JP2009032003A - Portable electronic device, terminal device, authentication system, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a high-security portable electronic device, a terminal device, and an authentication system, and an authentication method therefor. <P>SOLUTION: When receiving a random number request command from the terminal device 13 for processing the portable electronic device 11, the portable electronic device 11 generates a random number and transmits the generated random number to the terminal device 13. The portable electronic device 11 and the terminal device 13 select one of a plurality of encryption keys stored in advance based on the random number, and mutually perform authentication using the selected encryption key. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a portable electronic device, a terminal device, an authentication system, and an authentication method that include, for example, a communication interface and communicate between devices.

In general, an IC card as a portable electronic device is one in which an IC chip is embedded in a card-like casing made of plastic or the like.
For example, the IC card is used for electric parsing (electronic money, electronic money), electronic commerce (electric commerce), and private security systems (door security system, access management on a network, etc.) inside a company. . In such applications, security is extremely important. Some conventional IC cards store authentication information such as key information in a nonvolatile memory in order to prevent unauthorized use. When such authentication information is specified by a malicious person, there is a problem that the IC card may be illegally used. In view of this, an IC card system has been proposed in which data is encrypted and decrypted using an encryption key held by the IC card, and writing and reading are performed (see, for example, Patent Document 1).

However, in the above-described conventional IC card system, the same set of encryption keys is always used for data encryption and decryption in the IC card and the IC card reduction device. In this case, it is possible to analyze unknown original data from encrypted data by paying attention to the correlation between known data before encryption (original data) and data after encryption (encrypted data) There is a problem that there is. Further, when the encryption key is estimated by analyzing the processing content of the encryption process, there is a problem that the IC card can be used illegally easily.
JP-A-2005-122402

  Therefore, an object of one embodiment of the present invention is to provide a portable electronic device, a terminal device, an authentication system, and an authentication method with high security.

  In order to achieve the above object, a portable electronic device according to an aspect of the present invention is a portable electronic device that performs processing according to a command transmitted from a terminal device, and transmits and receives data to and from the terminal device. A transmission / reception unit; a storage unit storing a plurality of key data; and a random number generation unit that generates a random number when a random number request command is received from the terminal device; and a random number generated by the random number generation unit Processing means for transmitting to the selection means, selection means for selecting one key data from a plurality of key data stored in the storage means based on the random number generated by the random number generation means, and the key selected by the selection means Authentication means for authenticating the terminal device depending on whether or not the terminal device has key data corresponding to the data.

  A terminal device according to an aspect of the present invention is a terminal device that transmits a command to a portable electronic device for processing, and a transmission / reception unit that transmits / receives data to / from the portable electronic device, and the portable electronic device. Storage means storing a plurality of key data corresponding to a plurality of key data stored in the device, and a random number request command is transmitted to the portable electronic device by the transmission / reception means, and the portable as a response to the command Selection means for selecting one key data from a plurality of key data stored in the storage means based on a random number received from a possible electronic device, and key data corresponding to the key data selected by the selection means Authentication means for authenticating the portable electronic device depending on whether or not the portable electronic device has the information.

  An authentication system according to an aspect of the present invention is an authentication system including a terminal device and a portable electronic device, wherein the portable electronic device transmits and receives data to and from the terminal device. A first storage unit that stores a plurality of key data; a random number generation unit that generates a random number when a random number request command is received from the terminal device; and a random number generated by the random number generation unit Processing means for transmitting to the apparatus; first selection means for selecting one key data from a plurality of key data stored in the first storage means based on the random number generated by the random number generation means; First authentication means for authenticating the terminal device depending on whether or not the terminal device has key data corresponding to the key data selected by the selection means, and the terminal device Includes a second transmission / reception means for transmitting / receiving data to / from the portable electronic device, a second storage means for storing a plurality of key data, and a random number request command to the portable electronic device. Second selection for selecting one key data from a plurality of key data stored in the second storage means based on a random number transmitted from the transmission / reception means and received from the portable electronic device as a response to the command And second authentication means for authenticating the portable electronic device depending on whether or not the portable electronic device has key data corresponding to the key data selected by the second selecting device. It has.

  An authentication method according to an aspect of the present invention is an authentication method for the terminal device used in a portable electronic device having a transmission / reception means for transmitting / receiving data to / from the terminal device, wherein a random number request command is sent from the terminal device. If received, it generates a random number, transmits the generated random number to the terminal device, selects one key data from the storage means storing a plurality of key data based on the generated random number, and selects the selected key The terminal device is authenticated based on whether or not the terminal device has key data corresponding to the data.

