JP4546099B2 - Information processing system - Google Patents

Description

  The present invention relates to an information storage medium that can guarantee that stored information is not falsified and authentic, an information processing apparatus that exchanges information with the information storage medium, and information including these information storage medium and information processing apparatus It relates to a processing system.

  An IC card has been put into practical use as a storage medium with high security performance for storing valuable value information in a secret manner. In recent years, non-contact type IC cards using wireless as communication means have been applied to a wide range of applications due to their convenience in handling. Further, a storage medium using radio communication called RFID (Radio Frequency Identification) or IC tag that does not require security performance as much as an IC card is also becoming common.

  In addition, devices having a function of preventing unauthorized use or forgery of information stored in a storage medium have been proposed. As one of technologies for realizing such a device, there is a security system including an information processing device and an information storage medium disclosed in Patent Document 1. The information storage medium stores a card ID, stored data, and validity information in its memory. The stored data is data generated by the information processing apparatus from the transaction data, the count value, and the module ID that the information processing apparatus has. The validity information is information generated by the information processing apparatus from the card ID, the count value, and the stored data. The module connected to the information processing apparatus stores the count value and the module ID in its memory. The information processing apparatus reads the card ID, stored data, and validity information from the information storage medium at the start of the transaction. Next, the information processing apparatus and the module generate validity information from the read card ID, the count value extracted from the stored data, and the read stored data, and compare with the read validity information. There is no change in the card ID, and the read count value and the count value extracted from the stored data should match, so both legitimacy information should match unless the stored data is changed. The information processing device and the module update the count value each time a transaction is performed, write the stored data and the validity information generated based on the count value to the information storage medium, and the validity information at the time of the next transaction Prepare for the check. In this way, Patent Document 1 makes it difficult to falsify information stored in an information storage medium.

JP-A-9-97315

  According to the above prior art, it becomes difficult to falsify information stored in the information storage medium. However, since the information processing apparatus that communicates with the information storage medium may be changed every time a transaction is performed, the count value only has a meaning of a random number for each information storage medium. Further, the card ID and the module ID are used for generating the validity information, and the mechanism is complicated.

  An object of the present invention is to prevent falsification of an information storage medium using another method.

  The information processing apparatus of the present invention includes a communication interface unit, means for supplying an encryption key, an encryption / decryption unit and a comparison unit. The communication interface unit reads an identifier and a count value unique to each information storage medium from the information storage medium, and transmits / receives encrypted data to / from the information storage medium. The means for supplying the encryption key supplies the encryption key to be stored or provides the encryption key generated from the read identifier and the count value. The encryption / decryption unit generates encrypted data by encrypting the identifier, count value and user data read at the time of data writing with the supplied encryption key, and decrypts the encrypted data read at the time of data reading by the encryption key To do. The comparison unit compares the identifier read from the information storage medium with the decrypted identifier to determine whether they match, and if necessary, the count value read from the information storage medium and the decrypted count value Are compared to determine whether they match.

  The information storage medium of the present invention has a storage area for storing an identifier, a count value, and encrypted data, transmits the identifier and the count value to the information processing apparatus, and sends the identifier and the count value to the information processing apparatus in response to a data read / write request. The communication interface unit transmits and receives encrypted data, and the count value update unit updates the count value when a data write request is made.

  According to the present invention, since the stored data in the information storage medium is combined with the identifier, it is difficult to copy to other unauthorized information storage media. Further, since the stored data in the information storage medium is combined with the count value, it is difficult to illegally write back the backup data from the information storage medium. Further, since the stored data in the information storage medium is encrypted with an encryption key possessed only by a legitimate information processing apparatus, it is difficult to use it by an unauthorized information processing apparatus without decryption. As described above, it is difficult to illegally tamper with stored data stored in the information storage medium.

Embodiments of the present invention will be described with reference to the drawings.
1. First Embodiment A first embodiment of the present invention will be described with reference to FIGS. First, a schematic configuration of an information processing system according to the first embodiment, an information processing apparatus that constitutes the information processing system, and an information storage medium will be described with reference to FIG.

  FIG. 1 is a schematic configuration diagram of an information processing system according to the present embodiment. In the figure, reference numeral 101 denotes an information processing apparatus having a CPU and memory for processing some data, such as a personal computer, a mobile terminal, and a mobile phone (hereinafter referred to as an information processing apparatus). Reference numeral 102 denotes an information storage medium such as an RFID or an IC card having a nonvolatile information storage area such as an EEPROM or a flash memory (hereinafter referred to as an information storage medium).

