JP2006228240A - Authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system, allowing a user of the authentication system to input the authentication information to a terminal to which an IC card is connected after confirming that the legality of the terminal is authenticated. <P>SOLUTION: This authentication system includes: the IC credit card 10 possessed by the user; and a reader/writer 30 capable of communicating with the IC credit card 10, wherein authentication of a user is performed on the basis of the user's biometric information. The IC credit card 10 has a terminal authentication part for authenticating the legality of the reader/writer 30; and an input device for reading the biometric information when the legality of the reader/writer 30 can be authenticated by the terminal authentication part. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authentication system using an IC card for performing user authentication.

  An IC (Integrated Circuit) card is a card in which an IC chip is embedded in a plastic plate. The IC chip is equipped with a CPU and memory and functions as a small computer. IC cards are increasingly used in various fields such as cash cards, credit cards, telephone cards, building entrance / exit management, and identity verification cards in the Basic Resident Register. .

  As the importance of IC cards increases, security functions are becoming more important as well as convenience in systems using IC cards. As one of security measures in a system using an IC card, there is authentication (person authentication) that the owner of the IC card is using the IC card. For the personal authentication, an authentication form using a personal identification number stored in the IC card is most common. In this authentication mode, when the user uses the IC card, the password is input to the terminal, and authentication is performed by comparing the input password with the password stored in advance in the IC card. Also, the IC card and the terminal itself are authenticated as not being an unauthorized card or terminal due to forgery or alteration. This is known as internal authentication for authenticating the validity of the IC card as viewed from the terminal side, and external authentication for authenticating the validity of the terminal as viewed from the IC card side.

The IC card permits access from the terminal to the information stored in the IC card only after the external authentication of the connected terminal is successful. This reduces the risk that payment using an IC card is illegally performed and that important information such as personal information and payment information stored in the IC card is leaked.
Supervised by Seiichi Ido, edited by Takaaki Matsumoto and Tatsuaki Okamoto, “Information Security Technology” Ohm Co., Ltd., August 28, 2000, p. 131-137 Hiroshi Oda, Koji Kajikawa, and Hiroshi Isobe “Basics and Applications of Security IC Cards” Seamedia, Inc., April 27, 2000, p. 115-117

  However, since a display or the like for displaying the authentication result is generally provided on the terminal side, the user cannot confirm that the terminal is valid. In other words, even if it is an unauthorized terminal, if it is crafted so that it is displayed that it has been properly authenticated, the user cannot determine whether the terminal is an unauthorized terminal. For this reason, even if the IC card has a mechanism to prevent unauthorized payment processing and information leakage, an illegally crafted terminal prompts the user to input authentication information such as a password or password. If displayed, the user is likely to input authentication information to the unauthenticated terminal. As described above, in the conventional IC card authentication system, there is a possibility that the authentication information is stolen by an unauthorized terminal.

  The present invention has been made in view of the above problems, and allows the user to input authentication information after confirming that the validity of the terminal to which the IC card is connected has been authenticated. An object is to provide a system and an IC card.

  The present invention is a user authentication system that includes an IC card owned by a user and an IC card terminal that can communicate with the IC card, and performs user authentication based on the biometric information of the user. The IC card authenticates the validity of the IC card terminal, and the input device that reads the biometric information when the validity of the IC card terminal can be authenticated by the terminal authentication unit. It is characterized by having.

  According to the present invention, the IC card authenticates the IC card terminal before the user inputs biometric information to the IC card. Therefore, the user can input biometric information used for authentication after confirming that the IC card terminal is correctly authenticated.

  According to the present invention, the user can input authentication information after confirming that the validity of the IC card terminal is authenticated.

  Hereinafter, a payment processing system that performs payment using an IC credit card according to an embodiment of the present invention will be described.

  FIG. 1 is a block diagram showing the overall configuration of the payment processing system according to the present embodiment. As shown in FIG. 1, the payment processing system of the present embodiment includes a POS terminal 20 for price settlement installed at a cash register of a store, and a settlement server 40 operated by a financial institution that is a settlement institution for credit settlement. Are connected by a communication line 50. The communication line 50 is, for example, a telephone line, the Internet, or a wireless connection.

  The POS terminal 20 is provided with an IC card reader / writer 30 (IC card terminal of the present invention) for communicating with the IC credit card 10, and a customer who purchases merchandise in the store (use of the IC credit card) A function of performing settlement processing by communicating with the IC credit card 10 possessed by the person. When the user pays the price by credit, the user inserts the IC credit card 10 into the reader / writer 30 and inputs the password using the keypad 31 provided in the reader / writer 30. The POS terminal 20 authenticates the user using the entered password. When the personal authentication is successful, the POS terminal 20 communicates with the IC credit card 10 and the settlement server 40 and performs a settlement process.

