JP3887234B2

JP3887234B2 - Command execution authority transfer method and system

Info

Publication number: JP3887234B2
Application number: JP2002003210A
Authority: JP
Inventors: 秀樹五郎丸; 真一平田; 勝彦鈴木; 壱吉田
Original assignee: Nippon Telegraph and Telephone Corp; NTT Inc USA
Current assignee: NTT Inc; NTT Inc USA
Priority date: 2002-01-10
Filing date: 2002-01-10
Publication date: 2007-02-28
Anticipated expiration: 2022-01-10
Also published as: JP2003208584A

Description

【０００１】
【発明の属する技術分野】
本発明は、ＩＣカードに対する或る主体のコマンド実行権限を他の主体に譲渡するコマンド実行権限譲渡方法及びシステムに関するものである。
【０００２】
【従来の技術】
近年、公共、金融、通信、交通、医療の分野、そしてインターネット上の電子商取引等において、セキュリティ上安全で大きな記憶容量を有するＩＣカードの利用が広まりつつある。このようなオンラインのＩＣカードシステムでは、カード発行者、サービス提供者がネットワークを介してＩＣカードのコマンドを実行したり、カード発行者が他の主体にカード運用を委託するようなことが想定される。従来技術、例えばＩＳＯ７８１６で規定されるコマンドにおいて上述したような各主体のＩＣカードに対するコマンド実行（オペレーション）制御は、予めカードに各主体がそれぞれ設定した権限設定に応じて行われていた。例えば、予めカードにおける記憶部のファイルに各主体へのアクセス権と鍵を設定しておき、鍵の認証が済んだ主体であれば、その主体に対してだけアクセス権に応じてＩＣカードに対するコマンド実行を許可するようにしていた。そのため、コマンドの実行を行う主体はＩＣカードの発行時に決定され、且つ予めＩＣカードに登録されているので、カードの発行後にコマンド実行主体を動的に変更したり、他の主体に運用作業を委託することができなかった。
【０００３】
【発明が解決しようとする課題】
本発明の目的は、ＩＣカードに対するコマンドの実行権限を所有している或る主体から他の主体へコマンドの実行権限を安全に譲渡する方法及びシステムを提供することにある。
【０００４】
【課題を解決するための手段】
本発明は、ＩＣカードに対する或る主体のコマンド実行権限を他の主体に譲渡するにあたり、コマンドの実行権限を有している権限主体が、権限譲渡先主体に実行を許可しようとする特定コマンド種別に応じてコマンド識別情報を生成し、権限譲渡先主体のＩＤ、権限主体のＩＤ、コマンド識別情報に証明情報を付与したコマンド実行許可証を発行して、ＩＣカードは該実行許可証に記載されている譲渡先主体のみがＩＣカードに対する特定種別のコマンドの実行を可能とすることを特徴とするコマンド実行権限譲渡方法及びシステムにある。
【０００５】
本発明はさらに、コマンド実行前に、権限譲渡先主体が権限主体により発行された上記実行許可証を受信し、検証してからＩＣカードに送信し、ＩＣカードは権限譲渡先主体を認証し、認証した権限譲渡先主体のＩＤを保持し、権限譲渡先主体から受信した実行許可証を検証し、実行許可証に記載されている権限譲渡先主体のＩＤと認証した権限譲渡先主体のＩＤが一致する場合に実行許可証に記載されているコマンド識別情報を保持し、権限譲渡先実行主体から送信されてくるコマンドと実行許可証に記載されているコマンド識別情報を検証し、検証が正しければコマンドを実行することを特徴とするコマンド実行権限譲渡方法及びシステムにある。
【０００６】
本発明はさらに、コマンド実行前の認証時に、ＩＣカードが権限譲渡先主体を認証するだけではなく、該権限譲渡先主体も該ＩＣカードを認証することにより相互認証を行うことを特徴とするコマンド実行権限譲渡方法およびシステムにある。
【０００７】
本発明の好適例では、前記識別情報を実行コマンドのハッシュ値とする。
【０００８】
本発明の好適例では、前記コマンド識別情報を実行コマンドのＣＬＡＳＳバイトおよび命令バイトとする。
【０００９】
本発明の好適例では、前記コマンド識別情報をＩＳＯ７８１６−４で規定されているＡＰＤＵコマンドの実行コマンドのＣＬＡＳＳバイト及び命令バイト、パラメータ１、パラメータ２とする。
【００１０】
本発明の好適例では、前記実行許可証にＩＣカードが生成した乱数を埋め込み、前記譲渡先主体が前記特定コマンドを一度だけ実行可能とする。
【００１１】
本発明の好適例では、前記証明情報を付与する鍵を公開鍵暗号方式における秘密鍵とする。
【００１２】
本発明の好適例では、前記ＩＣカードが前記実行許可証を確認する際に、該ＩＣカードに格納されている前記権限主体の公開鍵暗号方式における公開鍵を使用するものとする。
【００１３】
本発明の好適例では、前記実行許可証に該ＩＣカードの識別情報を含むものととする。
【００１４】
本発明はさらに、前記コマンド実行権限譲渡方法及びシステムにおいて、前記実行許可証にＩＣカードを含むグループの識別情報を含むことを特徴とするコマンド実行権限譲渡方法及びシステムにある。
【００１５】
本発明はさらに、前記コマンド実行権限譲渡方法及びシステムにおいて、コマンド実行前の認証時に、ＩＣカードの権限譲渡先主体を認証だけではなく、該権限譲渡先主体も該ＩＣカードを認証することで相互認証を行うことを特徴とするコマンド実行権限譲渡方法及びシステムにある。
【００１６】
【発明の実施の形態】
以下、本発明を添付の図面を参照して具体的に説明する。
【００１７】
図１は、本発明に係るコマンド実行権限譲渡システムの基本構成図であって、１は記憶部１０及びカード管理部１１を具えているＩＣカードである。２は、例えば銀行のような、予め発行したカードの所有権を保持・管理したり、追加のアプリケーションのダウンロードを許可したり、アプリケーションの使用禁止状態を解除したりするコマンドの実行権限を所有している権限主体装置であり、３は権限主体装置２が所有している上述したような権限を委託されて、その権限を実行する実行主体装置（権限譲渡先主体装置）であり、このシステムによれば、権限主体装置２は実行主体装置３に対してＩＣカード１の特定のコマンドの実行を許可する実行許可証を発行し、実行主体装置３はこの実行許可証に記載されているＩＣカード１の特定のコマンドを実行することができる。これらの装置は通常コンピュータを用いる情報処理端末であり、これらの装置間は、データのやり取りが行える任意の手段、例えばインターネット等の通信回線を介して接続される。図には、ＩＣカード１、権限主体装置２および実行主体装置３が一つづつしか示されていないが、実際には多数接続されていること明らかである。
【００１８】
【実施例】
〔実施例１〕
この実施例は、発行済みＩＣカードのコマンド実行権限を持つ権限主体装置２が、権限委託先である任意の実行主体装置３に対して特定のコマンドの実行を許可する実行許可証を発行し、この実行許可証に記載されている実行主体装置３のみが特定のコマンドの実行を可能とするものであり、その処理手順を図２を参照して以下に説明する。
【００１９】
まず、実行主体装置３は、ＩＣカード１のデータ記憶部１０からカードＩＤを受け取って、ＩＣカード１が権限主体装置２で作成されたものであることの正当性を検証する。ＩＣカード１が正当なものであれば、実行主体装置３はこのカードＩＤと、自分のＩＤである実行主体ＩＤと、この実行主体装置３が要求する、委託されて実行しようとする実行コマンドの種別（例えば、追加しようとするアプリケーションや、ロック解除）とを権限主体装置２へ送信する。
【００２０】
権限主体装置２は、実行主体装置３から送信されたカードＩＤ、実行主体ＩＤを検証し、この検証結果が正しければ、実行コマンドの種別に応じてコマンド識別情報を生成し、実行主体ＩＤ、権限主体装置２のＩＤである権限主体ＩＤ、コマンド識別情報に、権限主体装置２の鍵で作成した証明情報を付与して実行許可証を発行し、この実行許可証を実行主体装置３へ送信する。証明情報を付与する鍵は、例えば公開鍵暗号方式における秘密鍵とする。
【００２１】
実行主体装置３は、権限主体装置２から送信された実行許可証を権限主体装置２の鍵で検証する。この検証結果が正しければ、次に実行主体装置３とＩＣカード１のカード管理部１１との間で相互認証してから、認証を行った実行主体ＩＤをカードの記憶部１０に格納するとともに、権限主体装置２からの実行許可証をカード管理部１１に格納する。次いで、ＩＣカード１は、カード管理部１１に格納した実行許可証を、例えばカード発行時に記憶部１０に格納された権限主体検証鍵で検証し、さらに記憶部１０に記憶してある認証を行った実行主体ＩＤと実行許可証のＩＤをチェックし、これらの一致が確認された場合に、実行許可証のコマンド識別情報をカードの記憶部１０に格納するとともに、レスポンスを実行主体装置３へ送信する。
【００２２】
その後は、ＩＣカード１は、実行主体装置３からコマンドが送信されたときに、ＩＣカード１の記憶部１０に格納されたコマンド識別情報と、送信されたコマンドを検証し、これらの一致が確認された場合に、実行主体装置３にコマンドの実行権利があると判断して、コマンドを実行させる。コマンドの実行が終了したら、その旨のレスポンスを実行主体装置３へ返送するとともに、記憶部１０に格納されたコマンド識別情報を消去する。
【００２３】
〔実施例２〕
この実施例では、実行許可証にＩＣカードが生成した乱数を埋め込み、ＩＣカードの実行権限を持つ権限主体装置２がコマンドの実行権限を委託した実行主体装置３によるコマンドの実行を一度だけに限定するものであり、その処理手順を図３を参照して以下に説明する。
【００２４】
まず、実行主体装置３は、ＩＣカード１のデータ記憶部１０からのカードＩＤと、カード管理部１１にて生成され、記憶部１０に格納されている乱数とを受け取って、ＩＣカード１が権限主体装置２で作成されたものであることの正当性を検証してから、このカードＩＤと、乱数と、自分のＩＤである実行主体ＩＤと、この実行主体装置３が要求する、委託されて実行しようとする実行コマンドの種別を権限主体装置２へ送信する。
【００２５】
権限主体装置２は、実行主体装置３から送信されたカードＩＤ、実行主体ＩＤを検証し、この検証結果が正しければ、実行コマンドの種別に応じてコマンド識別情報を作成し、乱数、実行主体ＩＤ、権限主体装置２のＩＤである権限主体ＩＤ、コマンド識別情報に権限主体装置２の鍵で証明情報を付与した実行許可証を作成し、この実行許可証を実行主体装置３へ送信する。証明情報を付与する鍵は、例えば公開鍵暗号方式における秘密鍵とする。
