JP2005348290A - Information processing device with security function - Google Patents

Abstract

In an information processing apparatus with a security function, cost generation due to the introduction of a dedicated authentication apparatus or a user management server is suppressed, and countermeasures against vulnerability due to destruction of the authentication apparatus or disassembly of the apparatus are aimed at.
First authentication means 1 detects the presence of each device by acquiring an authentication key ID unique to a nearby authentication key device, and each authentication key stored in advance in authentication key information storage means 3 Compared with the ID, authentication key map information is generated. The second authentication means 2 transmits / receives an authentication request for shared key information and its authentication result to / from the device X, thereby confirming the presence of the device X, and generating and complementing authentication key map information. The security level calculation means 5 calculates the security level to be applied using the authentication key map information and the attribute information of each authentication key device, and the security means according to the security level is executed by the security function control means 6 respectively. The
[Selection] Figure 1

Description

  The present invention relates to an information processing apparatus with a security function for the purpose of preventing unauthorized use of the information processing apparatus and measures against theft.

  As a conventional information processing apparatus with a security function for authenticating a user, there is an apparatus using an authentication method such as password input, insertion of an authentication key such as a smart card, use of physical characteristics such as a fingerprint or an iris.

On the other hand, in recent years, wireless communication technology is rapidly spreading in consumer information processing apparatuses, and application examples to information processing apparatuses with security functions have been seen. Patent documents 1 and 2 are examples of applications of such wireless communication technology. For example, Patent Document 1 discloses a user authentication method using a wireless tag and a system configuration thereof. Further, Patent Document 2 shows a system configuration using a card in which a user ID is entered and a short-range communication terminal.
JP 2002-157040 A JP 2003-233596 A

  However, the conventional information processing apparatus with a security function has problems in terms of introduction cost and security effect.

  That is, since the password is based on memory, it is easy to forget and may be inconvenient for the user. In addition, there are drawbacks such as the operation being stolen and easily leaked or being easily broken by a dictionary attack. With a type such as a smart card that is inserted into an information processing apparatus, there is a concern that the information processing apparatus may be stolen without forgetting to remove it. Further, the authentication mechanism may be bypassed and usable due to leakage of authentication information, destruction of authentication information, or disassembly of the information processing apparatus. In terms of cost, smart cards, fingerprints, and iris authentication require expensive devices dedicated to authentication.

  On the other hand, in the application of wireless communication technology that has been rapidly spreading in recent years, since it is contactless user authentication, there is no fear of leaking operation procedures or forgetting to remove the card, so it is effective in terms of security. I can expect.

  However, in Patent Document 1, for example, a user management server is required for user authentication, and this introduction cost is a problem. Japanese Patent Laid-Open No. 2004-228688 aims to enhance security by authenticating location information by a short-range wireless terminal in addition to user authentication by an ID card. An authentication-dedicated device such as a device is required, which increases the cost of the system and prevents inadvertence such as forgetting to remove the ID card.

  In the information processing apparatus with a security function, the present invention complements the security function of a conventional password by configuring an inexpensive security function using an existing wireless communication function that already exists in the system for data communication purposes. The purpose is to reduce costs due to the introduction of authentication-dedicated devices such as ID cards and short-range wireless terminal identification devices and user management servers, as well as countermeasures against vulnerabilities due to destruction of the authentication devices and disassembly of the devices. To do.

  In order to solve the above-described problems, the information processing apparatus with security function of the present invention includes the following units.

  That is, an authentication key search means for searching for one or a plurality of authentication key devices in the vicinity of the information processing apparatus according to a predetermined procedure and acquiring an authentication key ID unique to each device from each authentication key device, and the acquired authentication key Authentication key information storage means for storing a plurality of sets of authentication key information, each of which includes an ID and attribute information indicating the characteristics and processing method of the authentication key device corresponding to the ID, and each authentication for the authentication key information storage means Authentication key information registration management means for registering or deleting key information, each authentication key ID stored in advance in the authentication key information storage means and each authentication key ID acquired by the authentication key search means are compared and collated. First authentication means for generating authentication key map information indicating whether or not each authentication key device exists in the vicinity, and authentication generated by the first authentication means And security level calculation means for calculating a keymap information and security levels to be applied from the attribute information of the authentication key device configured security means according to the security level calculated from the security function control means, each run.

  Each means is configured so as not to be separated and disassembled from the apparatus main body, and includes a disassembly detection means. Further, for an authentication key device to which the first authentication means cannot be applied, an authentication request for the secret shared key information determined to be shared only between specific devices and its authentication result are transmitted and received, and authentication is performed. A second authentication means for generating and complementing the key map information can also be provided.

