JP2006072565A - Security terminal activation system and activation terminal device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To securely authenticate security information and set it in a security terminal device.
An activation terminal device 22 communicates with a non-contact IC tag 21a provided in the security terminal device 21 by a non-contact IC tag communication reader / writer 22j to authenticate the security terminal device 21. After the authentication, a public key for permitting activation is issued to the security terminal device 21 by generating and encrypting security information. The security information returned from the security terminal device 21 after this issuance is stored. Then, activation in which the security information is set in the non-contact IC tag 21a is performed, and at the time of activation, the activation log information is stored in the non-contact IC tag 21a together with the security information.
[Selection] Figure 1

Description

  The present invention relates to a security terminal activation system and an activation terminal device that activates security information used in a security business such as an IC card settlement business to set security information safely with a secret key.

  The security terminal device in the security terminal activation system has a function of securely holding security information using a secret key, and a conventional security terminal device is configured as shown in FIG. 10, for example. The security terminal device 11 includes a terminal authentication unit 11a that performs authentication in cooperation with other components in the security infrastructure, an identification information storage unit 11b that stores identification information for identifying the security terminal device, and a security terminal. The authentication information storage unit 11c stores authentication information for authenticating the device, and the security information storage unit 11d stores security information of the security terminal device. However, each memory | storage part 11b, 11c, 11d is made into the tamper-proof structure for guarding the attack from the outside of a security terminal device.

The security terminal device 11 having such a configuration is a security component that constitutes a security infrastructure in the security system.
A security infrastructure is a comprehensive concept of the configuration of security components to achieve the objectives of a security policy, which is a basic policy and action guideline for security within an organization.

The security component ensures overall security by working together in the security infrastructure. More specifically, the security component is a component of the security infrastructure, and indicates an IC card, a terminal device, a server, a network, and the like.
FIG. 11 shows a configuration of a conventional security infrastructure. However, the operator of the security system that constructs the security infrastructure is the A operator.

The security infrastructure 12 of the A company is constructed in order to realize consistent security by the security component cooperating with other security components based on the security policy 12a of the A company. The security policy 12a of the A company is defined by the security system company that operates the security system business.
As the security component of the A company, there are a center server 12b, a host terminal device 12c, a security terminal device 11, a network 12e, and an IC card 12f.

  In order for the security terminal device 11 to perform a cooperative operation in the security infrastructure 12 constructed by the security system operator A, the security information managed by the security infrastructure 12 is stored in a secure storage area in the security terminal device 11. Must hold on. Here, each storage unit 11b, 11c, 11d is held. The security information managed by the security infrastructure 12 is information necessary for authentication between the security components 12b to 12f, identification information of the security components 12b to 12f, and the like.

The security terminal device 11 has a product life cycle such as manufacturing, transportation, installation, operation, and disposal as a terminal device. FIG. 12 shows a life cycle of the conventional security terminal device 11 and will be described.
In step S1, the security terminal device 11 is in an initial state in which no data is set immediately after manufacture, and in this state, activation is performed in which data is set using a secret key. Waiting to be activated.

In step S2, shipment is performed. In step S3, when activation is performed in which the first data (initial data) is set using a secret key, the security terminal device 11 enters a second activation waiting state.
Next, in step S4, when activation for setting information necessary for operation in the security terminal device is performed, in step S5, after the security terminal device 11 is moved to a place where the operation is actually performed, Operated.

In this operation, when a life, failure, or tamper occurs in the security terminal device 11 in step S6, the security terminal device 11 is discarded in step S7, and the life cycle as the security terminal device is completed.
In addition, in order for the security terminal device 11 to be able to operate as a security component of a security infrastructure constructed by a security system operator, security information that must be set in the security terminal device 11 in the above life cycle is security. It must be managed based on the security policy of the system operator.

As this type of conventional apparatus, there is one described in Patent Document 1, for example.
JP 2000-11114 A

By the way, in the conventional security terminal activation system, as described above, it may exist in different places such as a manufacturing site and a storage place in the life cycle, be in transit, or be installed in an operation site. Therefore, it is virtually impossible for the security operator to directly monitor all participants and events related to the life cycle of the security terminal device.
For this reason, security system operators have established life cycle operation rules in accordance with their security policies and have participants involved in the life cycle of security terminal devices observe the rules. In other words, it can be said that the participants are merely observing the rules.

