JP4736729B2 - Secure terminal system using IC card and method thereof - Google Patents

Description

  The present invention relates to a method for securing a terminal using an IC card, and more particularly, a system and method for improving the safety of the terminal and preventing unauthorized access to the terminal, data tampering, wiretapping, and the like. About.

  There is a great demand to safely perform various electronic services such as credit settlement and mobile banking using terminals such as mobile phones, PDAs and PCs.

  However, since these devices do not have a tamper-resistant area, there is a risk that the credit card number or password entered by the user will be leaked to a third party or the data may be altered by unauthorized access to the device. was there.

  In order to satisfy the above requirement, a technique for authenticating a terminal using secret information in a secure device inserted into the terminal is known (for example, see Patent Document 1).

  In addition, in order to securely perform communication between the server and the client, a technique for authenticating each other using a public key certificate and signing and encrypting data transmitted and received between the server and the client is known. (For example, refer nonpatent literature 1).

JP 2004-265026 A Alan O. Freier, Philip Karlton, Paul C. Kocher, "The SSL Protocol Version 3.0", [online], November 1996, Netscape Communications Inc., [October 21, 2005 search], Internet <URL: http : //www.netscape.com/eng/ssl3/draft302.txt>

  The prior art is based on the premise that there is only one combination of the terminal and the IC card, and cannot cope with the update of the terminal or the IC card. In addition, terminals (particularly mobile terminals such as mobile phones and PDAs) and IC cards are less powerful than PCs, and in the case of a method using a public key certificate in the prior art, much processing time is required for authentication. There was a problem of becoming.

  The present invention has been made in view of the above circumstances, and can be used when a terminal or an IC card is updated, and even if it is a powerless CPU such as a terminal (particularly a mobile terminal) or an IC card, the processing time And a system that guarantees the safety of communication between the terminal and the IC card.

  Specifically, the flow for performing authentication between the IC card and the terminal is roughly divided into three, and the timing and number of times of executing each flow are changed. The setup process that performs signature verification using a public key that requires a lot of processing time and generation of a common key is executed only once when the combination of the IC card and the terminal is determined. Usually, a common key that does not require much processing time is used. Only the authentication process used is executed. Thereafter, secure communication processing is performed using the session key generated by the authentication processing, and the safety of communication between the IC card and the terminal is ensured. By dividing the processing in this way, the processing time can be greatly reduced. Further, by devising the execution order of each process, it is possible to change the combination of the IC card and the terminal without the user being particularly conscious when updating the IC card or the terminal.

  More specifically, when an IC card is inserted into the terminal, authentication processing is first performed between the two. If a key can be shared in advance between the two, secure communication is performed between the two using a session key generated during the authentication process. If it is determined that the key cannot be shared in advance between the two, then a setup process is performed, and it is confirmed whether or not the two have previously obtained certification from the certification authority apparatus. If it is determined that the certification has been obtained, a common key is generated and shared between the two. Then, the authentication process is performed again, and the secure communication process is performed using the session key generated during the authentication process. By using such a processing flow, it is possible to easily cope with the update of the IC card or the terminal. In the secure communication process, a signature is added to a command transmitted from the terminal to the IC card and a response transmitted from the IC card to the terminal, and each data is encrypted. This secure communication process improves the safety of communication between the mobile terminal and the secure device.

  That is, the secure terminal system using the IC card according to the present invention includes an IC card, a terminal that is used by inserting the IC card, and an authorization that is used when the IC card and the terminal obtain authorization from an authorized organization device. A terminal, a network to which the authorized terminal is connected, and an authorized institution device that is connected to the network and authorizes the IC card and the terminal. The IC card includes a data transmitting / receiving unit that transmits and receives commands, a command analysis unit that analyzes commands, , A service application unit that executes processing according to a command, a data storage unit that stores data used by the service application unit, an authentication application unit that authenticates a terminal, and a key storage that stores a key used by the authentication application unit Authentication data for storing authentication data used by A terminal holding unit, an IC card access unit that accesses the IC card, a command generation unit that generates a command to be transmitted to the IC card, a data transmission / reception unit that transmits / receives data to / from an authorized terminal, and a service A service providing unit that provides a service to an application, a data storage unit that stores data used by the service providing unit, an authentication data generation unit that authenticates an IC card, and a key used by the authentication data generation unit An authentication data holding unit that stores authentication data used in the authentication data generation unit, and the certified terminal has a data transmission / reception unit that transmits / receives data to / from the terminal, and an IC that accesses the IC card A card access unit and a communication unit for transmitting and receiving data to and from the network. A communication unit that transmits and receives data, an authorization data generation unit that generates data necessary for authorizing an IC card and a terminal, and a key storage unit that stores keys used in the authorization data generation unit This is a feature.

