JP4973292B2 - Authentication device, authentication program, authentication system, password generation device, portable security device, and password generation program - Google Patents

Description

  The present invention relates to an authentication device, an authentication program, and an authentication system that perform authentication using a one-time password, a password generation device that generates a one-time password, a portable security device, and a password generation program.

  In recent years, an authentication system using an OTP (one-time password) that is effective only once has been widely used in order to prevent unauthorized access to the system due to interception of password communication and the like to enhance security. As a method for generating OTP, a counter synchronization method, a time synchronization method, a challenge and response method, and the like are known.

  In the counter synchronization method, first, a counter and key information used to generate an OTP are held in advance in each of a password generation device called a token and an authentication server that performs authentication. The value of the counter is incremented by each device every time authentication is executed, and synchronization is taken. Each time authentication is performed, an OTP is generated from the counter and the key information by the token and the authentication server, and authentication is performed by comparing the two.

  The time synchronization method is a method of generating OTP using time and key information on the assumption that the time is synchronized in each device instead of synchronizing the counter. The challenge-and-response method generates a random character string (challenge) instead of a counter on the authentication server side, and inputs the character string on the token side to authenticate the result (response) of the given calculation. In this method, authentication is performed by collating with a server.

  In the authentication system using OTP, the password is changed every time, so that even if the password is intercepted by communication, the password cannot be reused. For this reason, safety is improved as compared with an authentication method using a normal password.

  Patent Document 1 is an authentication system that can be applied to an application that operates on a network such as Internet banking, and uses an OTP generated by a counter synchronization method and eliminates the need to transmit a payment card detail. Technologies for enhanced authentication systems have been proposed.

  In the counter synchronization method, when the authentication server does not perform authentication even though the OTP is generated with the token due to an erroneous operation or the like, the counter value may deviate between the token and the authentication server. Since the authentication value should not be immediately disabled when the counter value is shifted in this way, the authentication server usually provides a certain range for the counter value used for verification. That is, by generating an OTP with a plurality of counter values after the held counter value and comparing it with the transmitted OTP, a deviation of the counter value is allowed within a predetermined range, and the deviation is within the range. Fix the counter to synchronize.

  For example, Patent Document 1 discloses a technique in which the least significant bit of a token-side counter is transmitted from a token to an authentication server, so that the authentication server synchronizes with a counter that matches the least significant bit within a predetermined range. ing.

JP-T-2004-524605

  However, in the method of Patent Document 1, the counter value is synchronized using the least significant bit of the counter. However, since the allowable range of the counter value deviation is not considered, the convenience of the user is improved. There was a problem that could not.

  On the other hand, in the conventional counter synchronization method, if the allowable range of the counter value is increased for the sake of convenience, there is a problem that the security decreases due to an increase in the number of passwords used for verification by the authentication server. Further, since the number of passwords used for verification increases, there is a problem that the processing time of the authentication process on the authentication server side increases.

  The present invention has been made in view of the above, and an authentication apparatus, an authentication program, an authentication system, and a password generation apparatus that can improve convenience by expanding the allowable range of counter values without reducing security An object of the present invention is to provide a portable security device and a password generation program.

  In order to solve the above-described problems and achieve the object, the present invention provides a one-time password generated based on a generation counter updated every time a password is generated from a terminal device connected via a network. An authentication apparatus that receives and authenticates, a storage unit that stores a user ID that identifies a user and an authentication counter that is updated each time the user is authenticated, and the terminal device from the user A receiving unit for receiving the ID and the one-time password including a predetermined number of digits lower than the generation counter; an extracting unit for extracting the numerical value from the received one-time password; The authentication counter corresponding to the user ID is acquired from the storage unit, and the value of the number of digits lower than the acquired authentication counter is extracted. A counter generation unit that generates a counter value that matches the written value, a password generation unit that generates a verification password based on the generated counter value, the generated verification password, and the received one-time And an authentication unit that verifies the password and authenticates the user of the received user ID. According to the present invention, the password for verification can be generated using only the counter value that matches the numerical value of the lower predetermined number of digits and can be compared with the received one-time password. Therefore, the counter can be used without increasing the number of passwords to be verified. Can be expanded. That is, convenience can be improved by expanding the allowable range of the counter value without reducing security.

  Moreover, this invention is a program which can perform the said authentication apparatus. According to the present invention, it is possible to generate a verification password using only the counter value that matches the numerical value of the lower predetermined number of digits, and to cause the authentication device to execute processing for comparison with the received one-time password. The allowable range of the counter can be expanded without increasing the number of passwords to be verified.

  In addition, the present invention provides a storage unit that stores a generation counter that is updated each time a password is generated, and a password that is generated based on the generation counter stored in the storage unit, in a lower order of the generation counter. And a display unit for displaying the one-time password with the added numerical value. The password generating unit generates a one-time password with the added number of digits. According to the present invention, it is possible to generate a one-time password to which a numerical value of a predetermined number of digits lower than the counter at the time of password generation is added. For this reason, the authentication device that verifies the one-time password can generate a verification password using only the counter value that matches the lower-order number of digits, and can compare it with the one-time password. The allowable range of the counter can be expanded without increasing the value.

  Further, the present invention provides a one-time operation in which a numerical value of a predetermined number of digits lower than the generation counter is added to a password generated based on a generation counter stored in the storage unit and updated each time a password is generated. A program capable of causing a computer to execute a password generation procedure for generating a password and an output procedure for outputting the one-time password to which the numerical value is added. According to the present invention, it is possible to cause a computer to execute a process for generating a one-time password to which a numerical value of a predetermined number of digits lower than the counter at the time of password generation is added. For this reason, the authentication device that verifies the one-time password can generate a verification password using only the counter value that matches the lower-order number of digits, and can compare it with the one-time password. The allowable range of the counter can be expanded without increasing the value.