  The base secret that is the basis for operating the security terminal device as a component in the security infrastructure must be set somewhere in the life cycle of the security terminal device. Information necessary for authentication to set the base secret securely must also be set safely, but the conventional method can only be realized by complying with the life cycle operation rules established by the security system operator. In addition, with the conventional method, it is difficult to check whether or not the life cycle operation rules are actually observed.

For this reason, there is a problem that security information cannot be securely authenticated and set in the security terminal device.
The present invention has been made in view of such problems, and an object of the present invention is to provide a security terminal activation system and an activation terminal device that can securely authenticate security information and set the security information in the security terminal device. It is said.

  In order to achieve the above object, a security terminal activation system according to claim 1 of the present invention includes a security terminal device having a non-contact IC tag that communicates with other communication devices by radio waves in a non-contact state; In the security terminal activation system having an activation terminal device that activates to set security information with a secret key for the security terminal device, the activation terminal device communicates with the contactless IC tag by radio waves A communication means for reading and writing information and communicating with the non-contact IC tag by the communication means, and using the mutual authentication information preset in the non-contact IC tag, A public key is issued to an authentication means for performing mutual authentication and a security terminal device authenticated by the authentication means, and the public key is used to Receiving and storing security information encrypted after being generated by the apparatus, and the communication means stores the security information stored in the issuing storage means and the security information is set in the security terminal apparatus. The activation history information is transmitted so that the activation history information is stored together with the security information in the non-contact IC tag at the time of activation.

  According to this configuration, the activation terminal device authenticates the security terminal device by communicating with the non-contact IC tag provided in the security terminal device by the communication means. After this authentication, a public key for permitting activation is generated by generating and encrypting security information to the security terminal device. After this issuance, security information returned from the security terminal device is stored, and this security information is activated to be set in the non-contact IC tag. At the time of activation, the activation history information together with the security information is contactless IC. It was memorized in the tag.

  In other words, it is not an ambiguous method that realizes the safety of activation of security information by complying with the life cycle operation regulations established by the security system operator as in the past, but the activation terminal device and the security terminal device The activation can be performed by managing the activation history and the activation history can be managed, so that the security information can be safely authenticated and set in the security terminal device.

  The security terminal activation system according to claim 2 of the present invention further includes a first server according to claim 1 in which the activation history information is registered via the activation terminal device, and the authentication unit includes: When the activation history information in the non-contact IC tag authenticated by the mutual authentication matches the activation history information stored in the first server, the security stored in advance in the non-contact IC tag The apparatus further comprises means for performing mutual authentication with the security terminal device for activating the security terminal device having the contactless IC tag using the terminal authentication information.

  According to this configuration, even when the security terminal device is relocated after being activated, the other activation terminal device responds to the verification of the activation history information of both the non-contact IC tag and the first server. After authentication, activation can be performed. Therefore, even if the security terminal device is moved, the security information can be safely authenticated and set in the security terminal device without using an ambiguous method as in the prior art.

  The security terminal activation system according to claim 3 of the present invention is the security terminal activation system according to claim 2, wherein the first server changes the state in which the security terminal device transitions to the next state after the activation is completed individually for each security terminal device. Means for storing security terminal individual management information to be managed, and when there is an authentication request with the security terminal authentication information from the security terminal device, the security terminal authentication information and the security stored in the first server A second server that collates with the terminal individual management information, authenticates that the activation of the security terminal device is normally executed when the collation result is coincident, and transmits the security information to the authenticated security terminal device Is further provided.

  According to this configuration, when there is a security information transmission request from a security terminal device, authentication is performed using the security terminal authentication information of the security terminal device, and activation is normally executed in the security terminal device. Since the security information is transmitted only when it is normal, the security information can be transmitted properly.

  An activation terminal device according to claim 4 of the present invention is connected to a security terminal device having a non-contact IC tag that communicates information with radio waves in a non-contact state with other communication devices. In the activation terminal device for activating the setting of security information with a secret key, communication means for communicating with the non-contact IC tag by radio waves and reading / writing information, and the non-contact IC in the communication means Communicating with the tag and using the mutual authentication information preset in the non-contact IC tag, authenticating means for mutual authentication with the security terminal device to be activated, and releasing it to the security terminal device authenticated by the authenticating means Issuance storage means for issuing a key and receiving and storing security information encrypted after being generated by the security terminal device with the public key. Means, the security information stored in the issuing storage means, the security information and transmits such activation is set to the security terminal device is performed.

