WO2007108397A1

WO2007108397A1 - Communication system, server, client terminal device and communicating method

Info

Publication number: WO2007108397A1
Application number: PCT/JP2007/055230
Authority: WO
Inventors: Moriya Chikata; Keiichi Hibi
Original assignee: Sharp Kabushiki Kaisha
Priority date: 2006-03-17
Filing date: 2007-03-15
Publication date: 2007-09-27

Abstract

A communication system, a server, a client server and a communicating method are provided with reliable features in which users themselves do not need to manage a template referred to at user authentication, authentication data are not checked by a client terminal device in order to reduce a processing load imposed on the client terminal device, and stronger security function than before is installed. A client terminal device (1) acquires user inherent information and generates user identification information (26). The client terminal device converts the user identification information (26) and transmits the converted data to a server (2). The server (2) receives the data-converted user identification information (29) and compares a template (21) for checking the user identification information with user identification information (32). When authentication with the user identification information (26) and bilateral authentication between the client terminal device (1) and the server (2) are accepted, the authentication is judged to be accepted.

Description

Specification

Communication system, server, client terminal, and communication method

Technical field

The present invention relates to a technique for user authentication via a network.

Background art

[0002] In recent years, with the development of services using the network, for example, when using services provided by the network, when using resources stored on a server on the Internet, when making a contract by e-mail, etc. In various situations, it is important to authenticate communication partners.

Conventionally, an authentication system using a so-called “public key infrastructure” (hereinafter “PKI”) has been widely used as a system for performing such authentication.

[0004] The above authentication system has, for example, the following mechanism! First, a predetermined unencrypted sentence (hereinafter referred to as “plaintext”) is sent to a communication partner (hereinafter referred to as “server”) that the person who wishes to authenticate (hereinafter referred to as “user”) wants to authenticate. ) And the ciphertext that is encrypted with your private key. The server that receives the plaintext and ciphertext set authenticates the user by decrypting the ciphertext with the user's public key authenticated by the certificate authority and comparing the decrypted text with the plaintext. Only a user who has a private key that is paired with the public key can create a ciphertext (thus, this ciphertext is called a “digital signature”). If the decrypted text matches, the server can authenticate the user. In some cases, instead of plaintext, plaintext power is also generated by encrypting the generated hash value.

[0005] By the way, since the secret key has a large number of digits and is difficult to store, the user usually stores and manages the secret key in a storage device such as an IC card, or a third party stores the secret key in the storage device of the client terminal. To prevent access, for example, a password is used to lock the storage area.

[0006] However, since the password may be stolen, there is a personal authentication method that uses biometric information (biometric data) based on the physical characteristics of the user instead of the password. It is often used these days. In addition to information such as fingerprints, faces, retinas, irises, palm prints, vein patterns, etc. as human physical features, the nanometric data does not change over many years like voice prints and handwriting. There are many types of behavior attributes.

[0007] Among these, a procedure for using a fingerprint authentication sensor connected to a client terminal will be described below with reference to FIGS. 18 to 22, taking a personal authentication method using a fingerprint as an example.

FIG. 18 is a schematic configuration diagram of a conventional communication system.

FIG. 19 is a diagram showing the overall processing and data flow of a conventional communication system. FIG. 20 is a diagram showing a function and data configuration provided in a conventional communication system. 21 and 22 are flowcharts showing the processing procedure of the conventional communication system.

[0008] First, in S101, the user places a finger on the sensor 25. Then, the user's fingerprint image force S is scanned, and the personal identification information generating means 9 of the client terminal 1 performs processing such as extraction of feature points and shapes from the fingerprint image, and features and feature parameters (hereinafter referred to as “user”). "Identification information") is extracted. A template 43 in which a fingerprint image from which the user power has been collected in advance is represented by a feature amount, a feature parameter, and the like is recorded in the personal identification information storage unit 44. In S102, the template 43 and the user identification information 26 are inputted to the personal identification information collation judgment means 45 and collated, and it is judged whether or not they match. Only when the authentication result is output from the personal identification information collating / determining means 45 and it is confirmed that the user is the user, in S 103, the user's private key in the storage device of the client terminal 19 Is permitted, the secret key storage means 6 is unlocked, and the secret key 19 is read out.

In S104, the user-powered client terminal 1 is operated to transmit a client HELLO message (not shown) for notifying the server 2 of the start of communication. In S105, the server 2 receives the HELLO message from the client terminal 1 and transmits the server HELLO message 22 and the server public key 18 to the client terminal 1. In this example, it is assumed that the server public key 18 is transmitted from the server 2 for each communication. The server public key 18 is stored in advance in the client terminal 1 such as when it is distributed in advance from the certificate authority. There is also

[0010] In S106, the client terminal 1 transmits the received server hello message 22 to the user. A digital signature generated by encrypting with the private key 19 is added to the server hello message 22.

[0011] Further, in S107, the client terminal 1 generates an arbitrary character string, for example, a random seed 23 as a generated value for generating the common key. In S108, the client terminal 1 encrypts with the public key 18 of the server. To do.

In S109, the digitally signed server hello message 27 and the encrypted random seed 28 are transmitted to the server 2 for authentication.

[0013] Next, in S110, the server 2 decrypts the signature part of the server HELLO message 27 with a digital signature received from the client terminal 1 with the user public key 17, and in S111, the server 2 first Authentication is performed by checking the sent server HELLO message 22. If the decrypted server HELLO message 30 and the server HELLO message 22 match, in S1 12, server 2 decrypts the encrypted random seed 28 received at the same time with the server private key 20, and decrypts it in S113. A common key 24 is generated from the random seed 31. On the other hand, the client terminal 1 also generates a common key 24 from the random seed 23 in S114 using the same method as S113. In S115, encrypted communication using the common key 24 between the client terminal 1 and the server 2 is performed. Can be performed.

