JP3860280B2 - Communication system, IC card issuance registration system, key code generation device, and recording medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a technology for maintaining confidentiality of information such as electric commerce combined with communication technology and business sales information, for example, and in particular, communication for constructing a virtual private line with a communication partner device connected to a public network. The present invention relates to a technique for increasing the confidentiality of a key file used when starting a mechanism.
[0002]
[Prior art]
As is well known, in data communication using a public network, data interception and data tampering by a third party can easily occur. For this reason, for example, when transmitting highly confidential data using communication media, such as electronic cash used in the field of electric commerce, the public network is not suitable, and a separate dedicated line must be installed. It was. However, in data communication using a dedicated line, not only the communication cost cannot be reduced, but also a communication mode that directly connects individual communication terminals or networks, that is, only a one-to-one communication mode can be realized. It is not possible to adopt a communication form of 1 to n (n is a natural number, the same applies hereinafter) or n to n. Therefore, for example, in a company, it is not possible to realize a dedicated line for a service for setting communication between the head office or a branch office and a plurality of employees having portable mobile terminals, or between the head office and a plurality of branch offices. It was difficult.
[0003]
Therefore, recently, by applying data encryption technology, authentication technology, encapsulation technology that conceals target data, etc., a network line or individual line (hereinafter referred to as a virtual private line) that is virtually closed on the public network has been constructed. Attempts have also been made to perform data communication using this virtual private line.
[0004]
FIG. 14 is a conceptual diagram illustrating an example of a communication system that performs data communication by constructing a virtual private line in a public network.
This communication system includes, for example, a communication server 80, a fixed communication terminal 81, and one or a plurality of mobile communication terminals 84 and 85 used in a remote environment.
[0005]
Each of the communication server 80 and the fixed communication terminal 81 includes a VPN (virtual private line network) server 82 or a VPN device 83 for constructing a virtual private line VT with a communication partner connected to the public network LP. Connected. In addition, the mobile communication terminals 84 and 85 have VPN construction units 841 and 851 for constructing the virtual dedicated line VT between the own terminal and the communication partner apparatus by software. The VPN server 82, the VPN device 83, and the VPN constructing units 841 and 851 have substantially the same basic functions.
[0006]
In this communication system, for example, when the target data is transmitted from the fixed communication terminal 81 to the communication server 80, the VPN device 83 first receives a packet (including the terminal address) from the communication terminal 81, and the VPN server 82 While encrypting using the public key, a header is added to the encrypted packet. The header includes its own address and the address of the VPN device 83 which is a communication partner. The VPN device 83 also performs route control based on the header and sends this packet to the communication server 80 side. When the public network LP is the Internet, route control based on a header (IP header) is performed by a router installed at a predetermined point.
[0007]
The VPN server 82 removes the header from the received packet, decrypts the packet using its own private key, and sends the reproduced target data to the communication server 80. Thereby, it is possible to perform mutual communication of highly confidential data that can eliminate data interception from a third party while using the public network LP with low communication cost. According to the above communication system, it is easy to realize a 1-to-n or n-to-n communication mode, and it is possible to construct various information transmission systems that transmit confidential information online to a communication partner.
[0008]
For example, a company information management mechanism for disseminating company-specific sales information to employees of the company is connected to the communication server 80, and an employee operating each of the communication terminals 81, 84, 85 is connected to the virtual private line VT. Consider an information transmission system that accesses the corporate information management mechanism via the communication server 80.
In this case, the sales information manager on the company side issues a key file storing the employee's personal information such as passwords and keys used for encryption and decryption for each employee, and this is a security file such as an IC card. Store in a highly confidential recording medium and distribute to multiple employees. Each employee stores the key file distributed through the IC card in the memory area of the communication terminal operated by the employee so that the authentication process is performed in the communication terminal at the time of operation. In other words, the communication terminal prompts the operator to input a password, and the communication terminal identifies that the operator is a regular employee by comparing the password set in the key file with the input password. It can be so. If it is determined that the employee is a regular employee, the corresponding communication terminal establishes a call with the communication server 80 so that the business information can be acquired. In this way, it is possible to transmit 1 to n information of confidential information with high security.