  An authentication method according to an aspect of the present invention is an authentication method for the portable electronic device used in a terminal device having a transmission / reception unit that transmits / receives data to / from the portable electronic device. Transmitting a random number request command, storing a plurality of key data corresponding to a plurality of key data stored in the portable electronic device based on a random number received from the portable electronic device as a response to the random number request command; One key data is selected from the storage means, and the portable electronic device is authenticated based on whether or not the portable electronic device has key data corresponding to the selected key data.

  According to one embodiment of the present invention, a portable electronic device, a terminal device, an authentication system, and an authentication method with high security can be provided.

  Hereinafter, a portable electronic device, a terminal device, an authentication system, and an authentication method according to an embodiment of the present invention will be described in detail with reference to the drawings.

  First, an authentication system for a portable electronic device composed of a portable electronic device and a terminal device will be described.

FIG. 1 is a block diagram schematically showing a configuration example of a portable electronic device (IC card) 11 and a terminal device 13 according to an embodiment of the present invention.
The terminal device 13 is connected to the card reader / writer 12, the keyboard 14, the CRT 15, the printer 16, and the like.

The terminal device 13 includes a CPU, various memories, various interfaces, and the like. In addition, the terminal device 13 has a function of performing data transmission / reception with the IC card 11 by the card reader / writer 12 and a function of performing various processes based on data received from the IC card 11.
For example, the terminal device 13 writes data in the nonvolatile memory in the IC card 11 by transmitting a data write command to the IC card 11 via the card reader / writer 12. The terminal device 13 reads data from the IC card 11 by transmitting a read command to the IC card 11. As a result, it is possible to perform an authentication process for authenticating whether or not the data stored in the IC card 11 is valid. Usually, the authentication process is performed by communicating between the terminal device 13 and the IC card 11 and collating data encrypted using an encryption key, decrypted data, and the like. The terminal device 13 further includes an encryption key storage unit 13a that stores a plurality of encryption keys for authentication processing. The terminal device 13 can encrypt and decrypt data using the encryption key stored in the encryption key storage unit 13a.

  The card reader / writer 12 is an interface device for performing communication with the IC card 11. The card reader / writer 12 performs power supply, clock supply, reset control, and data transmission / reception with respect to the IC card 11. With such a function, the card reader / writer 12 performs activation (activation) of the IC card 11, transmission of various commands, reception of responses to the transmitted commands, and the like based on control by the terminal device 13.

  The keyboard 14 functions as an operation unit operated by an operator of the terminal device 13, and various operation instructions and data are input by the operator. The CRT 15 is a display device that displays various information under the control of the terminal device 13. The printer 16 is an output unit that prints a processing result obtained by the terminal device 13.

Next, the IC card 11 will be described.
The IC card 11 is activated (becomes operable) when receiving power or the like from a host device such as the terminal device 13. For example, when the IC card 11 is connected to the terminal device 13 by contact communication, that is, when the IC card 11 is configured by a contact IC card, the IC card 11 is connected via a communication interface as a communication interface. The terminal device 13 is activated by receiving the operation power supply and the operation clock from the terminal device 13.

  Further, when the IC card 11 is connected to the terminal device 13 by a non-contact type communication method, that is, when the IC card 11 is configured by a non-contact type IC card, the IC card 11 is an antenna as a communication interface. In addition, a radio wave is received from the terminal device 13 via a communication control unit or the like, and an operation power supply and an operation clock are generated from the radio wave by a power supply circuit and activated.

  The IC card 11 can perform authentication processing by transmitting / receiving data to / from the terminal device 13. That is, the IC card 11 further includes an encryption key storage unit 11a that stores a plurality of encryption keys for authentication processing.

  Next, a configuration example of the IC card 11 will be described.

  FIG. 2 is a block diagram schematically showing a configuration example of the IC card 11 according to the first embodiment. The IC card 11 has a module 112 built in a housing constituting the main body 111. The module 112 is integrally formed in a state where one or a plurality of IC chips 113 and a communication external interface (communication interface) are connected, and is embedded in the main body 111 of the IC card 11. As shown in FIG. 2, the module 112 of the IC card 11 has a control element 101, a nonvolatile memory 102, a volatile memory 103, a program memory 104, a power supply circuit 105, a voltage detection circuit 106, and a communication interface 107. You are doing.

  The control element 101 controls the entire IC card 11. The control element 101 functions as various processing means by operating based on a control program and control data stored in the program memory 104 or the nonvolatile memory 102.