[0014] Various attempts have been made to improve the accuracy of user authentication by combining the above-described PKI authentication and biometrics authentication. There are many techniques related to these.

[0015] For example, there is a system in which a directory server included in a PKI certificate authority, a biometrics verification server capable of verifying nanometric data based on a user's physical characteristics, and a client terminal are connected by a network. It is disclosed. (For example, see Patent Document 1)

[0016] Biometrics data is transmitted from the user power client terminal, and the biometrics verification server transmits the biometric data transmitted from the user and the biometric data of the user registered in advance. Alternatively, individual verification is performed by checking the template. Biometrics verification server power Upon notification that user authentication is complete, the client terminal reads the user private key used for PKI authentication. Can do. Also in this example, the use of biometric data for unlocking the secret key storage means is the same as described above, and the biometrics data matching function is used in the biometrics verification server. Is just a matter of processing.

Patent Document 1: Japanese Patent Laid-Open No. 2001-216270

Disclosure of the invention

Problems to be solved by the invention

[0017] However, there are still many problems in such a personal authentication system that enhances security by combining a plurality of authentication methods such as biometrics authentication and PKI.

[0018] First, in the conventional authentication system, when viewed from the server side, it is not the user but the client terminal that the server can actually authenticate. The server only authenticated the user indirectly by the client terminal authenticating the user. In other words, since the user authentication process using biometric data is executed in a closed state in the client terminal, the server cannot know that the process is appropriate and valid. In addition, if the client terminal is stolen by another person, the user in front of the client terminal has been forced to operate by another person, or has forgotten to stop using the service, Even if the server is not intended, the server must provide the service by assuming that the client terminal has authenticated the user in use. For example, when a user having a client terminal performs two-way communication via a server, even if a secure communication environment is set, the user is the real user of the communication partner. You will not be able to check for yourself (for example, by querying the server). For example, in the conventional technology, even though biometrics authentication is used, who is using the telephone is who the other party is calling, and whether it is true even if the other party calls himself The problem that cannot be confirmed has been solved.

[0019] In addition, the template data used for biometrics authentication needs to be in a state where the data can be read at any time by the power client terminal built in the client terminal. The user stores the biometrics authentication template in a storage device such as an IC card in the same way as a private key / public key pair used in PKI. Although it will be managed on its own, it must be managed so that important items are not always kept at hand, so it is a burden for the user!

[0020] In addition, in the conventional system, biometrics authentication is used by the client terminal to authenticate the user, so that the biometric information of the user collected using a scanner or the like is compared with the template data. Was done in the client terminal. The data matching process for neumetrics authentication requires accurate calculation processing in a short time, and also requires image matching processing, which has the problem that the processing load becomes a burden on the client terminal. is there. In addition, the accuracy depends on the value of personal information handled by the system, but when high security is required, small client terminals such as mobile phones require data processing that exceeds their processing capabilities. This is likely to be a big burden.

[0021] Also, for example, in Patent Document 1, biometrics authentication is performed by a biometrics verification server, but the biometrics data functions as a password that permits the use of the user's private key in the client terminal. Therefore, the user's private key / public key pair and the user's biometrics data are linked inside one client terminal.

Need to be used in pairs. In other words, the service cannot be used unless the client terminal that inputs user strength S biometric data has the user's private key.

In view of such circumstances, the present invention is a client terminal that does not necessarily store a user's private key and public key in a client terminal that does not need to manage a template that is referred to during user authentication. This reduces the processing amount and processing load of the client terminal without checking biometric data, and the two types of encryption of user identification information and between the server and the client and between the server and the user. The aim is to provide a reliable communication system, server, client terminal, and communication method with a stronger security function than before to prevent eavesdropping, impersonation, and falsification through authentication. Means for solving the problem

In view of such circumstances, the communication system according to the first invention is a communication system in which a servo and a client terminal mutually authenticate with an electronic key via a network. The client terminal includes data conversion control means for converting user identification information unique to a user, and communication control means for transmitting the data-converted user identification information to the server.

The server includes personal identification information storage means for storing verification user identification information, personal identification information verification for comparing and verifying the verification user identification information and the user identification information received and acquired from the client terminal. A determination unit that determines whether or not the verification user identification information and the user identification information match, and the two-way authentication between the client terminal and the server is established by an electronic key; And a control means for permitting communication.

[0024] A server according to the second invention is used in a communication system in which a server and a client terminal mutually authenticate with an electronic key via a network, and stores personal identification information for storing user identification information for verification. Means, personal identification information collating judgment means for comparing and collating the user identification information for collation with user identification information specific to the user received and acquired from the client terminal, the user identification information for collation and the And control means for permitting communication to determine whether or not the user identification information matches and the two-way authentication with the client terminal using the electronic key is established.

[0025] A server according to a third invention is characterized in that the verification user identification information is data converted by parameter data determined with the client terminal.

[0026] A server according to a fourth invention uses encryption using an electronic key for communication of the user identification information with the client terminal, and decrypts the data received from the client terminal with the electronic key to identify the user. It is characterized by comprising data decoding means for acquiring information.

[0027] A server according to a fifth invention is characterized in that a common key encryption with the client terminal is used for encryption with the electronic key.

[0028] When authentication is established between the client terminal and the user, the server according to the sixth invention transmits authentication completion information to another server, and communication between the client terminal and the other server is performed. It is possible to make it possible.

[0029] A client terminal according to a seventh aspect of the present invention provides a server and a client terminal via a network. Used in a communication system in which terminals are mutually authenticated by electronic keys, data conversion control means for converting user identification information unique to a user, and communication control for transmitting the converted user identification information to the server Means for enabling communication when the authentication by the user identification information is established and the two-way authentication with the server by the electronic key is established.

