JP2005044191A - Storage device, and authentication method and program thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a storage device whose reliability can be improved. <P>SOLUTION: The storage device comprises a receiving part for receiving authentication information from a reader/writer together with a read request to the storage part; an authenticating part for performing authentication based on the authentication information received by the receiving part together with the read request; a reading part for reading data from the storage part if authentication is established by the authenticating part; and a sending part for sending the data read by the reading part to the reader/writer. The storage device includes a receiving part for receiving authentication information and write data from the reader/writer together with a write request to the storage part; an authenticating part for performing authentication according to the authentication information received by the receiving part together with the write request and the write data; and a writing part for writing in the storage part the write data received by the receiving part together with the authentication information if authentication is established by the authenticating part. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a rewritable memory and a recording device having a control element, and more particularly to a storage device capable of improving security, an authentication method in the storage device, and an authentication program in the storage device.

In the conventional IC card, in the commands specified in ISO (International Organization for Standardization) 7816, EMV (Europay, MasterCard, Visa Specification) specifications, JICSAP (IC Card System Utilization Promotion Council) specifications, etc., When accessing an internal file, first use the Verify command or the like to obtain the authority to access the target internal file. For example, in the JICSAP specification, when acquiring this authority, as shown in FIG. 5, the IC card reads a PIN (Personal Identification Number) transmitted from the reader / writer side (step S100) and performs authentication (step S110). When the authentication is established, the authentication establishment state is held (step S120). Once authentication is established, the PIN is in a valid state, and data can be read and written to the IC card (step S130). When the reset request is transmitted from the reader / writer side (step S140), the IC card resets the state (step S150), ends the session, and notifies the reset completion (step S160).
Such an operation is disclosed in Non-Patent Document 1, for example, as the JICSAP specification.
IC Card System Utilization Promotion Council, [Search June 4, 2003], Internet <URL: http://www.jicsap.com/stdwork/V1.1J.htm>

  However, in the prior art described above, the IC card memory can be accessed after executing the Verify command. At this time, if noise or noise is mixed, an unintended command signal is input to the IC card. The IC card may malfunction.

  The present invention has been made in view of such circumstances, and an object thereof is to provide a storage device capable of improving reliability such as security, an authentication method in the storage device, and an authentication program in the storage device. is there.

In order to achieve the above object, the present invention provides a storage device having a storage unit that can be accessed in response to a request from a reader / writer, and authenticates each time the reader / writer accesses the storage unit. It has an authentication part.
In addition, the present invention is a storage device having a storage unit that can be accessed in response to a request from a reader / writer, the receiving unit receiving authentication information together with a read request from the reader / writer to the storage unit, and the receiving unit An authentication unit that performs authentication based on the authentication information received together with the read request by the authentication unit, a reading unit that reads data from the storage unit when authentication is established by the authentication unit, and the reader / writer that reads the data read by the reading unit And a transmitting unit for transmitting data.

Further, the present invention is a storage device having a storage unit that can be accessed in response to a request from a reader / writer, and a receiving unit that receives authentication information and write data together with a write request to the storage unit from the reader / writer; An authentication unit that performs authentication based on the authentication information received together with the write request and the write data by the receiving unit, and writes the write data received together with the authentication information by the receiving unit to the storage unit when authentication is established by the authentication unit. And a writing unit.
In the storage device described above, the authentication information is changed for each process.
In the storage device described above, the authentication information is a one-time password.
According to the present invention, in the storage device described above, the storage device is an IC card.

Further, the present invention is an authentication method in a storage device having a storage unit that can be accessed in response to a request from a reader / writer, wherein authentication is performed each time the reader / writer accesses the storage unit. And
The present invention also provides an authentication program in a storage device having a storage unit accessible according to a request from a reader / writer, and performing the authentication step each time the reader / writer accesses the storage unit It is made to perform.

  As described above, according to the present invention, since authentication is performed every time the storage unit is accessed from the reader / writer, authentication is required every time. Even when a command signal is input to the IC card in many cases, it can be prevented from being accessed, thereby improving security and improving reliability.

  According to the present invention, the authentication information and the write data are received together with the write request from the reader / writer to the storage unit, and the authentication is performed using the authentication information received together with the write request and the write data. Since the write data received together with the information is written to the storage unit, only the write data sent together with the authentication information when authentication is established is written, so an unintended command signal due to mixing of noise, noise, etc. Even when the data is mixed, it is possible to prevent the contents of the data from being changed due to a malfunction or the like, improve the security of the data, and improve the reliability.

Hereinafter, a storage device according to an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a schematic block diagram showing a configuration of an IC card system to which an IC card as an example of a portable storage device according to an embodiment of the present invention is applied.
In this figure, an IC card 1 is inserted into a reader / writer 2 and communicates with a server 3 via the reader / writer 2. The reader / writer 2 reads and writes data from the storage area of the IC card 1 via an external terminal for accessing the storage area of the IC card 1 based on an instruction from the server 3. The server 3 communicates with the IC card 1 via the reader / writer 2. The server 3 provides an e-commerce settlement service using the IC card 1 and a service for performing personal authentication.

