JP3409653B2 - Service providing system, authentication device, and computer-readable recording medium recording authentication program - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a service providing system, an authentication device, and a computer recording an authentication program.
A computer-readable recording medium, in particular, a service providing system that provides services by confirming the validity of usage rights,
The present invention relates to an authentication device that authenticates the right to use a service, and a computer-readable recording medium that records an authentication program that causes a computer to authenticate the right to use the service.

[0002]

2. Description of the Related Art With the advent of a digital society due to the development of networks in recent years, the operation of electronic commerce and electronic money centering on Europe and the United States has started, and today, IC (Integrated Ci
The rcuit) card plays an important role as a personal authentication device for receiving various services such as an electronic wallet that stores electronic money. I like this
The C card is a CPU (Central Processing) because it is a memory card that only stores data.
Unit) has come to have a function of restricting access to memory, and nowadays, there is also a device having a sophisticated cryptographic operation function and performing user authentication.

However, ISO (International Organizat)
ion for Standardization) / IEC (International Ele
The IC card compliant with the ctrotechnical Commission) 7816 has a limitation in thickness, so that there is a restriction that a power source cannot be provided inside. Also, from the viewpoint of manufacturing cost, it is not effective to have a power source in the IC card.
For this reason, the power supply and clock of the IC card are
The clock function cannot be operated inside the IC card when the power supply is cut off by the power supply of the IC card. Therefore, when it is necessary to write the time on the IC card, the time can be updated only by a reliable terminal.

[0004]

By the way, future IC
Considering the usage form of the system that performs authentication using a card, it is necessary to use it in a local environment or offline from the viewpoint of convenience and communication cost. In such an environment, for example, when trying to perform software license management with an IC card, it is necessary to perform access management according to time and period. In that case, I
It must be managed with a C card.

However, in a local environment, the management of time must be performed by a PC (Personal Computer) under the control of the user, and a PC under the control of the user can misrepresent the time by the user. is there.
In UNIX client / server systems, there is a method in which a time server is provided to periodically synchronize the time from the client machine (Tomoaki Shimoyama et al./S.
UN system management / ASCII publication / p. 249 (199
In 1)), such management is premised on that the client and the server are always connected, and since a synchronization request is issued from the client, spoofing at the client is still easy. Therefore, there is a problem that it is difficult for the license management depending on the time and the period using the IC card to function normally.

[0006] It should be noted that if it is possible to restrict online usage via a network, it is not necessary for the IC card to manage the usage period, but this is unrealistic in view of the future variety of services. For example, in the case of implementing a service with a deadline on a user's local computer, it is more convenient for the user to use the service providing software or the like offline than to use it online. It is economical. In addition, even service providers (users) require complicated management and a very large database to manage users individually online each time the service is used, resulting in excessive capital investment. To be Therefore, in consideration of convenience and economy, it is indispensable to manage the effective period of the service offline.

The present invention has been made in view of the above problems, and an object of the present invention is to provide a service providing system capable of providing service with a designated period off-line.

Another object of the present invention is to provide an authentication device capable of authenticating a service use period in an offline service providing device. Further, another object of the present invention is to read a computer program recorded with an authentication program for causing a computer to authenticate a service usage period in an offline service providing apparatus.
It is to provide a recordable recording medium.

[0009]

In order to solve the above problems, the present invention comprises a service providing device and an authentication device.
And a service providing system for
Test apparatus, the expiration data sending means for <br/> output the expiration end time or Ranaru expiration data set corresponding to a particular service to the authentication device, returned from the authentication device
The time of the internal clock and the service providing means that makes it possible to provide the specific service based on the generated permission response.
Time change request procedure that outputs a time change request as the update time
The authenticating means stores the authenticating time, and the authenticating time stores the authenticating time.
Included in the expiration date data output from the service providing device.
If the time is before the expiration time of the expiration date,
Output the usage permission response to the service providing device
The authentication means and the authentication time to the service providing device.
Update included in the time change request output from the device
If the time is earlier than the time, the authentication time is changed.
Authentication time updating means for updating to the time indicated by the new time
There is provided a service providing system comprising:

According to this service providing system, a user who desires to provide a particular service outputs the expiration date data by using the expiration date data sending means of the service providing apparatus. Then, the authentication means in the authentication device outputs a use permission response to the service providing device on condition that the authentication time is before the expiration time end time. It is also necessary to change the time of the service providing device.
From the request means, the time change with the internal clock time as the update time.
A change request is output. Then, when the authentication for the time is a time earlier than by further new time <br/> is, the authentication time update means
Thus, the authentication time stored in the authentication time storage means is updated to the time indicated by the expiration date start time. on the other hand,
When the use permission response is output from the authentication means, the service providing means can provide the service to the user.

In order to solve the above problems, the present invention provides a specific service output from a service providing device.
The expiration date that consists of the expiration time set for
Authorization of the service based on the data and the service
As the update time
In the authentication device that updates the time when the time change request is received
There is an authentication time storage means for holding the authentication time,
The authentication time is output from the service providing device.
The expiration date start time included in the expiration date data
If the time is before the
Authentication means for outputting a permission response for the service, and
Before the authentication time is output from the service providing device
At a time before the update time included in the time change request
In some cases, when the authentication time is indicated by the update time
An authentication device is provided, which comprises an authentication time updating means for updating every moment .

[0012] According to the authentication device, and the expiration date data is sent from the service providing device, if the time for authentication is a time earlier than the expiration time, the authentication means
Then, a use permission response is output to the service providing device. In addition, it is necessary to change the time with the internal clock time as the update time.
Upon receiving the determined, when the time for authentication is time before the update time, the authentication time update unit, the authentication time stored in the authentication time storage means indicated by expiration time starts Will be updated at the scheduled time.

In order to solve the above problems, the present invention provides a specific service output from a service providing device.
The expiration date that consists of the expiration time set for
Authorization of the service based on the data and the service
As the update time
Including the time update request received on the computer
Computer reading that records the program to be performed
It is a removable recording medium that stores the authentication time.
The certificate time storage means and the authentication time are stored in the service proposal.
Before included in the expiration date data output from the equipment
If the time is before the expiration date start time,
The service provider sends a response to the permission to use the service.
Authentication means to be used and the authentication time is provided for the service
The update included in the time change request output from the device.
If the time is before the new time, the authentication time is
Authentication time update means for updating at the time indicated by update time
Recorded a program that causes the computer to function as
A computer-readable recording medium is provided.