  Further, the present invention is a portable security device that can communicate with a display device that displays a password, a storage unit that stores a generation counter that is updated each time a password is generated, and the storage unit that stores the generation counter A password generation unit that generates a one-time password by adding a predetermined number of digits lower than the generation counter to a password generated based on the generation counter, and the one-time password to which the numerical value is added And an output unit for outputting to a display device. According to the present invention, it is possible to generate a one-time password to which a numerical value of a predetermined number of digits lower than the counter at the time of password generation is added. For this reason, the authentication device that verifies the one-time password can generate a verification password using only the counter value that matches the lower-order number of digits, and can compare it with the one-time password. The allowable range of the counter can be expanded without increasing the value.

  The present invention also includes a password generation device that generates a one-time password, and an authentication device that receives and authenticates the one-time password generated by the password generation device from a terminal device connected via a network. The password generation device generates a password based on a first storage unit that stores a generation counter that is updated each time a password is generated, and the generation counter stored in the first storage unit. A first password generating unit for generating the one-time password by adding a predetermined number of digits lower than the generation counter to the password; and a display unit for displaying the one-time password to which the numerical value has been added; The authentication device includes a user ID for identifying a user and an authentication that is updated each time the user is authenticated. From the second storage unit that stores the counter in association with each other, the reception unit that receives the user ID and the one-time password generated by the password generation device from the terminal device, and the received one-time password An extraction unit that extracts the numerical value, an acquisition unit that acquires the authentication counter corresponding to the received user ID from the second storage unit, and a value of the number of digits lower than the acquired authentication counter A counter generation unit that generates a counter value that matches the numeric value, a second password generation unit that generates a verification password based on the generated counter value, and the generated verification password An authentication unit that verifies the one-time password and authenticates the user of the received user ID. To. According to the present invention, the password generation device generates a one-time password to which the numerical value of the lower predetermined number of digits of the counter at the time of password generation is added, and the authentication device has a counter in which the numerical value of the lower predetermined number of digits matches. Since the password for verification can be generated using only the value and compared with the one-time password generated by the password generation device, the allowable range of the counter can be expanded without increasing the number of passwords to be verified.

  In addition, the present invention receives and authenticates a portable security device that can communicate with a display device that displays a password, and the one-time password generated by the portable security device from a terminal device connected via a network. An authentication system comprising an authentication device for performing the authentication, wherein the portable security device stores a first counter that stores a generation counter that is updated each time a password is generated, and the first storage that is stored in the first storage A first password generation unit for generating the one-time password by adding a numerical value of a predetermined number of digits lower than the generation counter to a password generated based on the generation counter; and the one-time to which the numerical value is added An output unit for outputting a password to the display device, wherein the authentication device is a user identifying user. A second storage unit that stores the ID and an authentication counter that is updated each time the user is authenticated; the user ID from the terminal device; and the one-time password generated by the password generation device Receiving unit, an extracting unit for extracting the numerical value from the received one-time password, an acquiring unit for acquiring the authentication counter corresponding to the received user ID from the second storage unit, and A counter generation unit that generates a counter value that is larger than the authentication counter and that has a value of the lower digit that matches the extracted numeric value; and a second password that generates a verification password based on the generated counter value The generated user ID, the generated verification password and the received one-time password are verified, and the received user ID Characterized by comprising an authentication unit authenticating the user. According to the present invention, the portable security device generates a one-time password to which the numerical value of the lower-order predetermined number of digits of the counter at the time of password generation is added, and the authentication device matches the numerical value of the lower-order predetermined number of digits. Since the password for verification can be generated using only the counter value and compared with the one-time password generated by the portable security device, the allowable range of the counter can be expanded without increasing the number of passwords to be verified.

  According to the present invention, there is an effect that convenience can be improved by expanding the allowable range of the counter value without reducing security.

  Exemplary embodiments of an authentication device, an authentication program, an authentication system, a password generation device, a portable security device, and a password generation program according to the present invention will be described below in detail with reference to the accompanying drawings.

(First embodiment)
The authentication system according to the first embodiment adds the last one digit value of the counter value on the token side to the OTP (one-time password) generated by the token. A one-digit numerical value is extracted, an OTP is generated using a counter value that matches the last one digit after the held counter value, and collated with the received OTP.

  Hereinafter, an authentication system that performs OTP authentication in an authentication process for a WEB server that provides an Internet banking application will be described as an example. Note that the applicable system is not limited to such an Internet application, and can be applied to any system as long as it is an authentication system using a counter-synchronized OTP.

  FIG. 1 is a block diagram illustrating a configuration of an authentication system according to the first embodiment. As shown in FIG. 1, the authentication system of the present embodiment includes a terminal device 10, a WEB server 20, and an authentication server 200 as an authentication device connected via a network 30 based on the Internet, and a password generation device. The token 100 is configured as follows.

  Here, the hardware configuration of the token 100 will be described. FIG. 2 is an explanatory diagram illustrating an example of a hardware configuration of the token 100 according to the first embodiment.

  The token 100 according to the first embodiment includes a control device such as a CPU (Central Processing Unit) 61, a storage device such as a ROM (Read Only Memory) 62 and a RAM (Random Access Memory) 63, a generated password, and the like. A display device 64 that can display a password, an operation button 65 that is an input device including a button for inputting a PIN (Personal Identification Number), a button for starting password generation, and the like, and a bus 66 that connects each unit. .

  Returning to FIG. 1, the function of each device will be described. First, the terminal device 10 will be described. The terminal device 10 is a client terminal operated by a user of an internet banking application, and includes an input unit 11, a display unit 12, an application unit 13, and a transmission / reception unit 14.