  FIG. 2 is a schematic block diagram for explaining the configuration of the IC card 1. In this figure, the storage unit 10 has a storage area that can be accessed in response to a request from the reader / writer 2. The storage unit 10 includes a nonvolatile memory such as a flash memory, a memory that can only be read, or a combination thereof. The receiving unit 20 receives the authentication information together with a read request from the reader / writer 2 to the storage unit 10. The receiving unit 20 receives authentication information and write data together with a write request from the reader / writer 2 to the storage unit 10. The authentication information here is information for performing authentication as to whether authentication such as PIN or keyword is established.

  The authentication unit 30 performs authentication each time the server 3 accesses the storage unit 10 via the reader / writer 2. The authentication unit 30 has a function of performing authentication using the authentication information received together with the read request by the receiving unit 20 and a function of performing authentication using the authentication information received together with the write request and write data by the receiving unit 20. The authentication unit 30 is composed of a memory and a CPU (central processing unit), and the function for realizing the function of the authentication unit 30 can be realized by loading the program into the memory and executing the program. Good.

  The reading unit 40 reads data requested to be read from the server 3 from the storage unit 10 when authentication is established by the authentication unit 30. When the authentication unit 30 establishes authentication, the writing unit 50 writes the write data received together with the authentication information by the receiving unit 20 in the storage unit 10. The transmission unit 60 has a function of transmitting data read by the reading unit 40 to the server 3 via the reader / writer 2 and a function of notifying that writing of data requested to be written has been completed.

Next, the operation of the above-described IC card system will be described. FIG. 3 is a sequence diagram for explaining the operation of the IC card system to which the IC card 1 in FIG. 2 is applied. Here, a case where the authentication information is a PIN will be described.
First, when the IC card 1 is inserted into the reader / writer 2 and the server 3 reads the data stored in the storage unit 10 of the IC card 1, the reader / writer 2 sends the read request and the PIN transmitted to the server 3 to the IC. Transmit to the card 1 (step S10). When the receiving unit 20 receives the read request and the PIN, the authentication unit 30 of the IC card 1 performs authentication using the PIN (step S20), and permits reading of the data requested to be read when the authentication is established. When the reading is permitted, the reading unit 40 accesses the data requested to be read, reads it from the storage unit 10 (step S30), and transmits it to the reader / writer 2 by the transmission unit 60 (step S40). Thereby, the data transmitted from the IC card 1 is transmitted from the reader / writer 2 to the server 3.
The authentication unit 30 sends a PIN each time a read request is made to the data stored in the storage unit 10 from the server 3, and performs the authentication process by performing the above-described processing from step S10 to step S40. If the authentication is successful, the data is read out.

On the other hand, when data is written from the server 3 to the storage unit 10 of the IC card 1, the reader / writer 2 transmits the write request, PIN, and write data transmitted from the server 3 to the IC card 1 (step S50). . When the receiving unit 20 receives the write request, the PIN, and the write data, the authentication unit 30 of the IC card 1 performs authentication using the PIN (step S60), and writes the data requested to be written when the authentication is established. Allow. When the writing is permitted, the writing unit 40 writes the requested data to the storage unit 10 (step S70), and when the writing is completed, the transmission unit 60 notifies the reader / writer 2 that the writing has been completed. (Step S80). As a result, the data transmitted from the server 3 is written into the storage unit 10 of the IC card 1 via the reader / writer 2.
The authentication unit 30 receives the PIN and write data from the server 3 at the same time each time a write request is made from the server 3 to the storage unit 10, and performs the processing from step S50 to step S80 described above. The authentication process is performed according to, and when the authentication is established, the write data transmitted together with the PIN is written.

  In the above-described embodiment, the case where the authentication information is a PIN has been described. However, a password input from the server 3 may be used, and the authentication information may be a password or a password that is changed for each process. A one-time password may be used. The authentication information may be changed / updated when a series of continuous operations inside the IC card is completed. As a result, it is possible to prevent the authentication information from being analogized by another person.

Next, data transmitted to the IC card 1 will be described. Here, the data transmitted to the IC card 1 is a command, and as an example thereof, CHANGE KEY will be described. Here, an example based on the JICSAP specification will be described.
(1) Definition and scope of application This command is used to change the target key.
(2) Usage conditions and security conditions The command is executed for the EF specified by a valid short EF (basic file) identifier or the current EF. The designated EF becomes the current EF.
The command can be executed only when the security status satisfies the security attribute for the change (level 2) command defined in the IEF.
When this command is applied to the WEF, the command processing must be interrupted.
(3) Command message Table 1 shows an example of the command message.