[0030] A client terminal according to an eighth invention is characterized in that the data conversion control means performs irreversible conversion on the user identification information using parameter data determined with the server.

[0031] A client terminal according to a ninth invention is characterized in that the data conversion control means performs data conversion by encrypting the user identification information with an electronic key.

[0032] A client terminal according to a tenth invention uses a common key encryption with the server for encryption with the electronic key.

[0033] A client terminal according to an eleventh invention is characterized in that the user identification information is added to a digitally signed message for authentication with the server and transmitted to the server.

[0034] A client terminal according to a twelfth aspect of the invention is characterized in that after authentication with the server is established, the user identification information is transmitted to the server.

[0035] A client terminal according to a thirteenth invention uses electronic data stored in a wearable device as the user identification information.

[0036] A client terminal according to a fourteenth invention is characterized in that it includes personal identification information generating means for reading the user's biological information as the user identification information and generating user identification information.

[0037] A communication method according to a fifteenth aspect of the invention is a communication method in which a server and a client terminal mutually authenticate with an electronic key via a network.

The client terminal includes a step of converting user identification information unique to a user, and transmitting the data-converted user identification information to the server;

The server includes verification user identification information stored in the server and the client. A step of comparing and collating the user identification information received and acquired from the remote terminal, the collation user identification information and the user identification information match, and the client terminal using the electronic key and the server And a control means for permitting communication to determine whether or not the two-way authentication is established.

[0038] A communication method according to a sixteenth aspect is characterized in that the client terminal performs data conversion by irreversibly converting the user identification information with parameter data determined with the server.

[0039] In a communication method according to a seventeenth aspect of the invention, the client terminal and the server use encryption using an electronic key for communication of the user identification information, and the client terminal uses the user identification information. Data conversion is performed by encrypting with an electronic key, and the server decrypts the data received from the client terminal with the electronic key to obtain user identification information.

[0040] A communication method according to an eighteenth aspect of the invention is characterized in that a common key encryption of the client terminal and the server is used for the encryption with the electronic key.

[0041] In a communication method according to a nineteenth aspect of the invention, the client terminal adds the user identification information to a message digitally signed in an authentication procedure with the server and transmits the message to the server. .

[0042] A communication method according to a twentieth invention is characterized in that the client terminal transmits the user identification information to the server after authentication with the server is established.

[0043] In a communication method according to a twenty-first aspect of the invention, the user identification information is electronic data input by a device force that can be attached to the client terminal.

[0044] In a communication method according to a twenty-second invention, the user identification information uses a user's biological information.

It is generated by V.

The invention's effect

[0045] According to the present invention, at the same time when the client terminal and the server perform two-way authentication via the electronic key, or after the two-way authentication is established, the client terminal is the user-specific information. The identification information is converted into data and sent to the server. The server is a user identification information for verification that is a template for user-specific information stored in the server. And the user terminal information are also compared with the received user identification information. Therefore, the authentication between the server and the client terminal using the electronic key and the authentication between the server and the user based on the user identification information are executed together, and the entire authentication is not performed until both types of authentication processing are established. By adopting a configuration in which the process is established, the security strength can be increased comprehensively if each secures the same security strength as before.

[0046] In addition, the server performs and manages validity confirmation by user authentication and client terminal authentication, and further manages a combination of these authentications. As a result, communication using a client terminal by an unauthorized user other than the owner or an authorized user can be prevented, and unauthorized use or theft of the terminal can be prevented.

[0047] Apart from the above, the server can also independently manage and confirm the validity by the authentication of the client terminal and the confirmation of the validity by the authentication of the user. This allows you and your friends to use the same service company even if you use a terminal that is different from the client terminal that you normally use for authentication, such as when you borrow a friend's terminal. If you are registered as a user and enter your user identification information, user authentication is performed by the server. From a friend's terminal, while maintaining the same security environment as a normally used client terminal, Communication is possible, and the server can identify the person who used the service. Therefore, it is possible to provide a service that can be used by the person and to charge the user.

[0048] Further, for example, when users having client terminals via a server perform two-way communication, the client terminal information of the communication partner is notified to the user who is using the server during communication. The user information of the communication partner itself can be transmitted. Even if data is transmitted even if the client terminal power authorized by the service company is transmitted, if it is different from the assumed partner, the service will be refused if necessary. Is possible. For example, spoofing of the communication partner can be prevented.

[0049] Further, by managing the authentication template on the server, the user can transfer important information such as a template of biometric information used for authentication to the inside of the client terminal or the IC card. This eliminates the need to store the data in an auxiliary storage medium such as the above, so that the user does not have to feel bothered to manage it.

[0050] Further, since the present invention is performed on the server side instead of the data processing power client terminal for authentication, it can be realized even with a small client terminal with low processing capacity.

[0051] Further, the client terminal performs irreversible conversion of the user identification information with the parameter data determined between the server and the server, and transmits it to the server. Also in the server, the matching template for the user identification information is the parameter data. Therefore, even if information is leaked, it is difficult to predict or restore the original information, which can enhance the security of the system.

[0052] Even if authentication data is leaked! /, It is possible to generate and use new personal authentication data and templates by changing the parameter data of the conversion process. Even if biometric information that cannot be changed is used, authentication data can be protected by a third party.

Brief Description of Drawings

FIG. 1 is a diagram showing a schematic configuration of a communication system according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a relationship between data and a processing flow in the communication system according to the first embodiment of the present invention.

FIG. 3 is a block configuration diagram showing a relationship between data arrangement and processing in the communication system according to the first embodiment of the present invention.

