JP2006005810A - Application user authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a user authentication method for an application which eliminates the need for a user himself / herself to input a user ID and a password and allows the user to be authenticated by a simple operation.
In the IC card, a part of information included in the electronic certificate is encrypted using a secret key, and the IC card reader / writer connected to the personal computer connects the secret from the IC card. A step of reading information encrypted with a key and the electronic certificate; and information encrypted with the private key read from the IC card in the personal computer is included in the electronic certificate. When the result of the collation processing is the same as the step of decrypting using the public key, the step of collating the information decrypted using the public key, and the part of the information included in the electronic certificate And authenticating as an authorized user of the application.
[Selection] Figure 1

Description

  The present invention relates to use of an application installed in a personal computer using an IC card in which a secret key and an electronic certificate generated by an authentication system are stored, and to an application user authentication method for authenticating a user.

Conventionally, when using an application installed in a personal computer, an authentication process for confirming that the user has a proper right to use the application is often performed.
For example, when using a personal computer, the user inputs a user ID and a password, and performs a verification process between the user ID and password registered in advance in the user information database. When the processing results match, the user is authenticated as an authorized user, and the application can be used. (For example, refer to Patent Document 1)
JP 2002-149601 A

However, in recent years, users of personal computers have become a wide range of age groups, from infants to the elderly, and when using personal computer applications, user IDs and passwords are stored as before. It is necessary to enter the user ID and password every time you use an application installed on your computer. In many cases, it becomes an obstacle when using a personal computer.
In other words, in order to promote the use of PCs for infants and the elderly, it is necessary to be able to use PC applications with the simplest possible operation. There are problems such as a large amount of stored information and complicated operations.

  The present invention eliminates the need for the user himself / herself to enter a user ID and password when using an application on a personal computer, so that the user can be authenticated with a simple operation. To provide a user authentication method of an application that reduces the burden and enables a wide range of age groups from children to the elderly to use PC applications.

  An application user authentication method of the present invention is an application for authenticating a user with respect to use of an application installed in a personal computer using an IC card in which a secret key generated by an authentication system and an electronic certificate are stored. A method of encrypting a part of information contained in the electronic certificate using the private key in the IC card, and an IC card connected to the personal computer. The reader / writer reads the information encrypted using the private key and the electronic certificate from the IC card, and the personal computer reads the information encrypted using the private key read from the IC card. Decrypting using the public key included in the electronic certificate, information decrypted using the public key, and the electronic certificate A step of verification process and part of the information is rare, the matching process result, and wherein the step of authenticating the user of the application of normal if they match, in that it consists of.

  The user authentication method of the application of the present invention can perform authentication processing only by reading information encrypted with a private key and an electronic certificate from a user's IC card with an IC card reader. By using a card, you can memorize user IDs and passwords and do not need to enter such information, so you can reduce the burden on users and have a wide range of ages from infants to the elderly. There is an effect that the person of the layer can use the application using a personal computer.

Hereinafter, an application user authentication method according to an embodiment of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram showing a configuration of a system to which an application user authentication method according to an embodiment of the present invention is applied. FIG. 2 is a system to which an application user authentication method according to an embodiment of the present invention is applied. FIG. 3 is a system block diagram of a system to which an application user authentication method according to an embodiment of the present invention is applied, and FIG. 4 is an application usage according to the embodiment of the present invention. It is a flowchart which shows the process sequence of a person authentication method.

As shown in FIG. 1, a system adapted to a user authentication method for an application according to an embodiment of the present invention comprises an IC card 1 for a user and a personal computer 3 provided with an IC card reader / writer 2. Yes.
A user who uses various applications installed in the personal computer 3 must first authenticate that he / she has a proper use authority. When receiving the authentication, the user uses the IC card reader / writer 2. The user's IC card 1 is inserted for authentication processing.

As shown in FIG. 2, the IC card 1 includes an input / output unit 4, a storage unit 5, an encryption unit 6, a control unit 7, and the like.
The storage unit 5 stores a secret key 8, an electronic certificate 9, a control program 10, and the like generated in advance by the authentication system.
The electronic certificate 9 includes a public key used as a pair with the private key 8 stored in the storage means 5, a certificate serial number, a certificate signature algorithm, an issuing institution, an issue date / time, a validity period, a certificate Information on the certificate holder is registered.
The encryption means 6 of the IC card 1 has a function of encrypting a part of information included in the electronic certificate 9 specified in advance using the secret key 8.
The data encrypted using the private key can be decrypted using the public key included in the electronic certificate.