=== IC credit card ===
The IC credit card 10 is an IC card having a CPU and a memory. FIG. 2 shows an example of the configuration of the IC credit card 10. As shown in FIG. 2, the IC credit card 10 includes a CPU 11, a ROM 12, a RAM 13, an EEPROM 14, an interface 15, a contact terminal 16, and an LED 17.

  The CPU 11 controls processing of the IC credit card 10. The RAM 13 is a readable / writable volatile memory that stores programs and data. The ROM 12 is a read-only nonvolatile memory and stores an authentication program 18. The CPU 11 implements a function of authenticating the validity of the reader / writer 30 to which the IC credit card 10 is connected by reading the authentication program 18 into the RAM 12 and executing the authentication program 18 read into the RAM 13. That is, the terminal authentication unit of the present invention is realized by the CPU 11 executing the authentication program 18.

  The EEPROM 14 is a readable / writable nonvolatile memory mainly for storing data. The EEPROM 14 stores a private key 141, a public key 142, a public key certificate 143 for the public key 142, and a certification authority public key 144. The public key certificate 143 can be obtained by, for example, X. This is a certificate for the public key 332 signed in a predetermined format such as 509. The public key certificate 143 can be decrypted with the public key 144 of the certification authority, and the public key 142 can be extracted. As will be described later, a private key, a public key, and a public key certificate are also stored in the reader / writer 30, and encrypted communication between the IC credit card 10 and the reader / writer 30 is performed using these keys and certificates. Is done. The EEPROM 14 stores authentication information 145 such as a password of the user of the IC credit card 10 and a password. The data stored in the EEPROM 14 may be encrypted and stored.

  The interface 15 is an interface for connecting to the reader / writer 30. When the contact terminal 16 and the contact terminal of the reader / writer 30 come into contact with each other, the IC credit card 10 and the reader / writer 30 are connected, and the interface 15 controls data communication with the reader / writer 30 by serial input / output or the like. By performing the above, communication between the IC credit card 10 and the reader / writer 30 becomes possible. The IC credit card 10 is also supplied with power from the reader / writer 30 via the contact terminal 16.

  The LED 17 is a light emitting unit that emits light under the control of the CPU 11. The IC credit card 10 causes the LED 17 to emit light when the reader / writer 30 can be correctly authenticated by an authentication process described later. In this embodiment, the notification unit of the present invention is realized by the CPU 11 executing the authentication program 18 and causing the LED 17 to emit light. That is, LED17 is corresponded to the light emission means with which the alerting | reporting part of this invention is provided.

  The IC credit card 10 shown in FIG. 2 has a contact-type IC card configuration, but may of course have a non-contact configuration. In this case, the IC credit card 10 includes an antenna coil and performs wireless communication with the reader / writer 30 via the interface 15. Further, the IC credit card 10 may be provided with both the contact terminal 16 and the antenna coil, so that the IC credit card 10 can be a hybrid type having both the contact type and the non-contact type simultaneously.

=== POS terminal ===
FIG. 3 is a block diagram showing a configuration of the POS terminal 20. As shown in FIG. 3, the POS terminal 20 includes a CPU 21, a memory 22, a storage device 23, a display 24, an input device 25, a communication interface 26, and a reader / writer interface 27.

  The CPU 21 is in charge of overall control of the POS terminal 20, and by executing a program loaded from the storage device 23 to the memory 22, for example, the settlement amount is calculated from the unit price and quantity of the product, and the sales time is stored. The function as a POS terminal is realized.

  The storage device 23 is, for example, a hard disk or ROM, and stores application programs and data executed by the CPU 21.

  The display 24 is a display device of the POS terminal, and displays the purchase price of goods. The input device 25 is, for example, a bar code reader or a numeric keypad, and is used when inputting a product code, the price of the product, or the like.

  The communication interface 26 is an interface connected to the communication line 50, such as a modem connected to a telephone line or a network interface connected to a LAN.

  The reader / writer interface 27 is an interface connected to the reader / writer 30. The reader / writer interface 27 is connected to the reader / writer 30 in accordance with a known standard such as RS232C or USB.

  The reader / writer 30 may be integrated with the POS terminal 20 or may be connected separately by a cable or the like.