  The input unit 11 is an interface such as a keyboard and a mouse for the user to input information and commands necessary for the operation of the application. The display unit 12 is a display device such as a display that displays a WEB browser screen or the like to the user.

  The application unit 13 controls the operation of the WEB browser necessary for executing the Internet banking application. The transmission / reception unit 14 transmits / receives various information (user ID, OTP, etc.) necessary for the operation of the application to / from the WEB server 20 via the network 30.

  Next, the WEB server 20 will be described. The WEB server 20 is a server device that provides an Internet banking application. The WEB server 20 may be configured to provide a WEB application other than the Internet banking application. Moreover, it is not necessary to be an application using the Internet like the WEB server 20, and a server device that provides all other forms of applications can be provided instead of the WEB server 20.

  Next, the token 100 will be described. The token 100 generates an OTP by a counter synchronization method, and includes a counter storage unit 121, an operation unit 122, a display unit 123, an individual key storage unit 124, a PIN authentication unit 101, and a password generation unit 102. The counter generation unit 103 and the control unit 111 are provided.

  The counter storage unit 121 stores a generation counter (hereinafter simply referred to as a counter) that is incremented every time an OTP is generated by the counter generation unit 103. FIG. 3 is an explanatory diagram illustrating an example of a data structure of information stored in the counter storage unit 121. As shown in the figure, the counter storage unit 121 stores a counter managed on the token 100 side. The individual key storage unit 124 stores individual key information unique to the token 100.

  Returning to FIG. 1, the operation unit 122 is an input interface including a numeric keypad for inputting a PIN, an OTP generation button for starting OTP generation, and the like. Note that if PIN input is not required, it is sufficient that an input interface such as a button for instructing the start of OTP generation is provided at a minimum. The display unit 123 displays the generated OTP to the user.

  The PIN authentication unit 101 performs authentication of the PIN input from the operation unit 122. The PIN authentication unit 101 authenticates the PIN depending on whether the PIN stored in advance in a storage unit (not shown) or the like matches the PIN input by the user.

  The password generation unit 102 generates an OTP by a counter synchronization method. The password generation unit 102 first generates a password from the counter stored in the counter storage unit 121 and the individual key information stored in the individual key storage unit 124 by a method similar to a normal counter synchronization method. Then, the password generation unit 102 adds the last one digit of the counter used at this time to the end of the generated password, and generates the output OTP.

  The number of digits of the counter to be added is not limited to the last one digit, and a numerical value of two digits or more may be added. However, if the number of added digits increases, the number of digits in the entire OTP increases and the input burden on the user increases. Therefore, it is desirable to add a numerical value with a minimum number of digits. Further, the position where the numerical value is added is not limited to the end of the password, but may be configured to be added to the beginning, or may be configured to be inserted after a predetermined digit of the password.

  The control unit 111 controls the entire OTP generation process. For example, when a PIN is input from the operation unit 122, the control unit 111 controls processing for authenticating the PIN input by the PIN authentication unit 101. The control unit 111 also controls processing for displaying the OTP generated by the password generation unit 102 on the display unit 123.

  Next, the authentication server 200 will be described. The authentication server 200 authenticates the user by OTP generated by the token 100 and input and transmitted from the user to the terminal device 10. The authentication server 200 includes a counter storage unit 221, a counter allowable number storage unit 222, a master key storage unit 223, a transmission / reception unit 201, an extraction unit 202, a counter generation unit 203, a password generation unit 204, and an authentication unit. 205.

  The counter storage unit 221 stores an authentication counter (hereinafter simply referred to as a counter) that is incremented by the counter generation unit 203 for each authentication. FIG. 4 is an explanatory diagram illustrating an example of a data structure of information stored in the counter storage unit 221. As shown in the figure, the counter storage unit 221 stores a user ID for identifying a user and a counter for each user managed on the authentication server 200 side in association with each other.

  The counter allowable number storage unit 222 stores a predetermined allowable number allowed as the number of times to increase the counter. The master key storage unit 223 stores master key information that is a source for generating a unique key for each user.

  Note that the counter storage unit 121, the individual key storage unit 124 of the token 100, the counter storage unit 221, the counter allowable number storage unit 222, and the master key storage unit 223 of the authentication server 200 are an HDD (Hard Disk Drive), an optical disk, and a memory. It can be configured by any commonly used storage medium such as a card or RAM.

  Returning to FIG. 1, the transmission / reception unit 201 performs transmission / reception of information via the network 30 such as processing for receiving a user ID and OTP necessary for authentication from the WEB server 20 and processing for transmitting an authentication result to the WEB server 20. It is.

  The extraction unit 202 extracts, from the OTP received by the transmission / reception unit 201, the last digit of the counter added when the token 100 generates the OTP. Specifically, the extraction unit 202 extracts the last digit of the OTP as the last digit of the counter.

  The counter generation unit 203 generates a counter value on the authentication server 200 side for generating a verification password used for authentication. Specifically, the counter generation unit 203 first acquires a counter corresponding to the received user ID from the counter storage unit 221. Next, the counter generation unit 203 generates a counter value that is larger than the acquired counter and whose last one digit matches the numerical value extracted by the extraction unit 202.

  The password generation unit 204 generates a verification password using the counter value newly generated by the counter generation unit 203. Specifically, first, the password generation unit 204 generates an individual key unique to the user ID from the master key information stored in the master key storage unit 223 and the user ID received by the transmission / reception unit 201. The password generation unit 204 generates a verification password from the generated individual key and the counter value newly generated by the counter generation unit 203 by a method similar to the normal counter synchronization method. The counter value stored in the counter storage unit 221 is updated with the counter value newly generated by the counter generation unit 203.