【００２６】
実行主体装置３は、権限主体装置２から送信された実行許可証を権限主体装置２の鍵で検証する。この検証結果が正しければ、実行主体装置３とＩＣカード１のカード管理部１１との間で相互認証し、ＩＣカード１は認証を行った実行主体ＩＤをカードの記憶部１０に格納するとともに、権限主体装置２からの実行許可証をカード管理部１１に格納する。次いで、ＩＣカード１はカード管理部１１に格納した実行許可証を、例えばカード発行時に記憶部１０に格納された権限主体検証鍵で検証し、さらに記憶部１０に記憶してある認証を行った実行主体ＩＤと実行許可証のＩＤをチェックし、記憶部１０に記録されている乱数と実行許可証に付与されている乱数のチェックもして、これらの一致が確認された場合に、実行主体装置３にコマンドの実行権利があると判断して、乱数を消去してから実行許可証のコマンド識別情報をカードの記憶部１０に格納するとともに、レスポンスを実行主体装置３へ送信する。
【００２７】
その後は、ＩＣカード１は、実行主体装置３からコマンドが送信されたときに、ＩＣカード１の記憶部１０に格納されたコマンド識別情報と、実行主体装置３から送信されたコマンドを検証し、これらの一致が確認された場合に、コマンドを実行させる。コマンドの実行が終了したら、その旨のレスポンスを実行主体装置３へ返送するとともに、記憶部１０に格納されたコマンド識別情報を消去する。
【００２８】
このように、この実施例では、実行許可証に埋め込まれた乱数がＩＣカードの記憶部１０に記憶された乱数と一致しないと実行許可は与えらず、記憶部１０の乱数は実行許可証のコマンド識別情報がＩＣカードに格納される時に消去されるため、実行主体装置３は実行許可証を一度しか使用できない。
【００２９】
〔実施例３〕
この実施例は、ＩＣカードのコマンド実行権限を持つ権限主体装置２が、この権限主体装置２の実行権限の一部の委託実行を所望する任意の実行主体装置に対して、その実行主体装置のＩＤ及び実行主体装置の要求する特定のコマンド識別情報をＩＣカードへ登録し、この登録後に実行主体装置の認証を行い、登録された実行主体装置であれば、コマンド識別情報で登録済みのコマンドの実行を可能とするものであり、その処理手順を図４を参照して以下に説明する。
【００３０】
まず、権限主体装置２のコマンド実行権限の一部の委託実行を要求する実行主体装置３は、ＩＣカード１のデータ記憶部１０からのカードＩＤを受け取って、ＩＣカード１が権限主体装置２で作成されたものであることの正当性を検証する。ＩＣカード１が正当なものであれば、実行主体装置３はカードＩＤと、実行主体装置３のＩＤである実行主体ＩＤと、この実行主体装置３が要求する特定コマンドの実行権限に対するコマンド登録依頼を権限主体装置２へ送信する。
【００３１】
権限主体装置２は、実行主体装置３から送信されたカードＩＤ、実行主体ＩＤを検証し、この検証結果が正しければ、コマンド登録依頼に応じてコマンド識別情報を生成し、実行主体ＩＤ、権限主体装置２の権限主体ＩＤ、コマンド識別情報に権限主体装置２の鍵で作成した証明情報を付与した実行許可証を作成する。証明情報を付与する鍵は、例えば公開鍵暗号方式における秘密鍵とする。
【００３２】
次に、権限主体装置２とＩＣカード１のカード管理部１１との間で、例えばカード発行時にＩＣカード１の記憶部１０に格納された権限主体検証鍵で、権限主体装置２とＩＣカード１との相互認証を行なう。この相互認証が得られたら、ＩＣカード１は認証を行なった権限主体ＩＤをカードの記憶部１０に格納するとともに、権限主体装置２は実行許可証をＩＣカード１のカード管理部１１へ送信する。次いで、ＩＣカード１は、カード管理部１１にて、実行許可証をカード発行時に記憶部１０に格納された権限主体検証鍵で検証し、さらに記憶部１０に記憶してある認証を行った権限主体ＩＤと実行許可証の権限主体ＩＤをチェックし、これらの一致が確認された場合に、実行許可証のコマンド識別情報と実行主体ＩＤをカードの記憶部１０に登録するとともに、レスポンスを権限主体装置２へ送信する。
【００３３】
その後は、ＩＣカード１の管理部１１と実行主体装置３との間で相互認証を行ない、認証を行なった実行主体ＩＤをＩＣカード１の記憶部１０に格納する。ＩＣカード１は、実行主体装置３からコマンドが送信されたとき、カード管理部１１にて認証を行った実行主体ＩＤと送信された実行主体ＩＤとを検証するとともに、実行主体装置３から送信されたコマンドを登録されているコマンド識別情報と検証し、これらが一致が確認された場合に、コマンドを実行させる。コマンドの実行が終了したら、その旨のレスボンスを実行主体装置３へ返却する。
【００３４】
以上、本発明の３つの実施例の処理手順を説明したが、これらの処理手順はＩＣカード、権限主体装置及び実行主体装置に含まれるコンピュータにより実行され、本発明はこれらの実施例の処理手順を実行させるためのコンピュータプログラムおよび該コンピュータプログラムを記録した記録媒体も本発明の範囲に含むものである。
【００３５】
尚、これらの実施例において、前記コマンド識別情報は実行コマンドのハッシュ値とすることができ、あるいは、実行コマンドのＣＬＡＳＳバイトおよび命令バイトとすることができ、あるいは、ＩＳＯ７８１６−４で規定されているＡＰＤＵコマンドの実行コマンドのＣＬＡＳＳバイトおよび命令バイト、パラメータ１、パラメータ２とすることができる。
【００３６】
また、前記実行許可証にＩＣカードの識別情報を含ませ、実行主体装置は実行許可証に記載されているＩＣカードのみに対してコマンドを実行可能とすることもできる。
【００３７】
更にまた、前記実行許可証にＩＣカードを含むグループの識別情報を含ませ、実行主体装置は実行許可証に記載されているグループのＩＣカードのみに対してコマンドを実行可能とすることもできる。
【００３８】
【発明の効果】
以上説明したように、本発明によれば、実行主体の動的変更、他の主体への作業委託をＩＣカード利用者のパスワードを知られることなく、安全且つ簡単に行うことができる。
【図面の簡単な説明】
【図１】本発明に係わるコマンド実行権限譲渡システムの基本構成を示す図である。
【図２】本発明に係わるコマンド実行権限譲渡方法の第１実施例の処理手順を示す図である。
【図３】本発明に係わるコマンド実行権限譲渡方法の第２実施例の処理手順を示す図である。
【図４】本発明に係わるコマンド実行権限譲渡方法の第３実施例の処理手順を示す図である。
【符号の説明】
１ＩＣカード
２権限主体装置
３実行主体装置（権限譲渡先装置）
１０記憶部
１１カード管理部[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a command execution authority transfer method and system for transferring a command execution authority of a certain subject to an IC card to another subject.
[0002]
[Prior art]
In recent years, in the fields of public, finance, communication, transportation, medical care, electronic commerce on the Internet, and the like, the use of IC cards having a large security capacity and security is increasing. In such an online IC card system, it is assumed that a card issuer or a service provider executes an IC card command via a network, or the card issuer entrusts card operation to another entity. The The command execution (operation) control for the IC card of each subject as described above in the prior art, for example, a command defined by ISO7816, is performed according to the authority setting previously set by each subject on the card. For example, if an access right to each subject and a key are set in advance in a storage unit file in the card and the key has been authenticated, a command for the IC card can be sent only to that subject according to the access right It was supposed to allow execution. Therefore, the entity that executes the command is determined when the IC card is issued and is registered in advance in the IC card. Therefore, the command execution entity can be dynamically changed after the card is issued, Could not be entrusted.
[0003]
[Problems to be solved by the invention]
An object of the present invention is to provide a method and system for safely transferring command execution authority from a certain entity having the command execution authority to the IC card to another entity.
[0004]
[Means for Solving the Problems]