  According to this configuration, the activation terminal device authenticates the security terminal device by communicating with the contactless IC tag provided in the security terminal device by the communication means. After the authentication, a public key for permitting activation by generating and encrypting security information is issued to the security terminal device. The security information returned from the security terminal device after the issuance is stored, and the security information is activated to be set in the non-contact IC tag. In other words, it is not an ambiguous method of realizing the safety of activation of security information by complying with the life cycle operation regulations established by the security system operator as in the past, but the activation terminal device and the security terminal device Since the authentication can be executed and activated, the security information can be safely authenticated and set in the security terminal device.

  As described above, according to the present invention, there is an effect that security information can be safely authenticated and set in the security terminal device.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, parts corresponding to each other in all the drawings in this specification are denoted by the same reference numerals, and description of the overlapping parts will be omitted as appropriate.
(Embodiment)
FIG. 1 shows the configuration of a security terminal activation system according to an embodiment of the present invention, (a) shows the configuration of the security terminal device, and (b) is a block diagram showing the configuration of the activation terminal device. .

The security terminal device 21 shown in (a) incorporates a non-contact IC tag 21a, and this non-contact IC tag 21a includes a non-contact IC tag antenna 21b and a non-contact IC tag IC chip 21c. The non-contact IC tag IC chip 21c includes a non-contact IC tag identifier storage unit 21d, a non-contact IC tag authentication information storage unit 21e, and a non-contact IC tag activation log information storage unit 21f.
The security terminal device 21 includes a security terminal authentication unit 21g, and includes a security terminal identification information storage unit 21h, an activation terminal authentication information storage unit 21i, and a security terminal security information storage unit 21j in a tamper resistant structure. It is configured with.

  The activation terminal device 22 shown in (b) includes a security provider's security infrastructure management mutual authentication information storage unit 22b, a non-contact IC tag authentication log information storage unit 22c, and a non-contact IC in the tamper-resistant region 22a. In-tag security information storage unit 22d, security terminal information storage unit 22e, security terminal setting security information storage unit 22f, security terminal authentication information storage unit 22g, activated terminal secret key 22h, activated terminal authentication unit 22i And a non-contact IC tag communication reader / writer 22j in addition to the tamper-resistant region 22a.

Note that the means for storing information or the like in the above constituent elements is also simply referred to as a storage unit.
In the non-contact IC tag IC chip 21c of the security terminal device 21, the non-contact IC tag identifier is set and stored in the non-contact IC tag identifier storage unit 21d by the operator of the security system, and the non-contact IC tag authentication information is stored. The contactless IC tag authentication information is set and stored in the part 21e.

Further, information and log information obtained by activating the security terminal device 21 are stored in the non-contact IC tag activation log information storage unit 21f.
The security terminal authenticating unit 21g performs authentication between the main body of the security terminal device 21 and the activated terminal device 22 or a device in another security system.
The security terminal identification information storage unit 21h is set with a unique value in the security system in the life cycle of the security terminal device 21.

The activation terminal authentication information storage unit 21i stores information used for authentication performed after moving to the next state in the life cycle.
The security terminal security information storage unit 21j stores security information set when the security terminal device 21 is activated.
The activation terminal device 22 stores security infrastructure management mutual authentication information of the security operator in the storage unit 22b in order to perform mutual authentication with the non-contact IC tag 21a of the security terminal device 21.

The non-contact IC tag inter-authentication log information storage unit 22c includes a result of mutual authentication between the activation terminal device 22 and the non-contact IC tag 21a of the security terminal device 21, an authentication execution date and time, a non-contact IC tag identifier, Store state information.
The security information storage unit 22d in the non-contact IC tag stores information read from the non-contact IC tag 21a of the security terminal device 21.

The security terminal information storage unit 22e stores security terminal information managed by the server 23m sent from the security terminal management server 23m shown in FIG.
The security terminal setting security information storage unit 22 f stores information for the activation terminal device 22 to set in the security terminal device 21.

The security terminal authentication information storage unit 22g stores information for authenticating the security terminal device 21.
The activated terminal secret key 22h is an individual secret key held by the activated terminal device 22 and is used for concealing data from the security terminal device 21.
The activation terminal authentication unit 22i performs authentication with the security terminal device 21 and authentication with the non-contact IC tag 21a.
The non-contact IC tag communication reader / writer 22j is used when the non-contact IC tag 21a performs communication.