  The authentication unit 205 authenticates the user by comparing the verification password newly generated by the password generation unit 204 with the OTP received by the transmission / reception unit 201. Note that since the last digit of the counter is added to the last digit of the received OTP, the authentication unit 205 determines whether the character string obtained by removing this numeric value from the OTP matches the verification password. Authenticate by

  Next, an authentication process by the authentication system according to the first embodiment configured as described above will be described with reference to FIG. FIG. 5 is a flowchart showing the overall flow of the authentication processing in the first embodiment.

  First, a user who uses the terminal device 10 uses the application unit 13 to start access to the WEB server 20 that manages the Internet banking WEB page (step S401). Next, the WEB server 20 displays the portal page of the corresponding internet banking application (step S402).

  Next, the application unit 13 of the terminal device 10 performs a login process to the WEB server 20 with a login user ID and password input by the user using the input unit 11 on the login screen displayed on the display unit 12 ( Step S403). Note that the password entered here is a fixed password for using the Internet banking application, and is different from OTP required in the transfer procedure described later. Further, the user ID and the fixed password are transmitted to the WEB server 20 via the transmission / reception unit 14.

  Next, the WEB server 20 performs authentication using the transmitted user ID and fixed password, and transmits an authentication result to the terminal device 10 (step S404).

  Next, the application unit 13 of the terminal device 10 requests a transfer procedure from the WEB server 20 as an example of a process for which OTP is requested (step S405). In this case, the WEB server 20 transmits an OTP input screen for inputting the OTP to the terminal device 10 and displays it (step S406).

  Although not shown, the OTP input screen has the same configuration as a general login screen having a user ID input field, an OTP input field, a send button for requesting authentication start, and the like. When the OTP input screen is displayed, the user starts operating the token 100 (step S407). Specifically, the user starts the operation by inputting a PIN using the operation unit 122 and pressing an OTP generation button. In response to this operation, the token 100 executes an OTP generation process (step S408). In the OTP generation process, a password is generated from the counter and key information by the counter synchronization method, an OTP obtained by adding the last digit of the counter to the password is generated, and the generated OTP is displayed on the display unit 123. Details of the OTP generation process will be described later.

  Next, the user confirms the OTP generated by the OTP generation process and displayed on the display unit 123 of the token 100, and inputs the user ID and the generated OTP to the OTP input screen displayed on the terminal device 10. (Step S409).

  The application unit 13 of the terminal device 10 detects the click of the transmission button on the OTP input screen, and transmits the input user ID and OTP to the WEB server 20 (step S410).

  Next, the WEB server 20 transmits the received user ID and OTP to the authentication server 200 in order to perform authentication by OTP (step S411). Next, the authentication server 200 executes an OTP authentication process using the user ID and OTP transmitted from the WEB server 20 (step S412). Details of the OTP authentication processing will be described later.

  After the OTP authentication process, the authentication unit 205 of the authentication server 200 transmits the result of the OTP authentication process to the WEB server 20 via the transmission / reception unit 201 (step S413). Even when information (NG or the like) indicating that the authentication has failed in the OTP authentication process is set as the authentication result, the authentication result is transmitted to the WEB server 20. Next, the WEB server 20 transmits the received authentication result to the terminal device 10 (step S414).

  If the authentication is successful, the application unit 13 of the terminal device 10 instructs the transfer procedure to the WEB server 20 (step S415). The WEB server 20 receives the instruction and executes a transfer procedure process (step S416). The WEB server 20 transmits the processing result to the terminal device 10 (step S417).

  Next, details of the OTP generation processing in step S408 will be described. FIG. 6 is a flowchart showing the overall flow of the OTP generation process in the token 100.

  In step S407, the operation of the token 100 by the user starts. Specifically, the user inputs a PIN using the operation unit 122 and presses the OTP generation button. The control unit 111 of the token 100 receives the PIN input by the user using the operation unit 122 (step S501). Next, the PIN authenticating unit 101 authenticates the input PIN by comparing the PIN stored in advance with the input PIN (step S502). Note that if the input of a PIN is not required due to the operation specifications of the token 100, the control unit 111 generates an OTP at a timing such as pressing a button for instructing the start of OTP generation.

  Next, the password generation unit 102 acquires an individual key from the individual key storage unit 124 and acquires a counter from the counter storage unit 121 (step S503). Subsequently, the password generation unit 102 increments the acquired counter (step S504). Note that the incremented counter value is updated in the counter storage unit 121.

  Next, the password generation unit 102 generates an OTP from the acquired individual key and the counter incremented by the counter generation unit 103 (step S505). Subsequently, the password generation unit 102 adds the last digit of the incremented counter to the end of the generated password (step S506).

  Next, the control unit 111 displays the OTP with the numerical value added by the password generation unit 102 on the display unit 123 (step S507), and ends the OTP generation process. As a result, an OTP with the last digit of the counter added to the end is generated. The user inputs this OTP on the OTP input screen of the terminal device 10 in step S409.

  Next, details of the OTP authentication processing in step S412 will be described. FIG. 7 is a flowchart showing the overall flow of the OTP authentication process in the authentication server 200.

  When the user ID and OTP are transmitted from the WEB server 20 in step S411, the transmission / reception unit 201 of the authentication server 200 receives the transmitted user ID and OTP (step S601). Next, the extraction unit 202 extracts the numerical value of the last digit of the counter from the received OTP (step S602). Specifically, the extraction unit 202 acquires the last one-digit value of the received OTP as the last one-digit value of the counter.

  Next, using the received ID, the password generation unit 204 generates an individual key unique to the user ID from the master key information stored in the master key storage unit 223 (step S603).