[0009]
[Problems to be solved by the invention]
By the way, in the information transmission system as described above, for example, the authority to create the key file for each employee should be originally only the sales information manager. However, as is well known, the key file can be created by any person who has authority as a system administrator (supervisor) of the communication server 80 as is well known. Therefore, if the identification information (ID) or password of the system administrator is stolen by a malicious third party, it becomes possible to issue a new illegal key file, delete registered information, and tamper.
[0010]
Further, when the key file is distributed by a malicious third party when the key file is distributed, there is a risk that the password can be easily found and fraudulent activities can be performed.
For this reason, even when a communication system capable of constructing a virtual private line is used, there is a limit in sending and receiving confidential information, and improvement has been desired.
[0011]
Therefore, an object of the present invention is to provide a communication-related technique that can prevent leakage of a key file to a third party during communication.
Another object of the present invention is to improve the creation and distribution of a key file, which further enhances the security of the creation authority of a key file used when using a virtual private line and makes it difficult for a malicious third party to leak the key file. To provide technology.
[0012]
[Means for Solving the Problems]
In order to solve the above-described problems, the present invention provides a card issuing device having a card mounting mechanism, and means for acquiring different first and second keys under predetermined conditions, and authentication for an IC card issuer A method executed by a key management device in which the code is registered;
When the IC card for the person in charge in which the same authentication code as the registered authentication code is secretly stored is mounted on the card mounting mechanism, the card issuing device communicates with the key management device. Establishing a communication path; and transmitting the acquired first key to the card issuing apparatus through the communication path and holding the first key encrypted with the registered authentication code. The card issuing device that has received the first key transmits the first key to the key management device through the communication path by encrypted communication using an authentication code read from the IC card for the person in charge of issue. The key management device that has received the first key determines the coincidence between the first key and the held first key, and obtains the second key obtained when they match. Transmitting to the card issuing device by encrypted communication using the registered authentication code; and the card issuing device having received the second key for communication between the IC card user and the counterpart device during communication. Transmitting file basic information necessary for generating a key file including authority information to be used to the key management device by encrypted communication using the second key; and receiving the file basic information, the key management device receiving the file basic information Generating the key file from the server and transmitting the generated key file to the card issuing device by encrypted communication using the second key; the card issuing device receiving the key file sends the key file to the user A step of enabling storage on the IC card. In addition, the key management device registers a supervisor ID that controls the issuance of an IC card; and when the key management device logs in from the card issuing device with the supervisor ID, the key management device uses the first key. The first key acquired is transmitted to the card issuing device, and authentication is performed with the card issuing device using the first key. A step of transmitting a registration permission notification of an authentication code for a person in charge; and a step of transmitting the authentication code to the key management device by encrypted communication using a predetermined encryption code when the card issuing device receives the registration permission notification; The key management device is configured to register the received authentication code in a predetermined registration area.
[0013]
As a preferred mode, the key file is a partner apparatus only while it is possible to confirm the consistency with the key file registered in the key management apparatus in a plurality of communication apparatuses having an IC card mounting mechanism storing the key file. A virtual private line is constructed between the two.
[0014]
The communication device further includes storage means for expanding the key file. When the communication device recognizes that the key file is attached to the attachment mechanism, the key file is stored in the IC card. The stored key file is expanded in the storage means, and is deleted from the storage means when it is detected that the IC card is detached from the mounting mechanism or communication with the other communication device is terminated.
[0015]
The present invention relates to a card issuing device, a key code generating device for generating different first and second keys under predetermined conditions, a key management device in which an authentication code for an IC card issuer is registered, The card issuing device; a card mounting mechanism; first authentication means for authenticating with the key management device; and an authentication code holding means for holding an authentication code identical to the registered authentication code And managing the basic file information necessary for generating a key file including authority information used for communication between the IC card and the other device during communication, and the IC card mounted on the card mounting mechanism Interface means for storing the key file in the key management device; the key management device obtains the first key from the key code generation device and obtains the key A second authenticating means for authenticating with the first authenticating means using one key; and when the authentication by the second authenticating means is valid, the second key acquired from the key code generating device is authenticated. The key file is generated from the received file basic information when the file basic information is received from the card issuing device by the encrypted communication using the second key. There is also provided an IC card issuance / registration system comprising key file management means for transmitting the generated key file to the card issuing device by encrypted communication using the second key.
