JP2012068930A - Password authentication system and method, and encrypted communication system and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method assuring a highly advanced security, eliminating a restriction of the number of times of using a password, and dispensing with a strict time management between an authenticatee side device and an authenticator side device.SOLUTION: An authenticatee side device 100 and an authenticator side device 300 extract child data 131 and 331 and seed data 171 and 371 from parent data 111 and 311 of the same content respectively by the same extraction method, create passwords 141 and 341 from the child data 131 and 331 to use them for the authentication, and perform the same prescribed process to the seed data 171 and 371 respectively to create next-generation parent data 112 and 312 necessary for the next authentication and update the original parent data 111 and 311 respectively.

Description

  The present invention relates to an authentication system and method using a password, and an encryption communication system and method applying password authentication.

In the authentication between the person to be authenticated and the authenticator, in general, a decision to establish authentication is made using a password. In the authentication using the password, damage is caused by a third party illegally acquiring and misusing the password by key logger, skimming, phishing, or the like.
As a preventive measure against the unauthorized use of the password, a one-time password that changes the password for each authentication is used, and the S / Key method (Non-Patent Document 1) devised by Lamport or RSA SecurID is used as the method. A method using tokens has been put into practical use. Also, a method of changing an encryption key every time communication is disclosed in order to improve the security of encrypted communication (Patent Document 1).

JP-A 09-270786 Encrypted communication method

L. Lampport: Password authentication with insure communication. Commun. ACM, 24, 11, pp. 770-772; 1981

  However, the S / Key method using the one-way hash function has a limit on the number of times the password can be used. In addition, in the method using RSA SecurID tokens adopted by many Internet banks such as Japan Net Bank, the time of the authenticator's token built-in clock and the time of the authenticator's server computer built-in clock are strictly Need to be synchronized. Further, the person to be authenticated is exposed to the stress of accurately inputting a 6-8 digit number, which is the token code displayed on the token, in a short time with a push button. Furthermore, this system has a security problem that a “spoofing” attack by a third party by a replay attack within 60 seconds is possible.

  On the other hand, when performing encrypted communication following authentication, there has been no system or method for centrally managing a password used for authentication and an encryption key used for encrypted communication.

  Further, in order to improve the security of encrypted communication, there remains a big problem in the distribution problem of the encryption key (session key). In the method of Patent Document 1 invented to solve this problem, the next time Since the data that becomes the seed for creating the encryption key for this communication flows on the communication line this time, there is a possibility that a malicious third party may become a clue to perform decryption.

The present invention has been made in view of such points, and ensures security, eliminates the limit on the number of times the password is used, eliminates the need for strict time management of the internal clock of the person to be authenticated and the person to be authenticated, The present invention provides a password authentication system and method for reducing the stress of the person to be authenticated.
In addition, by providing a new system and method for centrally managing passwords used for authentication and encryption keys used for encrypted communication, it is possible to reduce the time and effort of managing passwords and encryption keys, as well as password authentication, The present invention provides a system and a method that can prevent erroneous delivery of ciphertexts by continuously performing subsequent encrypted communication.
Furthermore, the present invention provides a system and method for encrypted communication with higher security by solving the distribution problem of the encryption key (session key).

  In order to solve the above problems, the present invention devised a system and method for password authentication, password authentication and subsequent encrypted communication, and encrypted communication by combining the following (1) to (3).

(1) The authenticated person side and the authenticator side or both sides performing encrypted communication share the following (A) to (C) in advance.
(A) Initial value of parent data, seed data, or child data and seed data.
(B) Child data extraction processing method that extracts a part of parent data and uses it as child data, seed data extraction processing method that extracts a part of parent data and uses it as seed data, and next generation parent data from seed data Parent data creation processing method to be created, password creation processing method to create a password from child data, encryption key creation processing method to create an encryption key from child data, child data P and encryption for creating a password for a plurality of child data Each data processing method, such as a child data sorting method for sorting into child data K that is a key creation source.
(C) Parameter and condition setting necessary for each data processing.

(2) When performing password authentication and encrypted communication, both sides independently create next-generation parent data from seed data from which a part of the parent data has been extracted. In the process of creating the next generation parent data from the next generation seed data from which a part of the data has been extracted, and then extracting and creating the data continuously in a loop, a part of the parent data Extract the child data, extract the next generation parent data to the next generation child data, and similarly, extract the generation of the parent data and the generation of the child data, and so on. As described above, child data is continuously extracted from the parent data, a password and an encryption key that actually flow on the communication line are created from the extracted child data, and these are used disposable.
At this time, the extraction method for extracting child data from the parent data and the extraction method for extracting seed data from the parent data use different methods. Therefore, the child data and the seed data are not related to each other. As a result, even if a third party obtains a password or encryption key that flows on the communication line, the next password or encryption key is guessed from that data. Is difficult.

(3) Further, as described above, disposing passwords and encryption keys in the process of continuing the data extraction / creation process in a loop form disposes child data extracted from the parent data. Therefore, the data amount of the seed data is reduced by at least the child data than the original parent data. In order to compensate for this, a method to increase the amount of data in the process of creating parent data from the seed data so that the data amount of the next generation parent data is at least equal to the amount of data of the original parent data. It is characterized by having a mechanism that can continuously extract child data that can be used as a base for passwords and encryption keys to be disposable.

  In addition, “Create a password based on child data” described in each item of the claims is “use the child data itself as a password” and “create a password by performing predetermined processing on the child data” "Create an encryption key based on child data" is a similar concept. However, in the case of “create a password and an encryption key based on the child data” according to claim 6 and claim 13, the child data and the encryption key must be different data. To do is not a concept.

  Further, the extraction / creation processing method of each data is arbitrary, and decimal numbers and four arithmetic calculations may be used as shown in the embodiments described later, or a known encryption method or a known one may be used. A directional hash function may be applied, processing may be performed using an ID (identifier) or a date / time function, a numerical value determined in advance may be used as a parameter, and calculation processing may be performed. May apply graphic drawing or image / sound conversion.