=== Reader / Writer ===
FIG. 4 is a block diagram showing a configuration of the reader / writer 30. As shown in FIG. 4, the reader / writer 30 includes a keypad 31, a CPU 32, an EEPROM 33, a RAM 34, a display 35, a host interface 36, and an IC card interface 37.

  The keypad 31 is an input device. The user of the IC credit card 10 uses the keypad 31 to enter the password.

  The CPU 32 controls the reader / writer 30 as a whole, and implements an authentication function, a function for issuing a payment request to the payment server 40, and the like by reading a program stored in the EEPROM 33 into the RAM 34 and executing it.

  The EEPROM 33 is a non-volatile memory in which a program executed by the CPU 32 and data used by the program are stored, for example, a semiconductor memory or a flash memory. Instead of the EEPROM 33, for example, a storage medium such as a hard disk can be used. The RAM 34 is a volatile memory that stores data and programs.

  The EEPROM 33 stores a private key 331, a public key 332, a public key certificate 333 for the public key 332 by the certification authority, and a public key 334 of the certification authority. The public key certificate 333 can be obtained by, for example, X. A certificate of the public key 332 signed in a predetermined format such as 509. The public key certificate 333 can be decrypted with the public key 334 of the certification authority, and the public key 332 can be extracted. As described above, encrypted communication is performed between the reader / writer 30 and the IC credit card 10 using these keys, certificates, and the like. In this embodiment, the certification authority public key 334 stored in the reader / writer 30 has the same contents as the certification authority public key 144 stored in the IC credit card 10.

  The display 35 is a device that displays, for example, operation instructions and processing statuses. For example, when executing the authentication program 38, the CPU 32 can display an authentication result of the connected IC card, a message for prompting input of a personal identification number for personal authentication, and the like.

  The host interface 36 is an interface connected to the POS terminal 20. The host interface 36 is connected to the POS terminal 20 according to a known standard such as RS232C or USB. The IC card interface 37 is an interface for communicating with the IC card inserted into the card insertion slot.

  As described above, in the present embodiment, when the user performs payment for payment at the store by credit, the IC credit card 10 is inserted into the reader / writer 30, and the message displayed on the display 35 of the reader / writer 30 is followed. The password is entered using the keypad 31. The reader / writer 30 communicates with the IC credit card 10 and authenticates the user based on the data held by the IC credit card 10 or the input password. When the user is authenticated by the reader / writer 30, the POS terminal 20 requests the settlement server 40 to settle the usage amount.

=== Authentication process ===
The flow of authentication processing using the IC credit card 10 will be described below.
FIG. 5 is a flowchart showing a process flow from when the IC credit card 10 is inserted into the reader / writer 30 included in the POS terminal 20 until a settlement process is performed.

  When the IC credit card 10 is inserted into the reader / writer 30 by the user (S5001), the IC credit card 10 and the reader / writer 30 authenticate each other (S5002). Details of this authentication process will be described later.

  When the validity of the reader / writer 30 is authenticated by the IC credit card 10 as a result of the above mutual authentication, the LED 17 included in the IC credit card 10 emits light (S5003), and the validity of the reader / writer 30 is authenticated. The user is notified. Next, the user inputs authentication information such as a password and password via the keypad 31 provided in the reader / writer 30 (S5004).

  When the authentication information by the user is input, the reader / writer 30 attaches the input authentication information and transmits a request for personal authentication to the IC credit card 10, and the IC credit card 10 transmits the received authentication information to the EEPROM 14. By comparing with the stored authentication information 145, the legitimacy of the user is authenticated (S5005). The result of the personal authentication for the user by the IC credit card 10 is returned to the reader / writer 30, and the POS terminal 20 performs a settlement process according to the result (S5006).

  As described above, the user can check the validity of the reader / writer 30 before inputting the authentication information by the light emission of the LED 17.

  Next, a mechanism for mutually authenticating the authenticity between the IC credit card 10 and the reader / writer 30 will be described. FIG. 6 is a flowchart showing a flow of processing in which the IC credit card 10 and the reader / writer 30 authenticate each other.

  First, the reader / writer 30 performs internal authentication of the IC credit card 10. The reader / writer 30 generates a random number (random number RB) and stores it in the RAM 34 (S6001). The reader / writer 30 transmits the generated random number RB to the IC credit card 10 (S6002).