[0016]
Further, the authentication code holding means of the card issuing device is configured to apply the issuer IC card in which the same authentication code as the registered authentication code is secretly stored in the card mounting mechanism. The authentication code is read from the issuer IC card.
[0017]
The present invention is an apparatus used in an IC card issuance / registration system; storage means for storing basic information as a basis for creating an authentication code for a person in charge; and a random number as a basis for the second key. Random number generating means for generating; and encryption means for encrypting basic information stored in the storage means and a random number output from the random number generating means based on predetermined authority information; There is also provided a key code generation device configured to generate either an authentication code for a person in charge or a second key in response to an input. In this apparatus, the storage means is a volatile memory, and the basic information is erased by unauthorized reading or interruption of energization.
[0019]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a block diagram of the main part of the IC card issue / registration system of the present invention.
This IC card issue / registration system 1 issues an IC card 30 that stores a key file including use authority information of a communication mechanism for constructing a virtual private line on a public network and user identification information. The key management device 10 and the card issuing device 20 that are realized and key code generation devices (SCD) 40 and 41 are configured. The IC card 30 used in this embodiment has a PIN (personal identification information: sometimes used as a password) storage unit and an authentication processing means for performing authentication using this PIN. The key code generators (SCD) 40 and 41 have the same function, but output different key codes as will be described later.
[0020]
The key management device 10 encrypts information transmitted to the card issuing device 20, a communication control unit 11 that performs communication control with the card issuing device 20, an authentication processing unit 12 that performs authentication by a challenge / response method, and the like. Along with the encryption processing unit 13 for decrypting information received from the card issuing device 20, a key file creation unit 14 for creating a key file used when constructing a virtual private line, an issue supervisor, an issuer, In addition, an ID registration unit 15 for registering key information such as a user ID and a password is provided.
In the figure, ITT is an issuing terminal management table, IPT is an issuing person management table, and TKT is a virtual private line key management table.
[0021]
On the other hand, the card issuing device 20 encrypts information transmitted to the key management device 10, a communication control unit 21 that performs communication control with the key management device 10, an authentication processing unit 22 that authenticates an operator, and the like. In addition, an encryption processing unit 23 for decrypting information received from the key management device 10, a card input / output interface unit 24 serving as an interface for reading information from the IC card 30 and writing information to the IC card 30, and an IC card A card reader / writer 25 that detachably attaches 30, an attachment / detachment detection unit 26 that detects insertion / removal of the IC card 30, and a data input device 27 that includes a keyboard or the like are provided.
[0022]
FIG. 2 is an external view of a key code generator (SCD) that is used by being connected to the key management device 10, for example. The key code generator 40 generates a key code that requires high confidentiality, such as a supervisor encryption code, or generates a challenge code or a session key, which will be described later, via an interface such as RS-232C. To the key management device 10.
In this key code generator 40, security of use is ensured from both hardware and software aspects. Security by hardware is realized by inserting the physical keys A and B (42a and 42b) into the corresponding key insertion holes 41a and 41b, respectively. On the other hand, software security is realized by authentication processing using a logical key such as a password. The key code generator 40 also has control means for generating various key codes using a master key, ID, password, etc. used for encrypting plaintext information.
[0023]
FIG. 3 is a functional block diagram of the control means.
The control means includes an I / O interface unit 51 serving as an interface for inputting / outputting information to / from the key management apparatus 10 and a physical key by a CPU (microprocessor) (not shown) reading and executing a predetermined program. Activation control unit 52 that detects whether or not activation is possible, master key 541 serving as basic information for creating various key codes, supervisor password 542, ID and password for the person in charge, etc. A memory 54 having a storage area for key information and the like related to the user, a memory control unit 53 for controlling writing of information into the memory 54 and reading of information from the memory 54, an authentication processing unit 55, a random number generation unit 56, An encryption processing unit 57 and a key code generation unit 58 are provided.
