JP4558387B2 - User authentication system and method - Google Patents

Description

  The present invention relates to a user authentication system and method.

  In recent years, a mobile phone terminal can access servers of various service providers via the Internet, and a user of the mobile phone terminal can enjoy various services. When using these services, an ID (identification information) unique to the service user, for example, a mobile phone number is used.

As an example of the service using the user-specific ID described above, one ID is issued to a user who uses a plurality of mobile phone terminals of different communication methods, and this ID is registered in each mobile phone terminal. A system is known in which usage fees for each mobile phone terminal are centralized and tabulated based on the common ID and charged to the corresponding user (for example, see Patent Document 1).
Japanese Patent No. 3379517

  However, in the conventional technology described above, various services are provided by using unique IDs for users, and therefore, what services a specific user uses is tracked by a third party based on the IDs. There is a risk of being.

  For this reason, if a disposable temporary ID can be used, it is almost impossible to identify a user from the ID, and therefore a user authentication system based on a temporary ID is desired to be realized. However, if all the issued temporary IDs are recorded and managed for each user in order to identify the user by the temporary ID, the amount of management data increases.

  The present invention has been made in view of such circumstances, and an object of the present invention is to perform a user authentication using a disposable ID and a user authentication system and method capable of reducing management data. Is to provide.

In order to solve the above-described problem, a user authentication system according to the present invention is a user authentication system including a user terminal and an authentication device that is communicatively connected from the user terminal, and the authentication device includes: Means for generating user-specific master temporary identification information based on a request from the user terminal, and subtemporary identification information by repeatedly using a one-way conversion function from the master temporary identification information one or more times. means for creating a, and database means for managing one of the master temporary identification information for each user and maximum use of the one-way converting function, based on the validation request disposable temporary information of the person to be authenticated, the Verification means for verifying disposable temporary information, wherein the user terminal converts the one-way conversion function from the master temporary identification information. Means for creating sub-temporary identification information by repeatedly using it once or a plurality of times; means for creating disposable temporary information including the created sub-temporary identification information and the number of times the unidirectional conversion function is used at the time of creation; The verification means includes means for searching for management data of the user corresponding to the authentication-requested user from the database means, master temporary identification information in the searched management data, and the user to be authenticated. And means for reproducing the sub-temporary identification information from the number of times of use of the one-way conversion function in the disposable temporary information and verifying the authenticated user's disposable temporary information, and the unidirectionality in the authenticated user's disposable temporary information number of uses of the transformation function, and means for confirming that is less than or equal to the maximum number of uses in the management data the search, the It is characterized in that.

In the user authentication system according to the present invention, the user terminal includes storage means for storing the number of times the unidirectional conversion function is used when the sub-temporary identification information is created, and from the same master temporary identification information, When the sub-temporary identification information is created again, the number of uses is less than the number of uses of the previous one-way conversion function, and the database unit of the authentication device uses the one-way conversion function in the disposable temporary information of the person to be authenticated. The number of times of use is stored as update data of the maximum number of times of use of the person to be authenticated .

  In the user authentication system according to the present invention, the authentication device performs database management of the number of uses of the one-way conversion function for each user, and the master temporary identification information is determined based on the number of uses of the one-way conversion function. The number of times of use is limited.

A user authentication method according to the present invention is a user authentication method in a user authentication system including a user terminal and an authentication device that is connected to be communicated from the user terminal, wherein the authentication device is the user. based on the request from the terminal, and generating a user-specific master temporary identification information, the steps of database management and one of said master temporary identification information and maximum use of the one-way conversion function for each user The user terminal creates sub-temporary identification information from the master temporary identification information by repeatedly using the one-way conversion function one or more times, the created sub-temporary identification information, and the creation time A process of creating disposable temporary information including the number of times the unidirectional conversion function is used, and the authentication device uses the authentication subject Based on the verification request for the temporary information, the process of searching the database for the management data of the user corresponding to the verification-requested user, the master temporary identification information in the searched management data and the disposable temporary information of the authentication-target person The process of reproducing the sub-temporary identification information from the number of times the unidirectional conversion function is used and verifying the authenticated user's disposable temporary information, and the use of the unidirectional conversion function in the authenticated user's disposable temporary information And a step of confirming that the number of times is less than or equal to the maximum number of times of use in the retrieved management data .