  The non-volatile memory 102 is configured by a non-volatile memory that can write and rewrite data, such as an EEPROM or a flash ROM. In the non-volatile memory 102, a control program and various data are written according to the usage application of the IC card 11. For example, in the nonvolatile memory 102, program files and data files are defined, and control programs and various data are written in these files. The nonvolatile memory 102 includes an encryption key storage unit 11a that stores a plurality of encryption keys. That is, the nonvolatile memory 102 functions as a storage unit.

  The volatile memory 103 is a volatile memory that functions as a working memory. The volatile memory 103 also functions as a buffer for temporarily storing data being processed by the control element 101. For example, the volatile memory 103 is configured to temporarily store data received from the terminal device 13 via the communication interface 107.

  The program memory 104 is a nonvolatile memory in which a control program and control data are stored in advance. The program memory 104 is incorporated in the IC card 11 in a state where a control program, control data, and the like are stored at the manufacturing stage. That is, the control program and control data stored in the program memory 104 are incorporated according to the specifications of the IC card 11 in advance.

  The program memory 104 stores a random number generation program for generating random numbers. When the random number data request command is received from the terminal device 13 shown in FIG. 1, the control element 101 functions as a random number generation unit that generates a random number by executing this random number generation program. The generated random number is transmitted to the terminal device 13 as a response to the random number data request command. The program memory 104 stores a plurality of encryption / decryption programs. The control element 101 encrypts and decrypts data by executing this encryption / decryption program using an encryption key.

  When the IC card 11 performs non-contact communication, the power supply circuit 105 generates an operation power and an operation clock from the radio wave received from the card reader / writer 12 shown in FIG. The voltage detection circuit 106 functions as a reset circuit for the control element 101 that monitors the voltage supplied to the control element 101.

  The communication interface 107 functions as transmission / reception means and is an interface for communicating with the card reader / writer 12 shown in FIG. When the IC card 11 is realized as a contact-type IC card, the communication interface 107 includes a communication control unit for contacting the card reader / writer 12 to transmit and receive signals and a contact unit as an external interface. The When the IC card 11 is realized as a non-contact type IC card, the communication interface 107 includes a communication control unit for performing wireless communication with the card reader / writer 12 and an antenna as an external interface. .

FIG. 3 is an explanatory diagram showing an example of the encryption key stored in the encryption key storage unit 11a of the IC card 11.
The encryption key storage unit 11a stores key data A and key data B as encryption keys. The key data A is associated with “0”. The key data B is associated with “1”. That is, the control element 101 shown in FIG. 2 selects the key data A when the first bit of the random number generated by executing the random number generation program is “0” and the key data B when the first bit is “1”. Are associated with random numbers and key data.

FIG. 4 is an explanatory diagram illustrating an example of the encryption key stored in the encryption key storage unit 13 a of the terminal device 13.
The encryption key storage unit 13a includes key data Ap as an encryption key paired with the key data A stored in the encryption key storage unit 11a of the IC card 11, and key data Bp paired with the key data B. It is remembered. The key data Ap is associated with “0”. The key data Bp is associated with “1”. That is, the terminal device shown in FIG. 1 selects the random number and the key data so that the key data A is selected when the first bit of the random number received from the IC card 11 is “0” and the key data B is selected when the first bit is “1”. Are associated with each other.

  The control element 101 executes a program corresponding to the selected key data from a plurality of encryption / decryption programs stored in the program memory 104, and performs encryption or decryption. Note that the relationship between the key data A and the key data Ap is the original data when the data encrypted using the key data A is decrypted using the key data Ap, for example, as in the public key cryptosystem. have. On the other hand, the key data A and the key data Ap have a relationship that when the data encrypted using the key data Ap is decrypted using the key data A, the original data is obtained. This relationship is the same in the key data B and the key data Bp.

  Thereby, the IC card 11 and the terminal device 13 perform encryption or decryption using different key data. For this reason, the risk that the key data (encryption key) can be detected is reduced.

  Next, an authentication method in the above authentication system will be described.

FIG. 5 is a sequence for explaining processing in each configuration of the authentication system shown in FIG.
When the terminal device 13 detects the IC card 11 by the card reader / writer 12 (step S11), the terminal device 13 transmits a random number data request command shown in FIG. 6 to the IC card 11 (step S12). The random number data request command is a command for causing the control element 101 of the IC card 11 shown in FIG. 2 to execute a random number generation program.