（４）レスポンスメッセージ
レスポンスメッセージの一例を表２に示す。

(4) Response message Table 2 shows an example of the response message.

  Here, in the case where the data included in the data field is a command for storing the number of points for providing various services to the IC card, the PIN and point data indicating the number of points are included. By being executed, the number of points stored in the storage unit 10 can be updated even when authentication is performed every time data is written to the storage unit 10.

In addition, although the case where it was an IC card was demonstrated as a recording device in the said embodiment, if it is a portable recording device which has a processing device and was provided with the storage area, it will not be limited to an IC card but to other devices It is possible to apply.
In the above-described embodiment, authentication is performed every time the storage unit 10 is accessed. However, when a predetermined process is performed, PIN authentication may be performed for each access. For example, authentication for each access to processing related to payment of charges using the IC card 1, processing to read and write personal information stored in the IC card 1, processing to update the number of points accumulated in the IC card 1, etc. May be performed. In the embodiment described above, authentication is performed every time the storage unit 10 is accessed. However, when accessing a predetermined storage area of the storage unit 10, authentication is performed for each access. Good.

  In the above-described embodiment, the communication performed by the IC card 1 and the reader / writer 2 may use either wireless or wired communication.

Further, according to the embodiment described above, every time the storage unit 10 of the IC card 1 is accessed, authentication using authentication information such as a PIN or password is performed. That is, the information that “authentication has been established” is not applied to commands transmitted to the IC card 1 from the next time on. When accessing a file that needs to protect the internal file stored in the storage unit 10 from the outside, authentication data such as a PIN or password is added to the command for that purpose every time. Thereby, even if a malicious third party tries to perform “session hijacking”, since authentication is required every time, it is possible to prevent the protected internal file from being accessed. In particular, by applying the IC card 1 to an e-commerce payment card or authentication card that stores highly privacy data, it is possible to prevent tampering of payment contents due to “session hijacking”, unauthorized authentication, and the like. .
For example, when the IC card 1 is inserted into the reader / writer 2, an analysis board provided with an output terminal for outputting data transmitted and received between the IC card 1 and the reader / writer 2 between the IC card 1 and the reader / writer 2. Even if it is inserted by a malicious third party and session hijacking is attempted, authentication is required every time the file is accessed, so that the protected internal file can be prevented from being accessed.

  Further, the program for realizing the functions of the receiving unit 20, the authenticating unit 30, the writing unit 50, the reading unit 40, and the transmitting unit 60 in FIG. 1 is recorded on a computer-readable recording medium and recorded on the recording medium. Authentication management may be performed by reading the program into a computer system and executing it. The “computer system” here includes an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case, and a program that holds a program for a certain period of time are also included. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design and the like within a scope not departing from the gist of the present invention.

1 is a schematic block diagram showing a configuration of an IC card system to which an IC card as an example of a portable storage device according to an embodiment of the present invention is applied. 1 is a schematic block diagram for explaining a configuration of an IC card 1. FIG. It is a sequence diagram for demonstrating operation | movement of the IC card system to which the IC card 1 is applied. 4 is a diagram illustrating an example of a command message transmitted to the IC card 1. It is drawing for demonstrating the operation | movement which performs authentication of an IC card in a prior art.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 IC card 2 Reader / writer 3 Server 10 Storage part 20 Receiving part 30 Authentication part 40 Reading part 50 Writing part 60 Transmitting part

Claims (8)

A storage device having a storage unit accessible according to a request from a reader / writer,
A storage device comprising: an authentication unit that performs authentication each time the reader / writer accesses the storage unit. A storage device having a storage unit accessible according to a request from a reader / writer,
A receiving unit that receives authentication information together with a read request from the reader / writer to the storage unit;
An authentication unit that performs authentication using the authentication information received together with the read request by the reception unit;
A reading unit for reading data from the storage unit when authentication is established by the authentication unit;
A storage device comprising: a transmission unit that transmits data read by the reading unit to the reader / writer. A storage device having a storage unit accessible according to a request from a reader / writer,
A receiving unit for receiving authentication information and write data together with a write request to the storage unit from the reader / writer;
An authentication unit that authenticates with the authentication information received together with the write request and write data by the receiving unit;
A storage device comprising: a writing unit that writes write data received together with authentication information by the receiving unit into the storage unit when authentication is established by the authentication unit.   The recording apparatus according to claim 1, wherein the authentication information is changed for each process.   The recording apparatus according to claim 1, wherein the authentication information is a one-time password.   The storage device according to any one of claims 1 to 5, wherein the storage device is an IC card. An authentication method in a storage device having a storage unit accessible according to a request from a reader / writer,
An authentication method in a storage device, wherein authentication is performed every time the reader / writer accesses the storage unit. An authentication program in a storage device having a storage unit accessible according to a request from a reader / writer,
An authentication program in a storage device, causing a computer to execute a step of performing authentication each time the reader / writer accesses the storage unit.

Images