FIG. 4 is a flowchart showing an example of an implementation procedure in the communication system according to the first embodiment of the present invention.

FIG. 5 is a flowchart showing an example of an implementation procedure in the communication system according to the first embodiment of the present invention.

FIG. 6 is a flowchart showing an example of an implementation procedure in the communication system according to the second embodiment of the present invention.

FIG. 7 is a flowchart showing an example of an implementation procedure in the communication system according to the second embodiment of the present invention.

FIG. 8 is a diagram showing a schematic configuration of a communication system according to a third embodiment of the present invention. FIG. 9 is a diagram showing a relationship between data and a processing flow in a communication system according to a third embodiment of the present invention.

FIG. 10 is a block configuration diagram showing a relationship between data arrangement and processing in a communication system according to a third embodiment of the present invention.

FIG. 11 is a diagram showing a schematic configuration of a communication system according to a fifth embodiment of the present invention.

FIG. 12 is a diagram showing a relationship between data and a processing flow in a communication system according to a fifth embodiment of the present invention.

FIG. 13 is a block configuration diagram showing the relationship between data arrangement and processing in a communication system according to a fifth embodiment of the present invention.

FIG. 14 is a flowchart showing an example of an implementation procedure in the communication system according to the fifth embodiment of the present invention.

FIG. 15 is a flowchart showing an example of an implementation procedure in the communication system according to the fifth embodiment of the present invention.

FIG. 16 is a flowchart showing an example of an implementation procedure in the communication system according to the fifth embodiment of the present invention.

FIG. 17 is a flowchart showing an example of an implementation procedure in the communication system according to the fifth embodiment of the present invention.

FIG. 18 is a diagram showing a schematic configuration of a conventional communication system.

FIG. 19 is a diagram showing the relationship between data and processing flow in a conventional communication system.

FIG. 20 is a block configuration diagram showing the relationship between data arrangement and processing in a conventional communication system.

FIG. 21 is a flowchart showing a processing procedure of a conventional communication system.

FIG. 22 is a flowchart showing a processing procedure of a conventional communication system.

Explanation of symbols

1 Client terminal

2 servers

3 Scanner , 10 Cryptographic control means

11 Public key storage means

, 12 Private key storage means

13 Control means

14 Communication control means

Personal identification information generation means

5, 44 Personal identification information storage means 6, 45 Personal identification information collation judgment means 7 User public key

8 Server public key

9 User private key

0 Server private key

1, 36, 43 templates

2 Server hello message

3 Random seed

Common key

5 Sensor

, 33 User identification information

7 Signed server HELLO message Encrypted random seed Encrypted user identification information Decrypted server HELLO message 1 Decrypted random seed

Decrypted user identification information Electronic device

Interface part

Parameter data

39 Conversion information storage means 40, 41 Data conversion means

42 Converted user identification information

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

The configuration and outline of a communication system according to an embodiment of the present invention will be described with reference to FIGS.

FIGS. 1 to 7 show examples of embodiments of the present invention. In the drawings, the same reference numerals denote the same parts, and the basic configuration is the same as the conventional one shown in FIGS. It is.

FIG. 1 is a diagram showing a schematic configuration of a communication system according to the first embodiment of the present invention. In this system, a client terminal 1 and a server 2 are connected via a network, and a scanner 3 for reading biological information of a user who is a user of this system is connected to the client terminal 1.

The client terminal 1 includes an encryption control means 4 for controlling encryption, decryption, etc., a public key storage means 5 for storing a public key, a secret key storage means 6 for storing a secret key, and a control means 7 for controlling the client terminal 1. It comprises communication control means 8 for controlling communication, personal identification information generating means 9 for extracting user identification information which is a feature quantity and a feature parameter from the user's biological information, and the like.

The server 2 includes an encryption control means 10, a public key storage means 11, a secret key storage means 12, a control means 13, a communication control means 14 and a personal identification information storage means 15 for storing a template of identification information for identifying a user, It consists of personal identification information collation judgment means 16 etc.

FIG. 2 is a diagram showing a relationship between data and a process flow in the communication system according to the first embodiment of the present invention.

FIG. 3 is a block diagram showing the relationship between data arrangement and processing in the communication system according to the first embodiment of the present invention.

[0059] In order to perform encrypted communication, two pairs of electronic data, a public key 17, 18 and a secret key 19, 20, are prepared for the client terminal 1 and the server 2, and the client terminal 1 They are stored in the public key storage means 5 and 11 and the secret key storage means 6 and 12 of the server 2, respectively. [0060] Further, by operating the scanner 3, parameters of the physical characteristics of the user are acquired as biological information electronic data. The service provider managing the server 2 obtains in advance biometric information electronic data that is a physical feature of the user and stores it in the personal identification information storage means 15 of the server 2. This data is referred to for comparison when identifying the identity of the biometric information user, and is called template biometric electronic data (hereinafter referred to as “template”) 21.

FIGS. 4 and 5 show an example of a procedure for carrying out the present invention in this system.

First, in S1, the client terminal 1 displays an input screen for allowing the user to input a password or the like on a display device (not shown). The control means 7 recognizes the permission from the user to use the user private key 19 stored in the private key storage means 6 by inputting the user's password and the like, and the user private key 19 is unlocked.

Next, the procedure proceeds according to the user authentication procedure of the public key cryptosystem.

[0064] Steps S2 to S6 are the same as steps S104 to S108 in FIG.