  When receiving the random number data request command from the terminal device 13, the control element 101 of the IC card 11 executes a random number generation program and generates 8-byte random number data shown in FIG. 6 (step S13). The control element 101 temporarily stores the generated random number data in the volatile memory 103 (step S14), and further transmits the generated random number data to the terminal device 13 as a response to the random number data request command (step S15). The random number data generated here is set with a leading bit for causing the IC card 11 and the terminal device 13 to select an encryption key.

  The terminal device 13 temporarily stores the random number data received from the IC card 11 in a storage unit (not shown) (step S16). Further, the terminal device 13 selects the key data stored in the encryption key storage unit 13a according to the stored random number data (step S17). That is, the terminal device 13 refers to the first bit of the random number data, and selects the key data Ap when the first bit is “0” and the key data Bp when the first bit is “1”. Here, the terminal device 13 transmits to the IC card 11 a command for requesting encrypted data encrypted with the selected key data.

  When receiving the command, the control element 101 selects the key data stored in the encryption key storage unit 11a according to the random number data stored in the volatile memory 103 (step S18). That is, the control element 101 refers to the first bit of the random number data, and selects the key data A when the first bit is “0” and the key data B when the first bit is “1”.

  Next, the IC card 11 and the terminal device 13 perform an authentication process. That is, first, the control element 101 of the IC card 11 encrypts the key data by selecting the predetermined data for authentication processing and the encryption / decryption program corresponding to the selected key data (step S19). The control element 101 transmits encrypted data obtained by encrypting predetermined data to the terminal device 13 (step S20).

  The terminal device 13 decrypts the encrypted data received from the IC card 11 using the selected key data and the encryption / decryption program corresponding to the selected key data (step S21). The terminal device 13 transmits the decrypted data obtained by decrypting the encrypted data to the IC card 11 (step S22).

  The control element 101 of the IC card 11 checks whether or not the predetermined data for authentication processing matches the decrypted data received from the terminal device 13 (step S23). The control element 101 transmits the collation result to the terminal device 13 (step S24). Here, for example, when the predetermined data and the decoded data match, the IC card 11 transmits an OK verification result to the terminal device 13, and when the predetermined data and the decoded data do not match, the NG verification result Is transmitted to the terminal device. The terminal device 13 determines whether the IC card 11 is a valid card according to the received verification result.

  Note that although the size of the random number data generated by the control element 101 by the random number generation program is 8 bytes, random number data of an arbitrary size may be generated.

  Although the verification process of the authentication process is performed by the IC card 11, the authentication process is normally performed also by the terminal device 13. In this case, first, the terminal device 13 encrypts the predetermined data for authentication processing using the selected key data and the encryption / decryption program corresponding to the selected key data. The terminal device 13 transmits encrypted data obtained by encrypting predetermined data to the terminal device 13.

  The control element 101 of the IC card 11 decrypts the encrypted data received from the terminal device 13 using the selected key data and the encryption / decryption program corresponding to the selected key data. The control element 101 transmits the decrypted data obtained by decrypting the encrypted data to the terminal device 13.

  The terminal device 13 collates whether or not the predetermined data for authentication processing matches the decrypted data received from the IC card 11.

  Note that the value of the first bit of the random number data is referred to select the encryption key. If the position of the bit to be referenced is the same position in the IC card 11 and the terminal device 13, refer to what bit. Also good.

  In addition, a bit for selecting key data may be specified by adding a value (bit specific value) for specifying the position of a bit to be referred to in random number data to the random data request command. In this case, in step 12 and step 15 shown in FIG. 5, the data shown in FIG. 7 is transmitted and received. That is, the terminal device 13 transmits a random number data request command to which the bit specific value is added to the IC card 11. The IC card 11 generates random number data and transmits the random number data to which the bit specific value is added to the terminal device 13. The IC card 11 and the terminal device 13 identify the key data with reference to the value of the bit at the position specified by the bit identification value in the random number data. For example, as shown in FIG. 7, when the bit specific value is “5”, the IC card 11 and the terminal device 13 specify the key data with the value of the fifth bit counted from the first bit of the random number data. Reference as the value of.

  In the above-described embodiment, an example in which there are two encryption keys stored in the encryption key storage units 11a and 13a has been described, but two or more encryption keys may be used. For example, when there are four encryption keys stored in the encryption key storage units 11a and 13a, 2 bits are inevitably necessary for specifying the key data. That is, as shown in FIG. 8, the IC card 11 and the terminal device 13 handle a 2-bit combination as a value for selecting key data.

