JP6911303B2 - Authentication system and authentication method - Google Patents

Description

The present invention relates to the technical field of electronic information storage media such as IC chips.

In recent years, the concept of IoT (Internet of Things) has been widely advocated. By reducing communication costs, downsizing hardware, increasing functionality, opening communication systems, and cloud computing, devices that have not been connected to networks until now are connected to the Internet, which has been the case in the past. Unthinkable values and services are being realized (hereinafter, devices that have a network connection function and connect to the Internet are referred to as "IoT devices").

Under such circumstances, in the IoT browsing method described in Patent Document 1, when a mobile device executes a browser, the browser receives information about the IoT device and displays the IoT device on a map in the form of an icon. This makes it possible to provide a browser that provides various IoT services by displaying IoT devices in the form of icons on a map, and users can easily search for and connect to a large number of IoT devices to receive services. become able to.

On the other hand, recently, services for user authentication have begun to appear using IoT devices. For example, it is a service that employs an IoT device as a door lock opening / closing control device and uses a smartphone as a key. In such a service, since the IoT device has only weak performance, the authentication server connected via the network is requested to perform the user authentication process of the smartphone user, and the service is provided according to the process result. Remote authentication is performed to determine whether or not.

Japanese Unexamined Patent Publication No. 2014-081937

However, in remote authentication, problems such as delay in the authentication process due to communication with the authentication server and suspension of the authentication function due to interruption of the connection with the authentication server may occur. Therefore, the service used by the end user is used. It is difficult to provide seamlessly.

Therefore, an object of the present invention is to provide an authentication system or the like that does not cause a delay or stop due to the use of an external authentication server in the authentication process between a mobile terminal such as a smartphone and an IoT device.

In order to solve the above problems, the invention according to claim 1 can communicate with the first device having the first IC chip, the second device having the second IC chip , the first device and the second device. The first IC chip is an authentication system that includes a server device that holds an authentication application to be stored by the second IC chip and performs authentication between the first device and the second device. The receiving means for receiving the authentication information generated by the authentication application stored in the second IC chip, the generating means for generating the authentication information by the authentication application stored in the first IC chip, and the receiving means received. An application including authentication information and a collation means for collating the authentication information generated by the generation means , wherein the first IC chip indicates that the receiving means does not store the authentication application from the second IC chip. Further provided with a requesting means for further receiving the none information and requesting the server device to download the authentication application to be stored in the second IC chip to the second IC chip when the no application information is received. The server device includes a download means for downloading an authentication application to be stored by the second IC chip to the second IC chip when the download request is received, and the second IC chip stores the authentication application. It is characterized by comprising a transmission means for generating the authentication information by the authentication application and transmitting the authentication information to the first IC chip after downloading the authentication application to be used.

The invention according to claim 2 is capable of communicating with the first device having the first IC chip, the second device having the second IC chip , the first device and the second device, and the second IC chip. Is an authentication method by an authentication system that includes a server device that holds an authentication application to be stored and authenticates between the first device and the second device, wherein the first IC chip is the second IC chip. A receiving step of receiving the authentication information generated by the authentication application stored in the first IC chip, a generation step of the first IC chip generating the authentication information by the authentication application stored in the first IC chip, and the first IC chip The verification step of collating the authentication information received by the receiving step with the authentication information generated by the generation step, and the application-less information indicating that the first IC chip does not store the authentication application from the second IC chip. The second receiving step to receive, and when the first IC chip receives the application-less information, the server device is requested to download the authentication application to be stored in the second IC chip to the second IC chip. A request step to be performed, a download step of downloading the authentication application to be stored by the second IC chip to the second IC chip when the server device receives the download request, and the second IC chip performing the second IC. It is characterized by including a transmission step of generating the authentication information by the authentication application after downloading the authentication application to be stored by the chip and transmitting the authentication information to the first IC chip.

According to the present invention, the authentication information generated by the authentication application stored in the first IC chip included in the first device and the authentication information generated by the authentication application stored in the second IC chip included in the second device are combined with the first IC. Since the authentication process is performed by collating the chips, the authentication process can be performed independently of the external authentication server, and the delay or stop of the authentication process due to a communication failure with the authentication server or a failure of the authentication server can be prevented. Can be done.

