• authentication communication In the “authentication” in this case, there are a case where the owner 30 of the IC card 10 is authenticated and a case where the IC cards are authenticated with another IC card (the communication partner 20).
• the mode (authentication mode) in which the IC card 10 performs authentication control of the access partner by the authentication unit 11 is “owner authentication mode” in which the owner 30 of the IC card 10 is authenticated, and another IC card (communication mode).
• the owner authentication mode authentication is performed using biometric information such as a password or a fingerprint that is stored in the IC card 10 in advance.
• biometric information such as a password or a fingerprint that is stored in the IC card 10 in advance.
• ID certificates are presented to each other, and mutual authentication is performed according to the conventionally known mechanism of PKI (Public Key Infrastructure).
• a new file can be created on the IC card 10.
• the created file is added with issuer information indicating who created the file. This is the ID of the owner 30's own IC card in the owner authentication mode, and the ID of the communication partner (other IC card) 20 in the partner authentication mode. These are called the "issuer IDs" of the file.
• the issuer restricts access to the file (in this case, copy Z transfer) from access other than the issuer ID. be able to.
• the issuer (creator of the file) can set the file access control list that restricts the ability of anyone other than the issuer to execute the copy and transfer of the file when creating the file.
• copying corresponds to issuing a voucher. Except in special cases, copying is set to "impossible".
• the file access control list 18B includes information indicating whether or not copying is permitted for each file such as file 1, file 2, file 3, and the like. Information indicating whether or not to permit, and issuer information are stored.
• the access control list 18B of this file is stored in the access control list storage unit 18.
• a file in the IC card 10 can be accessed as an owner (details will be described later).
• the owner can restrict others from creating, reading, and transferring the file to the IC card 10.
• the owner can set a folder that includes one or more files stored in the IC card 10 and set the folder.
• an access control list can be set to restrict the ability of a person other than the owner to create or read files in the folder.
• creation corresponds to, for example, transfer of the right value
• reading corresponds to the inquiry of the balance of the right value.
• the folder access control list 18A includes information indicating whether or not reading is permitted for each folder such as folder 1, folder 2, and creation permission. Information indicating whether the transfer is permitted and information indicating whether the transfer is permitted are stored. As shown in FIG. 1, the access control list 18A of the folder is stored in the access control list storage unit 18 in association with the access control lists 18B and 18C of the files for each folder.
• the access control list of the folder is not restricted, but is set in the file. Will be obeyed.
• the operation differs depending on the file issuer ID.
• the issuer ID is different from the ID of the communication partner (other IC card) 20 that is accessing, both the access control list of the folder containing the file and the access control list of the file will be followed.
• the issuer ID is the same as the ID of the communication partner (other IC card) 20 that is accessing, it is not bound by the file access control list. However, the access control list of the folder containing the file will be followed.
• both the access control list of the folder containing the file and the access control list of the file are always followed. That is, file access will fail unless allowed by both access control lists. Will be done.
• the authentication unit 11 determines how to authenticate the access partner based on the authentication mode information specified at the start of communication (the authentication mode). J) is determined.
• the process proceeds to S2, where the authentication unit 11 executes a predetermined authentication process in the owner authentication mode. That is, as described above, authentication is performed by using biometric information such as a password or a fingerprint stored in the IC card 10 in advance. If the authentication is not successful in S2, the process proceeds to S6, and the target operation is not permitted and ends in failure. If the authentication is successful in S2, the process proceeds to S3, and the access control unit 16 checks the access right of the target file. In other words, in the case of the owner authentication mode, there is no need to check the access authority of the folder because it is not restricted by the setting of the access control list of the folder.
• the access control unit 16 determines whether or not the target operation is permitted by the investigation in S3 (S4) . If the target operation is not permitted, the process proceeds to S6, and the target operation is rejected and failed. It will end. On the other hand, if the target operation is permitted in S4, the process proceeds to S5, and the target operation is executed as being permitted.
• the process proceeds to S7, where the authentication unit 11 performs a predetermined authentication process in the partner authentication mode. That is, as described above, ID certificates are presented to each other, and mutual authentication is performed in accordance with the well-known PKI mechanism. If the authentication is not successful in S7, the process proceeds to S6, where the target operation is not permitted and ends in failure. If the authentication is successful in S7, the process proceeds to S8, and the access control unit 16 checks the access right of the current folder. Then, the access control unit 16 determines whether or not the target operation is permitted based on the investigation in S8 (S9).
• the process proceeds to S6, where the target operation is not permitted and ends in failure. It will be.
• the process proceeds to S10, and the access control unit 16 checks the issuer ID of the target file. Then, in S11, it is determined whether or not the issuer ID of the target file is the same as the ID of the authentication partner.
• the process proceeds to S5, and the target operation is executed as being permitted.
• the process proceeds to S12, where the access control unit 16 checks the access authority of the target file. Then, the access control unit 16 determines whether or not the target operation is permitted based on the investigation in S12 (S13) . If the target operation is not permitted, the process proceeds to S6, and the target operation is rejected and failed. It will end. On the other hand, if the target operation is permitted in S13, the process proceeds to S5, where the target operation is executed as it is permitted.
• the access control list of the folder containing the file and the access of the file are set. If the issuer ID is the same as the ID of the communicating party (other IC card) 20 that is accessing the file, the file is not bound by the file access control list, but the The access control list will be followed.
• the flow proceeds to S14, where the access control unit 16 checks the access authority of the current folder. Then, the access control unit 16 determines whether or not the target operation is permitted by the investigation in S14 (S15) . If the target operation is not permitted, the process proceeds to S6, where the target operation is rejected and failed. It will end. On the other hand, if the target operation is permitted in S15, the process proceeds to S16, and the access control unit 16 checks the access right of the target file. Then, the access control unit 16 determines whether or not the target operation is permitted based on the investigation in S16 (S17).
• the process proceeds to S6, where the target operation is not permitted and ends in failure. It will be. On the other hand, if the target operation is permitted in S17, the process proceeds to S5, and the target operation is executed as being permitted.
• the access control list of the folder containing the file and the access control list of the file are always followed.
• the communication partner 20 (ID is 00006)
• the process proceeds from S1 to S7 in FIG. If the authentication is successful in S7, “permission” is obtained as the “read” access authority information on the folder 1 from the folder access control list 18A in S8. Therefore, since the target operation “read” is permitted, the process proceeds to S10, and the access control list 18B of the file in the folder 1 is obtained, and “00006” is obtained as the publisher ID of the target file (file 2).
• the present invention is not limited to the example in which three modes of the owner authentication mode, the partner authentication mode, and the non-authentication mode exist as the authentication mode. If the non-authentication mode does not exist, another mode such as the mode may be adopted.
• the present invention uses an IC card capable of internally creating an e-rights file and an access control method for controlling access to the created e-rights / e-value file. It ensures flexible access control to the e-rights-and-rights file while ensuring the security of the e-rights-and-values file.