  The information processing apparatus 101 includes modules of a communication I / F (interface) unit 103, a comparison unit 104, an encryption / decryption unit 105, and an encryption key storage unit 106.

  The communication I / F unit 103 is hardware / software of a communication interface for the information processing apparatus 101 to exchange information with the information storage medium 102. The comparison unit 104 inputs a plurality of numerical values, compares whether or not the plurality of numerical values match, and outputs the presence or absence of the matching as a comparison result. The encryption / decryption unit 105 is a module having a function of encrypting / decrypting information. The encryption algorithm used by the encryption function is arbitrary including selection of the common key method and the public key method.

  The encryption key storage unit 106 includes a storage unit that stores an encryption key used for encryption / decryption. The encryption key storage unit 106 stores a certain encryption key in a secret manner. The selection of the nonvolatile storage medium that stores the encryption key is arbitrary. The key update method is arbitrary.

  Reference numeral 107 denotes data and control signal lines for connecting the modules constituting the information processing apparatus 101.

  The comparison unit 104 may be realized as independent hardware, or may be realized as part of a program executed by the CPU stored in the memory. Similarly, the encryption / decryption unit 105 and the encryption key storage unit 106 may be realized as independent hardware or may be realized as a program module.

  The information storage medium 102 includes modules of a communication I / F (interface) unit 108, a storage area 110, and a count value update unit 114.

  The communication I / F unit 108 is hardware or hardware / software of a communication interface for the information storage medium 102 to exchange information with the information processing apparatus 101.

  Reference numeral 109 denotes a communication path for exchanging information between the communication I / F unit 103 provided in the information processing apparatus 101 and the communication I / F unit 108 provided in the information storage medium 102. The communication path may be wired or wireless.

  The storage area 110 is an information storage area configured by a nonvolatile information storage device such as an EEPROM or a flash memory.

  Reference numeral 111 denotes an identifier unique to the information storage medium (hereinafter referred to as ID) for distinguishing each information storage medium 102 stored in the storage area 110 from other information storage media. The ID 111 makes it impossible or very difficult to falsify the value by not providing a changing means from outside the information storage medium 102 by a general user. In order to assign unique IDs to a plurality of information storage media, for example, a method may be adopted in which the ID 111 is stored in the storage area 110 when the information storage medium 102 is manufactured and the ID 111 is already provided when shipped from the factory.

  A count value 112 is stored in the storage area 110 and can be updated only by an appropriate processing procedure via the communication I / F unit 108. The count value 112 is updated only in one direction of the forward direction or the reverse direction, has a certain predetermined final value, and is fixed at that value after the count has advanced to the final value. An appropriate processing procedure via the communication I / F 108 is executed each time user data stored in the storage area 110 is updated. As a result, the count value 112 indicates a different value for each update timing of user data.

  Reference numeral 113 denotes encrypted data stored in the storage area 110. The encrypted data 113 includes user data, an ID 111, and a count value 112, and these three types of data are encrypted with an encryption key stored by the encryption key storage unit 106.

  The count value update unit 114 reads the count value 112 stored in the storage area 110 in response to an appropriate processing procedure via the communication I / F unit 108, updates the count value 112 to an appropriate value, and stores the updated count value. This is a module that writes data in an appropriate position in the area 110. The count value update unit 114 may be realized as hardware. Alternatively, the information storage medium 102 may include a CPU and a memory, and may be realized as a part of a program stored in the memory and executed by the CPU.

  Reference numeral 115 denotes data and control signal lines that connect the functional modules constituting the information storage medium 102.

  Next, a data writing operation to the information storage medium by the information processing system according to the first embodiment will be described with reference to FIG. FIG. 2 is a flowchart of the write operation of the information processing system according to the first embodiment.

  The communication I / F unit 103 of the information processing apparatus 101 transmits a write request signal to the information storage medium 102 (201). The information storage medium 102 receives the write request signal from the information processing apparatus 101 (202), reads the ID 111 stored in the storage area 110 in response to this (203), and transmits this ID 111 to the information processing apparatus 101. (204).

  The communication I / F unit 103 of the information processing apparatus 101 receives the ID 111 transmitted from the information storage medium 102 (205), and accordingly transmits an ID reception completion notification to the information storage medium 102 (206).