[0014] By executing the program stored in the medium recording the authentication program in the computer, for authentication
Authentication time storage means for holding time, and the authentication time
Is the expiration date output from the service providing device.
The time that is earlier than the expiration time start time included in the data
The service is provided to the service providing device,
The authentication means that outputs a usage permission response and the authentication time are
The time change request output from the service providing device
If the time is before the update time included in
The authentication time is updated to the time indicated by the update time.
Each function of the certification time updating means is realized by a computer.

[0015]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. First, regarding the related technology of the present invention
First, an embodiment of the present invention will be specifically described.
It

FIG. 1 is a diagram showing the principle of the related art of the present invention. The service providing system of the present invention includes a service providing apparatus 10 that provides various services to a user, and an authentication apparatus 30 that authenticates the validity of the right to use the service provided by the service providing apparatus 10.

In the service providing device 10, the expiry date data sending means 11 sends the expiry date data 20 including the expiry date start time 21 and the expiry date end time 22 set corresponding to a specific service to the authentication device 30. Output to. The service providing unit 12 can provide the specific service only when the use permission response is input.

In the authentication device 30, the authentication time storage means 31 holds the authentication time. Upon receiving the expiration date data 20 from the service providing apparatus 10, the authentication unit 32 compares the authentication time stored in the authentication time storage unit 31 with the expiration time end time 22, and the authentication time ends. The use permission response is output to the service providing apparatus 10 on the condition that the time is before the time 22. Upon receiving the expiration date data 20 from the service providing apparatus 10, the authentication time update means 33 compares the authentication time stored in the authentication time storage means 31 with the expiration time start time 21, and stores the authentication time. When the authentication time stored in the means 31 is before the expiration time start time 21, the expiration time start time 21 is stored in the authentication time storage means 31 as a new authentication time.

According to such a service providing system, the service provider side sets the expiration date data 20 corresponding to each service. Then, the user who wants to receive the provision of the specific service receives the service providing device 10
The expiration date data sending means 11 sends the expiration date data 20 corresponding to a specific service to the authentication device 30.

In the authentication device 30 which has received the expiration date data 20, the authentication time storage means 3 is operated by the authentication means 32.
The authentication time in 1 is compared with the expiration time end time, and if the authentication time is before the expiration time end time, a use permission response is sent to the service providing apparatus 10.
Further, the authentication time updating means 33 compares the authentication time with the expiration time start time 21, and if the authentication time is before the expiration time start time 21, the expiration time start time 21 is updated. It is stored in the authentication time storage means 31 as a new authentication time.

The service providing means 12 of the service providing device 10 provides the service to the user only when the use permission response is received. Here, the usage permission response is a signature of the authentication device 30 on the input data of the service providing device 10 or information necessary for using the service. When transmitting the usage permission response, secret communication using a random number may be used in order to deal with a replay attack or the like.

In this way, even when the service providing device is offline, it is possible to manage the right to use the service with the expiration date specified. Moreover, the authentication time is updated to the expiration time start time when the service is provided, and the time cannot be returned to the past time.
The user cannot spoof the authentication time.

By using the service providing device of the present invention, the user can receive various services.
For example, as described in the prior art, it may be the right to use software, valuable information such as electronic money, or even a ticket for using other services.

Next, the form of the concrete implementation of the related art of the present invention, will be described as an example the case of performing the software license management provider provides an IC card.

FIG. 2 is a diagram showing a schematic configuration of an authentication system using an IC card. A personal computer (PC) 110 used by a user is connected to a center 130 via a network 120 such as the Internet. In the center 130, user registration and management of user data and history of services provided to the user are performed. Then, the center 130 provides the encapsulated software (hereinafter simply referred to as “capsule”) 300 in response to a request from the PC 110. Encapsulation here means, for example, DES (Data Encryption Stand
ard) is used to encrypt using an encryption algorithm so that it cannot be used as it is . Also, PC1
A reader / writer 140 is connected to 10 via an interface such as RS-232C (a data communication interface defined by the American Electronics Industry Association). By connecting the IC card 200 to the reader / writer 140, the user can authenticate the usage right of the software acquired from the center 130.

The IC card 200 is delivered to the user from the provider who provides the software or the center 130 which receives the request of the provider. Although the service is used by the PC 110 in this example, the local terminal device for using the service is not limited to the PC, and may be, for example, a workstation, a server, or an ATM (Auto). Teller M
achine) It may be a terminal.

FIG. 3 is a diagram showing an example of a capsule. The capsule 300 is composed of a header portion 310 and encrypted software 320. The header part 310 is a capsule starting program 311 for starting the capsule.
And the authentication data required for the IC card to perform the authentication step.

The capsule activation program 311 executes the authentication data transmission process, the user information acquisition process, the software decryption process, and the software execution process by the PC 110.
It is a program to be executed by. The authentication data sending process is a process of sending the authentication data included in the header section 310 in the capsule 300 to the IC card 200. The user information acquisition process is a process of prompting the user to input the user ID (identification information unique to the user) and the password, and transmitting the input ID and the like to the IC card 200. What is software decryption processing? IC card 2
This is a process of receiving a decryption key from 00 and decrypting the encrypted software 320 using the decryption key. The software execution process is a process of executing the decrypted software.

The authentication data in the header section 310 is
It includes software authentication data 312, software usage right authentication data 313, expiration date authentication data 314, and an encrypted decryption key 315. The software authentication data 312 includes, for example, a software identifier (I
D) and the signature of the provider. When the user authentication is successful, the software usage right authentication data 313 contains
Information for authenticating the usage right corresponding to the user is stored. The expiration date authentication data 314 is data indicating the expiration date of the encrypted software 320. The encrypted decryption key 315 is a decryption key for decrypting the capsule 300, and secret information (decryption key) for decrypting the decryption key is stored in the IC card 200 in advance.

FIG. 4 is a diagram showing the structure of the expiration date authentication data 314. As shown in the figure, the expiration date authentication data 31
4 includes an expiration date start time 314a, an expiration date end time 314b, and a center signature 314c. Here, the signature 314c of the center is, for example, a signature of the expiration date start time 314a and the expiration date end time 314b, which is signed by the center's signature key. Signature of this center 314c
Is the expiration date start time 314a and the expiration date end time 31
It is not always necessary if there is another mechanism capable of confirming that 4b is not spoofed.