[0024]
The memory 54 is a volatile memory, and when the use is instructed from the computer device side to which the key code generator 40 is connected, or when this device is forcibly disassembled, this memory control unit 53 is used. The information in the memory 54 is erased.
[0025]
The authentication processing unit 55 authenticates whether or not various key codes can be generated based on the input password from the key management device 10 or the like and the insertion state (authority information) of the physical keys 42a and 42b. The encryption processing unit 57 uses the master key recorded in the memory 54 and a predetermined encryption algorithm to encrypt the random number generated by the random number generation unit 56, the supervisor password, the issuer ID, the password, and the like. It is a thing to do. As an encryption algorithm in this case, for example, “SXAL / MBAL” (ISO / IEC9979-0012), which is a combination of a block unit encryption algorithm called SXAL and a multiblock unit encryption algorithm called MBAL, can be used. The key code generation unit 58 generates a key code according to the request using the encryption processing unit 57 and sends it to the key management apparatus 10 or the like through the I / O interface unit 51.
The key code generating device 41 connected to the card issuing device 20 has the same configuration.
[0026]
Next, the operation of the IC card issue / registration system 1 will be specifically described. In the present embodiment, the issue supervisor registration phase, issuer registration phase, and IC card issue phase are executed in this order. When the IC card 30 is issued, the process shifts to the user operation phase (operation mode of the communication system). Hereinafter, each phase will be described.
[0027]
(1) Issuing supervisor registration phase
First, the issuing supervisor registration procedure will be described with reference to the sequence chart of FIG. The issuance terminal management table ITT is created in the key management apparatus 10, and the supervisor ID used when the issue supervisor logs in, for example, “TORIGAI” is directly registered (k11, k12). Next, the card issuing device 20 logs in with the supervisor ID “TORIGAI” (c11). The key management device 10 compares the supervisor ID with the supervisor ID registered in the ITT, and if they match, sends a good notification to the card issuing device 20 (k13). The card issuing device 20 generates a supervisor encryption code (encrypted random number: X, X,... X) and transfers it to the key management device 10 (c12). The supervisor encryption code is obtained by inserting the physical key B into the key code generator 41 and inputting a supervisor keyword or the like. The key management device 10 encrypts the supervisor encryption code with its own encryption key (X ′, X ′,... X ′), and records it in the issuing terminal management table ITT. An example of the recorded contents of the issuing terminal management table ITT at this time is shown in FIG.
[0028]
(2) Issuing person registration phase
Next, the registration procedure of the person in charge of issue will be described with reference to the sequence chart of FIG. The issuer is registered by the issuer. That is, an issuer, for example, an IC card for an issuer having an identification ID of “FUJII” is attached to the card issuing device 20 (c21), and the issuer logs in with the administrator ID “TORIGAI” (c22). The key management device 10 compares the supervisor ID sent from the card issuing device 20 with the supervisor ID recorded on the issuing terminal management table ITT (k21). Is sent to the card issuing device 20 (k22). Further, this challenge code is encrypted with the supervisor encryption code on the issuing terminal management table ITT (k23), and this is stored as a reference response. The card issuing device 20 encrypts the challenge code with the supervisor encryption code, and sends this to the key management device 10 as a response code (c23). The key management device 10 matches the response code with the reference response, and if they match, the key management device 10 notifies the issuer terminal permission of registration (k24).
The card issuing device 20 reads the identification ID of the issuer, the IC authentication code, etc. from the IC card for the issuer (c24), encrypts them, and transfers them to the key management device 10 (c25). The key management device 10 decrypts the IC authentication code or the like with the supervisor encryption code recorded in the issuing terminal management table ITT (k25) and records it in the issuing person management table IPT (k26). However, the IC authentication code is encrypted again with the encryption key managed by the key management device 10, and this is recorded in the IPT as the person-in-charge encryption code. An example of the contents of the issuance person management table IPT recorded in this way is shown in FIG.
[0029]
(3) IC card issue phase for users
Issuing of IC cards for users is performed by registered issuers. 8 and 9 are sequence charts showing the registration procedure in this case.