  The IC card may include a plurality of service application units and a data storage unit that stores data used by the plurality of service applications.

  In addition, the terminal may include a plurality of service providing units and a data storage unit that stores data used by the plurality of service providing units.

  In addition, the processing performed between the IC card and the terminal is shared by the authentication application unit and the authentication data generation unit by checking the presence or absence of the certification acquired from the certification authority device and sharing the key with each other. Three processes: mutual authentication using keys, sharing session keys, and secure communication processing for signing and encrypting commands and responses sent and received using session keys shared in the authentication processes And the processing time required for the entire system may be shortened by changing the timing and number of times each process is executed.

  The authentication application unit executes an authentication process when the IC card is inserted into the terminal. If the authentication process is successful, the authentication application unit shifts to a secure communication process. If the authentication process fails, the authentication application unit shifts to a setup process. A configuration may be provided in which the authentication process is performed again when the setup process is completed, and the process proceeds to the secure communication process.

  In addition, when communication is performed between the service application unit provided in the IC card and the service providing unit provided in the terminal, the authentication application unit serving as the communication transmission side or the data communicated by the authentication data generation unit is signed. The authentication application unit or the authentication data generation unit on the communication receiving side may perform signature verification and decryption.

  According to this system, communication between the IC card and the terminal is secure, and the combination can be changed without bothering the user even when the IC card or the terminal is updated. Moreover, it becomes possible to reduce a user's waiting time by devising a processing procedure.

  An embodiment of the present invention will be described. Note that the present invention is not limited thereby.

  FIG. 1 is a configuration diagram of a secure terminal system using an IC card to which an embodiment of the present invention is applied.

  As illustrated in FIG. 1, the secure terminal system using the IC card of this embodiment is used when the IC card 10, the terminal 20 that accesses the IC card 10, and the IC card 10 and the terminal 20 are authorized. An authorized terminal 30, a network 40, and an authorized organization device 50 that authorizes the IC card 10 and the terminal 20 are connected to each other.

The IC card 10 receives a command from the outside, performs processing according to the content of the received command, and returns a processing result. The IC card 10 receives a command and transmits a processing result, a data transmission / reception unit 101, a command analysis unit 102 that analyzes the command, and service application units 103 _{1 to} 103 _n that execute processing according to the command (hereinafter referred to as 103). and also) to show, the service application unit ₁₀₃ 1 to 103 data storage previously stores the data used in _n unit ₁₀₄ 1 -104 _n (hereinafter, the also) be referred to as 104, of the terminal 20 An authentication application unit 105 that performs authentication, a key storage unit 106 that stores a key for the authentication application unit 105 to perform signature and encryption, and data that is required when the authentication application 105 performs authentication And an authentication data holding unit 107 to be held.

The terminal 20 is used when authorizing the terminal 20, an IC card access unit 201 that transmits / receives commands to / from the IC card 10, a command generation unit 202 that generates a command to be transmitted to the IC card 10, and the terminal 20. Data transmission / reception unit 203, service providing units 204 _{1 to} 204 _n (hereinafter also referred to as 204) for providing services to the service application 103, and data used by the service providing units 204 _{1 to} 204 _n Data storage units 205 _{1 to} 205 _n (hereinafter also referred to as 205), an authentication data generation unit 206 that generates data for authenticating the IC card 10, and the authentication data generation unit A key storage unit 207 which stores a key for signing and encrypting 206, and the authentication data generating unit 2 6 comprises an authentication data hold unit 208 which holds the data needed to perform the authentication.

  The authorized terminal 30 includes a data transmission / reception unit 301 that transmits / receives data to / from the terminal 20, an IC card access unit 302 that transmits / receives commands to / from the IC card 10, and a communication unit 303 that transmits / receives data to / from the network.

