WO2007049410A1

WO2007049410A1 - Authentication test method for mutual authentication device

Info

Publication number: WO2007049410A1
Application number: PCT/JP2006/318336
Authority: WO
Inventors: Tomoya Bando; Sadayuki Matsumura; Koji Shiroki
Original assignee: Murata Manufacturing Co., Ltd.; Super Wave Corporation
Priority date: 2005-10-26
Filing date: 2006-09-15
Publication date: 2007-05-03
Also published as: JP3935183B2; JP2007120067A

Abstract

[PROBLEMS] To provide an authentication test method capable of performing mutual authentication test between a key device and a base device without actually registering a key device unique ID in a base device and making the devices used for the authentication test, in a non-laced state upon shipment. [MEANS FOR SOLVING PROBLEMS] It is necessary to prepare a key device (1) having a unique ID and a function (3) for transmitting the unique ID, and a base device (10) having a function (11) for receiving the unique ID and a memory unit (12) for storing the unique ID. The unique ID of the key device (1) is read by read means (20) and the read unique ID is written into a memory unit (12) of the base device (10). Next, the unique ID of the key device (1) is transmitted and received by the base device (10). The unique ID written in the memory unit (12) of the base device (10) is compared to the unique ID received so as to perform mutual authentication. After this, the unique ID written into the memory unit (12) of the base device (10) is deleted.

Description

Specification

Authentication test method for mutual authentication devices

Technical field

[0001] The present invention relates to a method for conducting a mutual authentication test between a key device and a base device.

Background art

[0002] Conventionally, as represented by a keyless entry system, in a system for performing personal authentication using a communication device having a unique identification code (hereinafter referred to as a unique ID), a key device carried by the individual, With the base device built into the device! / Consists of a pair of devices. The key device has a unique ID. By registering this unique ID in the base device, the base device can accept only the registered key device! / ヽ.

[0003] In Patent Document 1, in a keyless entry system having a portable device having a wireless communication function, an in-vehicle locking / unlocking control means, and a manual key, the unique ID of the portable device is assigned to the vehicle's unique ID on the vehicle assembly line. Techniques have been proposed to prevent mis-registration in other nearby vehicles when registering to the control unit. In this case, the portable device corresponds to the key device, and the in-vehicle locking / unlocking control means corresponds to the base device. By registering the unique ID of the key device in the base device, these devices can be mutually authenticated.

[0004] In order for the user to register the unique ID, it is naturally necessary to prepare a state (associated with the state) by associating anything with the key device and the base device. On the other hand, when these parts are manufactured by a parts manufacturer, the verification test of whether or not the other party can be correctly authenticated cannot be performed unless the pair is actually determined and registered. If this happens, the parts manufacturer will need to ship the registered devices in pairs, and the user will not be able to register in any combination. Otherwise, the component manufacturer will ship without a certification test, and there is a risk of shipping a malfunctioning device.

[0005] On the other hand, a master ID is set so that any device can be authenticated, and this is used for authentication. There is a way to do a test, but in the unlikely event that the master ID leaks, it becomes a credit problem, and the existence of the master ID itself is desirable for security! /.

Patent Document 1: Japanese Patent Laid-Open No. 2004-84210

Disclosure of the invention

Problems to be solved by the invention

[0006] Therefore, an object of a preferred embodiment of the present invention is to perform a mutual authentication test between a key device and a base device without actually registering the unique ID of the key device in the base device. Also, it is intended to provide an authentication test method for a mutual authentication device that can be in a state where nothing is associated with the devices used for the authentication test at the time of shipment.

Means for solving the problem

[0007] The above object is achieved by an authentication test method for a mutual authentication device according to a preferred embodiment of the present invention.

[0008] An authentication test method for a mutual authentication device according to a first preferred embodiment of the present invention is a step of preparing a key device and a base device, wherein one device receives a unique identification code and this unique identification code. A step of having a function of transmitting, the other device having a function of receiving the unique identification code and a memory unit storing the unique identification code, and a step of reading the unique identification code of one device using a reading means And writing the read unique identification code into the memory part of the other device, transmitting the unique identification code of one device, and receiving it by the other device with the unique identification code written in the memory part. And the unique identification code written in the memory part of the other device and the reception step It compares the chromatic identification code, comprising the steps of carrying out the mutual authentication, a step of erasing the unique identification code written in the memory of the other device, the.