  The communication I / F unit 108 of the information storage medium 102 receives the ID reception completion notification transmitted from the information processing apparatus 101 (207), and reads the count value 112 stored in the storage area 110 accordingly (see FIG. 208). Next, the count value update unit 114 performs an update process of the read count value 112 (209), writes the updated count value in an appropriate area of the storage area 110 (210), and also via the communication I / F unit 108. Then, the updated count value is transmitted to the information processing apparatus 101 (211). Here, when the count value is the prescribed final value in step 209, the value is not updated and the final value is left as it is.

  The communication I / F unit 103 of the information processing apparatus 101 receives the count value transmitted from the information storage medium 102 (212). In response to this, the encryption / decryption unit 105 converts the user data to be written to the information storage medium 102, the ID 111 and the count value 112 received from the information storage medium 102 into plaintext, and stores the encryption stored in the encryption key storage unit 106. Encryption processing is performed using the key to obtain encrypted data (213). The communication I / F unit 103 of the information processing apparatus 101 transmits this encrypted data to the information storage medium 102 (214).

  The communication I / F unit 108 of the information storage medium 102 receives the encrypted data transmitted from the information processing apparatus 101 (215), writes the encrypted data in an appropriate area of the storage area 110 (216), and performs information processing. An encrypted data write completion notification is transmitted to the apparatus 101 (217).

  The information processing apparatus 101 receives the encrypted data writing completion notification transmitted from the information storage medium 102 and confirms the writing success (218).

  Next, a data reading operation from the information storage medium by the information processing system according to the first embodiment will be described with reference to FIG. FIG. 3 is a flowchart of the read operation of the information processing system according to the first embodiment.

  The communication I / F unit 103 of the information processing apparatus 101 transmits a read request signal to the information storage medium 102 (301). The communication I / F unit 108 of the information storage medium 102 receives the read request signal from the information processing apparatus 101 (302), and reads the ID 111 stored in the storage area 110 in response to the read request signal (303). The information is transmitted to the information processing apparatus 101 (304).

  The information processing apparatus 101 receives the ID 111 transmitted from the information storage medium 102 (305), and accordingly transmits an ID reception completion notification to the information storage medium 102 (306).

  The communication I / F unit 108 of the information storage medium 102 receives the ID reception completion notification transmitted from the information processing apparatus 101 (307), and reads the count value 112 stored in the storage area 110 accordingly ( 308) The read count value 112 is transmitted to the information processing apparatus 101 (309).

  The communication I / F unit 103 of the information processing apparatus 101 receives the count value 112 transmitted from the information storage medium 102 (310), and accordingly transmits a count value reception completion notification to the information storage medium 102 (311). .

  The communication I / F unit 108 of the information storage medium 102 receives the count value reception completion notification transmitted from the information processing apparatus 101 (312), and reads the encrypted data 113 stored in the storage area 110 accordingly ( 313), and transmits the encrypted data 113 to the information processing apparatus 101 (314).

  The communication I / F unit 103 of the information processing apparatus 101 receives the encrypted data 113 transmitted from the information storage medium 102 (315). The encryption / decryption unit 105 uses the encrypted data 113 received from the information storage medium 102 as ciphertext and performs a decryption process using the encryption key stored in the encryption key storage unit 106 to obtain user data, ID, and Plain text data consisting of the count value is obtained (316).

  The comparison unit 104 of the information processing apparatus 101 compares whether or not the ID received from the information storage medium 102 in step 305 matches the ID decrypted from the encrypted data received from the information storage medium 102 in step 316 (317). ). As a result of the comparison, if the two do not match, it is determined that data reading from the information storage medium 102 has failed (320).

  As a result of the comparison in step 317, if the two values match, does the count value received from the information storage medium 102 in step 310 match the count value decrypted from the encrypted data received from the information storage medium 102 in step 316? Whether or not is compared (318). As a result of the comparison, if the two do not match, it is determined that data reading from the information storage medium 102 has failed (320).

  As a result of the comparison in step 318, when the two match, it is determined that the data reading from the information storage medium 102 is successful (319).