  FIG. 9 is an explanatory diagram illustrating an example of an encryption key stored in the encryption key storage unit 11 a of the IC card 11. The encryption key storage unit 11a stores key data A, B, C, and D. Key data A, B, C, and D are associated with “00”, “01”, “10”, and “11”, respectively. That is, the control element 101 of the I card has the key data A shown in FIG. 8 as “00”, the key data A when “01”, the key data B when “01”, and the key data C when “10”. In the case of “11”, key data D is selected and used for authentication processing.

  FIG. 10 is an explanatory diagram illustrating an example of an encryption key stored in the encryption key storage unit 13a of the terminal device. The encryption key storage unit 13a stores key data Ap, Bp, Cp, and Dp that are paired with the key data A, B, C, and D shown in FIG. The key data Ap, Bp, Cp, and Dp are associated with “00”, “01”, “10”, and “11”, respectively. That is, the terminal device 13 selects the key data Ap shown in FIG. 8 when the key data is “00”, the key data Bp when “01”, the key data Cp when “10”, and “11”. In this case, the key data Dp is selected and used for the authentication process.

  As described above, a plurality of encryption keys are stored in advance in the IC card 11, and a plurality of encryption keys paired with the plurality of encryption keys stored in the IC card 11 are stored in the terminal device 13 that processes the IC card 11. To do. When the IC card 11 is detected, the terminal device 13 transmits a random number data request command to the IC card 11. The IC card 11 generates a random number and transmits the generated random number data to the terminal device 13 as a response. The IC card 11 and the terminal device 13 refer to the value of the first bit of the random number data and select one of a plurality of stored encryption keys. The IC card 11 and the terminal device 13 perform authentication processing with each other using the selected encryption key.

  According to such a configuration, since different encryption keys are used in the IC card and the terminal device that processes the IC card, it is difficult to estimate the encryption key. In addition, since the same encryption key is not always used and one set of a plurality of encryption keys is determined based on random numbers, it is possible to make the estimation of the original data and the encryption key more difficult. As a result, it is possible to provide a portable electronic device, a terminal device, an authentication system, and an authentication method with higher security.

  In addition, this invention is not limited to the said embodiment as it is, It can implement by changing a component in the range which does not deviate from the summary in an implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine the component covering different embodiment suitably.

  In the present embodiment, the portable electronic device has been described as an IC card. However, the portable electronic device is not limited to this. For example, the portable electronic device may be an IC tag, a passport, a credit card, a cash card, an ID card, a mobile phone, or the like provided with a communication unit with an external device and an IC. The invention can be applied.

The block diagram which shows the structural example of the IC card and terminal device in connection with this embodiment. The block diagram which shows the example of an internal structure of the IC card shown in FIG. Explanatory drawing which shows an example of the encryption key memorize | stored in IC card shown in FIG. Explanatory drawing which shows an example of the encryption key memorize | stored in the terminal device shown in FIG. The sequence for demonstrating the process in the IC card and terminal device shown in FIG. Explanatory drawing which shows the example of the data communicated between the IC card shown in FIG. 1, and a terminal device. Explanatory drawing which shows the other example of the data communicated between the IC card shown in FIG. 1, and a terminal device. Explanatory drawing which shows the further another example of the data communicated between IC card and a terminal device shown in FIG. Explanatory drawing which shows the other example of the encryption key memorize | stored in the IC card shown in FIG. Explanatory drawing which shows the other example of the encryption key memorize | stored in the terminal device shown in FIG.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... IC card, 11a ... Encryption key storage part, 12 ... Card reader / writer, 13 ... Terminal device, 13a ... Encryption key storage part, 101 ... Control element, 102 ... Non-volatile memory, 103 ... Volatile memory, 104 ... Program Memory 107, communication interface 111, main body 112, module 113, IC chip

Claims (10)