  When receiving the random number RB, the IC credit card 10 generates a new random number RA and stores the random number RA in the RAM 13 (S6003). The IC credit card 10 uses the private key 141 to generate a signature (signature SA) for data composed of the random number RA and the random number RB (S6004). Here, the IC credit card 10 also stores the random number RB in the RAM 13 (S6005). The IC credit card 10 attaches the public key certificate 143, which is a certificate of the public key of the IC credit card 10 by the certification authority, to the random number RA and the signature SA and transmits them to the reader / writer 30 (S6006). Here, the public key certificate 143 is referred to as a certificate CA. Further, the public key 142 that is the public key of the IC credit card 10 is assumed to be the public key KA.

  The reader / writer 30 extracts the public key KA of the IC credit card 10 from the received certificate CA (S6007), and verifies the signature SA (S6008). The verification of the signature SA is performed, for example, by performing a hash operation on the data composed of the received random number RA and the random number RB stored in the RAM 34, and calculating the hash value calculated here and the signature SA by the IC credit card 10 as an IC. This is done by comparing the value decrypted with the public key KA of the credit card 10 and determining whether they are the same. The reader / writer 30 authenticates the validity of the IC credit card 10 by verifying the signature SA.

  Next, the reader / writer 30 is authenticated by the IC credit card 10. The reader / writer 30 newly generates a random number (random number RC) (S6009). The reader / writer 30 uses the private key 331 to generate a signature (signature SB) for data composed of the random number RB, the random number RA, and the random number RC (S6010). The reader / writer 30 attaches the public key certificate 333 that is the certificate of the public key 332 of the reader / writer 30 to the random number RC and the signature SB, and transmits them to the IC credit card 10 (S6011). Here, the public key 332 of the reader / writer 30 is a public key KB, and the public key certificate 333 is a certificate CB.

  The IC credit card 10 extracts the public key KB of the reader / writer 30 from the received certificate CB (S6012), and verifies the signature SB (S6013). For the verification of the signature SB, as in the verification of the signature SA, for example, a hash operation is performed on the data including the received random number RB and the random number RA stored in the RAM 13, and the calculated hash value and the signature This is done by comparing the value obtained by decrypting the SB with the public key KB and determining whether or not they are the same. In this way, the IC credit card 10 authenticates the validity of the reader / writer 30 by verifying the signature SB.

  As described above, the process in which the IC credit card 10 and the reader / writer 30 authenticate each other according to the present embodiment has been described. is there. A secret key common to the IC credit card 10 and the reader / writer 30 is stored in an EEPROM or the like. The reader / writer 30 generates a random number, the IC credit card 10 encrypts the random number with a secret key, and the reader / writer 30 decrypts the encrypted random number to determine whether it is the same value as the generated random number. The reader / writer 30 performs internal authentication for the IC credit card 10. Similarly, the reader / writer 30 encrypts the random number generated by the IC credit card 10, decrypts the IC credit card 10, and compares the generated random number with the decrypted random number, thereby allowing the IC credit card 10 to read the reader / writer 30. Can be externally authenticated.

  As described above, the IC credit card 10 notifies the authentication result of the reader / writer 30 by the light emission of the LED 17 before the user inputs the password. Therefore, for example, when the LED 17 does not emit light, the user can take measures such as not inputting the personal identification number because the POS terminal 20 cannot be trusted. Therefore, it is possible to reduce the risk that the user will input the password to an apparatus intended to obtain the password illegally.

  In the present embodiment, since the existing IC card reader / writer can be used as it is, the above-described effects can be obtained without incurring costs for changing existing system assets.

In the present embodiment, the LED 17 of the IC credit card 10 emits light when the IC credit card 10 can authenticate the validity of the reader / writer 30. As a result, when a signal is not output due to a failure of a notification unit such as the LED 17 or the like, it is possible to prevent an unauthorized terminal from being mistaken as valid.
However, the IC credit card 10 may emit light when the validity of the reader / writer 30 to be connected cannot be authenticated. In this case, there is an effect that the user can easily recognize that the IC credit card 10 is connected to the reader / writer 30 that is likely to be an unauthorized terminal.

  Moreover, although LED17 with which IC credit card 10 is provided in this embodiment alert | reports an authentication result by light emission, this can also be made to output a sound. That is, instead of the LED 17, a piezoelectric buzzer that outputs a buzzer, a speaker that outputs audio data stored in the ROM 12 or the EEPROM 14, and the like can also be used as the acoustic output unit of the present invention. Moreover, it can replace with LED17 and can also use display apparatuses, such as a liquid crystal display. If the IC credit card 10 is provided with a liquid crystal display, it is also possible to display the progress and result of authentication in detail.