  As described above, according to the first embodiment of the present invention, the user data stored in the information storage medium 102 of the information processing system according to the present embodiment is encrypted and stored. Even if the user data is illegally read from the information storage medium 102 on which the user data is recorded, the data is encrypted and the content is stored without the encryption key stored in the information processing apparatus 101 used for writing the data. It is not easy to get. Also, the communication path 109 between the information processing apparatus 101 and the information storage medium 102 transmits and receives encrypted data both when reading and writing data, and fraudulently stores the data stored in the information storage medium 102 by wiretapping the communication path 109. It is not easy to obtain. Further, it is not necessary to share a key between the information processing apparatus 101 and the information storage medium 102, and encryption key management is closed in the information processing apparatus 101, which is advantageous in terms of security of key management.

  The encrypted data stored in the information storage medium 102 includes an ID 111 unique to each information storage medium, and the data stored in the information storage medium is associated with the ID of the information storage medium. . As a result, even if the encrypted data stored in the information storage medium, which is a legitimate procedure, is copied to another information storage medium by unauthorized means, the ID match comparison procedure 317 at the time of reading by the legitimate information processing apparatus When the ID mismatch is detected, the use becomes impossible. That is, the information processing system according to the first embodiment has a feature that it is difficult to illegally copy and move encrypted data stored in an information storage medium to another information storage medium.

  Further, in the data writing process to the information storage medium by the legitimate information processing apparatus, the count value 112 is always updated in step 209, and this count value is always included in the encrypted data written to the information storage medium by the writing process. It is. As a result, the encrypted data is read from a certain information storage medium at a certain point in time and stored in another storage device (creation of backup data), and then the encryption data is updated by another writing process to the same information storage medium. After that, even if the backed up encrypted data is illegally written back to the information storage medium, the count value mismatch is detected in step 318 of the count value match comparison at the time of reading by the legitimate information processing apparatus. This makes it impossible to use data that has been illegally written back. For example, if the balance data stored in the information storage medium is saved as a backup and the balance data is updated and the original balance data is written back to the same information storage medium, the IDs match, but the count value mismatch is detected. Is done. That is, the information processing system according to the first embodiment has a feature that it is difficult to back up and write back the encrypted data stored in the information storage medium.

Furthermore, according to the first embodiment of the present invention, the data stored in the information storage medium 102 is illegally backed up using communication data eavesdropped on the communication path 109 of the information processing system according to the present embodiment. It is possible to provide an information processing system that is difficult to copy.
2. Second Embodiment A second embodiment of the present invention will be described with reference to FIGS. First, the schematic configuration of the information processing system according to the second embodiment, the information processing apparatus and the information storage medium constituting the information processing system will be described with reference to FIG.

  FIG. 4 is a schematic configuration diagram of the information processing system according to the present embodiment. In the figure, the communication I / F unit 103 to the encryption / decryption unit 105, the data, the signal line 107 to the count value 112, and the count value update unit 114 are the same as those shown in FIG. . Reference numeral 401 denotes an information processing apparatus including a CPU and a memory for processing some data, such as a personal computer, a mobile terminal, and a mobile phone (hereinafter referred to as an information processing apparatus). The information processing apparatus 401 includes a module of the encryption key generation unit 403. Reference numeral 402 denotes an information storage medium such as an RFID or an IC card having a nonvolatile information storage area such as an EEPROM or a flash memory (hereinafter referred to as an information storage medium).

  The encryption key generation unit 403 is a module that generates an encryption key used for encryption / decryption. The encryption key generation unit 403 secretly calculates and generates an encryption key based on the two types of information input from the information storage medium 402, the ID 111 and the count value 112. The encryption key generated by the encryption key generation unit 403 can be expressed as a function of ID and count value, f (ID, count value).

  The method for calculating the encryption key is arbitrary, but it is necessary to associate the ID 111 and the count value 112 input from the information storage medium 402. As a method for calculating the encryption key, for example, the following method may be used. When the encryption key to be generated, ID 111, and count value 112 are each 128 bits, the encryption key is obtained by logical operation or arithmetic operation of two pieces of information such as bit exclusive OR of ID 111 and count value 112, or 128-bit arithmetic addition. calculate. Alternatively, ciphertext is obtained by encryption processing using the encryption / decryption function 105 using the ID 111 as plaintext and the count value 112 as an encryption key, and this ciphertext is used as the encryption key. Further, a plurality of types of the above calculation methods may be combined. If the bit lengths of the ID 111, the count value 112, and the encryption key to be calculated are different, padding processing or the like may be added as appropriate so that the same bit length is obtained. .