  The method for extracting / creating each data may be the same in each process (each cycle), but is not limited to performing the same process in each process (each cycle). Different processing methods may be used each time, or different parameters and condition settings may be used. In this case, it is difficult to share infinitely repeated processing methods, parameters and condition settings in advance, and they will be repeated in a finite cycle, and in this case, there is a limit on the number of times the password can be used. The problem of the superiority of the present invention over the S / Key method using the sexual hash function occurs. For example, it is not realistic to negotiate 10,000 passwords in advance in the S / Key method. In the present invention, it is possible to set the number of times more than that for each processing method, parameter, and condition setting. In practice, the data processing method, parameter, and condition setting is performed every time (each cycle). It can also be set to be equivalent to changing and making it disposable.

  In addition, each data extraction / creation processing method, parameters, and condition settings are basically shared by both in advance. However, the present invention determines all data processing in advance and shares the data, parameters, and processing. It is not limited to the method alone. For each authentication / encryption communication, or after multiple authentications / encryption communication, or by periodically determining the date and time, both the data extraction / creation processing method, parameters used, processing conditions, etc. Exchanges may be made.

  Further, the description of “child data is disposable” is not limited to making the child data disposable once used. The operation of this system and method is not limited to one cycle of a loop of parent data, seed data, and next generation parent data for each authentication and encrypted communication. Loop processing of parent data, seed data, and next generation parent data may be performed one cycle for each authentication or encrypted communication, or multiple cycles may be performed for each authentication or encrypted communication. Child data may be extracted and used. Depending on the frequency and importance of password authentication and encrypted communication, parent data / species data may be used after child data is used multiple times or periodically. The loop data processing of the next generation parent data may be rotated one cycle and changed to the next child data.

  Furthermore, the numbers of parent data, child data, and seed data are not limited to one each.

The present invention of claim 1 to claim 3 is an authentication system using a password, and the same data is stored in advance in the storage unit of the device to be authenticated and the device on the side of the authenticator. In the present invention, it is parent data, in the present invention of claim 2, it is seed data, and in the present invention of claim 3, it is child data and seed data.
Therefore, the first password is generated from the child data extracted from the parent data of the storage unit in the present invention of claim 1, and in the present invention of claim 2, the parent data creation means is the next generation from the seed data of the storage unit. From the next generation child data created by the child data extraction means from the next generation parent data, the password creation means respectively created from the child data itself of the storage unit. It is a password.
However, the present invention of claim 1 to claim 3 is a process of performing a cycle of extracting and creating data in a loop continuously with parent data, seed data, next generation parent data, and next generation seed data. Since the mechanism for continuously extracting the child data is the same, these three parties are essentially the same system except that the entrance to the loop is different.
Also, the present inventions of claims 8, 9 and 10 are inventions of methods performed in the systems of claims 1, 2 and 3, respectively, and likewise they are essentially Is the same method.

The present invention of claim 4 and claim 5 is a password authentication and encryption communication system for performing encrypted communication subsequent to password authentication, in order to continuously perform a series of password authentication and encrypted communication, Data is extracted.
In the present invention of claim 4, in the case of one password authentication and subsequent encrypted communication, the number of loop data processing of the parent data, seed data, and next generation parent data of both apparatuses is one cycle. The child data extracting means extracts a plurality of child data from the parent data in one cycle.
On the other hand, in the present invention of claim 5, in the case of one-time password authentication and subsequent encrypted communication, the loop data processing of the parent data, the seed data, and the next generation parent data is performed a plurality of cycles, so that the child data and the next generation are processed. Extract multiple child data, such as child data.
As described above, in the case of one-time password authentication and subsequent encrypted communication, a plurality of pieces of child data are extracted, and are selected and used as child data P which is a prime password and child data K which is a prime encryption key. By doing so, a series of password authentication and encrypted communication can be continuously performed.
The present invention of claim 10 and claim 11 is an invention of a method performed by the system of claim 4 and claim 5, respectively.

The present invention of claim 6 is a modification of the present invention of claim 4 and claim 5 and is a loop data processing of parent data, seed data, and next generation parent data in one-time password authentication and subsequent encrypted communication. The child data extracted by rotating one cycle is used to create two different data and use them as a password and an encryption key. In this system, it is important to devise a password creation and encryption key creation processing method so that it is difficult to guess the encryption key from the password flowing on the communication line. As a relatively simple method, there is a method in which the extracted child data is used as an encryption key and a hash value obtained by a one-way hash function of the child data is used as a password.
The invention of claim 13 is an invention of a method performed by the system of claim 6.

The present invention of claim 7 is a system limited to only encrypted communication in which password authentication is omitted from the password authentication and encrypted communication system according to the present invention of claims 4 to 6.
In the present invention, since password authentication is not performed, the data processing unit of each apparatus that performs encrypted communication does not require password creation means, authentication determination means, or child data selection means.
Note that the encryption key used for both encrypted communications can be block cipher using one encryption key for each encrypted communication, even if multiple encryption keys are used for one encrypted communication. Even with block ciphers, data that connects multiple child data extracted through multiple cycles of parent data, seed data, and next-generation parent data loop processing is used as an encryption key to create a stream cipher. Also good.
Further, the present invention of claim 14 is an invention of a method performed by the system of claim 7.

According to the present invention of claim 1 to claim 3 and claim 8 to claim 10, parent data, seed data, or child data and seed data having the same contents on the devices and terminals of the person to be authenticated and the person to be authenticated Once the initial value is set and shared, both parties can independently and independently continue the same parent data creation, seed data extraction, and next generation parent data creation loop data processing cycles. In the course of implementation, a single-use password with the same content is automatically created sequentially on both sides, so that both the subject and the authenticator can use only parent data, seed data, or child data and seed data. Can be managed, and the management effort can be minimized.
Also, even if a third party illegally acquires a password that flows on the communication line, the password is disposable, and the next generation parent data necessary to extract the child data that will be used to create the next password Since the seed data necessary for creation does not flow on the communication line, it is extremely difficult to guess the password used for the next authentication. For this reason, it is extremely difficult for the third party to successfully succeed in the next authentication, and it is possible to provide a password authentication system and method that secures security equivalent to or higher than the conventional one.