[0009] Further, an authentication test method for a mutual authentication device according to a second preferred embodiment of the present invention is a step of preparing a key device and a base device, both devices having a unique identification code and a unique identification code. A function for transmitting a code, and both devices have a function for receiving the unique identification code and a memory unit for storing the unique identification code. The step of reading the unique identification codes of both devices using a reading means, the step of writing both of the read unique identification codes into the memory part of the other device, and the unique identification codes of both devices The step of sending to the other device and receiving it by both devices is compared with the unique identification code written in the memory part of both devices and the unique identification code received in the receiving step. Performing mutual authentication and erasing the unique identification code written in the memory part of both devices.

[0010] A feature of an embodiment of the present invention is that, in a mutual authentication test between a key device and a base device, a unique ID (unique identification code) of an arbitrarily selected key device is read by a reading means, and this is read. Is written in the memory portion of the base device. Here, writing to the memory section means only writing temporarily, not actually registering. In this state, the key device and the base device communicate with each other, and mutual authentication is performed by comparing whether the unique ID written in the memory part of the base device and the unique ID obtained by communication are the same or relevant. Do. After mutual authentication, the unique ID written in the memory part of the base device is deleted. In this way, the key device and base device authentication test can be performed without actually registering the key device ID in the base device, and malfunctioning devices may be shipped accidentally. Absent. However, since the devices used for the certification test are associated with each other at the time of shipment, they can be put into a state, so the user must newly register using any key device and base device. Can do.

In the present invention, the unique ID written in the memory unit of the base device may be the same as the unique ID provided in the key device, or the unique ID is encrypted by an arithmetic process or the like. It may be tricky or converted to another code. Any device that can be authenticated by collating with a unique ID obtained later through communication is acceptable. The key device has a unique ID and a function for transmitting the unique ID, and the base device has a function for receiving the unique ID and a memory unit for storing the unique ID. Further, the base device has a unique ID and a function for transmitting the unique ID, and the key device has a function for receiving the unique ID and a memory unit for storing the unique ID. [0012] A preferred second embodiment of the present invention is a case where both devices have their own unique IDs. By exchanging mutual unique IDs and authenticating in both directions, more reliable is achieved. High certification tests can be performed. In this case, the unique IDs of the key device and the base device may be different from each other. Since the key device and the base device have basically the same functions, either can be used as the key device or the base device.

[0013] According to a preferred embodiment, the step of writing the read unique ID into the memory unit includes a step of writing into the volatile memory, and the step of erasing the unique ID is performed on the device having the volatile memory. It is better to stop the power supply. In other words, by writing to the volatile memory during the authentication test, simply turning off the power supply to the device during the authentication test automatically erases the unique ID of the key device written during the authentication test. Therefore, the certification test can be performed more efficiently. Here, as the volatile memory, for example, a RAM area of a memory unit provided in the base device can be used.

Effects of preferred embodiments of the invention

[0014] As described above, according to a preferred embodiment of the present invention, the unique ID of an arbitrarily selected key device is read and written to the memory unit of the base device, and the key device and the base device are communicated to each other. After mutual authentication using the unique ID written in the memory part of the device and the unique ID obtained by communication, the unique ID written in the memory part is erased. Even without registering to the base device, the key device and base device authentication test can be performed, and only normal devices can always be shipped. In addition, since the devices used in the certification test can be kept unconnected at the time of shipment, the user can perform new registration work. Also, there is no security problem because there is no need to use a master ID.

Brief Description of Drawings

FIG. 1 is a configuration diagram of a first embodiment of a mutual authentication device according to the present invention.

FIG. 2 is a block diagram showing an authentication test method for the mutual authentication device shown in FIG. FIG. 3 is a flowchart of the mutual authentication device authentication test method shown in FIG. 1.