In the user authentication method according to the present invention, the user terminal stores in a storage means the number of times the unidirectional conversion function is used when the subtemporal identification information is created, and the sub-temporary identification information is used to store the subtemporal identification information. When the temporary identification information is created again, the number of times of use is smaller than the number of times of use of the previous one-way conversion function, and the authentication device sets the number of times of use of the one-way conversion function in the authentication subject's disposable temporary information. , And stored in a database as update data of the maximum number of times of use of the person to be authenticated .

  In the user authentication method according to the present invention, the authentication device performs database management of the number of times of use of the one-way conversion function for each user, and the master temporary according to the number of times of use of the one-way conversion function. And a step of limiting the number of times the identification information is used.

  According to the present invention, user authentication can be performed using disposable master temporary identification information. Further, by creating the sub-temporary identification information from the master temporary identification information by repeatedly using the unidirectional conversion function once or a plurality of times, the sub-temporary ID is obtained from only the master temporary identification information and the number of times the unidirectional conversion function is used. Can be uniquely identified. As a result, only one master temporary identification information and the number of uses of the one-way conversion function need be managed for one user, so that management data can be reduced.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a user authentication system according to an embodiment of the present invention. In FIG. 1, a mobile phone terminal 1 is a subscriber terminal of a mobile phone communication network 2. The mobile phone terminal 1 has a function of performing voice call and data communication via the mobile phone communication network 2 by wireless communication. The cellular phone communication network 2 is connected to the Internet 5. The mobile phone terminal 1 can connect to the Internet 5 via the mobile phone communication network 2 and access various service provider servers 6 on the Internet 5.

  The communication carrier server 3 is a server of a carrier of the mobile phone communication network 2 and is connected to the mobile phone communication network 2 and the Internet 5 for communication. The communication carrier server 3 has a function for performing user authentication using a temporary ID. The mobile phone terminal 1 can access the carrier server 3 via the mobile phone communication network 2. The ID management database 4 stores ID management data of subscribers of the mobile phone communication network 2 and is managed by a business operator of the mobile phone communication network 2. The telecommunications carrier server 3 can access the ID management database 4 by communication and search and acquire ID management data.

Next, operations related to the user authentication system of FIG. 1 will be described with reference to FIG.
FIG. 2 is a sequence chart showing the flow of user authentication processing in the user authentication system shown in FIG.
First, the user inputs authentication information (password, fingerprint, etc.) to the mobile phone terminal 1 to make the mobile phone terminal 1 usable. Then, the mobile phone terminal 1 is operated to activate software for issuing a master temporary ID. Thereby, the cellular phone terminal 1 accesses the communication carrier server 3 and performs terminal authentication processing with the communication carrier server 3 (step S1). If access is permitted as a result of this authentication, the cellular phone terminal 1 requests the master temporary ID to the communication carrier server 3 (step S2).

  Next, the communication carrier server 3 generates a master temporary ID (mT-ID) based on the master temporary ID request from the mobile phone terminal 1 (step S3). The master temporary ID is generated using a random number or the like so as not to be duplicated among other subscribers. Further, the telecommunications carrier server 3 sets the maximum use count and expiration date of the master temporary ID. Then, the master temporary ID, the maximum use count, and the expiration date information are included in the ID management data of the subscriber and stored in the ID management database 4. Here, the maximum use count is stored as an initial value of the counter value V. The ID management data includes the subscriber's ID (U-ID).

  Next, the telecommunications carrier server 3 transmits the master temporary ID (mT-ID), the maximum number of times of use, and the expiration date information to the mobile phone terminal 1 (step S4). The transmission data is secured by encryption or the like. Next, the cellular phone terminal 1 stores each information received from the communication carrier server 3 in a memory (step S5). The master temporary ID (mT-ID) can be changed according to a request from the user, and is a disposable ID.