According to the present invention of claims 4 to 6 and claims 11 to 13, the password is the same as that of the present invention of claims 1 to 3 and claims 8 to 10. In addition, it is possible to provide a password authentication system and method that can secure the security equivalent to or higher than the conventional one while minimizing the trouble of managing the encryption key.
It is also possible to provide a new system and method for centrally managing passwords and encryption keys (session keys).
Also, by using a disposable encryption key (session key), it is possible to reduce the risk of decryption of the encryption, and to provide a password authentication and encryption communication system and method that ensures the same level of security as before. Can do.
Further, by performing encrypted communication following password authentication, it is possible to prevent erroneous transmission of ciphertext.

  According to the present invention of claim 7 and claim 14, with the same mechanism as the present invention of claim 1 to claim 3 and claim 8 to claim 10, the effort of managing the encryption key is minimized. By using a single-use encryption key (session key), the risk of decryption can be reduced, and even if the encryption key is decrypted, the continuation of the damage can be cut off.

It is a block diagram which represents typically the structural example of the password authentication system of Claim 1. It is a flowchart which shows the process in a to-be-authenticated person side apparatus and an authenticator side apparatus. It is a figure which shows the specific example of a data processing using the numerical value in a to-be-authenticated person side apparatus and an authenticator side apparatus. It is a block diagram which represents typically the structural example of the password authentication system of Claim 2 and Claim 3. 6 is a table showing specific numerical data processing steps in the first to fifth embodiments.

[Embodiment 1]
The first embodiment is an embodiment of a system for performing authentication using a password between a device to be authenticated and a device on the authenticator side according to claim 1, and FIGS. 1 to 3 and 5. Will be described with reference to FIG.
First, FIG. 1 schematically shows a configuration example of the password authentication system in a block diagram. This password authentication system includes an authenticator side device 100 and an authenticator side device 300 that are communicably connected to each other via a communication network 200 (for example, the Internet). The to-be-authenticated person side device 100 and the certifier side apparatus 300 correspond to any of a server, a computer, and a mobile terminal device (for example, a portable computer, a mobile phone, etc.). In many cases, these devices have the functions of both the device to be authenticated 100 and the device 300 to be authenticated, but they will be described separately to clarify the functions of the device to be authenticated and the device to be authenticated. To do.

The to-be-authenticated person side device 100 and the certifier side apparatus 300 are each composed of storage units 110 and 310 and data processing units 120 and 320.
The storage units 110 and 310 correspond to devices and media that can be stored, such as a main storage device, a hard disk device, a flash memory, and the like, and both store initial values of the parent data 111 and 311 having the same contents in advance. The contents of the parent data 111 and 311 can be arbitrarily set. For example, numerical values, character strings, symbols, and the like are applicable.

The data processing unit 120 of the device 100 to be authenticated includes a child data extraction unit 130, a password creation unit 140, a communication unit 150, a seed data extraction unit 170, a parent data creation unit 180, and a data update unit 190.
The child data extraction unit 130 extracts child data 131 from a part of the parent data 111.
The password creation unit 140 creates a password 141 from the child data 131 extracted by the child data extraction unit 130.
The communication unit 150 sends the password 141 created by the password creation unit 140 to the authenticator side device 300 via the communication network 200 to request authentication, and is transmitted from the authenticator side device 300 when the authentication is successful. The authentication establishment signal is received.
The seed data extraction unit 170 extracts a part of the parent data 111 as a seed data 171 by a method different from the method of extracting the child data.
The child data 131 and the seed data 171 are different data. Therefore, the relevance between the password 141 and the seed data 171 is poor.
The parent data creating unit 180 performs a predetermined process on the seed data 171 to create the next generation parent data 112.
The data update unit 190 updates the original parent data 111 with the next generation parent data 112 created by the parent data creation unit 180.

The data processing unit 320 of the authenticator side device 300 includes a child data extraction unit 330, a password creation unit 340, a communication unit 350, an authentication determination unit 360, a seed data extraction unit 370, a parent data creation unit 380, and a data update unit 390. Have.
The child data extraction unit 330, the password creation unit 340, the seed data extraction unit 370, and the parent data creation unit 380 are respectively a child data extraction unit 130, a password creation unit 140, and a data processing unit 120 of the device 100 to be authenticated. The child data 331, the password 341, the seed data 371, and the next generation parent data 312 are extracted and created by the same predetermined extraction / creation processing method as the seed data extraction means 170 and the parent data creation means 180, respectively.
The communication unit 350 receives the password 141 transmitted for the purpose of the authentication request from the person-to-be-authenticated apparatus 100, and transmits an authentication establishment signal to the person-to-be-authenticated apparatus 100 when the authentication is established.
The authentication determining unit 360 determines whether or not the authentication is successful depending on whether or not the password 341 created by the password creating unit 340 of the user and the password 141 received by the communication unit 350 from the device 100 to be authenticated match. .
The data update unit 390 updates the original parent data 311 with the next generation parent data 312 created by its own parent data creation unit 380.

In this example, child data extraction means 130 and 330, password creation means 140 and 340, communication means 150 and 350, authentication determination means 360, seed data extraction means 170 and 370, parent data creation means 180 and 380, data update means In 190 and 390, the CPU executes the case function by executing the program.
In addition, the child data extraction means 130 and 330, the password creation means 140 and 340, the seed data extraction means 170 and 370, the parent data creation means 180 and 380, etc. execute the same data processing program and the program. Various parameters, condition settings, and the like necessary for this may be stored in advance in each data creation unit or stored in the storage unit. The data processing method in each data creation / extraction means is arbitrary.

An example of a procedure executed in the password authentication system configured as described above will be described with reference to FIG.
The left side of FIG. 2 represents an example of the procedure of the authenticator side apparatus 100, and the right side represents the procedure of the authenticator side apparatus 300.
In addition, since a login request and an identifier (ID) are transmitted / received before a normal password is transmitted / received, this is shown on the broken line, but the portion above the broken line is outside the scope of the present invention. Is the part described below the broken line.