FIG. 5 is a diagram showing the hardware configuration of the IC card. In the IC card 200, one computer system is built around the CPU 210. Various other elements are connected to the CPU 210 via an internal system bus. RAM (Random Access M
The emory) 220 temporarily stores data to be processed by the CPU 210. ROM (Read Only Memory) 230 is
An authentication program for causing the CPU 210 to execute the functions required for the IC card 200 is stored. The input / output device (I / O) 240 is a reader / writer according to a predetermined standard.
Data communication is performed with the writer 140. PROM (Pro
The grammable read only memory) 250 stores the IC card time used for authentication of the expiration date, secret information for decrypting the encrypted decryption key 315, and the like.

The IC card 200 having such a hardware configuration realizes the following processing functions. FIG. 6 is a block diagram showing the processing functions of the IC card. The authentication unit 201 determines whether to allow the use of the capsule 300, based on the content of the authentication data sent from the PC 110. Specifically, when the use is permitted, it is determined that the use of the capsule 300 is permitted, and when the use is not permitted, the “error” information is sent to the PC 110.
Return to. The authentication unit has the following authentication units for different purposes.

The software authentication section 201a refers to the software authentication data 312 and authenticates whether the capsule 300 is provided by a legitimate provider. This can prevent intrusion of computer viruses and the like.

The user authentication unit 201b authenticates that the user is the owner of the IC card 200 based on the user ID and password sent from the PC 110. The software usage right authentication unit 201c authenticates that the owner of this IC card 200 has the right to use the software in the capsule 300 based on the software usage right authentication data 313. For example, when the software in the capsule 300 can be used only by a person with a certain post or more, if the value representing the post of the owner of the IC card 200 is less than or equal to a predetermined value, it is determined to be unusable.

The expiration date authentication section 201d compares the expiration date end time 314b of the expiration date authentication data 314 with the IC card time 251, and authenticates that the IC card time 251 is before the expiration date end time 314b.

When the use of the capsule 300 is permitted by each of the above authentication units, the information is updated to the IC card time updating unit 2
02 and the decryption key decryption unit 203. The IC card time updating unit 202 compares the expiration date start time 314a in the expiration date authentication data 314 with the IC card time 251, when the use of the capsule 300 is permitted. If the expiration date start time is larger, the IC card time 251 is rewritten to the expiration date start time.

The decryption key decryption unit 203 decrypts the encrypted decryption key 315 by using the secret information 252 stored in the PROM 250. Then, the decrypted decryption key is transferred to the PC 110.

In the system having the above-described structure, first, the software created by the provider is encapsulated by the center 130 or a similar organization, and the capsule 300 is generated.

Next, the user obtains the capsule 300 through the network 120, the CDROM or the like. Then, the user connects his or her own IC card 200 to the reader / writer 140 and activates the obtained capsule 300 on the PC 110.

When the PC 110 receives the activation command for the capsule 300, it reads the capsule activation program 311 and communicates with the IC card 200 in accordance with the instruction.
The authentication data is passed to the IC card 200. Then, the IC card 200 performs the authentication step to perform the authentication. If authenticated correctly, the decryption key for decrypting the software is sent from the IC card 200 to the PC 110. The PC 110 decrypts the software 320 encrypted with the received decryption key, and executes the plaintext software.

The capsule starting program 311 and I
By using the secure messaging function of the IC card for communication with the C card 200, it is possible to prevent the decryption key and the like from being exposed. Further, even after the software is decrypted, it can be executed only via the capsule activation program, so that the use management of the software can be ensured.

The details of the authentication procedure will be described below. Figure 7
6 is a flowchart showing an authentication procedure according to an embodiment of related art . The left side of the broken line in the figure represents the process of the PC 110 based on the capsule activation program 311, and the right side of the broken line represents the process of the IC card 200. [S1] First, the PC 110 that has activated the capsule activation program 311 transmits the authentication data of the capsule 300 to the IC card 200. Note that the authentication data referred to here also includes a user ID and a password.

The IC card 200 carries out the following authentication process using the authentication data and the like. [S2] The software authentication unit 201a first authenticates the software based on the software authentication data 312. If the software is judged to be correct, step S
If it is determined that the software is not correct, go to step S6. [S3] The user authentication unit 201b allows the user to connect to the PC 110.
The user is authenticated based on the user ID and the password input in. If the user is determined to be correct, step S
4, the process proceeds to step S6 if the user is determined to be incorrect. [S4] The software usage right authentication unit 201c authenticates the software usage right based on the software usage right authentication data 313. If it is determined that the user has the right to use the software, the process proceeds to step S5. If it is determined that the user does not have the right to use the software, the process proceeds to step S6.

The authentication method of steps S2 to S4 is not particularly defined in the present invention, and they are, for example, an authentication method using RSA (Rivest Shamir Adleman) encryption or DES-MAC (Message Authentication).
Cord). [S5] Based on the signature 314c of the center included in the expiration date authentication data 314, the expiration date authentication unit 201d
Expiration date start time 314a and expiration date end time 314b
Verify that is correct. Then, the IC card time 251 stored in the PROM 250 of the IC card 200
Is below the expiration date end time 314b. If the verification result that the expiration date authentication data 314 is correct and the verification result that the IC card time 251 is equal to or less than the expiration date end time are correct, the process proceeds to step S7.
If the verification results are not correct, the process proceeds to step S6. [S6] If the authentication in steps S2 to S5 fails, the authentication unit 201 returns an error to the PC 110 and ends the process. [S7] The IC card time updating unit 202 determines whether the IC card time 251 is smaller than the expiration date start time 314a. If the IC card time 251 is smaller, the IC card time 251 starts the expiration date. Time 314a
Rewrite at the time indicated by. [S8] The decryption key decryption unit 203 uses the encrypted decryption key 3
15 is the secret information 25 stored in the PROM 250
It is decrypted using 2 and returned to the PC 110. [S9] The PC 110 that has received the decryption key decrypts the encrypted software 320 based on the instruction of the capsule activation program 311 and executes the software. At this time, the software 320 is not completely decrypted, only the part to be executed is decrypted and expanded in the volatile memory, and when the software is finished, it is decoded and expanded in the volatile memory. If the deleted software is erased, the decrypted software will not be used illegally.