As shown in FIG. 3, the IC card reader / writer 2 includes a data reading unit 11 for reading data from the IC card 1, a data writing unit 12 for writing data to the IC card 1, a storage unit 13, a control unit 14, An interface 15 and the like are provided.
The IC card reader / writer 2 reads from the IC card the information encrypted with the private key stored in the storage means 5 and the electronic certificate, and further transmits the information to the personal computer 3.

The personal computer 3 includes an interface 16, a display unit 17, a decryption unit 18, a collation unit 19, an authentication unit 20, an input unit 21, a storage unit 22, a control unit 23, and the like.
The decryption means 18 includes the information encrypted using the private key and the information encrypted using the private key received from the IC card reader / writer 2 in the electronic certificate. It has a function to decrypt using the public key.
The collating unit 19 has a function of collating the information decrypted by the decrypting unit 18 with a part of the information of the electronic certificate.

Therefore, if the IC card 1 inserted into the IC card reader / writer 2 is a legitimate user, the IC card 1 uses a part of the information in the electronic certificate with a private key in the first stage. Since the information is encrypted, the information decrypted with the public key is included in a part of the electronic certificate, and is matched in the matching process by the matching unit 19.
However, even if authentication is attempted using another IC card, since the electronic certificate is not stored, the authentication cannot be received and the personal computer application cannot be used.
Further, the authentication unit 20 of the personal computer 3 authenticates the user as a regular user when the collation processing by the collation unit 19 matches, and makes it possible to use the application installed in the personal computer 3. It has a function.

Next, the processing procedure of the application user authentication method according to the embodiment of the present invention will be described with reference to the flowchart of FIG.
First, a user who wants to use various applications installed in the personal computer 3 inserts and sets the user's IC card 1 in the IC card reader / writer 2. (Step S1)
Next, in the IC card 1, the encryption unit 6 encrypts a part of information specified in advance from the electronic certificate 9 registered in the storage unit 5 using the secret key 8. Turn into. (Step S2)

Then, the IC card reader / writer 2 reads the information encrypted using the secret key 8 and the electronic certificate 9 from the IC card 1 and sends them to the personal computer 3. (Step S3)
Next, the personal computer 3 first decrypts the received information encrypted using the private key 8 with the public key included in the electronic certificate 9 received in the same manner. (Step S4)
The information decrypted with the public key and the information included in the electronic certificate 9 are collated. (Step S5)

If they match as a result of the collation processing, the authentication means 20 approves that the authentication has been performed, and the application can be used. (Step S6)
If there is no match as a result of the collation process, the authentication unit 20 does not authenticate and the application is not used and the process ends. (Step S7)
The results related to these authentications are displayed on the display means of the personal computer 3 so that the user can confirm them.

As described above, in the present invention, it is not necessary to store a user ID, a password, and the like in order for the user to perform an authentication process.
Therefore, even if the user of the personal computer is an infant or an elderly person, as long as there is an IC card, the user is authenticated and can use various applications.

It is a figure which shows the structure of the system which adapted the user authentication method of the application which concerns on embodiment of this invention. 1 is a system block diagram of an IC card used in a system to which an application user authentication method according to an embodiment of the present invention is applied. 1 is a system block diagram of a system to which an application user authentication method according to an embodiment of the present invention is applied. It is a flowchart which shows the process sequence of the user authentication method of the application which concerns on embodiment of this invention.

Explanation of symbols

1 IC card
2 IC card reader / writer
3 PC
4 Input / output means
5,22 Memory means
6 Encryption means
7, 15, 23 Control means
8 Private key
9 Electronic certificate
10 Control program
11 Data reading means
12 Data writing means
14,16 interface
17 Display means
18 Decoding means
19 Verification means
20 Authentication means
21 Input means

Claims (1)

An application user authentication method for authenticating a user with respect to use of an application mounted on a personal computer using an IC card storing a secret key and an electronic certificate generated by an authentication system,
Encrypting a part of the information contained in the electronic certificate in the IC card using the private key;
Reading information encrypted with the private key and the electronic certificate from the IC card with an IC card reader / writer connected to the personal computer;
Decrypting information encrypted using the private key read from the IC card using the public key included in the electronic certificate in the personal computer;
Verifying information decrypted using the public key and a part of information included in the electronic certificate;
As a result of the verification process, authenticating as a regular user of the application when they match,
An application user authentication method characterized by comprising:

Images