  Next, when using a desired service, the user operates the mobile phone terminal 1 to access the corresponding service provider server 6 and makes a service provision request (step S6). If necessary, the service provider server 6 is authenticated to ensure a safe communication path.

  Next, the service provider server 6 responds to a service provision request from the mobile phone terminal 1 with service provision conditions (billing information and the like) and a service provider identifier (service provider ID, URL, public key certificate, etc.) ) Is returned (step S7). Next, the cellular phone terminal 1 starts up software for creating disposable temporary information (hereinafter referred to as disposable temporary information), and performs a process of creating disposable temporary information (step S8).

  Here, with reference to FIG. 3, the disposable temporary information creation processing in step S8 will be described. FIG. 3 is an explanatory diagram for explaining a data structure of the disposable temporary information 100 and a procedure for creating the disposable temporary information 100.

First, a sub-temporary ID (NT-ID) is created from a master temporary ID (mT-ID) stored in the mobile phone terminal 1 using a one-way conversion function. In this embodiment, a one-way hash function is used as an example of a one-way conversion function. Specifically, a master temporary ID (mT-ID) is input to a one-way hash function to obtain a converted value (1T-ID). Further, the conversion value (1T-ID) is input again to the one-way hash function to obtain the conversion value (2T-ID). This conversion operation is repeated N times to obtain a conversion value (NT-ID), which is used as a sub-temporary ID (NT-ID) (step S101 in FIG. 3).
N is an arbitrary natural number equal to or less than the maximum number of times stored in the mobile phone terminal 1. However, when a sub-temporary ID (NT-ID) is created again from the same master temporary ID (mT-ID), a value smaller than the previous N value is used. For this reason, the value of N used this time is stored in the memory of the mobile phone terminal 1.

Next, the sub-temporary ID (NT-ID) and N are concatenated to create concatenated data T. Next, the encrypted data Enc (mT-ID | T) is created by encrypting the master temporary ID (mT-ID) and the concatenated data T with the public key Pu_C.
The public key Pu_C is a public key of an operator of the mobile phone communication network 2 and is recorded in advance in the memory of the mobile phone terminal 1.

Next, the concatenated data T and the key K are input to a message authenticator creation function (HMAC or the like can be used) to obtain a temporary key NK (step S102 in FIG. 3).
The key K is a key unique to the user of the mobile phone terminal 1 and is recorded in advance in the memory of the mobile phone terminal 1.

  Next, the encrypted data Enc (mT-ID | T), the service provision conditions (billing information, etc.) received from the service provider server 6 and the service provider identifier are concatenated to create concatenated data Info. Next, the concatenated data Info is encrypted with the key NK, and this encrypted data is input to the message authenticator creation function to create a message authenticator Mac (Info) (step S103 in FIG. 3). Next, the temporary data 100 is created by concatenating the concatenated data Info and the message authenticator Mac (Info).

Returning to FIG. Next, the cellular phone terminal 1 transmits the disposable temporary information to the service provider server 6 (step S9). Next, the service provider server 6 transmits the disposable temporary information received from the mobile phone terminal 1 to the communication carrier server 3 and requests verification (step S10). If necessary, mutual authentication is performed between the service provider server 6 and the communication carrier server 3 to secure a safe communication path.
Next, the telecommunications carrier server 3 performs verification processing of the received disposable temporary information based on the request from the service provider server 6 (step S11).

Here, the disposable temporary information verification process in step S11 will be described using the disposable temporary information 100 of FIG. 3 as an example.
First, the concatenated data Info is extracted from the disposable temporary information 100, and the encrypted data Enc (mT-ID | T) is extracted from the concatenated data Info. Next, the encrypted data Enc (mT-ID | T) is decrypted with the private key of the operator of the cellular phone communication network 2 to obtain the master temporary ID (mT-ID) and the concatenated data T.