The present invention relates to a specific command type to which an authority subject having command execution authority is permitted to execute an authority transfer destination entity when transferring the command execution authority of an entity to an IC card to another entity. The command identification information is generated in response to the ID, the authority transferee ID, the authority ID, and the command execution certificate with the certification information added to the command identification information. The IC card is written in the execution certificate. There is a command execution authority transfer method and system in which only a transfer destination entity can execute a specific type of command to an IC card.
[0005]
The present invention further includes, before executing the command, the authority transferee entity receives the execution permit issued by the authority entity, verifies it, and transmits it to the IC card. The IC card authenticates the authority transferee entity, The ID of the authorized authority transfer destination entity is held, the execution permit received from the authority transfer destination entity is verified, and the ID of the authority transfer destination entity described in the execution permit and the authenticated authority transfer destination entity ID are If they match, retain the command identification information described in the execution permit, verify the command sent from the authority transferee execution subject and the command identification information described in the execution permit, and if the verification is correct A command execution authority transfer method and system characterized by executing a command.
[0006]
The present invention is further characterized in that, at the time of authentication before executing a command, the IC card not only authenticates the authority transfer destination entity, but the authority transfer destination entity also performs mutual authentication by authenticating the IC card. There is an execution authority transfer method and system.
[0007]
In a preferred embodiment of the present invention, the identification information is a hash value of an execution command.
[0008]
In a preferred embodiment of the present invention, the command identification information is a CLASS byte and an instruction byte of the execution command.
[0009]
In a preferred embodiment of the present invention, the command identification information is a CLASS byte and an instruction byte of an execution command of an APDU command defined by ISO 7816-4, parameter 1, and parameter 2.
[0010]
In a preferred embodiment of the present invention, a random number generated by an IC card is embedded in the execution permit so that the transferee entity can execute the specific command only once.
[0011]
In a preferred embodiment of the present invention, the key to which the certification information is given is a secret key in the public key cryptosystem.
[0012]
In a preferred embodiment of the present invention, when the IC card confirms the execution permit, the public key in the public key cryptosystem of the authority subject stored in the IC card is used.
[0013]
In a preferred embodiment of the present invention, the IC card identification information is included in the execution permit.
[0014]
The present invention further provides the command execution authority transfer method and system, wherein the execution permit includes identification information of a group including an IC card in the execution permit.
[0015]
The present invention further provides that in the command execution authority transfer method and system, at the time of authentication before command execution, not only the authority transfer destination entity of the IC card is authenticated but also the authority transfer destination entity authenticates the IC card. A command execution authority transfer method and system characterized by performing authentication.
[0016]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.
[0017]
FIG. 1 is a basic configuration diagram of a command execution authority transfer system according to the present invention. Reference numeral 1 denotes an IC card including a storage unit 10 and a card management unit 11. 2 owns the authority to execute commands that hold and manage the ownership of cards issued in advance, such as a bank, permit the downloading of additional applications, and release the use prohibition state of applications. The authority main device 3 is an execution main device (authority transfer destination main device) which is entrusted with the above-mentioned authority owned by the authority main device 2 and executes the authority. Accordingly, the authority subject device 2 issues an execution permit for permitting execution of a specific command of the IC card 1 to the execution subject device 3, and the execution subject device 3 includes the IC card described in the execution permit. One specific command can be executed. These devices are usually information processing terminals using computers, and these devices are connected to each other through any means capable of exchanging data, for example, a communication line such as the Internet. Although only one IC card 1, authority main device 2, and execution main device 3 are shown in the figure, it is clear that a large number of them are actually connected.