In this way, the expiration date of the capsule is managed by the expiration date start time 314a and the expiration date end time 341b, and the IC card time 251 is compared with the IC card time 251 when the capsule is executed, and the IC card time 251 is calculated from the expiration date start time 314a. If it is smaller, the IC card time 251 is updated at the expiration date start time 314a, so that when the user obtains and executes a new capsule from the center or the provider, the IC card time is updated, which is later than the expiration date start time of the new capsule. Even if the expiration date is too small, the capsule cannot be used. As a result, it is possible to manage the expiration date of the software use right even if the IC card does not have a clock.

For example, when a capsule set with an expiration date (expiration date start time: July 1, 1997, expiration date end time: July 31, 1997) for one month from July 1, 1997 is executed. , IC card time is always 19
The time after July 1, 1997 is set. Then, thereafter, it is not possible to execute a capsule whose expiration date is before June 30, 1997.

[0047] The following describes implementation of the embodiment of the present invention. The configuration shown in FIGS. 2-5 is similar also in the embodiments of the present invention you later, will be described using the code which is also shown in FIGS. 2 to 5 in the description of the embodiments . However, the processing functions of the IC card will be described with individual reference numerals.

First, the first embodiment will be described. In this embodiment, the time of the IC card is updated by the PC.
This is done by the time setting command from. Figure 8
FIG. 3 is a block diagram showing processing functions of the IC card according to the first embodiment. IC card 40 of the present embodiment
Among the processing functions of 0, the functions of the software authentication unit 401a, the user authentication unit 401b and the software usage right authentication unit 401c in the authentication unit 401, and the decryption key decryption unit 403 are the same as those of the related art shown in FIG. Since it is the same as the component having the same name in the embodiment, the description thereof is omitted. That is, in the present embodiment, the expiration date authentication units 401d and I
The processing function of the C card time updating unit 402 is different from that of the related art embodiment. Further, as in the embodiment of the related art , the IC card time 451 is stored in the IC card 400.
And secret information 452 are held.

The PC 110 performs the time setting process according to the input from the user or at a predetermined timing.
In the time setting process, the clock time inside the PC 110 is included in the time setting command and sent to the IC card 400.

The IC card time update unit 402 is the PC 11
When the time setting command is received from 0, the IC card time 451 is updated, and the update status (“normal end” or “error”) is returned to the PC 110.

FIG. 9 is a flowchart showing the processing procedure when the time setting command is issued. In this figure, the left side of the broken line is the PC 110, and the right side of the broken line is the IC card 400. [S11] The PC time (time of the clock in the PC 110) is passed to the IC card time updating unit 402 of the IC card 400 by the time setting command issued by the PC 110. [S12] The IC card time updating unit 402 that has received the PC time compares the PC time with the IC card time 451, and if “PC time> IC card time”, the process proceeds to step S14, and “PC time> If "IC card time" is not established, the process proceeds to step S13. [S13] If the “PC time> IC card time” is not satisfied, that is, if the IC card time updating unit 402 tries to update the time with a value smaller than the current IC card time 451, the error status is displayed on the PC 110. Is returned and the process ends. [S14] If the "PC time> IC card time" is satisfied, the IC card time updating unit 402 determines that the IC card time 45
1 is updated with the PC time, and a normal termination status is returned to the PC 110.

As described above, with the time setting command, the IC card can be updated by advancing the time, but cannot be updated by advancing the time. FIG. 10 is a flowchart showing the authentication procedure of the first embodiment. In this figure, the left side from the broken line represents the PC 110 that executes processing based on the capsule activation program, and the right side from the broken line represents the IC card 400. [S21] When the capsule activation program 311 is activated in the PC 110, the authentication data of the capsule is transmitted to the IC card 400.

In the IC card 400, the following authentication process is performed using the authentication data and the like. [S22] The software authentication unit 401a performs software authentication based on the software authentication data 312. If the software is determined to be correct, step S2
If it is determined that the software is not correct, the process proceeds to step S26. [S23] The user authentication unit 401b allows the user to enter the PC 11
The user is authenticated based on the user ID and password entered in 0. If it is determined that the user is correct, the process proceeds to step S24, and if it is determined that the user is not correct, the process proceeds to step S26. [S24] The software usage right authentication unit 401c authenticates the software usage right based on the software usage right authentication data 313. If it is determined that the user has the right to use the software, the process proceeds to step S25. If it is determined that the user does not have the right to use the software, step S26.
Proceed to. [S25] Based on the center signature 314c included in the expiration date authentication data 314, the expiration date authentication unit 401d determines the expiration date start time 314a and the expiration date end time 31.
Verify that 4b is correct. And the IC card 40
The IC card time 451 stored in 0 is the expiration date start time 314a or more, and the expiration date end time 31
Check if it is 4b or less. If the verification result that the expiration date authentication data is correct and the verification result that the IC card time 451 is within the expiration date are correct, step S
If the verification results are not correct, the process proceeds to step S26. [S26] If the authentication in any of steps S22 to S25 fails, the authentication unit 401 returns an error to the PC 110 and ends the process. [S27] The decryption key decryption unit 403 decrypts the encrypted decryption key 315 using the secret information 452, and the PC 110
Reply to. [S28] Upon receiving the decryption key, the PC 110 decrypts the encrypted software 320 using the decryption key based on the instruction of the capsule activation program 311 and executes the software.

PC 110 having the above processing functions
The processing procedure of the present embodiment will be specifically described by assuming that the user first executes the first capsule and then the second capsule by using the IC card 400 and.

FIG. 11 is a diagram showing the expiration date of the capsule and the change of the IC card time. The expiration date 41 of the first capsule is from July 1, 1997 to July 3, 1997.
Up to 1 day, the expiration date 42 of the second capsule is 1
From September 1, 997 to September 30, 1997. The current correct time is "September 15, 1997"
It is “day”, but it is assumed that the user uses the software by masquerading the time on the PC. It is also assumed that the IC card time before executing the capsule is the time 51 before July 1, 1997.

Here, when the user executes the first capsule, the IC card time 451 set at the time 51 must be updated to the time within the expiration date 41 of the first capsule. Therefore, the user sets the PC time to "July 15, 1997". And PC1
When the time setting command is issued from 10, the time 5
2 is set as the IC card time 451. This allows the user to illegally execute the first capsule.