  Next, the counter generation unit 203 acquires a counter corresponding to the received ID from the counter storage unit 221 (step S604). Next, the counter generation unit 203 generates a counter value that is larger than the acquired counter and whose numerical value extracted by the extraction unit 202 matches the last one digit (step S605). For example, when the counter value of the OTP generated with the token 100 is 13, the extraction unit 202 acquires 3 which is the last one digit value. Then, if the current counter is 10, the counter generation unit 203 generates 13 as the counter value, which has the same last 1 digit.

  Next, the password generation unit 204 calculates the value of the counter increase count, and determines whether or not the calculated increase count value exceeds the allowable count stored in the counter allowable count storage section 222 (step). S606).

  As a result, it is possible to avoid a decrease in security due to an increase in the number of verification passwords.

  When the increment count of the counter does not exceed the allowable count (step S606: NO), the password generation unit 204 uses the counter value generated in step S605 and the individual key generated in step S603 for verification. An OTP is generated (step S607).

  Next, the authentication unit 205 authenticates the user by checking the OTP generated by the password generation unit 204 with the OTP received from the terminal device 10 via the WEB server 20 (step S608). Next, the authentication unit 205 determines whether or not the collation has succeeded, that is, whether or not the generated OTP matches the received OTP (excluding the last one digit) (step S609). If they do not match (step S609: NO), then a counter value that matches the last one digit is further generated and the process is repeated (step S605).

  If they match (step S609: YES), the authentication unit 205 sets information (such as OK) indicating that the authentication is successful in the authentication result (step S610), and ends the OTP authentication process.

  If the increment count of the counter exceeds the allowable count in step S606 (step S606: YES), the authentication unit 205 sets information (NG or the like) indicating that the authentication has failed in the authentication result (step S611). Then, the OTP authentication process is terminated. The result of the OTP authentication process is transmitted from the authentication server 200 to the WEB server 20 in step S413.

  In the above description, password generation and verification are performed each time a counter value that matches the last one digit is generated. In contrast, a predetermined number of counter values with the same last digit are generated in batches, and a predetermined number of passwords corresponding to the counter values are generated in batches, and then the generated passwords are sequentially verified. You may comprise as follows.

  Next, a specific example of OTP processed in the authentication system according to the first embodiment configured as described above will be described. First, for comparison, an example of OTP processed by a conventional authentication system will be described. FIG. 8 is an explanatory diagram showing an example of an OTP processed by a conventional authentication system.

  FIG. 8 shows an example in which the allowable range of the counter is set as 10 counters from the next effective counter value. That is, for example, when the next effective counter is 11 on the authentication server side and the counter at the time of OTP generation on the token side is 13, the authentication server generates 10 OTPs corresponding to counter = 11 to 20 Thus, the comparison with the OTP generated by the token is shown.

  For this reason, if the authentication is not requested to the authentication server even though the OTP has been generated 10 times or more on the token side, it exceeds the allowable range of the counter on the authentication server and authentication is impossible. Become.

  Next, an example of OTP processed in this embodiment will be described. FIG. 9 is an explanatory diagram illustrating an example of the OTP processed by the authentication system according to the first embodiment.

  FIG. 9 shows that the allowable range of the counter can be expanded even when ten OTPs are used for verification as in the example of FIG. That is, as shown in FIG. 9, in this embodiment, since the last digit value of the counter is added to the end of the OTP, the authentication server 200 side uses the counter value that matches the last digit value for verification. An OTP can be generated.

  Thus, as in the above-described example, when the next valid counter is 11 on the authentication server 200 side and the counter at the time of OTP generation on the token 100 side is 13, the authentication server 200 determines that the counter = 13, Ten OTPs 23, 33,..., 103 can be generated and used as collation targets. Therefore, although the number of OTPs to be collated is 10 as in FIG. 8 showing the conventional method, the allowable range of the counter is expanded to a maximum of 100. If the number of digits to be added is two or more as described above, the allowable range of the counter can be further expanded.

  Further, when the difference between the counters on the token 100 side and the authentication server 200 side is small (for example, the counter of the token 100 is 11 and the counter of the authentication server 200 is 13), it is determined that the matching is performed by three comparisons in the conventional method. On the other hand, in the present embodiment, it can be determined that they match in one verification. Thus, according to the method of the present embodiment, an effect that the processing load of the authentication process can be reduced is also obtained.

  As described above, in the authentication system according to the first embodiment, the last one digit of the counter value on the token side is added to the OTP generated by the token, and this value is extracted from the received OTP on the authentication server side. Then, it is possible to generate a verification OTP using a counter value that matches the numeric value with the last digit extracted after the counter value to be stored, and perform verification with the OTP received from the WEB server. For this reason, even if the number of OTPs to be collated is the same as the conventional one, the allowable range of the counter can be expanded. That is, convenience can be improved by expanding the allowable range of the counter value without reducing security.

(Second Embodiment)
The authentication system according to the second embodiment does not generate an OTP by a token alone, but a password display device capable of button operation and OTP display, and an OTP generation process by inserting the password into the password display device. An OTP is generated by an IC (Integrated Circuit) card that can be executed.

  FIG. 10 is a block diagram illustrating a configuration of an authentication system according to the second embodiment. As shown in FIG. 10, the authentication system of the present embodiment includes a terminal device 10, a WEB server 20, and an authentication server 200 connected via a network 30 via the Internet, and an IC as a portable security device. The card 900 and the password display device 950 are provided.

  In the second embodiment, an IC card 900 and a password display device 950 are added instead of the token 100. The other devices are the same as those in FIG. 1, which is a block diagram showing the configuration of the authentication system according to the first embodiment, and thus are denoted by the same reference numerals and description thereof is omitted here.