  The authorized institution apparatus 50 includes a communication unit 501 that transmits / receives data to / from a network, an authorized data generation unit 502 that generates data necessary for authorizing the IC card 10 and the terminal 20, and the authorized data generation unit. Includes a key storage unit 503 for storing a key for signing.

  FIG. 2 is a diagram illustrating a hardware configuration of the IC card 10. The IC card 10 is configured by connecting an input / output device 11, a CPU 12, a tamper resistant storage device 13, and a tamper resistant memory 14 through an internal communication line 15 such as a bus. Here, the shape of the IC card is not limited to the shape of a card such as a telephone card. For example, the shape of a memory card such as an MMC or an SD card can be used as long as the hardware includes the above-described components. Also good.

  FIG. 3 is a diagram illustrating a hardware configuration of the terminal 20. In the terminal 20, a storage device 21, an input / output device 22, an IC card input / output device 23, a CPU 24, a memory 25, and a reading device 26 are connected by an internal communication line 28 such as a bus. It is configured to include.

  FIG. 4 is a diagram illustrating a hardware configuration of the authorized terminal 30. In the certified terminal 30, a communication device 31, an input / output device 32, an IC card input / output device 33, a storage device 34, a CPU 35, a memory 36, and a reading device 37 are connected by an internal communication line 39 such as a bus. The storage medium 38 is included. The configuration shown in FIG. 4 is the same in the accreditation engine apparatus 50.

  A processing flow in the secure terminal system using the IC card of this embodiment will be described. The processing flow described below is implemented on each device and IC card that constitute a secure terminal system using an IC card by loading a program stored in the storage device of each device into the memory and executing it by the CPU. It is executed by each processing unit. Each program may be stored in a storage device in advance, or may be introduced when necessary via another storage medium or a communication medium (a network or a carrier wave propagating through the network).

  FIG. 5 is a flowchart showing the entire processing performed between the IC card 10 and the terminal 20.

  First, the IC card 10 is inserted into the terminal 20 (S501 (expressed as S501, the same applies hereinafter)). Next, in order to confirm whether or not the key can be shared between the inserted IC card 10 and the terminal 20, an authentication process is performed (S502). As a result, when the authentication is successful, secure communication processing is performed (S503). If the authentication fails (first time), it is considered that the combination of the IC card 10 and the terminal 20 has not yet been determined, and the setup process is performed (S504). If the authentication fails (second time), the processing is stopped (S505). Next, in the setup process, it is confirmed whether the IC card 10 and the terminal 20 have obtained certification from the certification organization apparatus 50, and a common key is generated and shared. If the setup process is successful, the authentication process is performed again. If the setup process fails, it is assumed that no certification has been obtained, and the process is stopped (S506).

  By following these procedures, the user is not aware of the authentication process, the setup process, and the secure communication process, so that a system that can flexibly cope with the update of the terminal or IC card can be realized.

  FIG. 6 is a flowchart showing an authentication process performed between the authentication data generation unit 206 in the terminal 20 and the authentication application 105 in the IC card 10.

  First, the authentication data generation unit 206 starts an authentication process (S601), and generates a random number (S602). Thereafter, the generated random number (A601) is transmitted to the authentication application 105.

  Next, the authentication application 105 generates a random number (S603). Next, a session key is generated using the generated random number, the received random number (A601), and the key generated by the setup process stored in the key storage unit 106 (S604). Next, using the generated session key, data obtained by combining the received random number (A601) and the random number generated in S603 is encrypted to generate authentication data 1 (S605). Thereafter, the random number generated in S603 and the authentication data 1 (A602) are transmitted to the authentication data generation unit 206.

  Next, the authentication data generation unit 206 generates a session key using the random number generated in S602, the received random number, and the key generated by the setup process stored in the key storage unit 207 (S606). Next, it is verified whether the authentication data 1 received from the authentication application 105 is valid using the generated session key (S607). As a result, if it is determined that the authentication data is invalid, the processing is stopped (S608). If it is determined that the authentication data is legitimate, the authentication data 2 is generated by encrypting the combination of the received random number and the random number generated in S602 using the session key generated in S606. (S609). Thereafter, authentication data 2 (A603) is transmitted to the authentication application 105.