FIG. 2 shows the configuration of a security infrastructure to which the security terminal device 21 and the activation terminal device 22 having such a configuration are applied. However, the operator of the security system that constructs the security infrastructure is the A operator.
The A company security infrastructure 23 is constructed in order to realize consistent security by the security component cooperating with other security components based on the security policy 23a of the A company.

The security policy 23a is defined by the security system operator A that operates the security system business, and summarizes the security policy of the A company. That is, in order to realize the security policy 23a, the A operator security infrastructure 23 is constructed as a comprehensive concept.
As the security component of the carrier A that performs the cooperative operation according to the security policy 23a, the center server 23b, the host terminal device 23c, the network 23d, the IC card 23e, the non-contact IC tags 23f, 23g, 23h, 23i and the security terminal device 21 and the activation terminal device 22 described above.

Further, the security terminal device 21 of the A company is not a security component of the A company immediately after manufacture, but can be operated as an A company security component as a result of setting security information through activation. It becomes.
On the other hand, the non-contact IC tag 21a and the activation terminal device 22 of the security terminal device 21 are set with security information managed by the operator A that is already required when the security terminal device 21 is manufactured. It is in a state used for life cycle management.

Next, FIG. 3 shows the life cycle of the security terminal device 21 of the present embodiment, and the description thereof will be given.
In step S11, the security terminal device 21 is in an initial state in which no data is set immediately after manufacture, and in this state, activation for setting the data using a secret key is performed. Waiting to be activated.
When the activation in which the initial data is set using the secret key is performed in step S12, the security terminal device 21 enters the second activation waiting state in step S13. That is, it waits for the next security information managed by the operator A to be set.

When activation in which security information is set using a secret key is performed in step S14, the security terminal device 21 enters a third activation waiting state in step S15.
In this way, activation is performed N times to set the security information managed by the security operator A. In the security terminal device 21 installed at the actual operation site, in step S16, security information (non-contact IC card access) managed by the security operator used in the actual operation from the center server 23b in the N-th activation. Key-like information) is sent and set.

For the first time at this point, the security terminal device 21 becomes operable as a security component of the A carrier security infrastructure 23, and transitions to operation in step S17.
In this operation, if a life, failure, or tamper occurs in the security terminal device 21 in step S18, the security terminal device 21 is discarded in step S19, and the life cycle as the security terminal device is completed.

Next, when the security system operator A defines a life cycle in which the security terminal device 21 transitions to operation in three activations (first to third activations), the first activation This will be described with reference to FIG.
As shown in FIG. 4, it is assumed that the security terminal device 21 is connected to the activation terminal device 22 via a serial communication path 31, and the activation terminal device 22 is connected to the security terminal management server 23m via a network 23d. . Further, the non-contact IC tag communication reader / writer 22j of the activation terminal device 22 and the non-contact IC tag 21a of the security terminal device 21 can communicate with each other through a wireless communication line 34.

  In the first activation, the activation terminal device 22 activates the security terminal device 21 by setting the initial data 32 with respect to the security terminal device 21 using a secret key, and the activation result 33 is designated as security. This is done by registering with the terminal management server 23m. Security terminal management information 33-1 and security terminal individual management information 33-2 are registered in the security terminal management server 23m.

A detailed description of the first activation will be described with reference to the sequence diagram shown in FIG.
No information is set in the security terminal device 21 immediately after manufacture, but the built-in non-contact IC tag 21a has security information managed by the security system operator A (in this case, the activation terminal device 22). And a mutual authentication key between the security terminal device 21). In addition, security information managed by the operator A is set in the activation terminal device 22 in advance.

In such an initial state, in step S21, the activation terminal device 22 and the non-contact IC tag 21a perform mutual authentication using preset security information.
If this mutual authentication is successful, the activation terminal device 22 distributes the public key of the activation terminal private key 22h to the main body of the security terminal device 21 in step S22. In step S23, the security terminal device 21 uses the distributed public key to generate security information (described as security terminal security information in the figure) of the security terminal device 21 only once after manufacture. The generated security information is encrypted with the previous public key in step S24 and transmitted to the activation terminal device 22.

In step S25, the transmitted security information is received by the activation terminal device 22 and stored in the security terminal information storage unit 22e. In step S26, the stored security information is transmitted from the non-contact IC tag communication reader / writer 22j to the non-contact IC tag 21a.
In step S27, the security information is written and stored together with the activation log information in the non-contact IC tag activation log information storage unit 21f of the non-contact IC tag 21a.