First, when the authentication procedure start is controlled by the communication control means 8 of the client terminal 1, the client terminal 1 generates a client HELLO message (not shown) for notifying the start of communication in S2, and the client terminal 1 This is sent to server 2 by means of the transmission (not shown). When the server 2 receives the HELLO message of the client terminal 1 by the receiving means (not shown), in S3, the server 2 generates the server HELLO message 22, which is stored in the public key storage means 11 of the server 2, The server public key 18 is read out and transmitted to the client terminal 1 together with the server Hello message 22 by the transmission means (not shown) of the server 2. Here, it is assumed that the server public key 18 is transmitted from the server 2 for every communication. The server public key 18 is stored in advance in the client terminal 1 such as when it is distributed in advance. There is also.

Next, when the client terminal 1 receives the server hello message 22 and the server public key 18, in S 4, the encryption control means 4 of the client terminal 1 reads the user's private key 19 read from the private key storage means 6. Is used to encrypt the server hello message 22 and generate a digital signature. In S5, the client terminal 1 uses the encryption control means 4 to generate an arbitrary character string called a random seed 23 used for generating a common key.

Further, the client terminal 1 encrypts the generated random seed 23 by the encryption control means 4 in S 6 using the received server public key 18.

In S 7, the client terminal 1 generates a random number using the random seed 23 by the encryption control means 4, and generates a common key 24 based on the random number.

[0069] The scanner 3 attached to the client terminal 1 scans the user's biological information by the sensor 25 of the scanner 3 and inputs the information. In S8, the client terminal 1 uses the personal identification information generating means 9 to Performs processing such as recognition and extraction of feature points of the acquired biometric information

, Feature quantity and feature parameter data (hereinafter referred to as “user identification information”) 26.

[0070] In S9, the client terminal 1 encrypts the user identification information 26 by the encryption control means 4 using the common key 24 created in S7.

In S10, the client terminal 1 transmits the server HELLO message 27 digitally signed, the random seed 28 encrypted, and the user identification information 29 encrypted using the transmission means to the server 2.

[0072] S11 to S14 described below are the same as S110 force to S113 in FIG.

The server 2 that has received the digitally signed server HELLO message 27, the encrypted random seed 28, and the encrypted user identification information 29 is S11, and in the cryptographic control unit 10, first the signed server HELLO message. The 27 digital signatures are decrypted with the user public key 17 read from the public key storage means 11.

[0073] Next, in S12, the server 2 verifies in the control means 13 whether or not it is the same as the server HELLO message 22 transmitted to the client terminal 1 stored in the server 2 in the decrypted server HELLO message 30 And verify.

[0074] If the server HELLO message 30 obtained by decryption and the server HELLO message 22 are the same, it is possible to determine that the received message is definitely transmitted from a valid client terminal. If the above is not established, the authentication is unsuccessful, and the control means 13 of the server 2 causes the communication control means 14 to stop communication.

If the above is established, the process proceeds to the next step. In S13, server 2 starts with client terminal 1 The encrypted random seed 28 that has been transmitted is read from the secret key storage means 12 and the server secret key 20 is read out and decrypted by the encryption control means 10.

The server 2 further generates the common key 24 based on the random seed 31 decrypted by the encryption control means 10 in S14. Here, the method of generating the common key 24 from the decrypted random seed 31 in the encryption control means 10 is the same as the method in which the encryption control means 4 of the client terminal 1 generates the common key 24 from the random seed 23 in S7. It is. In this way, the client terminal 1 and the server 2 have the same common key 24.

[0077] In S15, the encryption control means 10 of the server 2 decrypts the encrypted user identification information 29 transmitted from the client terminal 1 using the common key 24 generated in S14.

In S16, the server 2 uses the template that is the user identification information for collation stored in advance in the personal identification information storage unit 15 of the server 2 for the user identification information 32 decrypted by the encryption control unit 10. Whether or not the same as 21 is compared and verified by the personal identification information verification judgment means 16.

[0079] If it is determined that the user identification information 32 transmitted from the client terminal 1 and decrypted by the server 2 matches the template 21, it is no doubt that the client terminal 1 is operated to transmit data. Server 2 recognizes that it is a legitimate user registered with Server 2. If the above does not hold, the authentication is unsuccessful and the control means 13 of the server 2 causes the communication control means 14 to stop communication.

[0080] If both of the above two authentications are established, authentication of both server 2 and client terminal 1, server 2 and user is established, and a common key generated by server 2 and client terminal 1 24 Is confirmed to be the same. Here, in S17, the control means 13 of the server 2 permits the communication between the client terminal 1 and the server 2 when the two authentications are established. In S18, thereafter, the control means 13 of the server 2 and the client terminal 1 Encryption communication can be performed with the server 2 using the common key 24.

[0081] As described above, the authentication between the server and the client terminal using the electronic key and the authentication between the server and the user based on the user identification information are executed together, and both types of authentication processing are established. By configuring the entire authentication process for the first time, If the same security strength is secured, the overall security strength can be increased.

[0082] Further, the server performs and manages validity confirmation by user authentication and validity confirmation by client terminal authentication, and further manages a combination of these authentications. As a result, communication using a client terminal by an unauthorized user other than the owner or an authorized user can be prevented, and unauthorized use or theft of the terminal can be prevented.

[0083] Further, by managing the authentication template on the server, the user stores important information such as a template of biometric information used for authentication in the client terminal or in an auxiliary storage medium such as an IC card. You don't have to worry about the hassle of managing it yourself.

Further, since the present invention is performed on the server side instead of the authentication data processing power client terminal, even a small client terminal with low processing capacity can be realized.

[0085] The above procedure is executed each time communication is started, and in the above example, authentication is performed by this procedure and communication is performed with one user at a time and one client. Assuming that there is a terminal and one server, this is also true when a single user uses multiple client terminals and a single client terminal is used by multiple users.