  Next, the authentication application 105 verifies the received authentication data 2 (A603) (S610). Thereafter, the verification result is transmitted to the authentication data generation unit 206 as a response (A604).

  Next, the authentication data generation unit 206 verifies the received response (A604) (S611) and determines whether the authentication has succeeded or failed.

  Note that the authentication processing flow shown in FIG. 6 is an example of a mutual authentication flow using common key encryption. The authentication processing flow used in the present embodiment is not limited to this method, and for example, an authentication method such as a one-time password or zero knowledge proof may be used.

  FIG. 7 is a flow showing a setup process performed between the authentication data generation unit 206 in the terminal 20 and the authentication application 105 in the IC card 10.

  First, the authentication data generation unit 206 starts a setup process (S701). Next, the public key of the terminal 20 stored in the key holding unit 207 and the public key signature (A701) stored in the authentication data holding unit 208 are transmitted to the authentication application unit 105.

  Next, the authentication application unit 105 verifies the state of the PIN held in the authentication application unit 105 (S702). As a result, if it is determined that the PIN has not been verified, a PIN request (A702) is transmitted to the authentication data generation unit 206. If it is determined that the PIN has been verified, the received public key signature is verified using the received public key and the public key of the certification authority device 50 stored in the key storage unit 106 (S703). As a result, when signature verification fails, a response (A703) is returned to the authentication data generation unit 206, and the process is stopped (S704). If the signature verification is successful, the received public key is written in the key storage unit 106 (S705). Next, the public key of the IC card 10 stored in the key storage unit 106 and the public key signature (A704) stored in the authentication data holding unit 107 are transmitted to the authentication data generation unit 206.

  Next, the authentication data generation unit 206 verifies the received public key signature using the received public key and the public key of the certification authority device 50 stored in the key storage unit 207 (S706). As a result, if the signature verification fails, the processing is stopped (S707). If the signature verification is successful, the received public key is written in the key storage unit 207 (S708). Next, a random number is generated (S709) and encrypted with the public key of the IC card 10 stored in the key storage unit 207 (S710). Next, the encrypted random number (A705) is transmitted to the authentication application unit 105.

  Next, the authentication application unit 105 decrypts the received encrypted random number (A705) with the private key of the IC card 10 stored in the key storage unit 106 (S711). Next, a random number is generated (S712), and a common key is generated in combination with the decrypted random number (S713). Next, the random number generated in S712 is encrypted with the public key of the terminal 20 stored in the key storage unit 106 (S714). Next, the encrypted random number (A706) is transmitted to the authentication data generation unit 206.

  Next, the authentication data generation unit 206 decrypts the received encrypted random number (A706) with the secret key of the terminal 20 stored in the key storage unit 207 (S715). Next, a common key is generated by combining the decrypted random number and the random number generated in S709 (S716).

  By following such a procedure, it is possible to hold a common key between the IC card 10 and the terminal 20.

  FIG. 8 is a flowchart showing secure communication processing performed between the service application 103 in the IC card 10 and the service providing unit 204 in the terminal 20.

  First, the service providing unit 204 generates a command to be transmitted to the service application 103 (S801). Next, the authentication data generation unit 206 is requested to sign and encrypt the command (S802), and the command (A801) to be transmitted is transmitted.

  Next, the authentication data generation unit 206 generates a signature of the received command using the session key stored in the key storage unit 207 (S803). Next, the data part of the received command is encrypted using the session key stored in the key storage part 207 (S804). Next, the signature generated in S803 is added and the command (A802) in which the data part is encrypted is transmitted to the service providing part 204.

  Next, the service providing unit 204 transmits the received signed / encrypted command (A802) to the service application 103.

  Next, the service application 103 requests the authentication application unit 105 to verify and decrypt the signature / encrypted command (A802) (S805), and transmits the received signature / encrypted command (A802). To do.

  Next, the authentication application unit 105 verifies the signature of the received signature / encrypted command (A802) using the session key stored in the key storage unit 106 (S806). As a result, if signature verification fails, the fact is sent to the service application 103, the service application 103 sends a response (A803) to the service providing unit 204, and the service providing unit 204 cancels the processing. (S807). If the signature verification is successful, the data part of the received signature / encrypted command (A802) is decrypted using the session key stored in the key storage part 106 (S808). Next, a plaintext command (A804) is transmitted to the service application 103.