First, the to-be-authenticated apparatus 100 transmits an identifier (ID) to the authenticator-side apparatus 300 to request connection [Step S10], and the authenticator-side apparatus 300 receives the identifier (ID) and is requested to connect. Then, [Step S30], the parent data 311 corresponding to the identifier (ID) and information such as various processing methods and parameters are acquired from its own database [Step S31], and the password 141 is transmitted to the device 100 to be authenticated. [Step S32], and the authentication-subjected device 100 receives the request [Step S12]. (So far, it is outside the scope of the present invention on the broken line in FIG. 2).
Then, the child data extraction means 130 and 330 of the to-be-authenticated person side device 100 and the certifier side apparatus 300 independently extract the child data 131 and 331 from the parent data 111 and 311 [steps S13 and S33]. Both password creation means 140, 340 create passwords 141, 341 from the child data 131, 331 extracted in steps S13, S33 [steps S14, S34].
Next, the communication means 150 of the to-be-authenticated person side device 100 transmits the password 141 created in Step S14 to the authenticator side apparatus 300 and requests authentication [Step S15].
When the communication unit 350 of the authenticator side device 300 receives the password 141 [step S35], the authentication determination unit 360 of the authenticator side device 300 receives the password 341 created in step S34 and the authenticated user side device 100 in step S35. The received password 141 is collated, and whether or not the authentication is established is determined based on whether or not they match. When the authentication is established, the authentication establishment signal is transmitted via the communication unit 350 of the authenticator side device 300. Is transmitted to the person-to-be-authenticated apparatus 100 [step S36], and the communication means 150 of the person-to-be-authenticated apparatus 100 receives this authentication establishment signal [step S16].
Subsequently, the seed data extraction means 170 and 370 of the to-be-authenticated person side device 100 and the authenticator side apparatus 300 independently extract the seed data 171 and 371 from the parent data 111 and 311 [step S17, step S37], Subsequently, both parent data creation means 180 and 380 create next generation parent data 112 and 312 from the seed data 171 and 371 extracted in steps S17 and S37 [step S18 and step S38]. The data updating means 190, 390 update the original parent data 111, 311 with the next generation parent data 112, 312 created in steps S18, S38 [step S19, step S39].
If authentication is not established in this system (no authentication establishment signal is transmitted / received), both procedures stop there and end, but the authenticator side device 300 does not establish authentication with the subject person side device 100. It is also possible to send a signal of, signal it and end both procedures.

Note that the child data 131 and 331 may be extracted before the start of the authentication process or after a login request or an identifier (ID) is transmitted / received.
In addition, the extraction time of the seed data 171 and 371 and the generation time of the next generation parent data 112 and 312 may be performed at any time before the start of the authentication process, before or after the password 141 transmission / reception, or after the authentication is established. Good.
In the system according to the present embodiment, the update time of the parent data in the data update means 190 and 390 of both apparatuses is performed after the authentication with the one password 141 is established, but depending on the importance and frequency of the authentication. After the authentication with the password 141 is performed a plurality of times, immediately after transmission / reception of the password 141, or by using both internal clocks, the date and time may be determined and updated periodically.

Next, a specific example of the data processing process in the to-be-authenticated person side device 100 and the certifier side apparatus 300 will be described with reference to FIGS. 3 and 5 using an example in which each data is composed of decimal numbers. To do. As will be described later, the portion surrounded by the broken line indicated by 2 in FIG. 3 is a data example when the initial values of the seed data 171 and 371 described in claim 2 are stored in the storage unit. It doesn't matter to the example.
It is assumed that a numerical value “6763840” is set as an initial value of the parent data 111 and 311 in both storage units 110 and 310 in advance (1).
First, child data 131 and 331 are extracted by both child data extraction means 130 and 330 (steps S13 and S33).
Assuming that the upper three digits of the numerical values of the parent data 111 and 311 are extracted as the child data 131 and 331 as the data extraction processing method of the child data extraction means 130 and 330 in this example, the numerical value “676” is the child data in this example. 131, 331. Next, based on the extracted child data 131, 331, both password creating means 140, 340 create passwords 141, 341 (steps S14, S34). As a data creation processing method of the password creation means 140 and 340 in this example, assuming that the numerical values of the child data 131 and 331 are directly used as the passwords 141 and 341, the numerical value “676” of the child data is directly used as the password 141, in this example. 341.
Next, when the numerical value “676”, which is the password 141 of the person-to-be-authenticated apparatus 100, is transmitted to the authenticator-side apparatus 300 by the communication means 150 (step S15), the authenticator-side apparatus 300 is transmitted via the communication network 200. (Step S35), and further sent to the authentication determination unit 360.
On the other hand, in the authenticator side device 300, a numerical value “676”, which is the password 341 created by the own password creation means 340, is sent to the authentication determination means 360. Next, the authentication determining means 360 collates the numerical value “676”, which is the password 141 received from the device 100 to be authenticated, with the numerical value “676”, which is the password 341 created by the own password creating means 340. Since both are the same, authentication establishment is determined in this example.
When authentication is established and an authentication establishment signal is transmitted and received, the seed data 171 and 371 are extracted from the parent data 111 and 311 by both seed data extraction means 170 and 370 (steps S17 and S37).
Assuming that the lower four digits of the numerical values of the parent data 111 and 311 are extracted as the seed data 171 and 371 as the extraction method in the seed data extraction means 170 and 370 in this example, the numerical value “3840” is the seed data 171 in this example. 371.
Next, the next generation (second generation) parent data 112 and 312 are generated by both parent data generation means 180 and 380 (steps S18 and S38).
As a processing method of the parent data creation means 180 and 380 in this example, it is assumed that the numerical values of the seed data 171 and 371 are squared, a common numerical value shared in advance by both is added, and a numerical value of a predetermined number of digits is extracted. If the common numerical value is “3427951” and the predetermined number of digits is “lower 7 digits”, for example,
As shown in the following equation, “3840 × 3840 + 3427951 = 18173551”, of which the last seven digits of the value “8173551” are the next generation (second generation) parent data 112 and 312 required for the next (second) authentication. It becomes.
Finally, both the data updating means 190, 390 update the numerical value “6763840” of the original parent data 111, 311 with the numerical value “8173551” of the next generation (second generation) parent data 112, 312 (step S19). , S39).

In the second authentication process, both the second generation parent data 111 and 311 have a numerical value “8173551”, and accordingly, the second generation child data 131 and 331, that is, the second passwords 141 and 341 have a numerical value “ 817 ".
In the process after the authentication is established, both the second generation seed data 171 and 371 are numerical values “3551”, and therefore the next generation (third generation) parent data 112 and 312 are numerical values “6037552”. The numerical value “8173551” of the original (second generation) parent data 111 and 311 is updated.