In FIG. 8, when the IC card for the issuance person is installed and the authentication is performed with the correct password (c31), the card issuance apparatus 20 automatically sends the identification ID of the issuance person to the key management apparatus 10 (c31). ). That is, communication with the key management device 10 is established without the issuer in charge being aware of the contents of the IC card 30. The key management device 10 compares the identification ID sent from the card issuing device 20 with the identification ID on the issuance person management table IPT (k31), and if they match, the challenge code is generated using the key code generation device 40. (Random number 1) is generated and transmitted to the card issuing device 20 (k32). Further, this challenge code is encrypted with the IC authentication code on the issuance person management table IPT (k33), and this is stored as a reference response.
The card issuing device 20 encrypts the challenge code with the IC authentication code (person-in-charge encryption code) and sends it as a response code to the key management device 10 (c32). The key management device 10 matches the response code with the reference response (k34), and if they match, notifies the key file generation permission. The key management device 10 also encrypts the session key (random number 2) generated by the SCD 40 and transmits it to the card issuing device 20 (k35).
[0030]
Moving to FIG. 9, the card issuing device 20 decrypts the encrypted session key with the IC authentication code of the IC card for the issuer (c33), and file basic information (user) required for generating the key file ID, key information) is encrypted with the session key and transferred to the key management apparatus 10 (c34). The key management device 10 decrypts the information sent from the card issuing device 20 with the session key (k36), creates a key file, and records this in the virtual private line key management table TKT (k37). The created key file is encrypted with the session key and transferred to the card issuing device 20 (k38). The card issuing device 20 decrypts the encrypted key file with the session key (c35), and stores it secretly in the IC card 30 (c36). An example of the contents of the virtual private line key management table TKT created in this way is shown in FIG.
[0031]
(4) User operation
Next, a communication system using the IC card 30 created as described above will be described.
In this embodiment, as shown in FIG. 11, a known firewall (FW) 61, a VPN server 62 including the key management device 10 described above, a DB server 63, and the card issuing device 20 described above are connected to the local network LL1. An example of the communication system 2 that connects and performs inter-member communication with the communication terminals 2a and 2b connected to the public network LP and the local network LL2 through the virtual private line VT will be described.
[0032]
The VPN server 62 is a communication mechanism for constructing a virtual private line (VT) in the public network LP, and the fireall 61 prevents intrusion from a communication device outside the member into its own network as is well known. The DB server 63 stores information to be provided to members, and in this example, is a target server for the communication terminal 2a. Since the communication terminals 2a and 2b are member communication devices, and both have the same function, only one communication terminal 2a will be described below.
[0033]
The communication terminal 2a includes a communication control unit 71 that performs communication control with the virtual private line VT, an application unit (AP) 72, a memory 73 such as a disk, and the like, as shown in the main configuration diagram of FIG. The memory control unit 74 that controls the writing of information to the memory 73 and the reading of information from the memory 73, the card reader / writer 75 for detachably mounting the IC card 30, and the information stored in the IC card 30 are developed. A card information expansion unit 76 and an attachment / detachment detection unit 77 that detects insertion / removal of an IC card are provided. The IC card 30 is a key file stored confidentially by the IC card issuance registration system 1 described above. The IC card 30 has a password authentication function based on a PIN (personal identification information), which is a basic function of the IC card, and this authentication. As a result, it also has a function of locking when unauthorized input continues for a predetermined number of times.
[0034]
The functional blocks 71 to 74 and 76 to 77 in the communication terminal 2a are realized by cooperation between a computer device such as a personal computer and a predetermined program. This program is usually incorporated integrally with a computer device, but is recorded on a computer-readable recording medium such as a CD-ROM or a flexible disk in a form separated from the computer device, and is used by being appropriately installed in the computer device. It may be done.
[0035]
The AP 72 defines the content of communication performed with the communication device 70 on the other side, and has a function of encrypting or decrypting the communication content by a hybrid method of a public key method and a common key method. Also, when the IC card 30 is removed by monitoring the information recorded in the memory 73 acquired via the memory control unit 74, particularly the function for restricting the display of the key file and the state of the attachment / detachment detection unit 78, communication is performed. It also has a function to interrupt. That is, communication is possible only when the IC card 30 is attached.
[0036]
The communication procedure using this communication terminal 2a is as shown in FIG.