  Next, the service application 103 executes the received plaintext command (A804), and generates response data to be transmitted to the service providing unit 204 (S809). Next, the authentication application unit 105 is requested to sign and encrypt the response (S810), and a response (A805) to be transmitted is transmitted.

  Next, the authentication application unit 105 generates a signature of the received response (A805) using the session key stored in the key storage unit 106 (S811). Next, the data part of the received response (A805) is encrypted using the session key stored in the key storage part 106 (S812). Next, a response (A806) in which the signature generated in S811 is added and the data part is encrypted is transmitted to the service application 103.

  Next, the service application 103 transmits the received signature / encrypted response (A806) to the service providing unit 204.

  Next, the service providing unit 204 requests the authentication data generating unit 206 to verify and decrypt the signature / encrypted response (A806) (S813), and the received signature / encrypted response (A806). Send.

  Next, the authentication data generation unit 206 verifies the signature of the received signature / encrypted response (A806) using the session key stored in the key storage unit 207 (S814). As a result, when the signature verification fails, the fact is transmitted to the service providing unit 204, and the service providing unit 204 stops the processing (S815). If the signature verification is successful, the data part of the received signature / encrypted response (A806) is decrypted using the session key stored in the key storage part 207 (S816). Next, a plaintext response (A807) is transmitted to the service providing unit 204, and the secure communication process is terminated.

  If it is desired to perform data transmission / reception a plurality of times between the terminal 20 and the IC card 10, it can be handled by repeatedly executing the flow shown in FIG.

  FIG. 9 is a flow executed when the IC card 10 obtains certification from the certification organization apparatus 50.

  First, the authorization terminal 30 starts authorization processing (S901), and sends an authorization start command (A901) to the authentication application unit 105. Next, the authentication application unit 105 transmits the public key (A902) of the IC card 10 stored in the key storage unit 106 to the authorized terminal 30. Next, the certification terminal 30 transmits the received public key (A902) to the certification data generation unit 502 of the certification organization apparatus 50. Next, the authorization data generation unit 502 generates a signature of the received public key (A902) with the secret key of the certification authority device 50 stored in the key storage unit 503 (S902). Next, the public key of the certification authority device 50 stored in the key storage unit 503 and the signature (A903) of the public key of the IC card 10 generated in S902 are transmitted to the certification terminal 30. Next, the certification terminal 30 transmits the received public key of the certification authority device 50 and the public key signature (A903) of the IC card 10 to the authentication application unit 105. Next, the authentication application 105 writes the received public key of the certification authority device 50 in the key storage unit 106 (S903), and writes the signature of the public key of the IC card 10 in the authentication data holding unit 107 (S904).

  With the above flow, it can be said that the IC card 10 has obtained the certification from the certification organization apparatus 50. This flow only needs to be performed once when the IC card 10 is issued, and need not be performed multiple times. Note that the flow in which the terminal 20 obtains authorization is the same as the flow shown in FIG.

  In addition, this invention is not limited to said embodiment, A various deformation | transformation is possible within the range of the summary.

  For example, this is the case where the authorized terminal 30 and the authorized institution apparatus 50 are the same, and the processing performed in the IC card 10 and the terminal 20 does not change even in the case of this embodiment.

It is a figure for demonstrating the structure of the secure terminal system using the IC card to which one Embodiment of this invention was applied. It is a figure which shows the hardware constitutions of IC card shown in FIG. It is a figure which shows the hardware constitutions of the terminal shown in FIG. It is a figure which shows the hardware constitutions of the authorized terminal shown in FIG. It is a figure which illustrates the flow implemented in the cure terminal system using the SE IC card with which one embodiment of the present invention was applied. It is a figure which illustrates the flow of the authentication process implemented between an IC card and a terminal. It is a figure which illustrates the flow of the setup process implemented between an IC card and a terminal. It is a figure which illustrates the flow of the secure communication process implemented between an IC card and a terminal. It is a figure which illustrates the flow at the time of an IC card acquiring certification from a certification organization.