Next, when the user obtains and executes a new second capsule, the I set at time 52 is set.
The C card time 451 is set to the expiration date 42 of the second capsule.
Must be updated at the time in. So the user
The PC time is set to the correct time "September 15, 1997", and the PC 110 issues a time setting command. Then, the time 53 becomes the IC card time 451. This allows the user to legally execute the second capsule.

After that, even when the user tries to execute the first capsule, the time 53 is set in the IC card time 451 and is outside the valid period 41 of the first capsule. You will no longer be able to use these capsules. Further, since the IC card time 451 can only be increased, the IC card time 451 cannot be returned to the range of the expiration date 41 of the first capsule.

In this way, the expiration date of the capsule is managed by the expiration date start time and the expiration date end time, and when the capsule is executed, it is compared with the IC card time so that it cannot be executed unless the IC card time is within the expiration date. Therefore, when the user obtains a new capsule from the center or the provider and tries to execute it, the IC card time must be updated. Therefore, a capsule for which the expiration date end time that is smaller than the expiration date start time of the new capsule cannot be used, and the expiration date management of the software use right is performed even if the IC card does not have a clock. It is possible.

Next, a second embodiment will be described. In this embodiment, in addition to management of the expiration date, management of the number of times of use is performed to more reliably prevent illegal use.

FIG. 12 shows an IC according to the second embodiment.
It is a block diagram which shows the processing function of a card. Among the processing functions of the IC card 500 according to the present embodiment, the functions of the software authentication unit 501a, the user authentication unit 501b, the software usage right authentication unit 501c, the expiration date authentication unit 501d, and the decryption key decryption unit 503 are shown in FIG. Since it is the same as the component of the same name in the first embodiment shown in
The description is omitted.

The usage counter 504 is used for the IC card 5
When 00 is passed to the user, a predetermined value is set as an initial value by the provider or the center 130, and the set value is decremented by 1 each time the authentication unit 501 permits the use.

The number-of-uses limiting authentication unit 501e provided in the authentication unit 501 permits or disallows the use of software if the value of the number-of-uses counter 504 is 0, and permits the use of software if the value is not 0.

Upon receiving the challenge request from the PC 110, the random number generator 505 generates a random number. The random number encryption unit 506 encrypts the random number generated by the random number generation unit 505 using the secret key, and transfers it to the PC 110 as a challenge.

The response verification unit 507 decrypts the response from the PC 110 with the public key of the center, and determines that the response is correct based on whether the random number included in the response matches the random number generated by the random number generation unit 505. To verify. If the response is incorrect, PC110
Returns an error to. If the response is correct, information to that effect is transmitted to the IC card time updating unit 502 and the counter initialization unit 508. At that time, the information on the center time is passed to the IC card time updating unit 502.

When the IC card time updating unit 502 receives the information indicating that the response is correct from the response verifying unit 507, if the center time is larger than the IC card time, the center time sent from the response verifying unit 507 The IC card time 551 is updated.

When the counter initialization unit 508 receives the information indicating that the response is correct from the response verification unit 507, the counter initialization unit 508 initializes the usage counter 504. The following authentication processing is performed using the IC card 500 having such a function.

FIG. 13 is a flow chart showing the authentication procedure of the second embodiment. In this figure, the left side of the broken line represents the PC 110 that executes processing based on the capsule activation program, and the right side of the broken line represents the IC card 500. [S31] When the capsule activation program 311 is activated in the PC 110, the authentication data of the capsule is transmitted to the IC card 500.

The IC card 500 carries out the following authentication processing using the authentication data and the like. [S32] The software authentication unit 501a performs software authentication based on the software authentication data 312. If the software is determined to be correct, step S3
If it is determined that the software is incorrect, the process proceeds to step S37. [S33] The user authentication unit 501b displays the user's PC 11
The user is authenticated based on the user ID and password entered in 0. If it is determined that the user is correct, the process proceeds to step S34. If it is determined that the user is not correct, the process proceeds to step S37. [S34] The software usage right authentication unit 501c authenticates the software usage right based on the software usage right authentication data 313. If it is determined that the user has the right to use the software, the process proceeds to step S35, and if it is determined that the user does not have the right to use the software, step S37.
Proceed to. [S35] The expiration date authentication unit 501d determines the expiration date start time 314a and the expiration date end time 31 based on the center signature 314c included in the expiration date authentication data 314.
Verify that 4b is correct. And the IC card 50
The IC card time 551 stored in 0 is the expiration date start time 314a or more, and the expiration date end time 31
Check if it is 4b or less. If the result of the verification that the expiration date authentication data is correct and that the IC card time 551 is within the expiration date are correct, step S
If not, the process proceeds to step S37. [S36] The number-of-uses limit authentication unit 501a confirms that the number-of-uses counter is not 0, and the number-of-uses counter is 0.
If so, the process proceeds to step S37, and the usage counter is 0.
If not, the process proceeds to step S38. [S37] The authentication unit 501 returns an error to the PC 110 if the authentication in any of steps S32 to S36 fails, and ends the process. [S38] When the authentication unit 501 outputs a signal indicating that the use is permitted, the usage counter 504 subtracts 1 from the set value. [S39] The encrypted decryption key is decrypted using the secret information 552 of the IC card 500 and returned to the PC 110. [S40] The PC 110 uses the capsule activation program 31.
In accordance with the instruction No. 1, the encrypted software 320 is decrypted using the returned decryption key and the software is executed.

In the above description, the usage counter 5
Although 04 is set so that the capsule cannot be executed when it is subtracted from a certain value and becomes 0, conversely, the usage counter may be started from 0 so that the capsule cannot be executed at a certain value.

In the above description, the IC card in which the usage count counter becomes 0 and the capsule cannot be executed can be made to execute the capsule again by the following operation.