After this storage, in step S28, the activation terminal device 22 recognizes that the first activation has been completed, and transmits the activation log information as a result to the security terminal management server 23m for registration.
As a result, the security terminal device 21 transits to the second activation waiting state. This transition record is registered by the activation terminal device 22 as the security terminal individual management information 33-2 of the security terminal management server 23m.

Next, the second activation will be described with reference to FIGS.
In the second activation waiting state, the place where the security terminal device 21 shown in FIG. 6 exists is different from that in the first activation. Further, an activation terminal device 22-1 different from the activation terminal device 22 that has performed the first activation is provided, and the activation terminal device 22-1 activates the security terminal device 21, 2 activation result 33 is registered in the security terminal management server 23m.

In FIG. 6, an arrow 36 indicates reading of non-contact IC tag activation log information from the non-contact IC tag activation log information storage unit 21 f of the non-contact IC tag 21 a by the activation terminal device 22-1. An arrow Y37 indicates acquisition of the security terminal individual management information 33-2 from the security terminal management server 23m by the activation terminal device 22-1.
A detailed description of the second activation will be described with reference to the sequence diagram shown in FIG.

When the security terminal device 21 is in the second activation waiting state, the activation terminal device 22-1 first determines whether or not the first activation is properly performed in the security terminal device 21.
For this determination, in step S31, the activation terminal device 22-1 and the security terminal device 21 perform mutual authentication using preset security information.

After this authentication is obtained, in step S32, the activation terminal device 22-1 reads and acquires the non-contact IC tag activation log information from the non-contact IC tag 21a by secure communication.
In step S33, the activation terminal device 22-1 acquires the security terminal activation log information from the security terminal management server 23m, and in step S34, the activation log information and the previously acquired contactless IC tag. Check activation log information. If this collation result is OK, it means that the life cycle is protected as defined and the first activation is performed correctly.

In step S35, the activation terminal device 22-1 reads and acquires the security terminal authentication information set in the non-contact IC tag 21a. In step S36, the activation terminal device 22-1 performs mutual authentication with the security terminal device 21 using the acquired security terminal authentication information.
After this authentication is obtained, in step S37, session keys are established in the activation terminal device 22-1 and the security terminal device 21, and in step S38, the security provider held by the activation terminal device 22-1 is established. A management security information is transmitted to the security terminal device 21.

However, the security information managed by the security operator A is information used for authentication in the next activation, and in the life cycle of the security operator A handled here, information for entering the operation is the center server 23b. Is obtained as information necessary for authentication between the security terminal device 21 and the center server 23b.
In step S39, the security terminal device 21 stores and saves the security information transmitted from the activation terminal device 22-1.

Here, when the activation terminal device 22-1 continues to be activated in the life cycle of the security terminal device 21, the activation terminal device 22-1 transmits the security information of the security terminal device 21 to the non-contact IC in step S40. Write to tag 21a.
Further, in step S41, the activation terminal device 22-1 transmits and registers security terminal activation log information to the security terminal management server 23m. Thereafter, in step S42, the security terminal device 21 stores the security information and the activation log information in the non-contact IC tag 21a, and transitions to a third activation waiting state.

Next, the third activation will be described with reference to FIGS.
In the third activation waiting state, the security terminal device 21 shown in FIG. 8 in this state is connected to the center server 23b via the network 23d. The center server 23b is connected to the security terminal management server 23m via the network 23d.

  In FIG. 8, an arrow 41 indicates a request for acquiring security information from the security terminal device 21 to the center server 23b, and an arrow Y42 indicates transmission of security information from the center server 23b to the security terminal device 21 in response to the request. Indicates. An arrow 44 indicates a request for acquiring the security terminal individual management information 33-2 from the center server 23b to the security terminal management server 23m, and an arrow Y45 indicates a security terminal from the security terminal management server 23m to the center server 23b according to the request. The transmission of the individual management information 33-2 is shown.

  In this third activation waiting state, when the security terminal device 21 is authenticated by the center server 23b, the security terminal device 21 receives security information necessary for operation from the center server 23b. When it is determined whether the security terminal device 21 has been activated according to the life cycle defined by the security operator A, the center server 23b receives the security terminal individual management information 33-2 from the security terminal management server 23m and determines. . When this determination is OK, the center server 23b distributes the security information 47 managed by the security operator A necessary for the operation to the security terminal device 21.