[0018]
【Example】
[Example 1]
In this embodiment, the authority subject apparatus 2 having the command execution authority of the issued IC card issues an execution permit that permits execution of a specific command to an arbitrary execution entity apparatus 3 that is the authority entrustee, Only the execution main unit 3 described in the execution permit can execute a specific command, and the processing procedure will be described below with reference to FIG.
[0019]
First, the execution main unit 3 receives the card ID from the data storage unit 10 of the IC card 1 and verifies that the IC card 1 is created by the authority main unit 2. If the IC card 1 is legitimate, the execution subject apparatus 3 includes the card ID, the execution subject ID that is its own ID, and the execution command that is requested by the execution subject apparatus 3 and that is to be executed. The type (for example, an application to be added or unlocking) is transmitted to the authority main device 2.
[0020]
The authority subject device 2 verifies the card ID and the execution subject ID transmitted from the execution subject device 3, and if the verification result is correct, generates the command identification information according to the type of the execution command. The authority subject ID that is the ID of the main device 2 and the command identification information are attached with certification information created with the key of the authority main device 2 to issue an execution permit, and this execution permit is transmitted to the execution main device 3. . The key to which the certification information is given is, for example, a secret key in the public key cryptosystem.
[0021]
The execution subject apparatus 3 verifies the execution permit transmitted from the authority subject apparatus 2 with the key of the authority subject apparatus 2. If this verification result is correct, the execution subject apparatus 3 and the card management unit 11 of the IC card 1 perform mutual authentication, and then store the authenticated execution subject ID in the storage unit 10 of the card. The execution permit from the authority main device 2 is stored in the card management unit 11. Next, the IC card 1 verifies the execution permit stored in the card management unit 11 with, for example, the authority subject verification key stored in the storage unit 10 when the card is issued, and further performs authentication stored in the storage unit 10. The execution subject ID and the execution permit ID are checked, and if they match, the command identification information of the execution permit is stored in the storage unit 10 of the card and a response is transmitted to the execution subject apparatus 3 To do.
[0022]
Thereafter, when the command is transmitted from the execution main unit 3, the IC card 1 verifies the command identification information stored in the storage unit 10 of the IC card 1 and the transmitted command, and confirms a match between them. If so, it is determined that the execution subject apparatus 3 has the right to execute the command, and the command is executed. When the execution of the command is completed, a response to that effect is returned to the execution main unit 3 and the command identification information stored in the storage unit 10 is deleted.
[0023]
[Example 2]
In this embodiment, a random number generated by the IC card is embedded in the execution permit, and the execution of the command by the execution subject apparatus 3 to which the authority subject apparatus 2 having the authority to execute the IC card has delegated the command execution authority is limited to one time. The processing procedure will be described below with reference to FIG.
[0024]
First, the execution main unit 3 receives the card ID from the data storage unit 10 of the IC card 1 and the random number generated by the card management unit 11 and stored in the storage unit 10, and the IC card 1 has authority. After verifying the validity of being created by the main device 2, the card ID, a random number, the execution subject ID that is its own ID, and the execution subject device 3 requesting the entrusted The type of execution command to be executed is transmitted to the authority subject device 2.