  Next, the ID management data is searched from the ID management database 4 using the master temporary ID (mT-ID) as a search key. If ID management data including a master temporary ID (mT-ID) is found as a result of this search, U-ID, counter value V, expiration date information, and the like are extracted from the ID management data. Then, based on the expiration date information, the expiration date of the master temporary ID (mT-ID) is confirmed (first verification). Further, N is extracted from the concatenated data T, and it is confirmed that N is equal to or less than the counter value V (second verification). Similarly to step S101 in FIG. 3, the master temporary ID (mT-ID) is repeatedly converted N times by a one-way hash function, and the converted value (reproduction data of the sub-temporary ID (NT-ID)) and It is confirmed that the sub-temporary ID (NT-ID) extracted from the concatenated data T matches (third verification).

  Note that the master temporary ID (mT-ID) used to reproduce the sub-temporary ID (NT-ID) in the third verification is the master temporary ID (mT-ID) in the ID management data retrieved from the ID management database 4. ID) is the principle. However, in this embodiment, since the ID management data is searched using the master temporary ID (mT-ID) in the disposable temporary information as a search key, the master temporary ID in the disposable temporary information and the ID management data in the search result ID The master temporary ID is the same, and any master temporary ID can be used to reproduce the sub-temporary ID with no problem.

  Next, a key NK is created from the concatenated data T and the key K as in step S102 of FIG. This key K may be generated from the key mK unique to the operator of the mobile phone communication network 2 and the U-ID, or may be included in ID management data in advance. Next, as in step S103 of FIG. 3, a message authenticator is created from the key NK and the concatenated data Info, and it is confirmed that it matches the message authenticator Mac (Info) extracted from the disposable temporary information 100 (fourth). Verification).

  When all the first to fourth verifications are successful, the verification of the disposable temporary information is successful.

  Next, the telecommunications carrier server 3 stores information such as billing information in the connection data Info in a subscriber database (not shown) in association with the U-ID of the subscriber. Next, the telecommunications carrier server 3 includes N obtained from the disposable temporary information as update data of the counter value V in the ID management database 4 by including it in the ID management data of the subscriber. When N is 1, since the master temporary ID (mT-ID) has reached the use frequency limit, processing for invalidating is performed. For example, the master temporary ID (mT-ID) is deleted from the ID management data.

  Returning to FIG. Next, the telecommunications carrier server 3 transmits the verification result of the disposable temporary information to the service provider server 6 (step S12). Next, based on the verification result received from the communication carrier server 3, the service provider server 6 starts providing the service to the mobile phone terminal 1 if the verification is successful (step S13). If necessary, a sub-temporary ID (NT-ID) can be used as the user ID for providing the service this time.

  According to the embodiment described above, user authentication can be performed using a disposable master temporary ID. Further, by creating a sub-temporary ID from the master temporary ID by repeatedly using the unidirectional conversion function once or a plurality of times, the sub-temporary ID is determined from only the master temporary ID and the number of uses (N) of the unidirectional conversion function. Can be uniquely identified. As a result, since only one master temporary ID and the number of uses (N) of the one-way conversion function need be managed for one user, ID management data can be reduced.

The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like within a scope not departing from the gist of the present invention.
For example, the maximum number of times the master temporary ID is used may be determined and set by the user. In this case, N when the sub-temporary ID (NT-ID) is first created using the one-way conversion function from the master temporary ID (mT-ID) corresponds to the maximum number of times of use.

  Further, instead of the encryption data Enc (mT-ID | T), the encryption data Enc (U-ID | T) using the U-ID may be created and used. That is, information that can identify the person to be authenticated may be encrypted and used. In this case, the telecommunications carrier server 3 searches the ID management database 4 by U-ID and reproduces the sub-temporary ID (NT-ID) using the master temporary ID (mT-ID) in the found ID management data. Then, the third verification is performed by comparing with the sub-temporary ID (NT-ID) in the disposable temporary information.

  Note that the user authentication system according to the present invention can be applied to authentication of a service provider site, billing agency service, and the like. In the above-described embodiment, the mobile phone terminal accesses the service provider server on the Internet via the mobile phone communication network, but may access the service provider device by local communication. For example, the service provider server may be accessed by infrared communication, short-range wireless communication, or wired communication using a communication cable.