[0086] Note that the common key 24 is used for the encryption of the user identification information 26. Generally, the public key encryption method is more encrypted than the common key encryption method. Therefore, to reduce the amount of processing and simplify it, and to avoid the risk of impersonation caused by eavesdropping and stealing the user identification information 26 encrypted with the server's public key 18. However, if the server has sufficient processing capability, the network is configured so that eavesdropping and unauthorized interception by a third party cannot be performed. Alternatively, other encryption keys may be used.

The common key 24 may be stored in advance in the secret key storage unit 6 of the client terminal 1 and the secret key storage unit 12 of the server 2. In this case, in the above, the steps such as generation of random seed 23, encryption and transmission to the server, generation of random numbers are omitted. can do.

[0088] Further, the user authentication method shown here can be used as long as it is a personal authentication method that can be realized with high accuracy and accuracy that is based on the assumption of using biometric information. A plurality of authentication methods may be used in combination. By collating multiple types of data, it is possible to respond flexibly to various user requests.

In addition, the server HELLO message 27 signed by the client terminal 1, the encrypted random seed 28, and the encrypted user identification information 29 are simultaneously transmitted to the server 2. The encrypted user identification information 29 is The signed server hello message 27 and the encrypted random seed 28 may be sent separately and independently. Figure 6 and Figure 7 show examples of procedures that take this into account. The processes up to S6 are the same as in the first embodiment.

In S19, the transmission means of the client terminal 1 transmits the signed server hello message 27 and the encrypted random seed 28 to the server 2.

The server 2 that has received the digitally signed server HELLO message 27 and the encrypted random seed 28 is the same as that of the first embodiment. The digital signature of the HELLO message 27 is decrypted with the user public key 17 read from the public key storage means 11.

[0092] Next, in S12, the server 2 verifies in the control means 13 whether or not it is the same as the server HELLO message 22 transmitted to the client terminal 1 stored in the server 2 in the decrypted server HELLO message 30 To verify.

[0093] If the server HELLO message 30 obtained by decryption and the server HELLO message 22 are the same, it is possible to determine that the received message is definitely transmitted by a valid client terminal. If the above is not established, the authentication is unsuccessful, and the control means 13 of the server 2 causes the communication control means 14 to stop communication.

On the other hand, the encryption control means 4 of the client terminal 1 generates a common key 24 from the generated random seed 23 in S20, and encrypts the user identification information 26 with the generated common key 24 in S21.

[0095] In S22, the transmission means of the client terminal 1 transmits the encrypted user identification information 29 to the server. Send to 2. The subsequent processing from S13 is the same as in the first embodiment.

[0096] By using the procedure as in the present embodiment, the server can independently manage and check the validity by the authentication of the client terminal and the validity by the authentication of the user. It becomes. This allows you and your friends to use the same service company even if you use a terminal that is different from the client terminal that you normally use for authentication, such as when you borrow a friend's terminal. If the user is registered, the user authentication is performed separately from the client terminal authentication. Even if the user identification information is input to a different client terminal, the user is authenticated by the server. Since authentication is performed, it is possible to communicate while maintaining the same security environment as a client terminal during normal use by using a friend's terminal as if it were its own terminal. In addition, since the server can identify the person who uses the service, it is possible to provide services that can be used by the person himself / herself and to charge the user.

[0097] For example, if the server is a server that provides content and the user is a registered member of the company that provides the content, the above authentication is performed on the content server side of the company, so that the member This can prevent problems such as impersonation.

[0098] If there are a plurality of users who use one client terminal such as a family, the server can be specified for each user in the configuration of the present invention. Use history power Extracting data such as preference trends and storing them in association with templates for personal identification information can present appropriate content and expect effects such as not missing business opportunities be able to.

[0099] Also, by specifying the member, if the content of the contract varies depending on the member, even if the client terminal is shared by multiple people, it can be provided for each member by limiting the service content that can be used Different service contents can be used.

[0100] Even if the terminal used by the user is different, in this embodiment, the individual user can be specified. Therefore, when providing paid services on the server, Can be charged.

[0101] Also, for example, when a server is communicating, a communication partner's class is By adopting a configuration that can transmit user information of the communication partner itself that is communicated with the client terminal information, even if legitimate client terminal capability data approved by the service company is transmitted, In other cases, it becomes possible to refuse to continue the service if necessary. For example, spoofing of the other party of communication can be prevented.

[0102] <Third embodiment>

Here, the configuration of a communication system according to another embodiment of the present invention will be described.

FIG. 8 is a diagram showing a schematic configuration of a communication system according to the third embodiment of the present invention. FIG. 9 is a flow of data and processing in the communication system according to the third embodiment of the present invention. FIG.

FIG. 10 is a block configuration diagram showing the relationship between data arrangement and processing in the communication system according to the third embodiment of the present invention. The parts denoted by the same reference numerals as in FIGS. 1 to 3 represent the same thing.

In this embodiment, instead of the user identification information 26 which is the biometric information used in the first embodiment, data unique to the user and uniquely identifiable is used as the user identification information 33. For example, a password set and stored by the user is used. In this embodiment, as an example of an authentication method that can be realized with high accuracy to identify others, a card-type card that has excellent tamper-proof performance that is always carried and used by the user (no data can be seen by being broken). For example, the electronic device 34 is described as being stored as user identification information 33, which is, for example, electronic data having a string of alphanumeric characters with a large number of digits.

Further, instead of the fingerprint authentication sensor 25 in the first embodiment, the client terminal 1 reads the electronic data from the electronic device 34 by the interface unit 35 and acquires the user identification information 33. Then, the user identification information 33 is encrypted with the generated common key 24. The template 36 stored in the server 2 is also the same electronic data as the user identification information 33. Other configurations are the same as those of the first embodiment. [0106] Here, it is assumed that the user identification information 33 is obtained from the electronic device 34. However, this is a data that can uniquely identify the user, such as a character string with a large number of digits or electronic data. This is to prevent theft by others using data that is difficult to store. However, when using a combination of a user name and password or information that can be memorized by the user, the user identification information 33 is directly input using means such as keys, buttons, touch panel, and handwriting input of the user power client terminal 1. You can also enter it. Further, based on information input by the user, the client terminal 1 may appropriately acquire the user identification information 33 by processing and processing the information appropriately.