  Also, it is necessary to keep the encryption key calculation method confidential so that it is difficult to obtain it illegally from outside the information processing apparatus 401. As a confidential method of the calculation method, for example, a method of using a dedicated hardware module, or a method of confidentializing an execution code in the information processing apparatus 401 in the case of realizing a function by software may be used.

  Reference numeral 404 denotes encrypted data stored in the storage area 110. The encrypted data 404 is composed of user data and an ID 111, and these two types of data are encrypted with an encryption key generated by the encryption key generation unit 403.

  Next, a data writing operation to the information storage medium by the information processing system according to the second embodiment will be described with reference to FIG. FIG. 5 is a flowchart of the write operation of the information processing system according to the second embodiment.

  The information processing apparatus 401 transmits a write request signal to the information storage medium 402 (201). The information storage medium 402 receives the write request signal from the information processing apparatus 401 (202), reads the ID 111 stored in the storage area 110 accordingly (203), and transmits this ID 111 to the information processing apparatus 401. (204).

  The information processing apparatus 401 receives the ID 111 transmitted from the information storage medium 402 (205), and accordingly transmits an ID reception completion notification to the information storage medium 402 (206).

  The information storage medium 402 receives the ID reception completion notification transmitted from the information processing apparatus 401 (207), and reads the count value 112 stored in the storage area 110 accordingly (208). Next, the count value update unit 114 performs an update process on the read count value 112 (209), writes the updated count value in an appropriate area of the storage area 110 (210), and processes the updated count value as information processing. It transmits to the apparatus 401 (211). Here, when the count value is the prescribed final value in step 209, the value is not updated and the final value is left as it is.

  The information processing apparatus 401 receives the count value transmitted from the information storage medium 402 (212). In response, the encryption key generation unit 403 generates an encryption key from the ID 111 and the count value 112 (501). The encryption / decryption unit 105 converts the user data to be written to the information storage medium 102 and the ID 111 received from the information storage medium 102 into plain text, performs encryption processing using the encryption key generated by the encryption key generation unit 403, and performs encryption. To obtain generalized data (502). The information processing apparatus 401 transmits this encrypted data to the information storage medium 402 (214).

  The information storage medium 402 receives the encrypted data transmitted from the information processing apparatus 401 (215), writes the encrypted data in an appropriate area of the storage area 110 (216), and writes the encrypted data to the information processing apparatus 101. A completion notification is transmitted (217).

  The information processing apparatus 401 receives the encrypted data writing completion notification transmitted from the information storage medium 402 and confirms the writing success (218).

  Next, a data reading operation from the information storage medium by the information processing system according to the second embodiment will be described with reference to FIG. FIG. 6 is a flowchart of the read operation of the information processing system according to the second embodiment.

  The information processing apparatus 401 transmits a read request signal to the information storage medium 402 (301). The information storage medium 402 receives the read request signal from the information processing apparatus 401 (302), reads the ID 111 stored in the storage area 110 in response to this (303), and transmits this ID 111 to the information processing apparatus 401. (304).

  The information processing apparatus 401 receives the ID 111 transmitted from the information storage medium 402 (305), and accordingly transmits an ID reception completion notification to the information storage medium 402 (306).

  The information storage medium 402 receives the ID reception completion notification transmitted from the information processing device 401 (307), reads the count value 112 stored in the storage area 110 in response to the notification (308), and reads the read count value. 112 is transmitted to the information processing apparatus 401 (309).

  The information processing apparatus 401 receives the count value 112 transmitted from the information storage medium 402 (310), and accordingly transmits a count value reception completion notification to the information storage medium 402 (311).

  The information storage medium 402 receives the count value reception completion notification transmitted from the information processing apparatus 401 (312), and reads the encrypted data 113 stored in the storage area 110 in response to this (313). 113 is transmitted to the information processing apparatus 401 (314).

  The information processing apparatus 401 receives the encrypted data 113 transmitted from the information storage medium 402 (315). The encryption key generation unit 403 generates an encryption key from the ID 111 and the count value 112 (601), uses the encrypted data 113 received from the information storage medium 402 as cipher text, and uses the encryption key generated by the encryption key generation unit 402 The decryption process is performed to obtain plain text data including user data and ID (602).

  The comparison unit 104 of the information processing device 401 compares whether the ID received from the information storage medium 402 in step 305 matches the ID decrypted from the encrypted data received from the information storage medium 402 in step 602 (317). ). As a result of the comparison, if the two do not match, it is determined that the data read from the information storage medium 402 has failed (320).