FIG. 4 is a block diagram showing an authentication test method of a second embodiment of the mutual authentication device according to the present invention.

FIG. 5 is a configuration diagram of a third embodiment of a mutual authentication device according to the present invention.

6 is a block diagram showing an authentication test method for the mutual authentication device shown in FIG.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to examples.

Example 1

FIG. 1 shows a first embodiment of a mutual authentication device used for a keyless entry system or the like. This mutual authentication device includes a key device 1 having a wireless communication function and a base device 10. The key device 1 includes a memory unit 2 in which a unique identification code (unique ID) is registered, and a transmitter 3 that transmits the unique ID using a radio signal. The unique ID registered in the memory unit 2 is an ID unique to the key device and is not changed or erased once registered, and can be electrically read by an appropriate reading device.

On the other hand, the base device 10 is stored in the receiver 11 that receives the radio signal of the unique ID transmitted from the key device 1, the memory unit 12 that stores the unique ID, and the received data and the memory unit 12. And an authenticating unit 13 that performs authentication by comparing with the data stored. The memory unit 12 includes a volatile memory 12a such as a volatile RAM that disappears when the power is turned off, and a nonvolatile memory 12b that does not disappear even when the power is turned off. The volatile memory 12a is a memory for temporarily writing a unique ID in an authentication test described later, and the non-volatile memory 12b is a memory for a user to register a unique ID. Note that the volatile memory 12a can be used not only for temporarily writing the unique ID in the certification test, but also for other purposes.

Next, a method for performing an authentication test using the key device 1 and the base device 10 will be described with reference to FIGS. The circled numbers in Fig. 2 indicate the order of processing.

[0020] First, a personal computer 20 which is an example of a reading device is prepared, and the unique ID of the key device 1 is read by the personal computer 20 (step Sl). As a reading method, use a reader or the like for the unique ID. It may be read without contact, or the unique ID may be read by connecting the key device 1 to the personal computer 20.

Next, the base device 10 is connected to the personal computer 20, and the read unique ID is written to the memory unit 12, particularly the volatile memory 12a of the base device 10 (step S2).

Next, the key device 1 is brought close to the base device 10, and the unique ID of the key device 1 is transmitted and received by the base device 10 (step S3). In other words, the unique ID is sent to the base device 10 without going through the personal computer 20. The base device 10 compares the unique ID written in the volatile memory 12a with the received unique ID and performs mutual authentication (step S4). If the two unique IDs match, an authentication OK signal is sent to the PC 20 and the authentication OK is displayed on the PC 20 display (step S5). The authentication result is not limited to being displayed on the display of the personal computer 20, but may be displayed by any method, for example, the base device 10 itself may display it! /.

[0023] After the authentication test, by turning off the power of the base device 10, the unique ID written in the volatile memory 12a of the base device 10 is automatically erased (step S6), and the key device 1 and the base device 10 Can be in an unlinked state.

[0024] In the above description, the power described for the example in which the unique ID written in the volatile memory 12a is automatically deleted at the same time when the power of the base device 10 is turned off is not limited to this. For example, the base device If 10 is equipped with a non-volatile memory 12b such as EAROM, EEPROM, or non-volatile RAM, a unique ID may be written to the non-volatile memory 12b during an authentication test. In this case, after the authentication test, by deleting the unique ID written in the base device 10 by the personal computer 20, it is possible to make the same unlinked state as described above.

Example 2

FIG. 4 shows a second embodiment of the mutual authentication device. In this embodiment, contrary to the first embodiment, the base device 10A has a function of transmitting a unique ID and its unique ID, and the key device 1A receives a unique ID and a memory for storing the unique ID. It is what has.

In the authentication test of this embodiment, the personal computer 20 first reads the unique ID of the base device 1 OA and writes the read unique ID in the memory unit of the key device 1A. Next, key One device 1 A and base device 1 OA are brought close to each other, and a unique ID is transmitted from base device 1 OA and received by key device 1 A. The key device 1A compares the unique ID written in the memory unit with the received unique ID and performs mutual authentication. After the authentication test, by deleting the unique ID written in the memory part of the key device 1A, the key device 1A and the base device 10A can be associated with each other and put into a state.