A detailed description of the third activation will be described with reference to the sequence diagram shown in FIG.
In step S51, the security terminal device 21 makes an authentication request to the center server 23b with the security information stored in the security terminal security information storage unit 21j. The security information is the security information acquired from the activation terminal device 22-1 in the second activation described above. This security information includes security terminal identification information and information necessary for authentication with the center server 23b.

  In step S52, the center server 23b requests the security terminal management server 23m to obtain the security terminal individual management information 33-2. The security terminal individual management information 33-2 is described as terminal management information in FIG. In step S53, the security terminal management server 23m transmits the security terminal individual management information 33-2 according to the request to the center server 23b.

In step S54, the center server 23b compares the transmitted security terminal individual management information 33-2 with the security terminal authentication information included in the security information 47. By this verification, it is authenticated that the security terminal device 21 has been correctly activated in accordance with the life cycle regulations.
Here, if it is authenticated that the activation has been correctly performed, the center server 23b transmits the authentication result and the data of the security terminal individual management information 33-2 in step S55.

  In step S56, the security terminal device 21 authenticates that the center server 23b is the correct center server 23b based on the transmitted data. After this authentication, in step S57, the security terminal device 21 sends a transmission request for security information necessary for operation to the center server 23b. This requested security information corresponds to an IC card access key in the case of an IC card system, for example.

  In step S58, the center server 23b transmits security information corresponding to the request to the security terminal device 21. In step S59, the security terminal device 21 stores and stores the transmitted security information in the security terminal security information storage unit 21j. This stored security information is used for operation.

  As described above, according to the security terminal activation system of the present embodiment, the activation terminal device 22 is connected to the non-contact IC tag 21a provided in the security terminal device 21 by the non-contact IC tag communication reader / writer 22j. The security terminal device 21 is authenticated by communicating with. After the authentication, a public key for permitting activation is issued to the security terminal device 21 by generating and encrypting security information. After this issuance, security information returned from the security terminal device 21 is stored, and the first activation in which this security information is set in the non-contact IC tag 21a is performed. At this activation, the activation log information is the security information. The information is stored in the non-contact IC tag 21a together with the information.

  Therefore, the security terminal device is not the vague method of realizing the safety of activation of security information by complying with the life cycle operation regulations established by the security system operator as in the past, but the activation terminal device 22 uses the security terminal device. Since the activation history can be managed by executing the authentication with the authentication terminal 21, the security information can be safely authenticated and set in the security terminal device 21.

  Even if the security terminal device 21 is moved after being activated, the other activation terminal device 22 authenticates according to the verification of the activation history information of both the non-contact IC tag and the security terminal management server 23m. This can be followed by activation. Therefore, even if the security terminal device 21 is moved, the security information can be safely authenticated and set in the security terminal device 21 without using an ambiguous method as in the prior art.

Further, when there is a security information transmission request from the security terminal device 21 to the center server 23b, the center server 23b performs authentication with the security terminal authentication information of the security terminal device 21 and the security terminal device. In step 21, it is determined whether the activation has been executed normally. Since the security information is transmitted only when the activation is normal, the security information can be transmitted properly.
Therefore, fraud can be prevented by appropriately monitoring that the life cycle defined by the security system operator is executed in the process from the production to the operation of the security terminal device 21.

The structure of the security terminal activation system which concerns on embodiment of this invention is shown, (a) shows the structure of a security terminal device, (b) is a block diagram which shows the structure of an activation terminal device. It is a figure which shows the structure of the security infrastructure to which the activation terminal device of the security terminal device which concerns on the said embodiment is applied. It is a figure which shows the life cycle of the security terminal device in the said embodiment. It is a block diagram for demonstrating the 1st activation when the activation in the life cycle of the security terminal device in the said embodiment is prescribed | regulated 3 times. It is a sequence diagram for demonstrating the 1st activation when the activation in the life cycle of the security terminal device in the said embodiment is prescribed | regulated 3 times. It is a block diagram for demonstrating the 2nd activation when the activation in the life cycle of the security terminal device in the said embodiment is prescribed | regulated 3 times. It is a sequence diagram for demonstrating the 2nd activation when the activation in the life cycle of the security terminal device in the said embodiment is prescribed | regulated 3 times. It is a block diagram for demonstrating the 3rd activation when the activation in the life cycle of the security terminal device in the said embodiment is prescribed | regulated 3 times. It is a sequence diagram for demonstrating the 3rd activation when the activation in the life cycle of the security terminal device in the said embodiment is prescribed | regulated 3 times. It is a block diagram which shows the structure of the conventional security terminal device. It is a figure which shows the structure of the security infrastructure to which the conventional security terminal device is applied. It is a figure which shows the life cycle of the conventional security terminal device.