  Here, the hardware configuration of the IC card 900 and the password display device 950 will be described. FIG. 11 is an explanatory diagram illustrating an example of a hardware configuration of the IC card 900 according to the second embodiment.

  As shown in the figure, the IC card 900 includes a communication I / F (Interface) 51, a CPU 52, a RAM 53, a ROM 54, and an EEPROM (Electronically Erasable and Programmable Read Only Memory) 55.

  The communication I / F 51 includes a contact terminal and mediates communication between the CPU 52 and an external device that operates by inserting the IC card 900, such as a password display device 950. The CPU 52 is a central processing unit that performs overall control of the IC card 900, performs processing according to a command received from an external device via the communication I / F 51, and transmits the result as a response.

  The RAM 53 is a volatile memory used as a work area for the CPU 52 to perform processing. The ROM 54 is a nonvolatile read-only memory that mainly stores programs necessary for the CPU 52 such as an operating system to perform processing. The EEPROM 55 is a non-volatile memory that can be rewritten as needed, and stores programs and data necessary for the CPU 52 such as applications to perform processing.

  FIG. 12 is an explanatory diagram illustrating an example of a hardware configuration of the password display device 950 according to the second embodiment.

  The password display device 950 according to the second embodiment includes a control device such as a CPU 61, a storage device such as a ROM 62 and a RAM 63, a display device 64 that can display a generated password, a button for PIN input, An operation button 65, which is an input device including a button for starting password generation, and a bus 66 for connecting each unit are provided.

  Returning to FIG. 10, the function of each device will be described. First, the IC card 900 will be described. The IC card 900 can communicate with the password display device 950 by being inserted into a predetermined insertion port of the password display device 950, and generates an OTP in response to a request from the password display device 950. The IC card 900 includes a counter storage unit 121, an individual key storage unit 124, a PIN authentication unit 101, a password generation unit 102, a counter generation unit 103, and a communication unit 922.

  The functions of the counter storage unit 121, the individual key storage unit 124, the PIN authentication unit 101, the password generation unit 102, and the counter generation unit 103 are the same as those provided in the token 100 according to the first embodiment, and thus are the same. Reference numerals are assigned, and description thereof is omitted here.

  The communication unit 922 transmits / receives various information to / from the R / W (reader / writer) 951 of the password display device 950. For example, the communication unit 922 receives the PIN information input from the password display device 950 and sends it to the PIN authentication unit 101 for PIN authentication. In addition, the communication unit 922 transmits the OTP generated by the password generation unit 102 to the password display device 950.

  Next, the password display device 950 will be described. The password display device 950 receives a PIN input, and performs a process for starting the generation of an OTP and a process for displaying the generated OTP. As shown in FIG. 10, the password display device 950 includes an R / W 951, a control unit 911, an operation unit 122, and a display unit 123.

  Since the functions of the operation unit 122 and the display unit 123 are the same as those of the operation unit 122 and the display unit 123 provided in the token 100 of the first embodiment, the same reference numerals are given, and description thereof is omitted here. .

  The R / W 951 mediates communication with the IC card 900 in a contact manner. For example, the R / W 951 transmits a PIN to the IC card 900, receives an OTP generated by the IC card 900, and the like. Note that the communication with the IC card 900 is not limited to the contact type, and may be configured to perform the communication by a non-contact type.

  The control unit 911 controls the entire OTP generation process. In the present embodiment, for example, when the IC card 900 is inserted into an insertion slot, the control unit 911 controls a process of accepting a PIN input and transmitting the accepted PIN to the IC card 900. The control unit 911 controls processing for displaying the OTP generated by the IC card 900 on the display unit 123.

  As described above, in this embodiment, among the functions of the token 100 of the first embodiment, the functions mainly related to OTP generation are separated into the IC card 900, and the functions mainly related to the user interface are password display devices. The configuration is separated into 950. With such a configuration, for example, by replacing the IC card 900, one password display device 950 can be shared by a plurality of users.

  Next, an authentication process performed by the authentication system according to the second embodiment configured as described above will be described with reference to FIG. FIG. 13 is a flowchart illustrating the entire flow of the authentication process according to the second embodiment.

  Since the WEB page login process and the OTP input screen display process from step S1001 to step S1006 are the same as the process from step S401 to step S406 in the authentication process of the first embodiment, description thereof is omitted.

  After the OTP input screen is displayed, the user starts operating the password display device 950 (step S1007). Subsequently, an OTP generation process is executed by the IC card 900 and the password display device 950 (step S1008). As described above, in the first embodiment, the token 100 alone executes the OTP generation process (FIG. 5, step S408), whereas in the second embodiment, the IC card 900 and the password display device. The OTP generation process is executed in conjunction with 950. Details of the OTP generation process will be described later.

  Since the OTP transmission process, the OTP authentication process, and the result transmission process from step S1009 to step S1017 are the same as the process from step S409 to step S417 in the authentication process of the first embodiment, description thereof is omitted.

  Next, details of the OTP generation processing in step S1008 will be described. FIG. 14 is a flowchart illustrating an overall flow of the OTP generation process according to the second embodiment.

  First, the OTP generation process is started when the user inserts the IC card 900 into the password display device 950 (step S1101). The control unit 911 of the password display device 950 accepts the PIN input by the user using the operation unit 122 and transmits the PIN to the IC card 900 via the R / W 951 (step S1102).

  Since the PIN authentication process and the OTP generation / counter increment process from step S1103 to step S1107 are the same as the process from step S502 to step S506 in the OTP authentication process of the first embodiment, the description thereof is omitted.