[0025]
The authority subject device 2 verifies the card ID and the execution subject ID transmitted from the execution subject device 3, and if the verification result is correct, creates the command identification information according to the type of the execution command, and generates the random number, the execution subject ID. Then, an execution permit in which certification information is added to the authority subject ID and command identification information by the key of the authority subject device 2 is created, and this execution permit is transmitted to the execution subject device 3. The key to which the certification information is given is, for example, a secret key in the public key cryptosystem.
[0026]
The execution subject apparatus 3 verifies the execution permit transmitted from the authority subject apparatus 2 with the key of the authority subject apparatus 2. If the verification result is correct, mutual authentication is performed between the execution subject apparatus 3 and the card management unit 11 of the IC card 1, and the IC card 1 stores the authenticated execution subject ID in the storage unit 10 of the card, The execution permit from the authority main device 2 is stored in the card management unit 11. Next, the IC card 1 verifies the execution permit stored in the card management unit 11 with, for example, the authority subject verification key stored in the storage unit 10 when the card is issued, and further performs the authentication stored in the storage unit 10. When the execution subject ID and the execution permit ID are checked, the random number recorded in the storage unit 10 and the random number assigned to the execution permit are also checked, and the match is confirmed, the execution subject apparatus 3 determines that it has the right to execute the command, erases the random number, stores the command identification information of the execution permit in the storage unit 10 of the card, and transmits a response to the execution main unit 3.
[0027]
Thereafter, the IC card 1 verifies the command identification information stored in the storage unit 10 of the IC card 1 and the command transmitted from the execution subject device 3 when the command is transmitted from the execution subject device 3. When these matches are confirmed, the command is executed. When the execution of the command is completed, a response to that effect is returned to the execution main unit 3 and the command identification information stored in the storage unit 10 is deleted.
[0028]
Thus, in this embodiment, if the random number embedded in the execution permit does not match the random number stored in the storage unit 10 of the IC card, the execution permission is not given, and the random number in the storage unit 10 Since the command identification information is deleted when it is stored in the IC card, the execution subject apparatus 3 can use the execution permit only once.
[0029]
Example 3
In this embodiment, the authority subject device 2 having the authority to execute an IC card command performs the execution subject device with respect to any execution subject device desiring to execute a part of the execution authority of the authority subject device 2. The ID and the specific command identification information requested by the execution subject apparatus are registered in the IC card. After this registration, the execution subject apparatus is authenticated. If the execution subject apparatus is registered, the command identification information The processing procedure is described below with reference to FIG.
[0030]
First, the execution subject apparatus 3 that requests the consignment execution of a part of the command execution authority of the authority subject apparatus 2 receives the card ID from the data storage unit 10 of the IC card 1, and the IC card 1 is the authority subject apparatus 2. Validate that it was created. If the IC card 1 is valid, the execution subject apparatus 3 requests a command registration for the card ID, the execution subject ID that is the ID of the execution subject apparatus 3, and the execution authority of the specific command requested by the execution subject apparatus 3 Is transmitted to the authority main device 2.
[0031]