FIG. 14 is a flow chart showing the procedure of resetting the usage counter. In this figure, the left side from the broken line represents the PC 110, and the right side from the broken line represents the IC card 500. [S41] The PC 110 issues a challenge request to the IC card 500. [S42] When the IC card 500 receives the challenge request, the random number generator 505 generates a random number r. [S43] The random number encryption unit 506 encrypts the random number r with the secret key of the IC card 500 compatible with the public key cryptosystem,
It is returned as a challenge to the PC 110. [S44] Upon receiving the challenge from the IC card 500, the PC 110 transmits the challenge to the center 130 and obtains a response from the center 130. The response structure is, for example, a structure in which the random number received from the IC card and the center time are concatenated and signed with the secret key of the center 130 compatible with the public key cryptosystem. [S45] The PC 110 transmits the response received from the center 130 to the IC card 500. [S46] The response verification unit 507 verifies the response. As a procedure for response verification, IC
The signature is verified with the public key of the center 130 corresponding to the public key cryptosystem registered in the card 500, and it is confirmed that the random number r generated by the random number generation unit 505 and r in the response match. When the verification of the response is successful, the process proceeds to step S48, and when the verification is unsuccessful, the process proceeds to step S47. [S47] If the response verification fails, the response verification unit 507 returns an error to the PC 110 and ends the process. [S48] If the center time is larger than the IC card time, the IC card time updating unit 502 substitutes the center time included in the response into the IC card time 551. [S49] Further, the counter initialization unit 508 resets the usage number counter 504 to the initial value so that the capsule can be used again. [S50] The response verification unit 507 returns a normal end status to the PC 110.

In this way, the use of the capsule is limited by the number of times, the capsule cannot be used when the number of times of use is reached, and then the capsule is used again only when the IC card time is updated by communicating with the center. By making it possible, it becomes possible to manage the time of the IC card.

In the above description, a public key cryptosystem is used as an example when encrypting a random number or when verifying a response, but this does not limit the present invention at all, and the IC card 500 and the center. Anything that can guarantee the validity of data exchange with 130 can be substituted. Further, the random number r is used as the verification data, but it does not necessarily have to be a random number as long as the value is updated every time a challenge request is made.

It is also possible to update the number-of-uses counter by an arbitrary value by giving the response an updated value of the number-of-uses. Next, a third embodiment will be described. In this embodiment, the center time is included in the data from the center to the IC card, and the IC card time is updated with the center time.

FIG. 15 shows an IC according to the third embodiment.
It is a block diagram which shows the processing function of a card. Among the processing functions of the IC card 600 of this embodiment, the authentication unit 601
(Software authentication unit 601a, user authentication unit 601
b, including the software usage right authentication unit 601c and the expiration date authentication unit 601d) and the decryption key decryption unit 603 have the same functions as the components of the same name in the embodiment of the related art shown in FIG. , Description is omitted. Also, as in the case of the related art , the IC card 600
An IC card time 651 and secret information 652 are held in the inside.

When the center signature verification unit 604 receives data from the center via the PC 110, the center signature verification unit 604 verifies the signature of the center. If it is correct, the fact is notified to the IC card time updating unit 602. If the signature of the center is not correct, the update status of "error" is returned to the PC 110.

The IC card time updating unit 602 compares the IC card time 651 with the center time, and if the center time is larger, updates the IC card time 651 to the center time.

FIG. 16 is a diagram showing an example of data from the center. Data 60 from the center is the IC card 60
The data 61 to be issued to 0, the center time 62 when the data 60 from the center is issued, and the data 61 and the center signature 63 for the center time 62.
Here, the data from the center refers to arbitrary data issued by the center, such as a capsule itself, a ticket for acquiring some service, or simply a data from the center. Sometimes it's a message.

FIG. 17 shows an IC according to the third embodiment.
It is a flowchart which shows the update procedure of card time. In this figure, the left side from the broken line represents the PC 110, and the right side from the broken line represents the IC card 600. [S61] The PC 110 inserts the IC card 600 into the center 13
The data 60 from 0 is transmitted. [S62] Upon receiving the data 60 from the center 130, the center signature verification unit 604 verifies the center signature and verifies that the data 61 issued to the IC card 600 and the center time 62 are valid. If the verification is successful, after performing processing according to the data 60, step S6
Go to 4. If the verification fails, the process proceeds to step S63. [S63] The center signature verification unit 604 returns an error to the PC 110 and ends the process. [S64] The IC card time updating unit 602 compares the center time 62 with the IC card time 651. If the center time 62 is larger than the IC card time 651, the process proceeds to step S65, and if not, the process proceeds to step S66. [S65] The IC card time updating unit 602 substitutes the center time 62 into the IC card time 651. [S66] The IC card time updating unit 602 causes the PC 110
, The update status of normal end is returned.

As described above, the data issued from the center to the IC card is provided with the center time and the signature of the center, whereby the time management of the IC card can be performed.

The processing contents of the functions of the IC card are realized by the CPU in the IC card executing the authentication program stored in the ROM, but this authentication program is stored in another recording medium. It can also be stored. Computer-readable recording media include magnetic recording devices and semiconductor memories. In the case of distribution in the market, the program is stored in a portable recording medium such as a CD-ROM or a floppy disk for distribution, or stored in a storage device of a computer connected via a network, and then stored in a storage device of a computer. It can also be transferred to another computer. When the program is executed by the computer, the program is stored in a hard disk device or the like in the computer, loaded into the main memory and executed.

[0083]

In the service providing system according to the present invention, as described above, according to the present invention, when the expiration date ends the expiration date of the service
Managed by time, the authentication time of the authentication device, the authentication time
Since the update time is set to be later than the update time, even the local service providing device manages the expiration date of the service usage right by using the authentication device that does not have a clock internally. It becomes possible.

Further, the authentication device of the present invention authenticates the expiration date in response to a request from the service providing device, and indicates the authentication time and the time after the authentication time.
Since the update is performed using the update time, it is possible to authenticate the expiration date without having an internal clock.

The authentication program of the present invention is recorded.
With a computer-readable recording medium, the expiration date is authenticated in response to a request from the service providing device , and the authentication time is displayed after the authentication time.
Since the program that updates using the update time is stored, if the stored program is executed by the computer, it is possible to allow the computer to authenticate the expiration date without using the internal clock.

[Brief description of drawings]

FIG. 1 is a principle configuration diagram of a related art of the present invention.

FIG. 2 is a diagram showing a schematic configuration of an authentication system using an IC card.

FIG. 3 is a diagram showing an example of a capsule.

FIG. 4 is a diagram showing a structure of expiration date authentication data.

FIG. 5 is a diagram showing a hardware configuration of an IC card.

FIG. 6 is a block diagram showing processing functions of an IC card.

FIG. 7 is a flowchart showing an authentication procedure according to the embodiment of the related art .

FIG. 8 is a block diagram showing processing functions of the IC card according to the first embodiment.

FIG. 9 is a flowchart showing a processing procedure when a time setting command is issued.

FIG. 10 is a flowchart showing an authentication procedure according to the first embodiment.