That is, when the user operating the communication terminal 2a attaches his / her IC card 30 to the card reader / writer 75, the communication terminal 2a detects the attachment / detachment detection unit 78 of the IC card (step S101: Yes) and uses the password. When user authentication is performed (step S102: Yes), the key file stored in the IC card 30 is expanded in the memory 73 through the memory control unit 74 (step S103). Thereafter, the user ID is transmitted to the key management apparatus 10 in the VPN server 62 through the communication control unit 71. If the password is illegally input six times, the IC card 30 is locked and cannot be used.
[0037]
The key management device 10 in the VPN server 62 checks whether the user ID sent from the communication terminal 2a is recorded in the virtual private line management table TKT of the key management device 10, and if it is recorded, The key information is used to perform an authentication check by the member service. If the authentication is valid, the communication terminal 2a is notified of access permission (step S104).
[0038]
As a result, the AP 72 of the communication terminal 2a establishes a call with the target DB server 63 through the virtual private line VT indicated by the broken line in FIG. 11, and the encrypted communication by the hybrid method of the public key method and the common key method is performed. Is started (step S105). When the communication terminal 2a detects that the IC card 30 has been removed during communication (step S106: No, step S107: Yes), or when communication ends (step S106: Yes), the key file is stored in the memory 73. (Step S108). In this way, communication using the virtual private line VT is possible while ensuring security during communication.
[0039]
【The invention's effect】
As is clear from the above description, according to the IC card issuance registration system of the present invention, only the issuer can define the issuer in charge, and only the issuer stores the key file in a confidential manner. Since the IC card for the user can be issued, the security of the authority for creating the key file is enhanced, and there is a specific effect that the key file is not easily leaked to a malicious third party. Moreover, since the key file is encrypted and stored with information unique to the IC card, it is impossible to correctly restore the key file by copying it to another IC card.
[0040]
In addition, according to the communication system of the present invention, communication using a virtual private line is possible only when an IC card storing a key file is attached, and when the IC card is removed or when communication ends. Since the key file is deleted, the security of the key file during communication is improved. Also, at the time of authentication at the start of communication, the IC card will be locked if an illegal password has been entered a predetermined number of times, so it is impossible for a third party to know the contents of the password, etc. Can improve security.
[Brief description of the drawings]
FIG. 1 is a configuration diagram of a main part of an IC card issuance registration system according to the present invention.
FIG. 2 is an external view of a key code generator (SCD) used in the present embodiment.
FIG. 3 is a functional block configuration diagram of a key code generator (SCD) of the present embodiment.
FIG. 4 is a sequence chart showing a procedure for registering an issue supervisor.
5 is a content explanatory diagram of an issuing terminal management table formed by the procedure of FIG. 4;
FIG. 6 is a sequence chart showing a registration procedure of a person in charge of issue.
7 is a content explanatory diagram of an issuance person management table formed by the procedure of FIG. 6. FIG.
FIG. 8 is a flowchart showing a user terminal registration procedure;
FIG. 9 is a flowchart showing a procedure for registering a user terminal (continued).
FIG. 10 is a content explanatory diagram of a user terminal management table formed by the procedure of FIGS. 8 and 9;
FIG. 11 is a configuration diagram of a communication system to which the present invention is applied.
12 is a block configuration diagram of a communication terminal constituting the communication system of FIG.
13 is an explanatory diagram of a communication procedure in the communication system 2 of FIG.
FIG. 14 is a schematic configuration diagram of a conventional communication system.