Explanation of symbols

21 security terminal device 21a non-contact IC tag 21b non-contact IC tag antenna 21c non-contact IC tag IC chip 21d non-contact IC tag identifier storage unit 21e non-contact IC tag authentication information storage unit 21f non-contact IC tag activation log information storage unit 21g Security terminal authentication unit 21h Security terminal identification information storage unit 21i Activation terminal authentication information storage unit 21j Security terminal security information storage unit 22, 22-1 Activation terminal device 21a Tamper resistant area 22b Security infrastructure management mutual authentication information storage unit 22c Non-contact IC tag authentication log information storage unit 22d Non-contact IC tag security information storage unit 22e Security terminal information storage unit 22f Security terminal setting security information storage unit 22g Security terminal authentication Information storage unit 22h Activation terminal private key 22i Activation terminal authentication unit 22j Reader / writer for non-contact IC tag communication 23 A provider security infrastructure 23a A provider security policy 23b A provider center server 23c A provider Higher-level terminal device 23d A carrier's network 23e A carrier's IC card 23f, 23g, 23h, 23i A carrier's non-contact IC tag 23m Security terminal management server 31 Serial communication path 32 Initial data 33 Activity of security terminal device 33-1 Security terminal management information 33-2 Security terminal individual management information 34 Wireless communication line 36 Reading of contactless IC tag activation log information 37 Acquisition of security terminal individual management information 41 Request for acquisition of security information 42 Transmission 47 security information request 45 security terminal individual management information for obtaining the transmission 44 security terminal individual management information Kyuriti Information

Claims (4)

A security terminal device having a non-contact IC tag that communicates information with radio waves in a non-contact state with another communication device, and an activation terminal that activates the security terminal device to set security information with a secret key In a security terminal activation system having a device,
In the activation terminal device,
Communication means for communicating with the non-contact IC tag by radio waves and reading / writing information;
Authentication means for communicating with the non-contact IC tag in the communication means, and performing mutual authentication with the security terminal device to be activated using the mutual authentication information preset in the non-contact IC tag;
Issuing storage means for issuing a public key to the security terminal device authenticated by the authentication means, and receiving and storing security information encrypted after being generated by the security terminal device with this public key,
The communication means activates the security information stored in the issue storage means so that the security information is set in the security terminal device, and the activation history information together with the security information is activated at the time of activation. A security terminal activation system, characterized by being transmitted so as to be stored in A first server in which the activation history information is registered via the activation terminal device;
When the activation history information in the non-contact IC tag authenticated by the mutual authentication matches the activation history information stored in the first server, the authentication unit stores in advance the non-contact IC tag. A means for performing mutual authentication with the security terminal device for activating the security terminal device having the contactless IC tag using the stored security terminal authentication information is further provided. The security terminal activation system according to 1. The first server further includes means for storing, as security terminal individual management information for managing each security terminal apparatus individually, a state in which the security terminal apparatus transitions to the next state after activation is completed,
When there is an authentication request with the security terminal authentication information from the security terminal device, the security terminal authentication information and the security terminal individual management information stored in the first server are collated, and the collation result matches. 3. The method according to claim 2, further comprising: a second server that authenticates that the activation of the security terminal device is normally executed and transmits security information to the authenticated security terminal device. Security terminal activation system. Activity for activation of setting security information with a secret key connected to a security terminal device having a non-contact IC tag that communicates information with radio waves in a non-contact state with other communication devices In an integrated terminal device,
Communication means for communicating with the non-contact IC tag by radio waves and reading / writing information;
Authentication means for communicating with the non-contact IC tag in the communication means, and performing mutual authentication with the security terminal device to be activated using the mutual authentication information preset in the non-contact IC tag;
Issuing storage means for issuing a public key to the security terminal device authenticated by the authentication means, and receiving and storing security information encrypted after being generated by the security terminal device with this public key,
The activation terminal apparatus, wherein the communication means transmits the security information stored in the issue storage means so that the security information is activated to be set in the security terminal apparatus.

Images