The authority subject device 2 verifies the card ID and the execution subject ID transmitted from the execution subject device 3, and if the verification result is correct, generates the command identification information in response to the command registration request, and executes the execution subject ID and the authority subject. An execution permit is created by adding the certification information created with the key of the authority subject device 2 to the authority subject ID and command identification information of the device 2. The key to which the certification information is given is, for example, a secret key in the public key cryptosystem.
[0032]
Next, between the authority subject device 2 and the card management unit 11 of the IC card 1, for example, the authority subject device 2 and the IC card 1 with the authority subject verification key stored in the storage unit 10 of the IC card 1 when the card is issued. Mutual authentication with is performed. When the mutual authentication is obtained, the IC card 1 stores the authenticated authority subject ID in the card storage unit 10 and the authority subject device 2 transmits an execution permit to the card management unit 11 of the IC card 1. . Next, in the IC card 1, the card management unit 11 verifies the execution permit with the authority subject verification key stored in the storage unit 10 when the card is issued, and further performs the authentication stored in the storage unit 10. When the subject ID and the authority subject ID of the execution permit are checked and the match is confirmed, the command identification information and the execution subject ID of the execution permit are registered in the storage unit 10 of the card, and the response is sent to the authority subject. Transmit to device 2.
[0033]
Thereafter, mutual authentication is performed between the management unit 11 of the IC card 1 and the execution subject apparatus 3, and the execution subject ID that has been authenticated is stored in the storage unit 10 of the IC card 1. When the command is transmitted from the execution subject apparatus 3, the IC card 1 verifies the execution subject ID authenticated by the card management unit 11 and the transmitted execution subject ID, and is transmitted from the execution subject apparatus 3. The command is verified with the registered command identification information, and if they match, the command is executed. When the execution of the command is completed, a response to that effect is returned to the execution main unit 3.
[0034]
The processing procedures of the three embodiments of the present invention have been described above. These processing procedures are executed by the IC card, the authority main device, and the computer included in the execution main device, and the present invention is a processing procedure of these embodiments. A computer program for executing the above and a recording medium on which the computer program is recorded are also included in the scope of the present invention.
[0035]
In these embodiments, the command identification information can be a hash value of an execution command, or can be a CLASS byte and an instruction byte of the execution command, or are defined in ISO 7816-4. The CLASS byte and instruction byte of the execution command of the APDU command, parameter 1, and parameter 2 can be used.
[0036]
Further, the execution permit may include identification information of the IC card, so that the execution subject apparatus can execute a command only on the IC card described in the execution permit.
[0037]
Furthermore, the execution permit may include identification information of the group including the IC card, so that the execution subject apparatus can execute the command only for the IC card of the group described in the execution permit.
[0038]
【The invention's effect】
As described above, according to the present invention, the dynamic change of the execution subject and the work entrustment to another subject can be performed safely and easily without knowing the password of the IC card user.
[Brief description of the drawings]
FIG. 1 is a diagram showing a basic configuration of a command execution authority transfer system according to the present invention.
FIG. 2 is a diagram showing a processing procedure of a first embodiment of a command execution authority transfer method according to the present invention.
FIG. 3 is a diagram showing a processing procedure of a second embodiment of the command execution authority transfer method according to the present invention.
FIG. 4 is a diagram showing a processing procedure of a third embodiment of the command execution authority transfer method according to the present invention.
[Explanation of symbols]
1 IC card 2 authority subject device 3 execution subject device (authority transfer destination device)
10 storage unit 11 card management unit