  Further, the IC credit card 10 may include a plurality of different types of notification means. For example, the IC credit card 10 includes both the LED 17 and the piezoelectric buzzer, and can output notification signals for both light emission and sound output. In this case, for example, the IC credit card 10 emits the LED 17 when the validity of the reader / writer 30 can be authenticated, and the buzzer sounds when the validity of the reader / writer 30 cannot be authenticated. This prevents the user from misidentifying an unauthorized terminal as legitimate when a signal is not output due to a failure of a notification unit such as the LED 17, and makes it easy for the user to understand the determination result of the unauthorized terminal. Can be recognized.

  Moreover, it can replace with LED17 with which IC credit card 10 is provided, and can also use the transmitter which transmits an electromagnetic wave. In this case, for example, when the IC credit card 10 cannot authenticate the reader / writer 30, the receiver that receives the radio wave vibrates or beeps in response to the reception of the radio wave. Can be made to sound. The user can hold the radio wave receiver so that, for example, when the IC credit card 10 cannot authenticate the validity of the reader / writer 30, the user can be notified. As a result, for example, the reader / writer 30 and the keypad 31 to which the IC credit card 10 is connected are separated, and light or sound notification is recognized from the IC credit card 10 at a place where the user inputs authentication information such as a personal identification number. Even in situations where it is impossible, the user can receive notification by receiving radio waves at a remote location.

  In the present embodiment, the keypad 31 that receives input from the user is provided in the reader / writer 30, but the keypad 31 may be replaced by the input device 25 provided in the POS terminal 20. In that case, the POS terminal 20 receives the authentication information input by the user, and transmits the received authentication information to the reader / writer 30. The display 35 of the reader / writer 30 can be replaced with the display 24 of the POS terminal 20 or the like. Furthermore, the functions realized by the CPU 32 of the reader / writer 30 executing the program, such as the authentication function for performing the authentication process described above, can be executed by the CPU 21 of the POS terminal 20. In that case, the IC credit card 10 is directly inserted into the POS terminal 20, and the POS terminal 20 executes a program similar to that of the reader / writer 30, thereby exchanging with the IC credit card 10.

  Further, the authentication information 145 stored in the IC credit card 10 according to the present embodiment can be biometric information such as a fingerprint, a voiceprint, a retina pattern, and an iris. In that case, the keypad 31 provided in the reader / writer 30 is an input device such as a scanner for reading a fingerprint, a microphone for inputting voice, a camera, or the like, and the IC credit card 10 collates the data input by them to perform the authentication. Do. In addition to the reader / writer 30, these input devices may be provided in the POS terminal 20, or may be provided in the IC credit card 10.

  In addition to the financial settlement system, the authentication system according to the present embodiment is input by the user, for example, a debit card, a cash card, an IC card owned by the user, such as entrance / exit management to a building, etc. The present invention can be widely applied when authentication is performed using authentication information such as a password.

  Although the present embodiment has been described above, the above examples are for facilitating the understanding of the present invention, and are not intended to limit the present invention. The present invention can be changed and improved without departing from the gist thereof, and the present invention includes equivalents thereof.

It is a block diagram which shows the whole structure of the payment processing system based on one Embodiment of this invention. 1 shows a configuration of an IC credit card 10 according to an embodiment of the present invention. It is a block diagram which shows the structure of the POS terminal 20 based on one Embodiment of this invention. It is a block diagram which shows the structure of the reader / writer 30 based on one Embodiment of this invention. 4 is a flowchart showing a flow of processing from when the IC credit card 10 is inserted into the reader / writer 30 included in the POS terminal 20 until settlement processing is performed according to an embodiment of the present invention. It is a flowchart which shows the flow of the process which IC credit card 10 and the reader / writer 30 mutually authenticate based on one Embodiment of this invention.

Explanation of symbols

10 IC credit card 11 CPU
14 EEPROM 141 Private Key 142 Public Key 143 Public Key Certificate 144 Certification Authority Public Key 145 Authentication Information 17 LED 18 Authentication Program 30 Reader / Writer 31 Keypad 33 EEPROM
331 Private key 332 Public key 333 Public key certificate 334 Certification authority public key

Claims (1)

A user authentication system configured to include an IC card owned by a user and an IC card terminal capable of communicating with the IC card, and performing user authentication based on biometric information of the user,
The IC card is
A terminal authentication unit for authenticating the validity of the IC card terminal;
When the validity of the IC card terminal can be authenticated by the terminal authentication unit, an input device that reads the biometric information;
A user authentication system comprising:

Images