It is a figure which shows the configuration example of the door lock control system S in this embodiment. It is a figure which shows the configuration example of the mobile terminal 1 in this embodiment. It is a figure which shows the configuration example of the door lock control device 2 in this embodiment. It is a figure which shows the configuration example of the application management server 3 in this embodiment. It is a sequence diagram which shows the operation example of the door lock control system S in this embodiment. It is a sequence diagram which shows the operation example of the door lock control system S in the modification.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. This embodiment is an embodiment when the present invention is applied to the door lock control system S.

[1. Door lock control system S configuration]
As shown in FIG. 1, the door lock control system S of the present embodiment includes a mobile terminal 1, a door lock control device 2 which is an IoT device, and an application management server 3. Communication is possible between the mobile terminal 1 and the door lock control device 2 in accordance with short-range wireless communication standards (for example, BLUETOOTH (registered trademark), ISO / IEC 14443, ISO / IEC 18092, etc.). The application management server 3 can communicate with the mobile terminal 1 and the door lock control device 2 via the mobile communication network MN. The door lock control device 2 controls opening / closing (unlocking / locking) of a door lock (not shown).

In the door lock control system S, when the user of the mobile terminal 1 holds (approaches) the mobile terminal 1 to the door lock control device 2, mutual authentication processing is performed between the mobile terminal 1 and the door lock control device 2, and the door is door-locked. When the lock control device 2 authenticates that the mobile terminal 1 has a legitimate authority, the door is unlocked. The mutual authentication process is performed by the mutual authentication application (referred to as "authentication application") installed in the USIM (Universal Subscriber Identity Module) of the mobile terminal 1 and the authentication application installed in the USIM of the door lock control device 2.

[2. Configuration of mobile terminal 1]
Next, the outline configuration and functions of the mobile terminal 1 will be described with reference to FIG. The mobile terminal 1 includes a control unit 11, a storage unit 12, a short-range wireless communication interface 13, a display unit 14, an input unit 15, and a baseband 16, and these components are connected to each other via a bus 19. A mobile communication network interface 17 and a USIM card 18 are connected to the baseband 16. The mobile terminal 1 is, for example, a mobile phone, a smartphone, a tablet terminal, or the like.

The control unit 11 is composed of a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. The storage unit 12 is composed of a non-volatile memory such as a flash memory. The OS (Operating System) and middleware of the mobile terminal 1 are stored in the ROM or the storage unit 12. In addition, the storage unit 12 stores APIs (Application Program Interfaces), applications, and the like installed in the mobile terminal 1. API is an interface for using operating system functions from an application. An application is, for example, a program that can be downloaded from a predetermined server.

The short-range wireless communication interface 13 has an antenna, detects that the mobile terminal 1 and the door lock control device 2 are approaching each other, and controls short-range wireless communication between them.

The display unit 14 has, for example, a touch panel type display panel, and controls the display on the display panel and receives operation instructions from the user. The input unit 15 has an operation button for inputting an operation instruction from the user, and outputs a signal corresponding to the operation button to the control unit 11.

The baseband 16 is hardware having a function for connecting to the mobile communication network MN. The mobile communication network interface 17 has an antenna and controls wireless communication performed with a base station in the mobile communication network MN.

The USIM card 18 is one of UICCs (Universal Integrated Circuit Cards), and is equipped with, for example, a contact type IC chip whose functions have been expanded based on a conventional SIM (Subscriber Identity Module). The USIM card 18 is used for contractor authentication when connecting to the mobile communication network MN.

The USIM card 18 has an IC chip, which includes a CPU, RAM, a non-volatile memory, an I / O circuit, and the like, and these components are connected to each other via a bus. In the RAM, for example, the OS of the IC chip and data temporarily required for the functioning of various applications are stored. The non-volatile memory is, for example, a flash memory or an electrically Erasable Programmable Read-Only Memory. For example, an IC chip OS or various applications (SIM application used for contractor authentication or authentication application (referred to as "portable side authentication application"). In some cases)) is installed.