In the third authentication process, both of the third generation parent data 111 and 311 are numerical values “6037552”. Therefore, the third generation child data 131 and 331, that is, the third passwords 141 and 341 are numerical values “ 603 ".
In the processing after the authentication is established, both the third generation seed data 171 and 371 are numerical values “7552”, and therefore the next generation (fourth generation) parent data 112 and 312 are numerical values “0460655”. The numerical value “6037552” of the original (third generation) parent data 111 and 311 is updated. Thereafter, the same operation is performed.

  Even if the numerical value “676” that is the first password 141 is illegally acquired by the third party, the third party changes the numerical value “817” that is the second password 141 from this numerical value “676”. It is difficult to guess. Similarly, it is difficult for a third party to guess the numerical value “603” that is the third password 141 from the numerical value “817” that is the second password 141. The same applies to the following. Therefore, it is possible to ensure the same level of security as before.

  In addition, once the parent data 111 and 311 are set, the data updating means 190 and 390 sequentially update the original parent data 111 and 311 with the next generation parent data 112 and 312 (FIGS. 3 and 5). ) The number of settings can be minimized. Furthermore, since only the parent data 111 and 311 need to be managed, the labor of management can be minimized.

[Embodiment 2]
The second embodiment is an example of a system that performs encrypted communication subsequent to performing authentication using a password between the authenticator side device and the authenticator side device according to claim 4. With reference to FIG. 5, a specific numerical data processing process will be exemplified.
In this example, in the loop-shaped data processing process of one cycle of parent data creation, seed data extraction, and next generation parent data creation, the child data extraction means includes two child data (child data P [2] and child data K). [2]) is extracted, the child data sorting means sorts the child data P [2] into the prime of the password and the child data K [2] into the prime of the encryption key, and the password creating means sorts the child data P [2]. Is directly used as a password, and the encryption key generating means uses the child data K [2] as it is as an encryption key.
In both apparatuses, the initial value of the parent data in the storage unit, the extraction processing method of the seed data extraction means for extracting the seed data, and the creation processing method of the parent data creation means for creating the next generation parent data are implemented. The child data P [2] used for the password is the first two digits of the parent data, and the child data K [2] used for the encryption key is the third digit from the top of the parent data. The encryption / decryption means uses any known encryption method.

  First, the device to be authenticated uses the numerical value “67”, which is the first child data P [2], as a password for authentication, and after receiving a signal indicating the establishment of authentication from the device on the authenticator side, the first child data Using the numerical value “6” that is K [2] as an encryption key, a ciphertext is created and transmitted to the authenticator side device. If the ciphertext is received after the authentication using the numerical value “67” that is the first child data K [2] as a password is received, the authenticator side device sets the numerical value “6” that is the first child data K [2] to itself. And decrypts the received ciphertext using this as the encryption key. The next authentication uses the numerical value “81” that is the second child data K [2] as the password, and the next encryption key uses the numerical value “7” that is the second child data K [2]. Thereafter, the same operation is performed.

On the communication line, the first-time ciphertext using the first password “67” and the second “6” as the encryption key, and the second password “81” and the second “7” are used. The second ciphertext using "" as the encryption key flows, but if the third party uses the first password "67" and the number "6" as the encryption key, the first encryption Even if the sentence is obtained illegally, it is difficult for the third party to guess the numerical value “6” as the encryption key from the numerical value “67” as the password, and if the third party succeeds in decryption Even if the numerical value “6” that is the encryption key can be calculated, it is difficult for the third party to guess the numerical value “81” that is the second password from the numerical value “6” that is the encryption key, If the second password authentication is not performed, the second ciphertext is not transmitted. Therefore, the damage of cryptanalysis is not carried over to the next opportunity (second time). Therefore, security against unauthorized password authentication and decryption is protected.
In addition, once the parent data is set, the data updating means sequentially updates the original parent data with the next generation parent data, so that the password and the encryption key can be managed centrally and the ciphertext Can avoid misdelivery. Furthermore, since only the parent data needs to be managed, the management effort can be minimized.

[Embodiment 3]
The third embodiment is an example of a system that performs encrypted communication subsequent to performing authentication using a password between the authenticated-subject device and the authenticator-side device according to claim 5. With reference to FIG. 5, a specific numerical data processing process will be exemplified.
In this example, at the time of one-time password authentication and subsequent encrypted communication, the child data extraction means is configured to perform two cycles of data processing in a loop of parent data creation, seed data extraction, and next-generation parent data creation. The data is extracted, and the child data selection means converts the child data in the second cycle into child data P [3] that is a prime password, and the child data in the first cycle as child data K [3] that is a prime encryption key. The password creation means uses the child data P [3] as a password as it is, and the encryption key creation means uses the child data K [3] as it is as an encryption key.
In both apparatuses, the initial value of the parent data in the storage unit and the processing method for creating each data are the same as those in the first embodiment. The encryption / decryption means uses any known encryption method.

First, the authentication-subjected device performs authentication by selecting the password “817”, which is the child data in the first second cycle, as the child data P [3], and directly authenticating the password. After the reception, the numerical value “676”, which is the child data in the first cycle, is selected as the child data K [3] as it is as an encryption key, and a ciphertext is created and transmitted to the authenticator side device.
The authenticator side device also encrypts the numerical value “817”, which is the child data of the second cycle, as the child data P [3], and the password, the numerical value “676”, which is the first cycle of the child data, as the child data K [3]. When the ciphertext is received after the authentication is established using the numerical value “817” as the password after being calculated and selected as a key, the received ciphertext is decrypted using the numerical value “676” as the encryption key. In the next authentication, the numerical value “046” that is the child data P [3] in the fourth cycle is used as the password, and the numerical value “603” that is the child data K [3] in the third cycle is used as the encryption key. Thereafter, the same operation is performed.