Explanation of symbols

10: IC card, 11: input / output device, 12: CPU, 13: tamper resistant storage device, 14: tamper resistant memory, 15: internal communication line, 20: terminal, 21: storage device, 22: input / output device, 23 : IC card input / output device, 24: CPU, 25: memory, 26: reading device, 27: storage medium, 28: internal signal line, 30: certified terminal, 31: communication device, 32: input / output device, 33: IC Card input / output device, 34: storage device, 35: CPU, 36: memory, 37: reading device, 38: storage medium, 39: internal signal line, 40: network, 50: accredited institution device, 101: data transmission / reception unit, 102: command analyzing _unit, 103 1 10 @ 2 to 10 @ 3 _n: service _{applications,} 104 1 -104 _n: data storage unit, 105: authentication application unit, 106: key storage unit, 10 : Authentication data hold unit, 201: IC card access unit, 202: command generating unit, 203, the data transceiver _unit, 204 1 to 204 _n: the service providing _unit, 205 1 to 205 _n: data storage unit, 206: authentication data generation 207: Key storage unit 208: Authentication data holding unit 301: Data transmission / reception unit 302: IC card access unit 303: Communication unit 40: Network 501: Communication unit 502: Authorized data generation unit 503 : Key storage unit, A601: random number, A602: random number, authentication data 1, A603: authentication data 2, A604: response, A701: public key, public key signature, A702: PIN request, A703: response, A704: public key, Public key signature, A705: encrypted random number, A706: encrypted random number, A801: command, A802 Signed / encrypted command, A803: Response, A804: Plain text command, A805: Response, A806: Signed / encrypted response, A807: Plain text response, A901: Certification start command, A902: Public key, A903: Public certification authority Key, public key signature.

Claims (4)

A secure terminal system using an IC card,
And IC card, a terminal using by inserting the IC card, a certification terminal used when the IC card and the terminal obtains certification from certification authority device, a network to which the authorized terminal is connected, said network connected to, and the accreditation device to certify the said IC card terminal, consists,
The IC card is
A data transceiver for transmitting and receiving commands;
A command analysis unit for analyzing commands;
A service application unit that executes processing according to a command;
A data storage unit for storing data used in the service application unit;
When it is inserted into the terminal , it performs authentication processing of the terminal. When the authentication processing is successful, it performs signature encryption communication processing with the terminal, and when the authentication processing fails. , Confirming the presence or absence of certification acquired from the accreditation body device, performing a setup process to share a key with each other, an authentication application unit that performs the authentication process again when the setup process is completed ,
A key storage unit that stores a key used in the authentication application unit, and an authentication data holding unit that stores authentication data used in the authentication application unit,
The terminal
An IC card access unit for accessing the IC card;
A command generator for generating a command to be transmitted to the IC card;
A data transmitter / receiver for transmitting / receiving data to / from the certified terminal;
A service providing unit for providing a service to the service application;
A data storage unit for storing data used in the service providing unit;
An authentication data generation unit for authenticating the IC card;
A key storage unit for storing a key used in the authentication data generation unit, and an authentication data holding unit for storing authentication data used in the authentication data generation unit,
The certified terminal is
A data transceiver for transmitting and receiving data to and from the terminal;
An IC card access unit that accesses the IC card, and a communication unit that transmits and receives data to and from the network.
The accreditation body device is
A communication unit that transmits and receives data to and from the network;
An authorization data generation unit that generates data necessary for authorizing the IC card and the terminal;
A secure terminal system using an IC card, comprising: a key storage unit that stores a key used in the authorized data generation unit. A secure terminal system using the IC card according to claim 1,
The IC card is
A secure terminal system using an IC card, comprising: a plurality of service application units; and a data storage unit that stores data used by the plurality of service applications. A secure terminal system using the IC card according to claim 1 or 2,
The terminal
A secure terminal system using an IC card, comprising: a plurality of service providing units; and a data storage unit for storing data used by the plurality of service providing units. A secure terminal system using the IC card according to any one of claims 1 to 3 ,
When communication is performed between the service application unit included in the IC card and the service providing unit included in the terminal, the authentication application unit or the authentication data generation unit serving as the transmission side of the communication communicates. A secure terminal system using an IC card, wherein data is signed and encrypted, and the authentication application unit or the authentication data generation unit serving as a communication receiving side performs signature verification and decryption.

Images