[3. Configuration of door lock control device 2]
Next, the outline configuration and function of the door lock control device 2 will be described with reference to FIG. The door lock control device 2 includes a control unit 21, a storage unit 22, a short-range wireless communication interface 23, a door lock opening / closing unit 24, an input unit 25, and a baseband 26, and these components are mutually connected via a bus 29. Be connected. A mobile communication network interface 27 and a USIM card 28 are connected to the baseband 26.

The control unit 21 is composed of a CPU, a ROM, a RAM, and the like. The storage unit 22 is composed of a non-volatile memory such as a flash memory. The OS and middleware of the door lock control device 2 are stored in the ROM or the storage unit 22.

The short-range wireless communication interface 23 has an antenna, detects that the mobile terminal 1 and the door lock control device 2 are approaching each other, and controls wireless communication between them.

The door lock opening / closing unit 24 unlocks the door when the mobile terminal 1 approaching by the mutual authentication process by the authentication application is authenticated as having a legitimate authority. The input unit 25 has an operation button for inputting an operation instruction from the administrator of the door lock control device 2, and outputs a signal corresponding to the operation button to the control unit 21.

The baseband 26 is hardware having a function for connecting to the mobile communication network MN. The mobile communication network interface 27 has an antenna and controls wireless communication performed with a base station in the mobile communication network MN.

The USIM card 28 is one of the UICCs, and for example, a contact type IC chip whose function is expanded based on the conventional SIM is mounted. The USIM card 28 is used for contractor authentication when connecting to the mobile communication network MN.

The USIM card 28 has an IC chip, which includes a CPU, RAM, non-volatile memory, an I / O circuit, and the like, and these components are connected to each other via a bus. In the RAM, for example, the OS of the IC chip and data temporarily required for the functioning of various applications are stored. The non-volatile memory is, for example, a flash memory or an electrically Erasable Programmable Read-Only Memory. For example, an IC chip OS or various applications (SIM application used for contractor authentication or authentication application (referred to as "IoT side authentication application"). In some cases)) is installed.

[4. Configuration of application management server 3]
Next, the outline configuration and functions of the application management server 3 will be described with reference to FIG. The application management server 3 includes a control unit 31, a storage unit 32, an input unit 33, a display unit 34, and a mobile communication network interface 35, and these components are connected to each other via a bus 36.

The control unit 31 is composed of a CPU, a ROM, a RAM, and the like. The storage unit 32 is composed of, for example, a non-volatile memory such as a hard disk drive or a flash memory. Various applications such as an OS of the application management server 3 and an authentication application to be downloaded to the USIM card 18 of the mobile terminal 1 are stored in the ROM or the storage unit 32.

The input unit 33 includes a keyboard and a mouse for inputting an operation instruction from the user, and outputs a signal corresponding to the input operation to the control unit 31. The display unit 34 includes, for example, a liquid crystal display and a display control unit, and displays various screens and the like on the liquid crystal display.

[5. Operation example of door lock control system S]
Next, an operation example of the door lock control system S will be described with reference to FIG.

First, when the user of the mobile terminal 1 holds the mobile terminal 1 over the door lock control device 2, it is detected that the mobile terminal 1 is held by the function of the short-range wireless communication interface 23 of the door lock control device 2 (step). S101), the control unit 21 of the door lock control device 2 is notified to that effect. Next, when the control unit 21 notifies the USIM card 28 of the detection of the mobile terminal 1, the control unit of the USIM card 28 uses the function of the IoT side authentication application to authenticate information to the mobile terminal 1 by short-range wireless communication. (Step S102).

On the other hand, when the short-range wireless communication interface 13 of the mobile terminal 1 receives the request for the authentication information from the USIM card 28, the control unit 11 of the mobile terminal 1 is notified to that effect. Next, the control unit 11 requests the USIM card 18 for authentication information (step S103). In response to this, the control unit of the USIM card 18 generates authentication information by the function of the mobile phone authentication application (step S104) and transmits it to the door lock control device 2 by short-range wireless communication (step S105).