A ciphertext using the numerical value “817”, which is the first password, and the numerical value “676”, which is the first encryption key, flows on the communication line. Even if the numerical value “817”, which is the password for the password, is illegally acquired, the third party immediately follows the numerical value “676”, which is the encryption key of the ciphertext that flows on the communication line, and the numerical value that is the second password. It is difficult to guess “046”. Also, even if the third party obtains the first ciphertext and succeeds in decryption and can calculate the numerical value “676” as the encryption key, the third party is the third party. It is difficult to guess the numerical value “046” that is the second password from the numerical value “676” that is the encryption key.
Therefore, as in the second embodiment, security against unauthorized password authentication and decryption can be protected, passwords and encryption keys can be managed centrally, misdelivery of ciphertexts can be avoided, and management Can be minimized.

In the second and third embodiments, the encrypted communication subsequent to the authentication is not only transmitted from the authenticator side device to the authenticator side device, but also transmitted from the authenticator side device to the authenticator side device. Well, bidirectional communication is possible.

[Embodiment 4]
Embodiment 4 is an example of an encrypted broadcast system to which the encrypted communication system according to claim 7 is applied. Encrypted news in which the encryption key is changed every day from the broadcast station side device to the receiving member side device. It is an example applied to a system that broadcasts. In this example as well, a specific numerical data processing process is illustrated.
Note that both the broadcasting station side device and the receiving member side device of this example use the same creation processing method as the password creation unit in place of the password creation unit in the data processing unit of the authenticated user side device of the first embodiment. An encryption key generating means for generating an encryption key, and additionally equipped with encryption and negative decryption means. In both devices, the initial value of the parent data of the storage unit and the method for extracting / creating each data Is the same as that of the first embodiment (see FIG. 5). The encryption / decryption means uses any known encryption method.

  In both the broadcasting station side device and the receiving member side device of the receiving member from the first day, a numerical value “6763840” is set in advance in the parent data of the storage unit before the broadcast starts. From the broadcasting station side device, the first day of the data encrypted using the numerical value “676” that is the child data is used as the encryption key, and the second day is the numerical value “817” that is the second child data. The news that was encrypted using the encryption key as the encryption key, the news that was encrypted using the numerical value “603”, which is the third child data on the third day, as the encryption key, the fourth time on the fourth day The news encrypted using the numerical value “046” as the child data as the encryption key is broadcast as the encrypted broadcast. Each receiving member independently extracts the child data every day and uses it as an encryption key to decrypt the encrypted broadcast received and view / subscribe to the news.

  In addition, the new receiving member from the 2nd day has a numerical value “8173551” at the time of joining, the new receiving member from the 3rd day has a numerical value “6035372” at the time of joining, and the new receiving member from the 4th day has a numerical value “0460655” at the time of joining. In the same way, the numbers newly created by repeating the update and extraction according to the date of enrollment are obtained through a different route from the encryption broadcast and set as the parent data of the storage unit, so that new incoming receiving members from the middle Can receive and decrypt the same encrypted news broadcast as the previous receiving member.

The broadcasting station side device automatically creates an encryption key every day, and the receiving member side device also automatically obtains the encryption key every day just by acquiring and setting the parent data through a different route from the encrypted news broadcast when joining. As both are created, encryption key management can be kept to a minimum.
Also, even if a non-member third party obtains an encrypted news broadcast illegally, the encryption key changes every day, so decryption is extremely difficult, and the third party succeeds in decrypting the encrypted news. Even if the encryption key can be calculated, the encryption key changes every day. Therefore, the encryption key cannot be used for decryption of encrypted broadcasts from the following day. It is difficult to continue.

In this example, encrypted broadcasting is used. However, one-to-one encrypted communication, one-to-multiple encrypted communication, and multiple-to-multiple encrypted communication may be used. The encryption key is updated every day here, but it is encrypted every second, every minute, every year, every communication, every 10 communications, etc. depending on the frequency of broadcast and communication and the importance of the contents. The key update frequency can be set freely.
In this example, only one child data is used as the encryption key. However, data obtained by appropriately combining the child data with the next generation child data, the next generation child data, or the like is used as the encryption key. Also good. Child data, next generation child data, next generation child data. . . The stream cipher may be used by using a numerical value that is continuous as an encryption key.

As described above, in the data processing examples using the decimal numbers in the first to fourth embodiments, the initial values of the parent data are presented by the method of setting in the storage unit according to claims 1 and 7 (FIG. 3). (1)).
On the other hand, as shown in FIGS. 3 to 5, in the method of setting the initial value of the seed data in the storage unit according to claim 2 and claim 8, a broken line in 2 of FIG. 3. If the initial value of the seed data in the enclosed is the numerical value “6583” ((2) in FIG. 3 and FIG. 4), the first parent data becomes the numerical value “6763840”, and the first child data becomes the numerical value “ 676 ”, the second child data has a numerical value“ 817 ”, and the third child data has a numerical value“ 603 ”. The same applies to the following, so the numerical values used for the password and the encryption key are the same as those in the first to fourth embodiments. Be the same.
Further, as shown in FIGS. 3 to 5, in the case of the method of storing the initial values of the child data and the seed data in the storage unit according to claim 3 and claim 9, the initial values of the child data and the seed data If the values are set to a numerical value “676” and a numerical value “3840” (FIG. 3 and FIG. 4 (3)), the numerical values used for the password and the encryption key are the same as those in the first to fourth embodiments.

[Embodiment 5]
In the present invention, parent data creation, seed data extraction, next-generation parent data creation and child data extraction derived from loop data processing and loop data processing are limited to perform the same processing in each cycle. It is not something.
The fifth embodiment is an example of the password authentication system according to the second aspect, and will be exemplified with a specific numerical data processing step with reference to FIG.
In this example, unlike the first embodiment, the initial value of the seed data is stored in the storage units of both the authenticator side device and the authenticator side device.
Also, as a predetermined process of the parent data creation means of this embodiment, the numerical value of the seed data is squared, a common numerical value shared in advance by both is added, and a numerical value of a predetermined number of digits is extracted, and addition The common numerical value is “3427951” as in the first embodiment, but instead of the first embodiment, the predetermined number of digits is changed to “lower seven digits”, even times In this example, the child data extraction means uses the upper three digits of the parent data value for the odd number and the upper number of the parent data value for the even number. Four digits are extracted and used as child data, and the password creation means uses the child data value as it is as the password.
The extraction method by the seed data extraction means in this example is the same as that in the first embodiment. Then, as shown in FIG. 5, the child data that is the first password is the numerical value “676”, the child data that is the second password is the numerical value “1817”, and the child data that is the third password. Is the numerical value “603”, the child data that is the fourth password is the numerical value “6046”, and so on. Note that the numerical values of the seed data are the same as those in the first embodiment.
As described above, since the number of digits of the password is different for each password authentication, it is possible to ensure the security equivalent to or higher than the conventional one.