Claims

A method of transferring a command execution authority of a subject to an IC card to another subject,
An IC card, an information processing terminal of an authority subject having a function of issuing a command execution authorization as an authority to execute a command to the IC card, and an authority transfer destination entity that desires to transfer the command execution authority to the authority entity Connect the information processing terminal to the network,
The information processing terminal of the authorization entity, when a request for a specific command to be executed is the transferee mainly from the information processing terminal of the authority transfer destination principal via the network to receive along with ID of the authorized transferee entity, the request In response to the request, the command identification information is generated according to the type of the specific command requested, and the ID of the authority transfer destination entity, the ID of the authority entity, and the certification information encrypted with the key of the authority entity are added to the command identification information. Issued an execution permit, and transmits the execution permit to the IC card via the network,
The IC card, the certification information given to the execution permit received and verified by decrypting the key authority entity, holds this execution permit in the storage unit is correct, the retained execution permit A command execution authority transfer method , wherein only the information transfer apparatus whose authority is transferred is described to permit the execution of the specific command .

Instead of directly sending the execution permit to the IC card, the authority-based information processing terminal sends the authority transfer-destination information processing terminal via the network. 2. The command execution authority transfer method according to claim 1, wherein the received execution permit is verified with the key of the authority subject, and if it is correct, it is sent to the IC card via the network.

Before the authoritative information processing terminal transmits the execution permit to the IC card, mutual authentication is performed between the authoritative information processing terminal and the IC card,
When mutual authentication is obtained, the IC card holds the ID of the authenticated authority subject in the storage unit, receives the execution permit transmitted from the information processing terminal of the authority entity, and receives the received execution permit. The granted certification information is decrypted and verified with the authority subject verification key held in advance, and if it is correct, the authority subject ID written in the execution permit and the authority subject ID held in the storage unit are collated. 2. The command execution authority transfer method according to claim 1, wherein in the case of coincidence, the ID and command identification information of the authority transfer destination entity described in the verified execution permit are held in the storage unit.

Before the information processing terminal of the authority transferee entity transmits the received execution permit to the IC card, mutual authentication is performed between the information transfer terminal of the authority transferee entity and the IC card,
When mutual authentication is obtained, the IC card stores the ID of the authorized authority transferee entity in the storage unit, receives the permit transmitted from the information processing terminal of the authority transferee entity, and receives the received execution The verification information given to the permit is decrypted and verified with the authority subject verification key held in advance , and if correct, the ID of the authority transfer destination entity described in the execution permit and the storage held in the storage unit The ID of the authority transfer destination entity and the command identification information described in the verified execution permit are stored in the storage unit when the authority transfer destination entity ID is collated and the IDs match. The command execution authority transfer method described.

After holding the command identification information, the IC card collates the command transmitted from the information transfer terminal of the authority transfer destination entity with the command identification information described in the execution permit, and if they match, the specific command 5. The command execution authority transfer method according to claim 3, wherein:

6. The command identification information according to claim 1, wherein the command identification information is a hash value of an execution command, a part of a command header of a command, or all of a command header of a command. The command execution authority transfer method described.

A random number generated and held by the IC card is assigned to the execution permit, and the IC card compares the received random number with the execution permit with the random number held in the IC card, and matches If it is, to erase the random number held, and the held command identification information of the execution permit, claim, characterized in that erasing the command identification information after command execution 2,4,5 or 6. The command execution authority transfer method according to 6.

6. The command execution authority transfer method according to claim 1, wherein a key for giving certification information to the execution permit is a secret key in a public key cryptosystem.

9. The command execution authority transfer according to claim 8, wherein when the IC card verifies the execution permit, a public key in the public key cryptosystem of the authority subject held in the IC card is used. Method.

3. The command execution authority transfer method according to claim 1, wherein identification information of an IC card is included in the execution permit.

3. The command execution authority transfer method according to claim 1, wherein the execution permit includes group identification information which is an identifier for identifying a plurality of IC cards as a certain group.

A system for transferring the command execution authority of a subject to an IC card to another subject,
An IC card connected to each other via a network, an information processing terminal of an authority subject having a function of issuing a command execution permit as an authority to execute a command to the IC card, and command execution authority to the authority entity It has an information processing terminal that is the subject of the transferee authority who wants to transfer,
The information processing terminal of the authorization entity receives the request for the specific command to be executed authorized transferee mainly from the information processing terminal of the authority transfer destination principal via the network together with ID of the authorized transferee entity, to the request In response, the command identification information is generated according to the type of the requested specific command, and the authority transfer destination entity ID, the authority entity ID, and the certification information encrypted with the authority entity key are added to the command identification information. Means for issuing an execution permit, and means for transmitting the execution permit to the IC card via a network,
The IC card, a certificate that is given to the execution permit received and verified by decrypting the key authority entity, holds this execution permit in the storage unit is correct, according to the retained execution permit A command execution authority transfer system comprising means for permitting execution of the specific command only to an information transfer apparatus that is a main authority transfer destination.