  Further, the authentication device is not limited to a telecommunications carrier server. Further, the user terminal is not limited to a mobile communication terminal such as a mobile phone terminal, and may be connected to a wired communication network such as a fixed telephone network to access the authentication device.

It is a block diagram which shows the structure of the user authentication system which concerns on one Embodiment of this invention. It is a sequence chart which shows the flow of the user authentication process in the user authentication system shown in FIG. It is explanatory drawing for demonstrating the data structure of the disposable temporary information 100, and the preparation procedure of the disposable temporary information 100. FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Cell-phone terminal, 2 ... Cell-phone communication network, 3 ... Communication carrier server, 4 ... ID management database, 5 ... Internet, 6 ... Service provider server.

Claims (4)

A user authentication system comprising a user terminal and an authentication device that is communicatively connected from the user terminal,
The authentication device
Means for generating user-specific master temporary identification information based on a request from the user terminal;
Means for creating sub-temporary identification information from the master temporary identification information by repeatedly using a one-way conversion function one or more times;
And database means for managing one of the master temporary identification information and maximum use of the one-way conversion function for each user,
A verification means for verifying the disposable temporary information based on the verification request of the authenticated person's disposable temporary information,
The user terminal is
Means for creating sub-temporary identification information from the master temporary identification information by repeatedly using the one-way conversion function one or more times;
Means for creating disposable temporary information including the created sub-temporal identification information and the number of times the unidirectional conversion function is used at the time of creation;
The verification means includes
Means for retrieving user management data corresponding to the person to be authenticated requested from the database means;
The sub-temporary identification information is reproduced from the master temporary identification information in the retrieved management data and the number of times the unidirectional conversion function is used in the authenticated user's disposable temporary information, and the authenticated user's disposable temporary information is verified. Means ,
And a means for confirming that the number of uses of the one-way conversion function in the disposable temporary information of the person to be authenticated is equal to or less than the maximum number of uses in the searched management data. . The user terminal includes storage means for storing the number of times the unidirectional conversion function is used when the sub-temporary identification information is created, and when the sub-temporary identification information is created again from the same master temporary identification information, a few uses than the number of times of use of the one-way conversion function,
2. The database means of the authentication device stores the number of times of use of the one-way conversion function in the authenticated person's disposable temporary information as update data of the maximum number of times of use of the authenticated person. The user authentication system described in 1. A user authentication method in a user authentication system comprising a user terminal and an authentication device that is communicably connected from the user terminal,
The authentication device is
Based on a request from the user terminal, generating user-specific master temporary identification information;
The method includes the one of the master temporary identification information and maximum use of the one-way conversion function database management for each user,
The user terminal is
Creating sub-temporary identification information from the master temporary identification information by repeatedly using the one-way conversion function one or more times;
A step of creating disposable temporary information including the created sub-temporary identification information and the number of times the unidirectional conversion function is used at the time of creation;
The authentication device is
Based on the verification request of the authenticated user's disposable temporary information, the process of searching the database for the management data of the user corresponding to the verification-requested authenticated user,
The sub-temporary identification information is reproduced from the master temporary identification information in the retrieved management data and the number of times the unidirectional conversion function is used in the authenticated user's disposable temporary information, and the authenticated user's disposable temporary information is verified. Process,
A process of confirming that the number of uses of the one-way conversion function in the disposable temporary information of the authentication subject is equal to or less than the maximum number of uses in the searched management data;
A user authentication method comprising: When the user terminal stores the number of times of use of the one-way conversion function at the time of creating the sub-temporary identification information in a storage unit and creates the sub-temporary identification information again from the same master temporary identification information, Use less than the one-way conversion function ,
The authentication device, the number of uses of one-way transfer function of the disposable temporary information of the person to be authenticated, to claim 3, characterized in that stored in the database as updated data of the maximum number of times of use according to said authenticator The user authentication method described.

Images