  In the first to fifth embodiments, numbers with a small number of digits are used for easy understanding, but numerical values with a larger number of digits may be used in practical use. Further, instead of the form using decimal numbers, a character string, a code, a symbol, a digital image, or the like, or a combination thereof may be used as parent data or seed data.

  Also, for the purpose of alleviating the deterioration of security caused by inferring the kind of seed data from the child data appearing on the communication line (in Embodiments 1 to 5, it is easy to guess that “numerical value” is seed data). The child data may be used as a password by performing a certain operation on the child data to convert the form of the child data (from numerical values to alphabets, codes, images, etc.).

  In the first to fifth embodiments, for simplification, the extraction method of the child data is the upper three digits, the upper four digits, the upper two digits, or the third digit, and the child data is directly used as a password or an encryption key. The seed data extraction method is simply the last four digits, but it is combined with more detailed data to make child data and seed data, and the extracted child data is subjected to complicated data creation processing to create a password. Or an encryption key may be created. A plurality of parent data, child data, and seed data may be configured. The important thing is to extract the child data and seed data that are the source of the password and encryption key so that they are not related as much as possible. Is to make it scarce.

  As a result, even if a third party illegally obtains the password that was sent over the communication line, this child data is disposable, and it is difficult to infer seed data that is less relevant from the child data. It is difficult to guess the next-generation child data that is the password of. Even if an encrypted broadcast is illegally acquired by a third party and the encryption is further decrypted and the encryption key is calculated successfully, the encryption key for the next day's encrypted broadcast will be different, so this damage It will not be carried over to the next day. From the above, it is difficult for a third party to authenticate illegally and to continue illegally listening and subscribing to news, and the security of authentication and encrypted broadcasting is maintained.

  Although the embodiment has been described as described above with respect to the best mode for carrying out the present invention, the present invention is not limited to the embodiment at all and is within the scope not departing from the gist of the present invention. It can be implemented in various authentication fields and encrypted communication fields in various forms. For example, authentication is not limited to using communication lines, but can also be used for letters, faxes, and face-to-face authentication, and the prescribed processing uses manual calculation that does not require a personal computer or measurement by drawing. May be.

100 Authentication-subjected device 110, 310 Storage unit 111, 311 Parent data 112, 312 Next generation parent data 120, 320 Data processing unit 130, 330 Child data extraction unit 131, 331 Child data 140, 340 Password creation unit 141, 341 Password 150, 350 Communication means 170, 370 Seed data extraction means 171, 371 Seed data 180, 380 Parent data creation means 190, 390 Data update means 200 Communication network 300 Authenticator side device 360 Authentication decision means

Claims (14)