As a fourth embodiment, when the server 2 and the client terminal 1 and another server that the server 2 trusts, for example, a content server (not shown) are connected to the same network, I will explain.

[0108] When authentication is established between the server 2 and the client terminal 1, and between the server 2 and the user, the common key 24 generated by the server 2 and the client terminal 1 is the same as described in the first embodiment. Become one. Thereafter, the server 2 transmits the authentication completion information and the encrypted random seed 28 to the content server which is another server, and the content server decrypts the encrypted random seed 28 to generate the random seed. If the configuration is such that the common key 24 is generated more, encrypted communication can be performed between the client terminal 1 and the content server using the common key 24. In other words, the server that performs the authentication and the server that provides the service may be further U.

In the description so far, the user identification information 26 is encrypted and transmitted. By using an appropriate method for encryption, it is possible to prevent information from being read on the communication path. However, as long as humans intervene in the system, the possibility of information leakage due to carelessness of related parties is not zero.

[0110] In particular, when human biometric information is used as user identification information, due to its characteristics, unlike the password, etc., if the original information is leaked, the leaked data can be prohibited, It is not possible to register and use new data. With nanometric authentication, human and biometric information cannot be separated, and only that person owns the information. Because it is the basis of authentication, information cannot be updated or discarded. It has a weak point. Of course, there are methods such as encrypting and saving the template, reading the template and storing it in a protected portable medium, or further performing authentication processing inside the portable medium. It ’s not a fundamental solution.

[0111] So, how to cope with this ^, some of the power that has been conceived

There is a technology called cancelable biometrics. In this method, user identification information obtained for authentication is transformed by a one-way function having a many-to-one correspondence so that the original data cannot be restored, and then compared with verification authentication data. The function depends on arbitrary parameter data, and this parameter data is stored between the two performing authentication without any other person's effort and is called and used during conversion. The template data for verification is also stored in the storage medium on the verification side after being transformed with the same one-way function and the same parameter data, and at the time of authentication, the acquired user identification information and template are Match in the deformed state.

[0112] Regarding the specific method of data conversion, there are various possible force many-to-one irreversible transformations, and a powerful process is performed only in one direction. It is difficult to guess the identification information and parameter data.

[0113] Examples of data conversion processing that satisfies this condition include image morphing and block clamping. Image morphing is a technique that geometrically deforms a figure by shortening or extending the distance between two points on the screen of image data. This is a technique of dividing the position into small blocks and replacing the positions in units of blocks.

[0114] By using this cancelable biometrics method for authentication of user identification information in the present invention, the information passing through the communication path and the stored template are transformed by a one-way function. It is difficult to predict or restore the original information. In addition, when there is a leakage of information for authentication, the parameter data is changed and the data is updated between the server and the client terminal. By registering the rate with a new transformation, security can be maintained without modifying the original user identification information and template consisting of biometric information.

[0115] On the premise of this, as a fifth embodiment, a method of transmitting data after converting it instead of encrypting and transmitting the user identification information 26 will be described below.

FIG. 11 is a diagram showing a schematic configuration of a communication system according to the fifth embodiment of the present invention.

FIG. 12 is a diagram showing a relationship between data and a process flow in the communication system according to the fifth embodiment of the present invention.

FIG. 13 is a block configuration diagram showing the relationship between data arrangement and processing in the communication system according to the fifth embodiment of the present invention.

FIG. 14 to FIG. 17 are flowcharts showing an example of an implementation procedure in the communication system according to the fifth embodiment of the present invention.

[0117] The one-way function used for data conversion and the parameter data 37 on which this function depends are electronic data with sufficient capacity for data conversion, as shown in Fig. 12. In addition, the parameter data 37 is prepared and managed in the client terminal 1 and the server 2 before communicatively communicating. In most cases, it is considered that the server generates data and distributes it to users. However, the client terminal may generate the data and send it to the server. The data must be managed so that it is not used by others, and parameter data 37 is stored in the conversion information storage means 38 and 39 of the client terminal 1 and server 2 shown in FIG. As another example, it is conceivable that the user manages the client terminal 1 in the tamper resistant device in the same manner as the user's private key.

[0118] In this system, the data conversion means 40 of the server 2 beforehand converts the data using the parameter data 37 to the template 21 which is the user identification information for verification, and then identifies the individual. The information is stored in the information storage means 15.

[0119] Among the processes that are involved in user authentication, as shown in FIG. 14, the processes from S1 to S8 are the same as those described in FIG. Using the meter data 37, the data conversion means 41 converts the user identification information 26 into data. After that, in S24, the converted user identification information 42 is sent to the signed server HELL. O message 27 and encrypted random seed 28 are sent to server 2. As shown in FIG. 15, the server 2 performs the same processing as described in FIG. 5 because the difference in the power of the template 21 converted into data and the user identification information 42 converted in S16 is the same. The personal identification information collation judging means 16 is compared and collated.

[0120] Also, FIGS. 16 and 17 perform basically the same processing as FIGS. 6 and 7, except that the data conversion means of the client terminal 1 is S25 as described above. In 41, the user identification information 26 is converted by the parameter data 37, and in S26, the communication control means 8 sends the user identification information 42 converted to the server 2, and in S16, the personal identification information matching judgment means of the server 2 16 is that the converted template 21 and the converted user identification information 42 are compared.