  The information processing apparatus with a security function of the present invention has the above-described configuration and is effective in two aspects of introduction cost and security effect. In other words, in terms of cost, by using address information unique to a wireless communication device or secret shared key information shared only between specific devices as an authentication key, existing and commercially available wireless communication devices can be used as authentication keys as they are. This eliminates the need for a dedicated authentication device. In terms of effectiveness, by using a wireless communication device as an authentication key, authentication can be performed simply by holding it, which is highly convenient. Further, by configuring a series of means such as an authentication key storage means so that they cannot be separated and disassembled, and detecting them by the disassembly detection means, it is possible to secure a strong security effect that can withstand, for example, hard disk replacement. Furthermore, the security level is calculated based on the combination of the authentication results of multiple wireless authentication key devices and incidental conditions, and the spatial and temporal conditions around the information processing device are automatically recognized, and the security measures to be applied are activated. Therefore, a high security effect can be exhibited even in a situation such as theft of the information processing apparatus itself.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

(Embodiment 1)
FIG. 1 is a configuration diagram of main means of an information processing apparatus with security function according to an embodiment of the present invention. FIG. 2 is an operation of main means of the information processing apparatus with security function of one embodiment of the present invention. FIG. 3 is an explanatory diagram of authentication key registration management means.

  The information processing apparatus according to the present embodiment includes a CPU 12 that controls the entire apparatus, an I / O controller 11 that controls peripheral devices such as the input apparatus 16, a display controller 15 that controls the display apparatus 14, and data and basic programs. The storage device includes a flash ROM 17, Bluetooth communication means 10, and other peripheral devices, which are connected by a bus 13 as shown in the figure. The I / O controller 11 is integrated with functions such as the disassembly detection terminal 11-1, the real time clock 11-2, and the power supply control means 11-3. The disassembly detection terminal 11-1 receives a connection state signal from the chassis or peripheral device as an input, and when it detects an unconnected state, it can issue a system management interrupt to the CPU 12 and start necessary processing. In addition, as the I / O controller 11 provided with such a disassembly detection terminal 11-1, there is a commercially available one such as ICH4 manufactured by INTEL.

  Assume that the authentication key device is a short-range wireless communication device that conforms to the Bluetooth standard, and devices A, B, C, and X corresponding to the authentication key exist around the device. At the same time, it is assumed that the information processing apparatus with a security function according to the present invention can transmit and receive data to and from each device via the Bluetooth communication means 10.

  The Bluetooth communication means 10 is controlled by an authentication key search means 1-1 and a shared key authentication request means 2-1 shown in the figure, and each means constitutes a first authentication means 1 and a second authentication means 2. . Further, the authentication key information storage means 3 is constituted by the flash ROM 17.

  The first authentication means 1 and the second authentication means 2 are configured not to perform direct information access with the authentication key information storage means 3 but only through the authentication key registration management means 4. The authentication key registration management unit 4 includes a password input unit 4-1, a password storage unit 4-2, a display ID information presentation unit 4-3, and a data encryption unit 4-4. The password input unit 4-1 receives a key input from the input device 16 via the I / O controller 11. The display ID information presentation unit 4-3 presents information to the display device 14 via the display controller 15.

  The security level calculation means 5 includes a decomposition detection means 5-1 and a time detection means 5-2 constituted by a real time clock 11-2 integrated with the I / O controller 11. The decomposition detection unit 5-1 is configured by connecting a signal obtained by wired-ORing a specific terminal of the flash ROM 17 and the Bluetooth communication unit 10 to the decomposition detection terminal 11-1 of the I / O controller 11. It is possible to determine whether the means is connected or not, and to detect a destructive action such as disassembly of the information processing apparatus.

  Now, in general, in communication between Bluetooth devices, one of them becomes a master and the other becomes a slave. First, the Bluetooth device that is the master performs an inquery operation to search for surrounding devices, and the Bluetooth device that is the other slave that has recognized this transmits ID information such as its own device address (BD_ADDR) to the master.

  1 and 2, the authentication key search unit 1-1 performs the following operation as a master of such Bluetooth communication via the Bluetooth communication unit 10. That is, the authentication key search unit 1-1 issues an in-query command, waits for a response from each device, and acquires a device address (BD_ADDR) from each device.

  Next, the first authentication unit 1 includes the device address registered in the authentication key information storage unit 3 in advance via the authentication key registration management unit 4, the searched device address (BD_ADDR of the devices A, B, and C in the figure) Are compared, and authentication key map information indicating the existence result of each device is generated. In the figure, “1” is entered in the authentication key map information corresponding to the devices A, B, and C. This schematically shows that the existence has been confirmed by the first authentication means 1. ing.

  On the other hand, the second authentication means 2 is a higher-level authentication means that is applied to an authentication key device that cannot be searched by the authentication key search means 1-1.