The information processing terminal of the authority subject includes means for sending the execution permit to the information processing terminal of the authority transfer destination entity via a network instead of directly sending the execution permit to the IC card. 13. The command execution authority transfer system according to claim 12, further comprising means for verifying the received execution permit with a key of the authority subject and sending it to the IC card via a network if it is correct.

The authority-based information processing terminal and the IC card are configured to perform mutual authentication before the authority-based information processing terminal transmits the execution permit to the IC card;
When mutual authentication is obtained, the IC card receives the execution permission transmitted from the information processing terminal of the authority subject and the means for holding the ID of the authorized authority subject in the storage unit, and the received execution permission The certification information given to the certificate is decrypted and verified with the authority subject verification key held in advance , and if correct, the authority subject ID described in the execution permit and the authority subject ID held in the storage unit are 13. The method according to claim 12, further comprising means for holding, in a storage unit, the ID of the authority transfer destination entity described in the verified execution permit and the command identification information if they match. Command execution authority transfer system.

The information processing terminal of the authority transferee entity and the IC card are means for performing mutual authentication before the information transfer terminal of the authority transferee entity transmits the received execution permit to the IC card;
When mutual authentication is obtained, the IC card receives means for holding the ID of the authorized authority transferee entity in the storage unit, and the execution permit transmitted from the information processing terminal of the authority transferee entity, The authentication information given to the received execution permit is decrypted and verified with the authority subject verification key held in advance , and if correct, the ID of the authority transfer destination entity described in the execution permit and the storage unit The ID of the authority transfer destination entity held in the ID and the command identification information stored in the verified execution permit are stored in the storage unit when the authority transfer destination entity ID is collated. The command execution authority transfer system according to claim 13.

After holding the command identification information, the IC card collates the command transmitted from the information transfer terminal of the authority transfer destination entity with the command identification information described in the execution permit, and if they match, the specific command 16. The command execution authority transfer system according to claim 14 or 15, further comprising means for executing the command.

A function of issuing a command execution permission as a command execution authority for an IC card connected to each other via a network, and a method for transferring a command execution authority of an entity to an IC card to another entity A computer program that is executed between an information processing terminal of an authority subject having the above and an information processing terminal of an authority transfer destination entity that desires to transfer command execution authority to the authority subject,
When a request for a specific command that the authority transferee entity wants to execute is received together with the authority transferee entity ID from the information transfer terminal of the authority transferee entity to the information processing terminal of the authority entity via the network, in response to this request , issued to generate a command identification information in accordance with the type of the requested command, ID of authority transferee entity, ID of authority entities, the execution permit was granted a certificate information that you created in the key of authority subject to the command identification information And sending the execution permit to the IC card via a network,
The IC card is allowed to decrypt and verify the certification information given to the received execution permit with the authority subject's key, and if it is correct, the execution permit is held in the storage unit and described in the held execution permit A computer program that causes only the information transfer apparatus that is an authority transferee subject to be authorized to execute the specific command .

Instead of directly sending the execution permit to the IC card, the information processing terminal of the authority subject executes the step of sending the information to the information processing terminal of the authority assignment destination via the network. 18. The computer program according to claim 17, further comprising: causing the information processing terminal to verify the received execution permit with an authority subject key and, if correct, to send to the IC card via a network.

Allowing the authoritative information processing terminal and the IC card to perform mutual authentication before the authoritative information processing terminal transmits the execution permit to the IC card;
When mutual authentication is obtained, the IC card is allowed to store the ID of the authenticated authority subject in the storage unit, receive the execution permit transmitted from the information processing terminal of the authority entity, and grant it to the received execution permit The authentication information stored in advance is decrypted and verified with the authority subject verification key, and if correct, the ID of the authority subject described in the execution permit is collated with the ID of the authority subject held in the storage unit, 18. The computer program product according to claim 17, wherein, if they match, the step of holding the ID of the authority transfer destination entity and the command identification information described in the verified execution permit in a storage unit is executed.

Before the information processing terminal of the authority transfer destination entity and the IC card send the received execution permit to the IC card, the information processing terminal of the authority transfer destination entity performs mutual authentication,
When mutual authentication is obtained, the IC card is allowed to store the ID of the authorized authority subject in the storage unit, receive the execution permit transmitted from the information processing terminal of the authority transfer destination entity, and receive the received execution permission The authentication information given to the certificate is decrypted and verified with the authority subject verification key held in advance, and if it is correct, the ID of the authority transferee entity described in the execution permit and the authority held in the storage unit If the ID of the transferee entity is checked and the IDs match, the step of holding the ID and command identification information of the authority transferee entity described in the verified execution permit is executed. The computer program according to claim 18.

After the command identification information is held in the IC card, the command transmitted from the information processing terminal of the authority transfer destination entity is compared with the command identification information described in the execution permit. The computer program according to claim 19 or 20, wherein the step of executing is executed.

A computer-readable recording medium on which the computer program according to any one of claims 17 to 21 is recorded.