FIG. 11 is a diagram showing expiration dates of capsules and changes in IC card time.

FIG. 12 is a block diagram showing a processing function of an IC card according to a second embodiment.

FIG. 13 is a flowchart showing an authentication procedure according to the second embodiment.

FIG. 14 is a flowchart showing a procedure of reset processing of a usage counter.

FIG. 15 is a block diagram showing a processing function of an IC card according to a third embodiment.

FIG. 16 is a diagram showing an example of data from a center.

FIG. 17 is a flowchart showing an IC card time update procedure according to the third embodiment.

[Explanation of symbols]

10 Service providing device 11 Expiration date data transmission means 12 Service providing means 20 expiration date data 21 Start time of validity 22 expiration time 30 authentication device 31 authentication time storage means 32 authentication means 33 Authentication time updating means

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI G06F 9/06 660H (72) Inventor Kenji Chiba 430 Nakai-cho, Ashigagami-gun, Kanagawa Prefecture Green Tech Nakai Fuji Xerox Co., Ltd. (56) References JP-A-2-83732 (JP, A) JP-A-8-138020 (JP, A) JP-A-4-54529 (JP, A) JP-A-9-167091 (JP, A) JP-A-7-230335 (JP, A) JP 57-159318 (JP, A) JP 1-166218 (JP, A) (58) Fields investigated (Int.Cl. ⁷ , DB name) G06F 9/06 G06F 15 / 00 G06F 1/00 370 G06F 13/00 G06F 12/00 G06F 12/14 G06F 17/60 G06K 17/00 G06K 19/00 H04N 7/16 H04L 9/00 G09C 1/00 JST file (JOIS) CSDB (Japan (National Patent Office)

Claims (15)