  As a result of the comparison in step 317, if the two match, it is determined that the data read from the information storage medium 402 is successful (319).

  As described above, according to the second embodiment of the present invention, data stored in the information storage medium 402 of the information processing system according to the present embodiment is encrypted and stored. Even if data is illegally read from the information storage medium 402 in which certain data is recorded, the data is encrypted, and the content is obtained without the encryption key stored in the information processing apparatus 401 used for writing the data. It is not easy. The communication path 109 between the information processing apparatus 401 and the information storage medium 402 transmits / receives encrypted data both when reading and writing data, and illegally deletes data stored in the information storage medium 402 by wiretapping the communication path 109. It is not easy to obtain. Furthermore, it is not necessary to share a key between the information processing apparatus 401 and the information storage medium 402, and encryption key management is closed in the information processing apparatus 401, which is advantageous in terms of security of key management.

  Further, since the information processing apparatus 401 generates an encryption key from the ID 111 and the count value 112 input from the information storage medium 402 without storing the encryption key, an information processing system including a plurality of information processing apparatuses communicating with a certain information storage medium When constructing the encryption key, it is not necessary to share the encryption key itself among a plurality of information processing apparatuses. This is also a security advantage.

  An encryption key for encrypting encrypted data stored in the information storage medium 402 is associated with an ID 111 and a count value 112 unique to the information storage medium. As a result, even if encrypted data stored in a certain information storage medium by a legitimate procedure is copied to another information storage medium by unauthorized means, the original encryption is performed by step 601 when it is read by a legitimate information processing apparatus. Since the key is not generated, the decryption process in step 602 fails, and the ID cannot be used when the ID mismatch is detected in step 317 of the ID match comparison. That is, the information processing system according to the present embodiment has a feature that it is difficult to illegally copy and move encrypted data stored in an information storage medium to another information storage medium.

  Further, in the data writing process to the information storage medium by the legitimate information processing apparatus, the count value 112 is always updated in step 209, and this count value is an encryption key for encrypting the encrypted data in the writing process. Associated with. As a result, the encrypted data is read from a certain information storage medium at a certain point in time and stored in another storage device (creation of backup data), and then the encryption data is updated by another writing process to the same information storage medium. After that, even if the backed-up encrypted data is illegally written back to the information storage medium, the original encryption key is not generated by step 601 at the time of reading by a legitimate information processing device due to the mismatch of the count values. As a result, the decryption process in step 602 fails, and an ID mismatch is detected in step 317 of the ID match comparison, so that the illegally written back data cannot be used. That is, the information processing system according to the present embodiment has a feature that it is difficult to back up and write back the encrypted data stored in the information storage medium.

  Furthermore, according to the second embodiment of the present invention, the data stored in the information storage medium 402 is illegally backed up using communication data eavesdropped on the communication path 109 of the information processing system according to the present embodiment. It is possible to provide an information processing system that is difficult to copy.

  The configuration shown in FIGS. 1 and 4 includes the information processing apparatus 101 and the information storage medium 102 according to the first embodiment of the present invention, or the information processing apparatus 401 and the information storage medium 402 according to the second embodiment of the present invention. The minimum configuration to be provided is shown, and each device may include a functional module other than those illustrated, or may include a plurality of functional modules illustrated. In particular, in the above configuration, the storage area 110 shows an example in which the ID 111, the count value 112, and the encrypted data 113 or 404 are stored. However, the storage area 110 is not necessarily limited to this configuration, and a plurality of independent storage areas are stored. The ID 111, the count value 112, and the encrypted data 113 or 404 may be stored in each storage area.

  A plurality of areas for storing the encrypted data 113 or 404 may be provided on the storage area 110, and an independent count value 112 corresponding to each encrypted data 113 or 404 may be provided.

  The functional modules of the comparison unit 104, the encryption / decryption unit 105, and the count value update unit 114 may be dedicated hardware modules on the information processing device 401 or 401 and the information storage medium 102 or 402. The implementation may be implemented by a CPU and processing software, and the means for realizing it is not limited.