A portable electronic device that performs processing according to a command transmitted from a terminal device,
Transmitting / receiving means for transmitting / receiving data to / from the terminal device;
Storage means for storing a plurality of key data;
When a random number request command is received from the terminal device, random number generating means for generating a random number;
Processing means for transmitting the random number generated by the random number generating means to the terminal device;
Selecting means for selecting one key data from a plurality of key data stored in the storage means based on the random number generated by the random number generating means;
Authentication means for authenticating the terminal device depending on whether or not the terminal device has key data corresponding to the key data selected by the selection means;
A portable electronic device comprising: The authentication means includes
Means for transmitting the random number generated by the random number generation means to the terminal device by the transmission / reception means;
Encryption means for encrypting the first authentication data using the key data selected by the selection means;
Means for transmitting the encrypted data encrypted by the encryption means to the terminal device by the transmission / reception means;
Means for receiving, by the transmitting / receiving means, second authentication data that is data obtained by decrypting encrypted data by the terminal device;
Collating means for collating the first authentication data with the second authentication data received from the terminal device;
Means for transmitting the verification result by the verification means to the terminal device by the transmission / reception means;
The portable electronic device according to claim 1, comprising: The authentication means includes
Means for transmitting the random number generated by the random number generation means to the terminal device by the transmission / reception means;
Means for receiving encrypted data, which is data obtained by encrypting the first authentication data by the terminal device, by the transmitting / receiving means;
Decryption means for decrypting the encrypted data using the key data selected by the selection means;
Means for transmitting the decrypted data decrypted by the decrypting means to the terminal device by the transmitting / receiving means as second authentication data;
The portable electronic device according to claim 1, comprising: Further, a module having the above means,
A body containing the module;
The portable electronic device according to any one of claims 1 to 3, further comprising: A terminal device that sends a command to a portable electronic device for processing,
Transmitting and receiving means for transmitting and receiving data to and from the portable electronic device;
Storage means for storing a plurality of key data corresponding to a plurality of key data stored in the portable electronic device;
A random number request command is transmitted to the portable electronic device by the transmission / reception means, and one key from a plurality of key data stored in the storage means based on a random number received from the portable electronic device as a response to the command A selection means for selecting data;
Authentication means for authenticating the portable electronic device depending on whether or not the portable electronic device has key data corresponding to the key data selected by the selecting means;
A terminal device comprising: The authentication means includes
Encryption means for encrypting the first authentication data using the key data selected by the selection means;
Means for transmitting the encrypted data encrypted by the encryption means to the portable electronic device by the transmission / reception means;
Means for receiving, by the transmitting / receiving means, second authentication data which is data obtained by decrypting encrypted data by the portable electronic device;
Collating means for collating the first authentication data with the second authentication data received from the portable electronic device;
The terminal device according to claim 5, further comprising: The authentication means includes
Means for receiving encrypted data, which is data obtained by encrypting the first authentication data by the portable electronic device, by the transmitting / receiving means;
Decryption means for decrypting the encrypted data using the key data selected by the selection means;
Means for transmitting the decrypted data decrypted by the decrypting means to the portable electronic device by the transmitting / receiving means as second authentication data;
The terminal device according to claim 5, further comprising: An authentication system comprising a terminal device and a portable electronic device,
The portable electronic device comprises:
First transmitting / receiving means for transmitting / receiving data to / from the terminal device;
First storage means for storing a plurality of key data;
When a random number request command is received from the terminal device, random number generating means for generating a random number;
Processing means for transmitting the random number generated by the random number generating means to the terminal device;
First selection means for selecting one key data from a plurality of key data stored in the first storage means based on the random number generated by the random number generation means;
First authentication means for authenticating the terminal device depending on whether or not the terminal device has key data corresponding to the key data selected by the selection means;
Comprising
The terminal device
Second transmitting / receiving means for transmitting / receiving data to / from the portable electronic device;
Second storage means for storing a plurality of key data;
A plurality of random number request commands are transmitted to the portable electronic device by the second transmission / reception means, and stored in the second storage means based on the random numbers received from the portable electronic device as responses to the commands Second selection means for selecting one key data from the key data;
Second authentication means for authenticating the portable electronic device depending on whether or not the portable electronic device has key data corresponding to the key data selected by the second selection means;
An authentication system comprising: An authentication method for the terminal device used in a portable electronic device having a transmission / reception means for transmitting / receiving data to / from the terminal device,
If a random number request command is received from the terminal device, a random number is generated,
Send the generated random number to the terminal device,
One key data is selected from the storage means storing a plurality of key data based on the generated random number,
Authenticating the terminal device based on whether the terminal device has key data corresponding to the selected key data;
An authentication method characterized by that. An authentication method for the portable electronic device used in a terminal device having a transmission / reception means for transmitting / receiving data to / from the portable electronic device,
A plurality of key data stored in the portable electronic device based on a random number received from the portable electronic device as a response to the random number request command by transmitting a random number request command to the portable electronic device; One key data is selected from the storage means storing the key data of
Authenticating the portable electronic device depending on whether the portable electronic device has key data corresponding to the selected key data;
An authentication method characterized by that.

Images