(57) [Claims] 1. A service providing device and an authentication device.
A service providing system that is, the service providing apparatus, expiration end time set corresponding to a specific service
Or Ranaru and expiration data sending means for outputting the expiration data to the authentication device, used returned from the authentication device
A service providing unit that makes it possible to provide the specific service based on a permission response, and an internal clock time as an update time.
And a time change requesting means for outputting a time change request, and the authentication apparatus outputs an authentication time storing means for holding an authentication time and the authentication time from the service providing apparatus. Was
The expiration date end time included in the expiration date data.
If the time is before the
An authentication unit that outputs the usage permission response and the authentication time are output from the service providing apparatus.
Time before the update time included in the time change request
, The authentication time is indicated by the update time.
A service providing system, characterized by comprising: an authentication time updating means for updating at time.
Mu. 2. A service providing device and an authentication device.
A service providing system that is, the service providing apparatus, the expiration date end time set corresponding to a specific service
And signature data for the expiration time
Expiration date data that outputs expiration date data to the authentication device
Based on the sending means and the use permission response returned from the authentication device,
Service provision means that enables provision of specific services
And when a time change request is output with a predetermined time as the update time
A time change request means and comprises a, the authentication apparatus, the authentication for the time storage means for storing the authentication time, output from the service providing apparatus that said expiration date data
The expiration time based on the signature included in the data
Confirm that the authentication time is valid
If it is before the deadline, the service will be
Means for outputting the use permission response to the customer device
And the authentication time is output from the service providing device.
Time before the update time included in the time change request
, The authentication time is indicated by the update time.
A service providing system, characterized by comprising: an authentication time updating means for updating at time.
Mu. 3. A service providing device and an authentication device.
The service providing system is characterized in that the service providing apparatus is configured to be effective corresponding to a specific encrypted service.
The expiration time and the date when the decryption key of the service was encrypted.
And outputs the expiration date data consisting of
Expiration date data transmission means and a usage permission response including the decryption key returned from the authentication device.
It is possible to decrypt and provide the specific service based on the answer.
And the time on the internal clock are updated.
Time change request means for outputting a time change request as a new time
And the authentication device holds an authentication time storage unit that holds an authentication time and secret information that decrypts the encrypted decryption key.
The secret information storage means and the authentication time are output from the service providing device.
The expiration date end time included in the expiration date data.
If it is the time before the recovery
Before sending the authorization response containing the decrypted decryption key.
The authentication means for outputting to the service providing device and the authentication time are output from the service providing device.
Time before the update time included in the time change request
, The authentication time is indicated by the update time.
A service providing system, characterized by comprising: an authentication time updating means for updating at time.
Mu. 4. The expiry date data sending means further comprises:
The expiration date data including the expiration date start time is added to the authentication device.
To the authentication means , and the authentication means sends the authentication time when the expiration date starts.
If the time is between the time and the expiration time,
The above-mentioned use permission response is output to the service providing device.
Rukoto service providing system according to claim 1 to 3, wherein
Mu. 5. A service providing device and an authentication device.
The service providing system is characterized in that the service providing device is configured to have an expiration time set for a specific service.
Validity of outputting the expiration date data consisting of
Based on the time limit data transmission means and the use permission response returned from the authentication device,
A service providing means for providing a specific service, and an initialization request including a signed update time to the authentication device.
Initialization request means for outputting, and the authenticating means stores an authenticating time storing means for holding an authenticating time, and uses for counting the number of times the use permission response is outputted.
The number of times counter and the authentication time are output from the service providing device.
The expiration date end time included in the expiration date data.
It is the time before and the value of the usage counter is
If the value is not the predetermined value,
An authentication unit that outputs a usage permission response, and an output from the service providing device based on the signature.
Initialization request verification hands to verify the legitimacy of the initialization request
And the initialization request verification unit verifies that the initialization request is valid.
It is determined that there is, and the authentication time is the update time.
If the time is earlier than the above, the authentication time is updated as described above.
The authentication time updating means for updating at the time indicated by time and the initialization request verifying means confirm that the initialization request is valid.
If it is determined that the number of times of use is
Counter initialization means to initialize to the specified value
And a service providing system characterized by
Mu. 6. A specific device output from a service providing device
Consists of the expiration time set for the service
Authentication of the right to use the service based on the expiration date data and
And update the predetermined time output from the service providing device
Update the time when the time change request including the time is received
An authentication device, an authentication time storage unit that holds an authentication time, and the authentication time is output from the service providing device.
The expiration date start time included in the expiration date data
If the time is before the
An authentication unit that outputs a response to permission to use the service, and the authentication time are output from the service providing apparatus.
Time before the update time included in the time change request
, The authentication time is indicated by the update time.
An authentication device comprising: a time update unit for authentication that updates the time . 7. A specific information output from the service providing device
The expiration time set for the service and the validity
In the expiration date data consisting of the signature for the expiration time
Based authorization of use of the service and provision of the service
When the specified time output from the device is included as the update time
It is an authentication device that updates the time when a time change request is received.
Te, the authentication time storage means for storing the authentication time, output from the service providing apparatus that said expiration date data
The expiration time based on the signature included in the data
Confirm that the authentication time is valid
If it is before the deadline, the service will be
Authentication means for outputting the use permission response to the test device
And the authentication time is output from the service providing device.
The time is before the update time included in the time change request.
If the authentication time is set to the time indicated by the update time,
An authentication time updating means for updating, and an authentication device. 8. An encryption output from a service providing device
Expiration set for the specified service
The time and the decryption key of the encrypted service are encrypted
Of the service based on the expiration date data consisting of
Authentication of usage right and output from the service providing device
Received a time change request that includes the specified time as the update time
An authentication device for updating time, which holds authentication time storage means for holding authentication time and secret information for decrypting the encrypted decryption key.
The secret information storage means and the authentication time are output from the service providing device.
The expiration date end time included in the expiration date data.
If it is the time before the recovery, the decryption key is restored with the secret information.
Before sending the authorization response containing the decrypted decryption key.
The authentication means for outputting to the service providing device and the authentication time are output from the service providing device.
Time before the update time included in the time change request
, The authentication time is indicated by the valid update time.
Authentication time updating means for updating the time to a specified time . 9. The authentication means also sets an expiration date start time.
Upon receiving the expiration date data including the authentication time
Is between the expiration time start time and the expiration time end time
If the time is
9. The use permission response is outputted, and the use permission response is outputted.
The described authentication device. 10. A specification output from a service providing device
The expiration date and time set for the
Expiration date data consisting of a signature for the expiration time
Authentication of usage rights of the service based on
Initialization including the signed update time output from the device
An authentication device that performs initialization based on a request, and uses an authentication time storage unit that holds an authentication time and a count that counts the number of times the usage permission response is output.
The number of times counter and the authentication time are output from the service providing device.
The expiration date end time included in the expiration date data.
It is the time before and the value of the usage counter is
If the value is not the predetermined value,
An authentication unit that outputs a usage permission response, and an output from the service providing device based on the signature.
An initialization request verifier that verifies the validity of the initialization request
And the initialization request verification unit verifies that the initialization request is valid.
It is determined that there is, and the authentication time is the update time.
If the time is earlier than the above, the authentication time is updated as described above.
The authentication time updating means for updating at the time indicated by time and the initialization request verifying means confirm that the initialization request is valid.
If it is determined that the number of times of use is
Counter initialization means to initialize to the specified value
And an authentication device. 11. A specification output from a service providing device
From the expiration time set for other services
Authentication of the right to use the service based on the expiration date data
And change the predetermined time output from the service providing device.
Update the time when the time change request including the new time is received.
A computer that records a program for the computer to perform.
A computer-readable recording medium, and an authentication time storage means for holding an authentication time, and the authentication time output from the service providing device.
The expiration date start time included in the expiration date data
If the time is before the
An authentication unit that outputs a response to permission to use the service, and the authentication time are output from the service providing apparatus.
Time before the update time included in the time change request
, The authentication time is indicated by the update time.
Computer as time update means for authentication to update time
Computer-readable recording program for operating
Recordable media. 12. A specification output from a service providing device
The expiration date and time set for the
Expiration date data consisting of a signature for the expiration time
Authentication of usage rights of the service based on
Includes the predetermined time output from the equipment as the update time
Updates the time on the computer when the time change request is received
Computer read recording program for
The recording medium is a recordable medium, and the authentication time storage means for holding the authentication time, and the expiration date output from the service providing device.
The expiration time based on the signature included in the data
Confirm that the authentication time is valid
If it is before the deadline, the service will be
Means for outputting the use permission response to the customer device
And the authentication time is output from the service providing device.
The time is before the update time included in the time change request.
If the authentication time is set to the time indicated by the update time,
Functions as a computer for updating authentication time
Computer readable program recording
Recording medium. 13. A cipher output from a service providing device
Expiration date set for the specified specific service
The end time and the decryption key of the encrypted service are encrypted.
Service based on expiration date data consisting of
Authentication of the right to use and output from the service providing device
Received a time change request that includes the specified time as the update time.
Program to let the computer update the time
A computer-readable recording medium in which
Therefore, the authentication time storage means for holding the authentication time and the secret information for decrypting the encrypted decryption key are retained.
The secret information storage means and the authentication time are the same as the service proposal.
Before included in the expiration date data output from the equipment
If the time is before the expiration time, the secret
Decrypt the decryption key with information and include the decrypted decryption key
Output the usage permission response to the service providing device
And the authentication time output from the service providing device.
Time before the update time included in the time change request
, The authentication time is indicated by the valid update time.
Computer as a time update method for authentication that updates the time
Computer read for recording a program Ru made to function over data
A recordable recording medium. 14. The authentication means sets an expiration date start time.
When receiving the expiration date data including
Is the time between the expiration time start time and the expiration time end time.
If it is a time between
6. The method according to claim 6, wherein a usage permission response is output.
8. A computer-readable recording medium according to item 8. 15. A specification output from a service providing device
The expiration date and time set for the
Expiration date data consisting of a signature for the expiration time
Authentication of usage rights of the service based on
Initialization including the signed update time output from the device
A program that allows the computer to perform a demand-based initialization.
Computer-readable recording medium for recording programs
A body, counts the authentication time storage means, the number of the use permission response is outputted to retain the authentication time available
The number of times counter and the authentication time are output from the service providing device.
The expiration date end time included in the expiration date data.
It is the time before and the value of the usage counter is
If the value is not the predetermined value,
An authentication unit that outputs a usage permission response, and an output from the service providing device based on the signature.
An initialization request verifier that verifies the validity of the initialization request
And the initialization request verification unit verifies that the initialization request is valid.
It is determined that there is, and the authentication time is the update time.
If the time is earlier than the above, the authentication time is updated as described above.
The authentication time updating means for updating at the time indicated by time and the initialization request verifying means confirm that the initialization request is valid.
If it is determined that the number of times of use is
Counter initialization means to initialize to the specified value for
The program that causes the computer to function.
Computer-readable recording medium.