On the other hand, when the short-range wireless communication interface 23 of the door lock control device 2 receives the authentication information from the USIM card 18, it notifies the control unit 21 of the door lock control device 2 to that effect. Further, the control unit 21 hands over the authentication information to the USIM card 28 (step S106). In response to this, the control unit of the USIM card 28 receives the authentication information generated by itself by the function of the IoT side authentication application and the authentication information generated by the function of the mobile side authentication application (authentication information received from the USIM card 18). ) (Step S107), and it is determined whether or not the collation results match (step S108). At this time, if the control unit of the USIM card 28 determines that the collation results match (step S108: YES), the door lock opening / closing unit 24 causes the door lock opening / closing unit 24 to unlock the door (step S109). On the other hand, when the control unit of the USIM card 28 determines that the matching results do not match (step S108: NO), the control unit notifies an authentication error (step S110). For example, an error sound is output from a speaker (not shown), or the mobile terminal 1 is notified by short-range wireless communication that an authentication error has occurred.

As a method of mutual authentication performed between the mobile phone side authentication application and the IoT side authentication application, a conventionally known method can be adopted. For example, security required for authentication of the service, such as AKA (Authentication and Key Agreement) authentication, which is widely used for contractor authentication in mobile communication, general Challenge-Response authentication, and authentication based on public keys and certificates. A grade certification method can be selected and applied as appropriate. Therefore, in the present embodiment, the exchange of authentication information is one round trip, but it may be performed a plurality of times according to the authentication method. The authentication method is appropriately used depending on the authentication application. The authentication method may be switched by exchanging the authentication application itself, or the authentication method used may be changed depending on the parameters after providing a plurality of authentication methods in a single application.

As described above, according to the above embodiment, the door lock control system S (an example of the "authentication system") is the door lock control device 2 ("the first") having the USIM card 28 (an example of the "first IC chip"). An example of "1 device") and a mobile terminal 1 (an example of "second device") having a USIM card 18 (an example of "second IC chip"), between the door lock control device 2 and the mobile terminal 1. In a system that performs authentication, the control unit (“reception means”, “generation means”, collation means) of the USIM card 28 receives the authentication information generated by the mobile authentication application stored in the USIM card 18. Upon receipt, the IoT-side authentication application stored in the USIM card 28 generates authentication information, and the received authentication information is collated with the generated authentication information.

Therefore, according to the above embodiment, the authentication process is performed by the control unit of the USIM card 28 collating the authentication information generated by the IoT side authentication application with the authentication information generated by the mobile side authentication application. Therefore, the authentication process can be performed independently of the external authentication server, and it is possible to prevent the delay or stop of the authentication process due to a communication failure with the authentication server or a failure of the authentication server.

[6. Modification example]
Next, a modified example of the above embodiment will be described. The modifications described below can be combined as appropriate.

[6.1. Modification 1]
In the above embodiment, the authentication process cannot be performed unless the authentication application is downloaded to the USIM cards 18 and 28 of both the door lock control device 2 and the mobile terminal 1. Therefore, in this modification, the procedure for downloading the authentication application to the door lock control device 2 will be described.

Unlike the mobile terminal 1, the door lock control device 2 is always connected to the mobile communication network MN, and in addition, the door lock control device 2 can be updated by sending an instruction from the application management server 3 side. Is common. Therefore, the download of the IoT-side authentication application can be performed with the instruction of the application management server 3 as an opportunity. Specifically, the ROM or storage unit 32 of the application management server 3 stores the authentication application to be downloaded to the USIM card 28 of the door lock control device 2, and OTA (Over The) is triggered by the instruction of the application management server 3. As the technology for downloading the authentication application to the USIM card 28 with Air), conventionally known technology (for example, RAM (Remote Applet Management) described in ETSI TS102.226 or existing technology described in Global Platform Card Specialization) can be adopted. .. With respect to the door lock control device 2, it is possible to prepare for implementing the above-described embodiment by performing such a download before providing the service of the system or at a time other than the service providing time zone such as at night. ..

[6.2. Modification 2]
In this modification, the procedure for downloading the authentication application to the mobile terminal 1 will be described. Similar to the door lock control device 2, it is possible to download to the mobile terminal 1 side at the server trigger. On the other hand, since the authentication application is not downloaded to the mobile terminal 1 side, the mutual authentication process cannot be performed and the service cannot be used, which leads to a loss of profits of the service provider and the user. As a procedure for avoiding such a situation, in the present modification, using FIG. 6, the mobile side of the mobile terminal 1 to the USIM card 18 triggered by the start of the authentication process of the door lock control device 2 and the mobile terminal 1. The procedure for downloading the authentication application will be explained.