[0121] In the above description, the client terminal 1 transmits the converted user identification information 42 to the server 2 without encrypting it. However, the client terminal 1 does not encrypt the user identification information 42. As described above, the client terminal 1 may encrypt the converted user identification information 42 using the common key 24 and then transmit it to the server 2. This can further enhance the security effect.

[0122] In this embodiment, by devising a calculation method that is performed at the time of data conversion using identification information and parameter data, the converted user identification information 42 can conceal information representing user characteristics. . In this way, even if the converted user identification information 42 sent from the client terminal 1 to the server 2 extracts the feature amount from the transmitted data cover, it is difficult to estimate the user-specific information. A similar effect appears even if the template 21 stored in the server 2 is used.

[0123] Further, even if the converted user identification information 42 is leaked to a third party in the process of passing through the communication path, new personal authentication data can be obtained by changing the parameter data 37 of the conversion process. Templates can be generated and used.

By these, the security of the system can be strengthened.

[0124] The communication system, server, client terminal, and communication method of the present invention are not limited to the above-described embodiments, and various modifications can be made without departing from the scope of the present invention. Of course. Industrial applicability

As described above, according to the present invention, at the same time when the client terminal and the server perform bidirectional authentication via the electronic key, or after the bidirectional authentication is established, the client terminal uses the user-specific information. Data of certain user identification information is converted and transmitted to the server. The server collates the user identification information for collation, which is a template of user-specific information stored in the server, with the user identification information also received by the client terminal. Therefore, the authentication between the server and the client terminal using the electronic key and the authentication between the server and the user based on the user identification information are executed together. By adopting a configuration in which this authentication process is established, if each secures the same security strength as before, the security strength can be increased comprehensively.

Claims

The scope of the claims

[1] In a communication system in which a server and a client terminal mutually authenticate with an electronic key via a network,

The client terminal is

Data conversion control means for converting user identification information unique to a user; and communication control means for transmitting the data-converted user identification information to the server,

The server

Personal identification information storage means for storing user identification information for verification;

Personal identification information collation determining means for comparing and collating the user identification information for collation and the user identification information received and acquired from the client terminal;

Communication is permitted by determining whether or not the verification user identification information and the user identification information match and a two-way authentication between the client terminal and the server is established using an electronic key. And a control means.

[2] Used in a communication system in which a server and a client terminal mutually authenticate with an electronic key via a network.

Personal identification information collation determining means for comparing and collating the verification user identification information with the user identification information unique to the user received and acquired from the client terminal; the verification user identification information and the user identification information And a control means for determining whether or not a two-way authentication with the client terminal is established by using an electronic key and permitting communication.

[3] The server according to claim 2, wherein the verification user identification information is data converted by parameter data determined with the client terminal.

[4] A data decryption unit that uses encryption using an electronic key for communication of the user identification information with the client terminal, decrypts data received from the client terminal with the electronic key, and acquires user identification information. The server according to claim 2 or 3, wherein the server is provided.

5. The server according to claim 4, wherein a common key encryption with the client terminal is used for encryption with the electronic key.

[6] When authentication is established between the client terminal and the user, authentication completion information is transmitted to another server, and communication between the client terminal and the other server is enabled. The server according to any one of claims 2 to 5.

[7] Used in a communication system in which a server and a client terminal mutually authenticate with an electronic key via a network.

A client terminal, wherein communication is possible when authentication by the user identification information is established and bidirectional authentication with the server by an electronic key is established.

[8] The client 卜 terminal c according to [7], wherein the data conversion control means performs irreversible conversion on the user identification information using metric data determined between the server and the server.

[9] The client terminal according to claim 7 or 8, wherein the data conversion control means performs data conversion by encrypting the user identification information with an electronic key.

10. The client terminal according to claim 9, wherein common key encryption with the server is used for encryption with the electronic key.

11. The client terminal according to claim 7, wherein the user identification information is added to a digitally signed message for authentication with the server and transmitted to the server.

12. The client terminal according to any one of claims 7 to 10, wherein after the authentication with the server is established, the user identification information is transmitted to the server.

13. The client terminal according to claim 7, wherein electronic data stored in a wearable device is used as the user identification information.

[14] The client terminal according to any one of [7] to [12], further comprising personal identification information generation means for reading the user's biometric information and generating user identification information as the user identification information. .

[15] In a communication method in which a server and a client terminal mutually authenticate with an electronic key via a network,

The client terminal is

Data converting user identification information unique to the user;

Transmitting the user-converted user identification information to the server, and

Comparing and collating user identification information for verification stored in the server with the user identification information received and acquired from the client terminal;

Judgment is made as to whether or not the verification user identification information matches the user identification information, and the two-way authentication between the client terminal and the server is established using an electronic key. A communication method comprising the steps of:

16. The communication method according to claim 15, wherein the client terminal performs data conversion by irreversibly converting the user identification information using parameter data determined with the server.

[17] The client terminal and the server use encryption using an electronic key for communication of the user identification information,

The client terminal converts the data by encrypting the user identification information with an electronic key,

17. The communication method according to claim 15, wherein the server acquires user identification information by decrypting data received from the client terminal with an electronic key.

18. The communication method according to claim 17, wherein common key encryption of the client terminal and the server is used for encryption with the electronic key.

[19] The client terminal adds the user identification information to a digitally signed message and transmits the message to the server according to an authentication procedure with the server. The communication method according to any one of Claims 15 to 18.

[20] The communication method according to any one of claims 15 to 18, wherein the client terminal transmits the user identification information to the server after authentication with the server is established.

21. The communication method according to any one of claims 15 to 20, wherein the user identification information is electronic data input by a device power that can be attached to the client terminal.

22. The communication method according to any one of claims 15 to 20, wherein the user identification information is generated using user biometric information.