  The operations of the information processing apparatus 101 and the information storage medium 102 according to the first embodiment of the present invention, or the information processing apparatus 401 and the information storage medium 402 according to the second embodiment of the present invention are as shown in FIGS. Or it is not necessarily restricted to the operation | movement flowchart shown in FIG.5 and FIG.6. For request signals and completion notifications exchanged between the information processing apparatus 101 or 401 and the information storage medium 102 or 402, for example, an independent command is issued every time ID is read, count value is read, and encrypted data is read and written. It is good also as a sequence which responds. Further, the ID reading operation and the count value reading operation may be reversed.

  2, 3, 5, and 6, only the main transmission / reception data is described for simplification, and a control signal, additional data, and the like may be transmitted / received simultaneously.

  2 and 3 showing the processing procedure of the first embodiment of the present invention are omitted for simplification, but the processing when the count value 112 is updated to the predetermined final value is as follows. A method may be used. If the count value is the final value when the count value is received in step 212 at the time of data writing, the process ends as a write failure without proceeding to step 213. If the count value is the final value when the count value is received in step 310 at the time of data reading, the process ends as a reading failure without proceeding to step 311. With the addition of these procedures, the number of writes to the information storage medium 102 is limited by the size of the final count value. That is, the number of times of writing to the information storage medium 102 is limited. For example, when the counter of the count value 112 is updated so as to be decremented by one, it is fixed when the count value 112 becomes zero. In this case, if the update of the count value 112 is unlimited, the same count value may repeatedly appear, and there is a case where backup write-back is allowed.

  Alternatively, the writing procedure is the same as in FIG. 2, and if the count value received in step 310 is the final value in the data reading procedure, it is guaranteed that the read data obtained in step 319 is not copy data from another information storage medium. Although it is possible, it may be handled as data that does not guarantee that it is not backup data of the same information storage medium. Operation of this method is possible by making the security configuration of the information processing system have no merit for data backup of the same information storage medium.

  The above processing procedure is the same for FIGS. 4 and 5 showing the processing procedure of the second embodiment of the present invention, and the description thereof will be omitted.

  Instead of the system configuration of the first embodiment shown in FIG. 1, the system configuration shown in FIG. 7 may be used. Reference numeral 701 denotes an information processing apparatus or computer main body (hereinafter referred to as an information processing apparatus) including a CPU and memory for processing some data, such as a personal computer, a portable terminal, and a mobile phone. Reference numeral 702 denotes an information writing / reading device for an information storage medium (hereinafter referred to as R / W). The R / W 702 includes a communication I / F unit 103 that performs communication with the information storage medium 102, a comparison unit 104, an encryption / decryption unit 105, and an encryption key storage unit 106, and communication that performs communication with the information processing device 701. An I / F unit 703 is included. The communication I / F unit 703 is a communication interface for the R / W 702 to exchange information with the information processing apparatus 701.

  Reference numeral 704 denotes a communication path for exchanging information between the information processing apparatus 701 and the communication I / F unit 703 included in the R / W 702.

  In the figure, data and control signal lines 115 from the information storage medium 102 are the same as those shown in FIG. The functional modules from the communication I / F unit 103 to the encryption key storage unit 106 are provided by the R / W 702, and the communication path 109 is a communication path between the R / W 702 and the information storage medium 102. Is different.

  The information processing device 701 issues a data write command and a data read command to the R / W 702. The R / W 702 receives these commands via the communication I / F unit 703, executes the above-described data write operation and data read operation, and returns the results to the information processing device 701. When reading failure is detected during data reading, the R / W 702 reports the information to the information processing device 701.

  According to the above configuration, the control functions of the information storage medium 102 can be integrated into the R / W 702. By setting the communication path 704 between the information processing device 701 and the R / W 702 to be a standard I / F such as USB, for example, a general-purpose personal computer can be used as the information processing device 701. System costs can be reduced.

  Also in the second embodiment of the present invention, the information processing apparatus 401 having the system configuration shown in FIG. 4 can be configured by an information processing apparatus and R / W. A detailed system configuration diagram is omitted here.

  As described above, according to the embodiment of the present invention, the information storage medium stores the ID that is difficult to tamper with the value from the outside and the count value that is difficult to tamper with the value from the outside and is updated only in one direction. Further, the data stored in the storage area of the information storage medium is combined with the ID and count value, and is encrypted with an encryption key stored only by a legitimate information processing apparatus that should write the data to the information storage medium. . Since the storage data of this information storage medium is combined with the ID, it is difficult to copy to other unauthorized information storage media. Further, since it is combined with the count value, it is difficult to illegally write back backup data from the information storage medium. Further, since this stored data is encrypted with an encryption key possessed only by a legitimate information processing apparatus, it is difficult to use it by an unauthorized information processing apparatus without decryption. With the above functions, the information storage medium according to the present invention has a feature that it is difficult to tamper with the stored data.