Since the process of steps S201-S203 of FIG. 6 is the same as the process of steps S101-S103 of FIG. 5, the description thereof will be omitted. After the process of step S203, the control unit of the USIM card 18 confirms whether the mobile phone authentication application exists (whether it has been downloaded and installed), and detects that it does not exist (step S204). If the mobile phone authentication application exists, the process proceeds to step S104 in FIG. Since this modification is based on the premise that the mobile authentication application does not exist, it is assumed here that the non-existence is detected. Next, the control unit of the USIM card 18 transmits the authentication application nonexistence information indicating that the mobile phone side authentication application does not exist to the door lock control device 2 by short-range wireless communication (step S205).

On the other hand, when the short-range wireless communication interface 23 of the door lock control device 2 receives the authentication application nonexistence information from the USIM card 18, it notifies the control unit 21 of the door lock control device 2 to that effect. Next, the control unit 21 hands over the authentication application nonexistence information to the USIM card 28 (step S206). In addition, even if the authentication application nonexistence information is not handed over, it is sufficient to notify the USIM card 28 that the mobile phone side authentication application does not exist. Next, the control unit of the USIM card 28 requests the application management server 3 to download the mobile authentication application to the mobile terminal 1 via the mobile communication network MN (step S207).

When the mobile communication network interface 35 of the application management server 3 receives the download request of the authentication application from the USIM card 28, it notifies the control unit 31 of this. Then, the control unit 31 identifies the download destination mobile terminal 1 based on the request (step S208), and downloads the mobile side authentication application (step S209). The process after the download of the mobile phone authentication application to the mobile terminal 1 is completed is the same as the process after the process in step S104 of FIG. 5, and thus the description thereof will be omitted.

By the way, in order for the control unit 31 to download the portable authentication application in the process of step S208, it is necessary to specify the door lock control device 2 (USIM card 28) and the mobile terminal 1 (USIM card 18) of the requester. (The former needs to be specified to determine if it is a legitimate requester, and the latter needs to specify the download destination). Therefore, the identification information for identifying the mobile terminal 1 (USIM card 18) and the door lock control device 2 (USIM card 28) used to identify them will be described. Examples of these identification information include the following.
(I) Information for identifying the door lock control device 2 (I-I) Information given to the door lock control device 2 itself-MAC address (I-II) given to the USIM card 28 (or SE: Secure Element) Information / Door Lock Control Device 2 Side USIM ICCID
・ Door lock control device 2 side USIM IMSI
・ Telephone number (MSISDN)
(II) Information for identifying the mobile terminal 1 (II-I) Information given to the mobile terminal 1 itself-IMEI (International Mobile Equipment Identity)
(I-II) Information / ICCID given to USIM Card 18
・ IMSI
・ Telephone number (MSISDN)

The USIM card 28 requests the application management server 3 to download the portable authentication application together with the combination of the four types of identification information described above in the process of step S207 of FIG. On the other hand, the control unit 31 of the application management server 3 determines whether the received identification information of the door lock control device 2 (USIM card 28) is registered as legitimate identification information in advance, and registers it as legitimate identification information. Then, in the process of step S208 of FIG. 6, the download destination mobile terminal is based on the received identification information of the mobile terminal 1 (USIM card 18) and the mobile terminal 1 (USIM card 18). 1 (USIM card 18) is specified (step S208), and the mobile phone authentication application is downloaded (step S209). The following patterns can be considered as a combination of the four types of identification information.
(A) Information (MAC address) given to the door lock control device 2 itself and information (IMEI) given to the mobile terminal 1 itself.
(B) Information (MAC address) given to the door lock control device 2 itself and information (ICCID, IMSI, MSISDN) given to the USIM card 18.
(C) Information (ICCID, IMSI, MSISDN) given to the USIM card 28 and information (IMEI) given to the mobile terminal 1 itself.
(D) Information given to USIM card 28 (ICCID, IMSI, MSISDN) and information given to USIM card 18 (ICCID, IMSI, MSISDN)

Which of the information (ICCID, IMSI, MSISDN) given to the USIM card is used can be appropriately determined.