A password authentication system that performs authentication using a password between a device to be authenticated and a device on the authenticator side,
The person-to-be-authenticated device and the device to be authenticated have a storage unit and a data processing unit, respectively.
In the storage units of both devices, parent data having the same content is stored as an initial value,
The data processing unit of the device to be authenticated includes a child data extraction unit that extracts a part of the parent data by a predetermined method to obtain child data, and a password based on the child data extracted by the child data extraction unit A password creating means for creating a password, a communication means for transmitting a password created by the password creating means to an authenticator side device and receiving an authentication establishment signal from the authenticator side device, and the child data extracting means, Is a different extraction processing method, a seed data extracting means for extracting a part of the parent data as seed data, and performing a predetermined process on the seed data extracted by the seed data extracting means for the next authentication Parent data creation means for creating next-generation parent data necessary for the request, and original parent data stored in the storage unit with the next-generation parent data created by the parent data creation means Includes a data updating means for updating, a,
The data processing unit of the certifier side device extracts child data from the parent data stored in the storage unit of the certifier side device by the same extraction processing method as the child data extraction unit of the device to be authenticated Child data extraction means, and password creation means for creating a password based on the child data extracted by the child data extraction means in the same creation processing method as the password creation means of the device to be authenticated A communication unit that receives a password transmitted from the device to be authenticated and transmits a signal indicating the establishment of authentication to the device to be authenticated when the authentication is established, and a password created by the password creating unit And an authentication determining means for determining whether or not the authentication is established based on whether or not they match, and the password that the communication means has received from the device to be authenticated. Seed data extraction means for extracting seed data from parent data stored in the storage unit of the certifier side device by the same extraction processing method as the seed data extraction means of the witness side device, and the own seed data extraction Parent data creation means for creating the next generation parent data necessary for the next authentication decision by performing the same predetermined creation processing as the parent data creation means of the device to be authenticated for the seed data extracted by the means And a data updating unit for updating the original parent data stored in the storage unit with the next generation parent data created by the parent data creating unit. . The password authentication system according to claim 1,
In the storage unit of the device to be authenticated and the device on the side of the authenticator, seed data of the same content is stored instead of the parent data of the same content,
The data updating means provided in the data processing unit of the device to be authenticated and the device on the authenticator side replaces the next generation parent data with the next generation seed data extracted by the seed data extraction means from the next generation parent data. The password authentication system according to claim 1, wherein the original seed data stored in the storage unit is updated with the data. The password authentication system according to claim 1,
The storage unit of the person-to-be-authenticated device and the device of the certifier side stores child data and seed data of the same content instead of the parent data of the same content,
The data update means provided in the data processing unit of the device to be authenticated and the device on the side of the authenticator are extracted from the next generation parent data by the child data extraction means and the seed data extraction means in place of the next generation parent data. The password authentication system according to claim 1, wherein the original child data and seed data stored in the storage unit are updated with the next-generation child data and the next-generation seed data. A plurality of pieces of child data extracted by the child data extraction unit are respectively stored in the data processing units of both the device to be authenticated and the device on the side of the certifier according to claims 1 to 3, respectively, on the same basis. Child data selection means for selecting the child data P that is the source of the password and the child data K that is the source of the encryption key, and the encryption key generation means for generating the encryption key by the same data processing method in both A password authentication and encryption communication system for performing encrypted communication subsequent to password authentication between both devices additionally equipped with encryption and decryption means adopting the same encryption and decryption method,
The child data extraction means provided in the data processing unit of both the device to be authenticated and the device to be authenticated has the same child data as the parent data in both password authentication and subsequent encrypted communication. The child data selection means provided in the data processing units of both the device to be authenticated and the device to be authenticated has a plurality of child data extracted by the child data extraction means as a child of a password. The data P and the child data K that is the prime of the encryption key are sorted, and the password creating means creates a password based on the child data P that is sorted into the password prime by the child data sorting means, and the authenticated person side device The encryption key creation means provided in addition to the data processing units of both the authentication device and the authenticated person side device creates the encryption key based on the child data K selected by the child data selection means as the prime of the encryption key, Covered The communication means provided in the data processing unit of both the witness side device and the authenticated person side device transfers the password created by the password creating means of the authenticated person side device from the authenticated person side device to the certifier side device. Send / receive transmission and transmission / reception of an authentication establishment signal from the authenticator side apparatus to the authenticated person side apparatus, and in addition, after the authentication establishment signal is transmitted / received, both sides will be described later. The encryption and decryption means provided in addition to the data processing unit of both the device to be authenticated and the device to be authenticated are both sent and received. After the authentication establishment signal is transmitted / received by the communication means, the plaintext of the digital data such as text or image is encrypted and received using the encryption key created by the encryption key creation means, and received. Decrypt the ciphertext, Password authentication and encrypted communication system characterized and. The password authentication and encryption communication system according to claim 4,
The child data extraction means, the seed data extraction means, the parent data creation means, and the data update means provided in the data processing units of both the device to be authenticated and the device to be authenticated have been subjected to password authentication once and subsequently. During encrypted communication, the loop data processing of seed data extraction, next-generation parent data generation, and next-generation seed data extraction is performed in the same number of cycles in both directions. 5. The password authentication and the password authentication according to claim 4, wherein a plurality of child data such as next generation child data from parent data, further generation child data from first generation parent data, and the like are extracted. Encrypted communication system. The password authentication and encryption communication system according to claim 4,
The password creation means and the encryption key creation means of the same processing method in both of the data processing units of the device to be authenticated and the device to be authenticated are the same in both, based on the same child data. 5. The password authentication and encryption communication system according to claim 4, wherein the same password and encryption key are created by two different data by using two different data creation processing methods.   An apparatus for performing a plurality of data extraction / creation processing, all of which are the same, omitting password creation means from the data processing unit of the device to be authenticated in the password authentication and encryption communication system according to claim 4. An encrypted communication system that performs encrypted communication between the two. A password authentication method for performing authentication using a password between a person to be authenticated and a certifier,
Both the person to be authenticated and the certifier store the same parent data as the initial value,
Both the person to be authenticated and the certifier independently extract a part of the parent data by the same predetermined extraction processing method to create child data, and the same creation based on the created child data. Create a password with the processing method,
The person to be authenticated notifies the certifier of the password created by himself / herself,
When the authenticator receives a password notification from the person to be authenticated, the password is verified by comparing the password created by the user and the password received from the person to be authenticated, and whether or not they match, If authentication is established, the person to be authenticated is notified that the authentication has been established,
When notification of authentication establishment is made, both the person to be authenticated and the certifier are independent of each other, and the parent data of the parent data is extracted by a different extraction processing method from the method of extracting the child data. Extract a part to create seed data, perform the same predetermined processing on the created seed data on both sides to create the next generation parent data necessary for the next authentication decision, A password authentication method characterized by updating original parent data with next-generation parent data. The password authentication method according to claim 8, wherein
Both the to-be-authenticated person and the certifier store the seed data of the same content as the initial value instead of the parent data of the same content,
In the event of notification of the establishment of authentication, both the subject and the certifier will independently generate next-generation seed data that is extracted from the next-generation parent data instead of the next-generation parent data. The password authentication method according to claim 7, wherein the original seed data is updated. The password authentication method according to claim 8, wherein
Both the to-be-authenticated person and the certifier store the child data and seed data having the same contents as the initial value instead of the parent data having the same contents,
In the event of notification of successful authentication, both the person to be authenticated and the certifier will be independent of each other, and the next-generation child data extracted from the next-generation parent data in place of the next-generation parent data. The password authentication method according to claim 8, wherein the original child data and seed data are updated with the next-generation seed data. A password authentication and encrypted communication method for performing encrypted communication between a person to be authenticated and an authenticator subsequent to the password authentication method according to claim 8,
Both the person to be authenticated and the authenticator extract a plurality of pieces of child data from the parent data at the time of one-time password authentication and subsequent encrypted communication. The child data K that is the key element is selected according to the same predetermined standard on both sides,
The person to be authenticated creates a password based on the selected child data P and contacts the certifier,
When the authenticator receives the password from the person to be authenticated, the password created by the same creation processing method as the person to be authenticated based on the selected child data P of the person to be authenticated, and the password received from the person to be authenticated , And whether or not the authentication is established is determined based on whether or not they match. When the authentication is established, the authentication person is notified of the establishment of the authentication,
In the case where the notification of the establishment of authentication is made, both the person to be authenticated and the authenticator independently use the selected child data K as the encryption key, A password authentication and encrypted communication method characterized by transmitting and receiving ciphertext obtained by encrypting digital data such as an image and decrypting them. The password authentication and encrypted communication method according to claim 10,
Both the person to be authenticated and the certifier extract the seed data from the parent data and create the next generation parent data from the extracted seed data at the time of one-time password authentication and subsequent encrypted communication. Next-generation parent data from next-generation parent data to next-generation child data, and further generations of parent data in the process of performing multiple cycles of continuous data processing to extract next-generation seed data from The password authentication and encrypted communication method according to claim 10, wherein a plurality of pieces of child data are extracted from the first generation child data. The password authentication and encrypted communication method according to claim 10,
The both of the person to be authenticated and the certifier perform two different processes based on the same child data extracted from the parent data to create the same password and encryption key on both sides. The password authentication and encrypted communication method described in 1. An encrypted communication method for performing communication between a plurality of password authentication and encrypted communication methods according to claim 11 by omitting a part related to password authentication.

Images