  According to the Bluetooth standard, slave Bluetooth devices must be set to a mode that does not respond to inquery operations from the master (non-discovery mode) in order to prevent communication with an unspecified number of masters. Can do. In the figure, the device X is set to the non-discovery mode and cannot be confirmed by the first authentication means 1.

  By the way, in the Bluetooth standard, the master starts communication by specifying a specific slave by a paging operation that means the start of communication. If the device address of the slave is known in advance, an in-query operation is performed. Instead, it is possible to immediately request the establishment of communication by specifying a device address of a specific slave and issuing a paging command. In this case, the slave uses a shared key (secret key) decided in advance with the master as a challenge / response method (the master and slave do not directly exchange the secret key, and the shared key can be decrypted using a predetermined procedure. When the communication security is confirmed by a method of authenticating by transmitting and receiving a public key or the like, a response permitting establishment of communication is made.

  In the second authentication unit 2, the authentication request unit 2-1 transmits an authentication request to the device X through the Bluetooth communication unit 10 by the method as described above, and receives an authentication response from the device X. As a result, the second authentication means 2 confirms the presence of the device X and generates and complements authentication key map information. In the drawing, “2” is written in the authentication key map information corresponding to the device X indicates that the existence is confirmed by the second authentication means 2.

  In this embodiment, authentication means information to be applied to attribute information for each device stored in the authentication key information storage means 3 is immediately determined to determine whether the first authentication means 1 is not applicable. You can remember it. Further, if the attribute information for the device X is corrected depending on whether the first or second authentication means has been confirmed in the process of generating the previous authentication key map information, the device X will be changed to the next time. On the other hand, since the second authentication means 2 can be controlled to be applied immediately, the time required for authentication can be shortened.

  In the authentication key information storage unit 3, security for access to the authentication key information must be ensured. That is, it is necessary that these pieces of information are not easily erased or falsified. Therefore, the authentication key information storage unit 3 can always be accessed only through the authentication key registration management unit 4. The authentication key registration management unit 4 encrypts and stores the data in the authentication key storage unit 3 by the data encryption unit 4-4, and ensures the safety of the data.

  The authentication key registration management means 4 will be described with reference to FIG. The authentication key registration management means 4 includes password input means 4-1 for requesting input of a predetermined password. When a password is set in advance, registration is permitted only when the input password matches, and the password is set. Is not set, the entered password is stored in the password storage means 4-2 so as to be adopted as a password to be verified in subsequent registration and deletion. Similarly, when deleting the password, requesting password input and controlling to allow deletion only when it matches the set password. If the set password is lost, it is regarded as a password mismatch and deleted. It is controlled not to allow. The password storage unit 4-2 may be configured so that one password can be set for the entire apparatus, or an authentication key as part of the attribute information of the authentication key information so that it can be set for each authentication key ID. The information may be registered in the information storage unit 3. A combination of both may also be used.

  In order for the authentication key information not to be easily tampered with, it is also necessary that these are not easily disclosed. Therefore, the authentication key information storage unit 3 stores each authentication key ID and display ID information such as the name of the corresponding authentication key device in association with each other, and the authentication key registration management unit 4 performs registration and deletion. Display ID information presenting means 4-3 for presenting display ID information to the registrant instead of the authentication key ID at the time of operation is provided so that the authentication key ID is not disclosed directly.

  Returning to FIGS. 1 and 2, the security level calculation means 5 uses the authentication key map information generated by the first and second authentication means and the attribute information of each authentication key device to apply the security level. Is calculated.

  In the present invention, one characteristic is that the security level of the security calculation means 5 is changed according to various conditions. As a condition, for example, the number of authenticated devices can be calculated from the authentication key map information, and the security level can be changed according to the number, or can be changed by a combination of two or more specific authentication key devices. It becomes like this. Further, since the present embodiment includes the disassembly detection means 5-1, when it is detected that the main means has been disassembled, it is possible to set the security level at a high level such as turning off the power of the apparatus. In addition, by providing the time detection unit 5-2, for example, it is possible to set a security level to be increased at a time when the user is out.

  Then, the security means 1 to the security means N corresponding to the calculated security level are respectively executed by the security function control means 6 to ensure actual security. For example, the power control unit 11-3 is used to turn off the power of the apparatus, the password input unit 4-1 is used to determine the user password, and the activation permission / denial is determined. Configurations such as limiting the peripheral devices that can be used according to the security level are possible.

  The information processing apparatus with a security function according to the present invention does not require a dedicated authentication apparatus, has a strong security effect, and has a strong security effect, etc. Useful as.