[Explanation of symbols]
1 IC card issuance registration system
2 Communication system
2a, 2b communication terminal
10 Key management device
12, 22, 55 Authentication processing part
13, 23, 57 Cryptographic processing part
14 Key file creation part
15 ID Registration Department
20 Card issuing device
24 Card input / output interface
25,75 Card reader / writer
26, 77 Attachment / detachment detection unit
30 IC card
40, 41 Key code generator
52 Start control unit
53, 74 Memory controller
54,73 memory
57 Key code generator
62 VPN server
63 DB server
72 Application Department (AP)
76 Card Information Expansion Department
LL1, LL2 local network
LP public network
VT virtual leased line

Claims (8)

A card issuing device having a card mounting mechanism, a key management device having means for acquiring different first and second keys under a predetermined condition, and an authentication code for an IC card issuer being registered; A method implemented by:
When the IC card for the person in charge in which the same authentication code as the registered authentication code is secretly stored is mounted on the card mounting mechanism, the card issuing device communicates with the key management device. Establishing a communication path to
The key management device transmitting the acquired first key to the card issuing device through the communication path and holding the first key encrypted with the registered authentication code;
The card issuing device that has received the first key transmits the first key to the key management device through the communication path by encrypted communication using an authentication code read from the IC card for the issuer;
The key management device that has received the first key determines the match between the first key and the held first key, and when they match, the acquired second key is used as the registered authentication. Transmitting to the card issuing device by encrypted communication using a code;
The card issuing device that has received the second key uses the second key to generate file basic information necessary for generating a key file including authority information that is used by the IC card user for communication with the counterpart device during communication. Transmitting to the key management device by encrypted communication;
A key management device that receives the file basic information generates the key file from the file basic information, and transmits the generated key file to the card issuing device by encrypted communication using the second key;
Receiving the key file, enabling the card issuing device to store the key file in the user IC card; and
IC card management method. A step of the key management device registering a supervisor ID that supervises the issuance of an IC card;
In response to a login from the card issuing device with the supervisor ID, the key management device acquires the first key, transmits the acquired first key to the card issuing device, and transmits the first key to the card issuing device. Authenticating with the card issuing device, and sending a registration permission notification of the authentication code for the issuing person to the card issuing device when it is valid;
The card issuing device that has received the registration permission notification transmits the authentication code to the key management device by encrypted communication using a predetermined encryption code;
The IC card management method according to claim 1, further comprising: registering the received authentication code in a predetermined registration area. The key file is between the partner device only while the consistency with the key file registered in the key management device can be confirmed in a plurality of communication devices having an IC card mounting mechanism storing the key file. To build a virtual private line,
The IC card management method according to claim 1. The communication device further includes storage means for expanding the key file,
When the communication device recognizes the attachment of the IC card to the attachment mechanism, the key file stored in the IC card is expanded in the storage means, and the IC card is attached to the key file from the attachment mechanism. , Or when the end of communication with the communication device of the other party is detected, it is deleted from the storage means.
The IC card management method according to any one of claims 1 to 3. A card issuing device, a key code generating device that generates a first key and a second key different from each other under a predetermined condition, and a key management device in which an authentication code for an IC card issuer is registered;
The card issuing device;
A card mounting mechanism; first authentication means for authenticating with the key management apparatus; authentication code holding means for holding the same authentication code as the registered authentication code; and IC card user communicating Management of file basic information necessary for generating a key file including authority information used for communication with a partner device sometimes, and storing the key file in the IC card mounted on the card mounting mechanism Interface means;
The key management device;
Second authentication means for acquiring the first key from the key code generation device and performing authentication with the first authentication means using the acquired first key;
When the authentication by the second authenticating means is valid, the second key acquired from the key code generating device is transmitted to the card issuing device by encrypted communication using the authentication code, and the second key acquired by the encrypted communication using the second key When receiving the file basic information from the card issuing device, the key file is generated from the received file basic information, and the generated key file is transmitted to the card issuing device by encrypted communication using the second key. A management means,
IC card issuance and registration system. The authentication code holding means of the card issuing device is in charge of issuing when an IC card for an issuer in which the same authentication code as the registered authentication code is secretly stored is attached to the card attachment mechanism. Read the authentication code from the IC card for the person,
The IC card issuance / registration system according to claim 5. An apparatus used in the IC card issuance / registration system according to claim 5 or 6;
A storage means for storing basic information as a basis for creating an authentication code for the person in charge; a random number generating means for generating a random number as a basis for the second key; a basic information stored in the storage means and the random number generation Encryption means for encrypting a random number output from the means based on predetermined authority information, and generating either the authentication code for the person in charge and the second key when the authority information is input A key code generation device configured to   8. The key code generation apparatus according to claim 7, wherein the storage means is a volatile memory, and the basic information is erased by unauthorized reading or interruption of energization.

Images