  After the lower digit of the counter is added to the generated OTP, the communication unit 922 transmits the generated OTP to the password display device 950. The control unit 911 of the password display device 950 displays the received OTP on the display unit 123 (step S1108), and ends the OTP generation process.

  As described above, in the authentication system according to the second embodiment, an OTP can be generated by an IC card that can execute an OTP generation process by being inserted into a password display device.

  For this reason, one password display device can be shared by a plurality of users, and user convenience is improved. Further, since unauthorized access is impossible only by losing the password display device, security is improved compared to the first embodiment in which unauthorized access is possible when the token is lost. In addition, since an IC card that can be mounted with various functions at the same time is used, a plurality of functions including OTP generation can be executed with one IC card, and the convenience for the user is improved.

  Next, the hardware configuration of the authentication server 200 according to the first and second embodiments will be described. FIG. 15 is an explanatory diagram illustrating an example of a hardware configuration of the authentication server 200 according to the first and second embodiments.

  The authentication server 200 according to the first or second embodiment includes a control device such as a CPU 71, a storage device such as a ROM 72 and a RAM 73, a communication I / F 74 that communicates by connecting to a network, an HDD, and a CD ( (Compact Disc) An external storage device such as a drive device, a display device such as a display device, an input device such as a keyboard and a mouse, and a bus 75 for connecting each part, and a hardware configuration using a normal computer It has become.

  The password generation program executed by the token 100 according to the first embodiment or the IC card 900 according to the second embodiment and the authentication executed by the authentication server 200 according to the first or second embodiment. A program is a file in an installable or executable format such as a CD-ROM (Compact Disk Read Only Memory), a flexible disk (FD), a CD-R (Compact Disk Recordable), a DVD (Digital Versatile Disk), etc. The program is provided by being recorded on a computer-readable recording medium.

  Further, the password generation program and the authentication program may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. The password generation program and the authentication program may be provided or distributed via a network such as the Internet.

  The password generation program and the authentication program may be provided by being incorporated in advance in a ROM or the like.

  The password generation program executed by the token 100 according to the first embodiment or the IC card 900 according to the second embodiment has a module configuration including the above-described units (such as a PIN authentication unit and a password generation unit). ing. The authentication program executed by the authentication server 200 according to the first or second embodiment includes a module configuration including the above-described units (transmission / reception unit, extraction unit, counter generation unit, password generation unit, authentication unit). It has become. As actual hardware, the CPU (CPU 52, CPU 61, CPU 71) included in each device reads each program from the storage medium and executes the program, so that each unit is loaded on the main storage device. It is generated on the main memory.

  As described above, the authentication device, the authentication program, the authentication system, the password generation device, the portable security device, and the password generation program according to the present invention are suitable for the authentication system using the one-time password generated by the counter synchronization method. ing.

It is a block diagram which shows the structure of the authentication system concerning 1st Embodiment. It is explanatory drawing which shows an example of the hardware constitutions of a token. It is explanatory drawing which shows an example of the data structure of the information stored in the counter memory | storage part of a token. It is explanatory drawing which shows an example of the data structure of the information stored in the counter memory | storage part of an authentication server. It is a flowchart which shows the whole flow of the authentication process in 1st Embodiment. It is a flowchart which shows the whole flow of the OTP production | generation process in 1st Embodiment. It is a flowchart which shows the whole flow of the OTP authentication process in 1st Embodiment. It is explanatory drawing which shows an example of OTP processed with the conventional authentication system. It is explanatory drawing which shows an example of OTP processed with the authentication system of 1st Embodiment. It is a block diagram which shows the structure of the authentication system concerning 2nd Embodiment. It is explanatory drawing which shows an example of the hardware constitutions of IC card. It is explanatory drawing which shows an example of the hardware constitutions of a password display apparatus. It is a flowchart which shows the whole flow of the authentication process in 2nd Embodiment. It is a flowchart which shows the whole flow of the OTP production | generation process in 2nd Embodiment. It is explanatory drawing which shows an example of the hardware constitutions of an authentication server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Terminal device 11 Input part 12 Display part 13 Application part 14 Transmission / reception part 20 WEB server 30 Network 51 Communication I / F
52 CPU
53 RAM
54 ROM
55 EEPROM
61 CPU
62 ROM
63 RAM
64 Display device 65 Operation button 66 Bus 71 CPU
72 ROM
73 RAM
74 Communication I / F
75 Bus 100 Token 101 PIN Authentication Unit 102 Password Generation Unit 103 Counter Generation Unit 111 Control Unit 121 Counter Storage Unit 122 Operation Unit 123 Display Unit 124 Individual Key Storage Unit 200 Authentication Server 201 Transmission / Reception Unit 202 Extraction Unit 203 Counter Generation Unit 204 Password Generation Unit 205 authentication unit 221 counter storage unit 222 counter allowable number storage unit 223 master key storage unit 900 IC card 911 control unit 922 communication unit 950 password display device

Claims (15)