The application management server 3 also stores the IoT device belonging to the system other than the door lock control system S in association with the application for which the identification information should be downloaded, and corresponds to the identification information of the IoT device received together with the download request. You may also download the application. As a result, the application management server 3 can download a plurality of types of applications by selecting the application to be downloaded according to the download request source.

As described above, according to the present modification, the door lock control system S can communicate with the door lock control device 2 and the mobile terminal 1, and the mobile side authentication application (“the second IC chip should be stored). An application management server 3 (an example of a "server device") that holds an example of an "authentication application") is further provided, and a control unit (an example of a "receiving means" and a "requesting means") of the USIM card 28 is transmitted from the USIM card 18. When the application non-existence information (an example of "application non-existence information") indicating that the mobile side authentication application is not stored is further received and the application non-existence information is received, the mobile side with respect to the application management server device 3 Request the download of the authentication application to the USIM card 18. Then, when the control unit 31 of the application management server 3 (an example of the “download means”) receives the download request, the mobile phone authentication application is downloaded to the USIM card 18. After downloading the mobile phone authentication application, the control unit of the USIM card 18 (an example of the "transmission means") generates authentication information by the mobile phone authentication application and transmits the authentication information to the USIM card 28.

Therefore, according to this modification, even if the mobile phone authentication application is not downloaded (installed) on the USIM card 18 when the mobile terminal 1 is held on the door lock control device 2, the USIM card 28 Since it is downloaded from the application management server 3 by the function of the IoT side authentication application, it is possible to prevent the loss of profits of the service provider and the user.

S Door lock control system 1 Mobile terminal 11 Control unit 12 Storage unit 13 Short-range wireless communication interface 14 Display unit 15 Input unit 16 Baseband 17 Mobile communication network interface 18 USIM card 19 Bus 2 Door lock control device 21 Control unit 22 Storage Near field communication interface 24 Door lock opening / closing part 25 Input part 26 Base band 27 Mobile communication network interface 28 USIM card 29 Bus 3 App management server 31 Control unit 32 Storage unit 33 Input unit 34 Display unit 35 Near field communication Interface MN Mobile Communication Network

Claims (2)

The first device having the first IC chip, the second device having the second IC chip , the first device and the second device can communicate with each other, and the second IC chip holds an authentication application to be stored. An authentication system that includes a server device and performs authentication between the first device and the second device.
The first IC chip is
A receiving means for receiving the authentication information generated by the authentication application stored in the second IC chip, and
A generation means for generating authentication information by an authentication application stored in the first IC chip, and
A collation means for collating the authentication information received by the receiving means with the authentication information generated by the generating means.
Equipped with a,
The first IC chip is
The receiving means further receives the application-less information indicating that the authentication application is not stored from the second IC chip.
Further provided with a requesting means for requesting the server device to download the authentication application to be stored in the second IC chip to the second IC chip when the application-less information is received.
The server device
When the download request is received, the download means for downloading the authentication application to be stored in the second IC chip to the second IC chip is provided.
The second IC chip is an authentication system including a transmission means for generating the authentication information by the authentication application and transmitting the authentication information to the first IC chip after downloading the authentication application to be stored in the second IC chip. The first device having the first IC chip, the second device having the second IC chip , the first device and the second device can communicate with each other, and the second IC chip holds an authentication application to be stored. An authentication method by an authentication system that includes a server device and authenticates between the first device and the second device.
A receiving step in which the first IC chip receives the authentication information generated by the authentication application stored in the second IC chip.
A generation step in which the first IC chip generates authentication information by an authentication application stored in the first IC chip.
A collation step in which the first IC chip collates the authentication information received by the reception step with the authentication information generated by the generation step.
A second receiving step of receiving application-less information indicating that the first IC chip does not store the authentication application from the second IC chip.
A request step of requesting the server device to download the authentication application to be stored in the second IC chip to the second IC chip when the first IC chip receives the information without the application.
When the server device receives the download request, the download step of downloading the authentication application to be stored in the second IC chip to the second IC chip, and
A transmission step in which the second IC chip generates the authentication information by the authentication application after downloading the authentication application to be stored in the second IC chip and transmits the authentication information to the first IC chip.
An authentication method characterized by including.

Images