The block diagram of the main means of the information processing apparatus with a security function of one embodiment of this invention Explanatory drawing of an effect | action of the main means of the information processing apparatus with a security function of one embodiment of this invention Explanatory drawing of the authentication key registration management means of the information processing apparatus with a security function of one embodiment of this invention

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 1st authentication means 1-1 Authentication key search means 2 2nd authentication means 2-1 Authentication request means 3 Authentication key information storage means 4 Authentication key registration management means 4-1 Password input means 4-2 Password storage means 4 -3 Display ID information presentation means 4-4 Data encryption means 5 Security level calculation means 5-1 Disassembly detection means 5-2 Time detection means 6 Security function control means 10 Bluetooth communication means 11 I / O controller 11-1 Disassembly detection Terminal 11-2 Real-time clock 11-3 Power control means 12 CPU
13 Bus 14 Display device 15 Display controller 16 Input device 17 Flash ROM

Claims (9)

An authentication key search means for searching for one or a plurality of authentication key devices in the vicinity of the information processing apparatus main body according to a predetermined procedure, and acquiring an authentication key ID unique to each device from each authentication key device; Authentication key information storage means for storing a plurality of sets of authentication key information including a set of authentication key IDs and attribute information indicating the characteristics and processing method of the corresponding authentication key device, and stored in the authentication key information storage means The authentication key information registration management means for registering or deleting each authentication key information, each authentication key ID stored in advance in the authentication key information storage means and each authentication key ID acquired by the authentication key search means are compared. A first authentication means for generating authentication key map information indicating the result of whether or not each authentication key device is present in the vicinity, and the first authentication means Security level calculation means for calculating a security level to be applied from the authentication key map information and the attribute information stored as a pair with the authentication key ID as authentication key information, and the security level calculated by the security level calculation means An information processing apparatus with a security function, comprising security function control means for executing security means corresponding to each. In the case of an authentication key device in which the authentication key ID cannot be obtained by the authentication key search unit, the authentication key device corresponding to the authentication key ID stored in advance in the authentication key information storage unit is mutually exchanged between devices. Shared key authentication requesting means for requesting an authentication response to the shared key information determined to be shared, and authentication key map information generated from the authentication response result of each authentication key device obtained by the shared key authentication requesting means The information processing apparatus with a security function according to claim 1, wherein the authentication key map information generated by the first authentication means is supplemented by providing the authentication means. 3. The information processing apparatus with a security function according to claim 1, wherein the authentication key search means or the shared key authentication request means is constituted by short-range wireless communication means. Each means is connected to the information processing device substrate in an indissolvable manner, and has a disassembly detection means. Using the device disassembly information acquired from the disassembly detection means together with the authentication key map information and attribute information generated by the authentication means, the disassembly is performed. 2. The information processing apparatus with a security function according to claim 1, further comprising: a security level calculating unit that changes the security level so that a higher security level is applied when the security level is detected. A security level calculation unit is provided that uses the time information acquired from the time detection unit together with the authentication key map information and attribute information generated by the authentication unit, and changes the security level to be applied according to the time zone. The information processing apparatus with a security function according to claim 1. The number of authentication key devices existing in the vicinity of the apparatus is calculated from the authentication key map information together with the authentication key map information and the attribute information generated by the authentication means, and the security level to be applied is varied depending on the number of the number. The information processing apparatus with a security function according to claim 1, further comprising: a security level calculation unit that performs security level calculation. When registering each authentication key ID in the authentication key information storage means, a password input means for requesting a predetermined password and a password storage means are provided, and if the password has already been set in the password storage means, the input is made Registration is permitted only when the password matches, and if the password is not set, the entered password is stored in the password storage means so as to be used as a password to be verified in subsequent registration and deletion, and the authentication is performed. Similarly, when deleting from the key information storage means, a password input is requested, and control is performed to permit deletion only when it matches the set password. If the set password is lost, the password is 2. An authentication key registration management means for controlling so as not to permit deletion because it is regarded as a mismatch. Security functional with the information processing apparatus. The password used for registration in the authentication key information storage means is associated with the authentication key ID, registered in the authentication key information storage means as part of the attribute information of the authentication key information, and deleted from the authentication key information storage means In this case, the deletion is allowed only when the password stored in association with the authentication key ID is matched, and the password stored in association with the other authentication key ID is controlled not to allow deletion. The information processing apparatus with a security function according to claim 1, further comprising authentication key registration management means for performing authentication. The authentication key information storage means stores each authentication key ID and display ID information such as the name of the corresponding authentication key device in association with each other and stores the display ID in place of the authentication key during registration and deletion operations. 2. The information processing apparatus with security function according to claim 1, further comprising an authentication key registration management unit, wherein information is presented to a registrant and controlled so that the authentication key ID is not directly disclosed.

Images