Landscapes

• Engineering & Computer Science (AREA)
• Theoretical Computer Science (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Business, Economics & Management (AREA)
• Accounting & Taxation (AREA)
• Computer Hardware Design (AREA)
• General Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• General Business, Economics & Management (AREA)
• Strategic Management (AREA)
• Microelectronics & Electronic Packaging (AREA)
• Computer Networks & Wireless Communication (AREA)
• Software Systems (AREA)
• Databases & Information Systems (AREA)
• Health & Medical Sciences (AREA)
• Bioethics (AREA)
• General Health & Medical Sciences (AREA)
• Finance (AREA)
• Mathematical Physics (AREA)
• Storage Device Security (AREA)

Priority Applications (2)

Applications Claiming Priority (2)

Publications (1)

Family

ID=35197162

Family Applications (1)

Country Status (6)

Families Citing this family (16)

Citations (1)

Family Cites Families (16)

• 2004
  • 2004-04-21 JP JP2004126045A patent/JP3947528B2/ja not_active Expired - Lifetime
• 2005
  • 2005-04-21 EP EP05734139A patent/EP1739563A4/en not_active Withdrawn
  • 2005-04-21 CN CN2005800125222A patent/CN100407176C/zh not_active Expired - Fee Related
  • 2005-04-21 WO PCT/JP2005/007641 patent/WO2005103910A1/ja not_active Ceased
  • 2005-04-21 US US11/578,974 patent/US7814557B2/en not_active Expired - Fee Related
  • 2005-04-21 KR KR1020067024404A patent/KR100849380B1/ko not_active Expired - Fee Related

Patent Citations (1)

Also Published As

Similar Documents

Legal Events