Example 3

FIG. 5 shows a third embodiment of the mutual authentication device. In this embodiment, the key device 1B includes a memory unit 2 in which a unique ID is registered and a transmitter 3 that transmits the unique ID.

K K

Receiver 4 that receives the unique ID transmitted by the device 10B and for writing the unique ID

B B

And an authentication unit 6 that compares the received data with the data stored in the memory unit 5 to perform authentication. Receiver 4 is a unique ID sent by base device 10B

B

Can only receive the unique ID transmitted by its own transmitter 3.

Yes.

[0028] The base device 10B has the same configuration as the key device 1B. The receiver 11 receives a unique ID transmitted from the key device 1B and a memory for writing the unique ID.

K K

In addition to the authentication unit 13 that performs authentication by comparing the received data with the data stored in the memory unit 12, the memory unit 14 in which the unique ID is registered and the unique ID are transmitted.

B B

Transmitter 15 is provided. Receiver 11 can only receive a unique ID from key device 1B

K

And the unique ID transmitted by its own transmitter 15 is not received.

B

An authentication test method in the mutual authentication device having the above configuration will be described with reference to FIG. First, the key device 1B and the base device 10B are connected to the personal computer 20 which is an example of the reading device, and the unique ID of the key device 1B is read and the base device 10B

K

Read the unique ID of the.

B

[0030] Next, the unique ID of the key device 1B read by the personal computer 20 is assigned to the base device 10B.

K

Write to the memory part 12 and assign the unique ID of the base device 10B to the memory part of the key device IB

B

Write to 5. In other words, mutual unique IDs are exchanged.

[0031] Next, the key device 1B and the base device 10B are brought closer to each other, and the unique ID κ of the key device 1B is transmitted and received by the base device 10B. Send D and have key device IB receive it. In other words, the unique ID

B

Send each other.

[0032] In the key device 1B, the unique ID of the base device 10B written in the memory unit 5

B

Is compared with the received unique ID and authentication is performed.

B

Compare the unique ID of key device 1B written in memory unit 12 with the received unique ID

K K

And authenticate.

[0033] After the authentication test, the unique ID written in the memory unit 5 of the key device 1B is deleted.

B

In addition, by deleting the unique ID written in the memory unit 12 of the base device 10B,

K

One device IB and base device 10B can be unlinked

[0034] In this embodiment, the key device and the base device authenticate each other.

A more reliable certification test can be performed.

[0035] The mutual authentication device of the present invention can be applied to authentication of various devices such as a keyless entry system for a vehicle, in order to restrict operation of electronic devices such as a personal computer and a mobile phone.

Claims

The scope of the claims

[1] A step of preparing a key device and a base device, wherein one device has a unique identification code and a function of transmitting the unique identification code, and the other device receives the unique identification code. A step having a function and a memory unit for storing a unique identification code;

The step of reading the unique identification code of one device using a reading means, the step of writing the read unique identification code in the memory unit of the other device, and transmitting the unique identification code of one device to the memory unit Receiving it on the other device with the identification code written on it;

Comparing the unique identification code written in the memory part of the other device with the unique identification code received in the receiving step, and performing mutual authentication;

And a step of erasing the unique identification code written in the memory unit of the other device.

[2] Step of preparing a key device and a base device, both devices having a unique identification code and a function of transmitting this unique identification code, and both devices receiving the unique identification code And a step having a memory unit for storing a unique identification code,

A step of reading the unique identification codes of both devices using a reading means, a step of writing both of the read unique identification codes in the memory portion of the partner device, and

Sending a unique identification code of both devices to the other device and receiving it on both devices;

In both devices, the step of comparing the unique identification code written in the memory unit with the unique identification code received in the receiving step and performing mutual authentication, and the unique identification code written in the memory unit of both devices And a step of erasing the identification code.

[3] The step of writing the read unique identification code into the memory unit includes a step of writing into the volatile memory, The mutual authentication device authentication test method according to claim 1, wherein the step of deleting the unique identification code is to stop power supply to the device having the volatile memory.