1 is a schematic configuration diagram of an information processing system according to a first embodiment of the present invention. 5 is a flowchart of a write operation of the information processing system according to the first embodiment. 3 is a flowchart of a read operation of the information processing system according to the first embodiment. It is a schematic block diagram of the information processing system which concerns on the 2nd Embodiment of this invention. It is a flowchart of the write-in operation | movement of the information processing system which concerns on 2nd Embodiment. It is a flowchart of the read-out operation | movement of the information processing system which concerns on 2nd Embodiment. FIG. 3 is another schematic configuration diagram of the information processing system according to the first embodiment.

Explanation of symbols

101, 401: Information processing device, 102, 402: Information storage medium, 104: Comparison unit, 105: Encryption / decryption unit, 106: Encryption key storage unit, 111: ID, 112: Count value, 113, 404: Encrypted data, 114: Count value update unit, 403: Encryption generation unit

Claims (4)

An information processing system comprising: an information storage medium that stores data; and an information processing apparatus that writes the data to the information storage medium and reads the data;
The information storage medium includes a storage area for storing an identifier unique to the information storage medium, a count value, and encrypted data;
In response to a data write request from the information processing device, a count value update unit that updates the count of the count value;
Means for transmitting the identifier and the updated count value to the information processing apparatus in response to the data write request; and the encryption received in response to reception of the encrypted data from the information processing apparatus A communication interface unit having means for storing data in the storage area;
The information processing apparatus includes a means for reading the identifier from the information storage medium, means for reading the information storage medium or found updated by said count value, and means for transmitting the encrypted data to the information storage medium A communication interface unit having
An encryption key storage unit for secretly storing the encryption key ;
The identifier out read, and encrypted by the count value and the user data read out the encryption key, and having a said information encrypting unit that the encrypted data to be transmitted constituting the raw to the storage medium Information processing system. The communication interface unit of the information storage medium further includes:
In response to a data read request from the information processing apparatus, means for transmitting the identifier and the count value to the information processing apparatus, and means for transmitting the encrypted data to the information processing apparatus,
The communication interface unit of the information processing apparatus further includes:
Means for receiving the identifier and the count value; and means for receiving the encrypted data;
The information processing apparatus further includes:
Decrypting the received encrypted data with the encryption key, and obtaining a decrypted identifier, count value, and user data; and
The identifier received from the information storage medium is compared with the decoded identifier to determine whether they match, and the count value received from the information storage medium is compared with the decoded count value The information processing system according to claim 1, further comprising: a comparison unit that determines whether or not they match. An information processing system comprising: an information storage medium that stores data; and an information processing apparatus that writes the data to the information storage medium and reads the data;
The information storage medium includes a storage area for storing an identifier unique to the information storage medium, a count value, and encrypted data;
In response to a data write request from the information processing device, a count value update unit that updates the count of the count value;
Means for transmitting the identifier and the updated count value to the information processing apparatus in response to the data write request; and the encryption received in response to reception of the encrypted data from the information processing apparatus A communication interface unit having means for storing data in the storage area;
The information processing apparatus includes a means for reading the identifier from the information storage medium, means for reading the information storage medium or et updated count value, and means for transmitting the encrypted data to the information storage medium Having a communication interface unit;
Each data writing, for each data read, an encryption key generating unit for generating an encryption key which depends on said count value read out with the identifier read out,
The information processing system; and a read said identifier and the user data, is encrypted by the generated the encryption key, the information encrypting section that forms the raw said encrypted data to be transmitted to the storage medium. The communication interface unit of the information storage medium further includes:
In response to a data read request from the information processing apparatus, means for transmitting the identifier and the count value to the information processing apparatus, and means for transmitting the encrypted data to the information processing apparatus,
The communication interface unit of the information processing apparatus further includes:
Means for receiving the identifier and the count value; and means for receiving the encrypted data;
The information processing apparatus further includes:
Decrypting the received encrypted data with the encryption key generated by the encryption key generation unit, and obtaining a decrypted identifier and user data; and
The information processing system according to claim 3, further comprising a comparison unit that compares the identifier received from the information storage medium with the decrypted identifier to determine whether or not they match.

Images