An authentication device that receives and authenticates a one-time password generated based on a generation counter updated every time a password is generated from a terminal device connected via a network,
A storage unit that associates and stores a user ID for identifying a user and an authentication counter that is updated each time the user is authenticated;
A receiving unit that receives the user ID and the one-time password including a predetermined number of digits below the generation counter from the terminal device;
An extraction unit for extracting the numerical value from the received one-time password;
The counter generation unit that acquires the authentication counter corresponding to the received user ID from the storage unit, and generates a counter value that is larger than the acquired authentication counter and the value of the lower digit matches the extracted numerical value When,
Based on the generated counter value, a password generation unit that generates a verification password;
An authentication unit that verifies the generated verification password and the received one-time password and authenticates the user of the received user ID;
An authentication apparatus comprising: The counter generation unit further generates the counter value that is larger than the generated counter value when the authentication unit fails in authentication, and the value of the lower digit matches the extracted numeric value,
The password generation unit further generates the verification password based on the counter value further generated by the counter generation,
The authentication unit further verifies the user of the received user ID by verifying the verification password further generated by the password generation unit and the received one-time password,
The authentication device according to claim 1. A transmission unit that transmits an authentication result indicating that the user authentication has failed to the terminal device when the number of times the authentication unit has failed authentication exceeds a predetermined threshold;
The authentication device according to claim 2. The counter generation unit generates a predetermined number of counter values that are larger than the acquired authentication counter and the value of the lower digit matches the extracted numerical value,
The password generation unit generates the number of verification passwords for the number based on the generated counter value,
The authentication unit compares each of the generated passwords for verification with the received one-time password to authenticate the user of the received user ID;
The authentication device according to claim 1. And further comprising a transmission unit that transmits an authentication result indicating that the user authentication has failed to the terminal device when authentication has failed for all of the generated passwords for verification.
The authentication device according to claim 4. The receiving unit receives the user ID and the one-time password including the numerical value of the lower one digit of the generation counter from the terminal device,
The generating unit generates the counter value that is larger than the acquired authentication counter and whose lower one digit value matches the extracted numerical value;
The authentication device according to claim 1. A storage unit for storing a generation counter that is updated each time a password is generated;
A password generation unit that generates a one-time password by adding a numerical value of a predetermined number of digits below the generation counter to a password generated based on the generation counter stored in the storage unit;
A display for displaying the one-time password with the numerical value added;
A password generation device comprising: The password generation unit generates the one-time password in which a numerical value of the number of digits of the generation counter is added before or after a predetermined digit of the generated password;
The password generation device according to claim 7. The generation unit generates the one-time password to which a numerical value of the lower one digit of the generation counter is added;
The password generation device according to claim 7. The generating unit generates the one-time password with the numerical value added to the end of the generated password;
The password generation device according to claim 7. A portable security device that can communicate with a display device that displays a password,
A storage unit for storing a generation counter that is updated each time a password is generated;
A password generation unit that generates a one-time password by adding a numerical value of a predetermined number of digits below the generation counter to a password generated based on the generation counter stored in the storage unit;
An output unit for outputting the one-time password to which the numerical value is added to the display device;
A portable security device comprising: An authentication system comprising: a password generation device that generates a one-time password; and an authentication device that receives and authenticates the one-time password generated by the password generation device from a terminal device connected via a network. ,
The password generator is
A first storage unit that stores a generation counter that is updated each time a password is generated;
A first password generation unit that generates the one-time password by adding a predetermined number of digits lower than the generation counter to a password generated based on the generation counter stored in the first storage unit; ,
A display unit for displaying the one-time password with the numerical value added thereto,
The authentication device
A second storage unit that stores a user ID for identifying a user and an authentication counter that is updated each time the user is authenticated;
A receiving unit that receives the user ID and the one-time password generated by the password generation device from the terminal device;
An extraction unit for extracting the numerical value from the received one-time password;
An acquisition unit for acquiring the authentication counter corresponding to the received user ID from the second storage unit;
A counter generation unit that generates a counter value that is larger than the acquired authentication counter and whose value of the lower digit matches the extracted numerical value;
A second password generation unit for generating a verification password based on the generated counter value;
An authentication unit that verifies the generated verification password and the received one-time password and authenticates the user of the received user ID;
An authentication system characterized by comprising: A portable security device capable of communicating with a display device that displays a password, and an authentication device that receives and authenticates the one-time password generated by the portable security device from a terminal device connected via a network Authentication system,
The portable security device is:
A first storage unit that stores a generation counter that is updated each time a password is generated;
A first password generation unit that generates the one-time password by adding a predetermined number of digits lower than the generation counter to a password generated based on the generation counter stored in the first storage unit; ,
An output unit for outputting the one-time password to which the numerical value is added to the display device,
The authentication device
A second storage unit that stores a user ID for identifying a user and an authentication counter that is updated each time the user is authenticated;
A receiving unit that receives the user ID and the one-time password generated by the password generation device from the terminal device;
An extraction unit for extracting the numerical value from the received one-time password;
An acquisition unit for acquiring the authentication counter corresponding to the received user ID from the second storage unit;
A counter generation unit that generates a counter value that is larger than the acquired authentication counter and whose value of the lower digit matches the extracted numerical value;
A second password generation unit for generating a verification password based on the generated counter value;
An authentication unit that verifies the generated verification password and the received one-time password and authenticates the user of the received user ID;
An authentication system characterized by comprising: An authentication program for receiving a one-time password generated based on a generation counter updated every time a password is generated from a terminal device connected via a network and executing it on an authentication device,
The authentication device includes a storage unit that stores a user ID for identifying a user and an authentication counter that is updated every time the user is authenticated,
A receiving procedure for receiving from the terminal device the user ID and the one-time password including a predetermined number of digits lower than the generation counter;
An extraction procedure for extracting the numerical value from the received one-time password;
A counter generation procedure for acquiring the authentication counter corresponding to the received user ID from the storage unit, and generating a counter value that is larger than the acquired authentication counter and the value of the lower digit matches the extracted numerical value When,
A password generation procedure for generating a verification password based on the generated counter value;
An authentication procedure for verifying the user of the received user ID by verifying the generated verification password and the received one-time password;
An authentication program for causing the authentication device to execute. Password generation for generating a one-time password by adding a predetermined number of digits lower than the generation counter to a password generated based on a generation counter stored in the storage unit and updated every time a password is generated Procedure and
An output procedure for outputting the one-time password with the numerical value added;
A password generation program that causes a computer to execute.

Images