JP5022201B2 - Authentication system - Google Patents

Description

  The present invention relates to an authentication system using a storage medium.

  An IC card equipped with data or the like is known (Patent Document 1). As a system using an IC card, a system that authenticates using a key stored in an IC card and a key stored in a SAM (Secure Application Module) mounted on the card reader / writer and registers data in the IC card Is known (Non-Patent Document 1).

JP 2002-56360 A http://www.multos.gr.jp/application/pdf/ab003_hitachibio.pdf

  When the system is used in a financial institution, an IC card issuing institution and an institution that performs authentication may differ due to mutual cooperation. In the conventional system, it is necessary to mount a large number of SAMs on a card reader / writer in order to support IC cards issued from a large number of issuing agencies. However, since the number of SAMs mounted on the card reader / writer is limited, there is a problem that the number of IC card issuing organizations that can be handled is limited.

  An object of the present invention is to solve at least one of the above-described problems and improve the convenience of data registration in a storage medium.

  In order to solve the above problems, the present invention comprises the following aspects.

  A first embodiment according to the present invention is an authentication system that performs authentication using a medium key stored in a storage medium and an authentication key stored in an authentication apparatus. The storage medium includes a storage device that stores a first medium key and a second medium key that is different from the first medium key. The authentication device uses a reading unit that reads the medium key from the storage medium, a storage device that stores an authentication key used for authentication, and the read medium key and the authentication key. Authentication means for performing authentication, wherein authentication is performed using one medium key and the authentication key, and when the authentication is not successful, another medium key and the authentication key are used. Authentication means for performing authentication, and data writing means for writing predetermined data to the storage medium when any of the authentications succeeds. According to this aspect, the convenience of registering data in the storage medium can be improved.

    In the first aspect of the present invention, the reading unit reads one of the first medium key and the second medium key, and authentication using the read medium key is not successful. In the case of a failure, the other medium key is read out. According to this aspect, the convenience of registering data in the storage medium can be improved.

  In the first aspect of the present invention, the storage device of the authentication device stores, as the authentication key, a first authentication key and a second authentication key different from the first authentication key. The authentication means performs authentication using the read one medium key and the first authentication key, and authentication using the read one medium key and the second authentication key. If the authentication is not successful, authentication using the read-out other medium key and the first authentication key, read-out other medium key and the second authentication key You may comprise so that the authentication using a key may be performed. According to this aspect, the convenience of registering data in the storage medium can be improved.

  In the first aspect of the present invention, the first authentication key corresponds to the first medium key of the first storage medium issued by the first institution, and the second authentication key The second medium key of the second storage medium issued by a second institution different from the first institution may correspond to the second medium key. According to this aspect, security can be enhanced.

  In the first aspect of the present invention, the second medium key may be issued by the first institution and sent from the first institution to the second institution. According to this aspect, the convenience of registering data in the storage medium issued by the second institution can be improved.

  In the first aspect of the present invention, the second authentication key is configured to be a common authentication key corresponding to the second medium key of a plurality of storage media issued by a plurality of organizations. May be. According to this aspect, the number of authentication keys of the authentication device can be reduced.

  In the first aspect of the present invention, the second medium key of the storage medium issued by the second institution and the third institution different from both the first institution and the second institution The second medium key of the storage medium to be configured may be the same. According to this aspect, the convenience of registering data in the storage medium can be improved.

  A second aspect of the present invention is an authentication system that performs authentication using a medium key stored in a storage medium and an authentication key stored in an authentication apparatus. The storage medium includes a storage device that stores a medium key. The authentication device includes a reading unit for reading a medium key from the storage medium, a first authentication key for use in authentication, and a second authentication key different from the first authentication key. Authentication is performed using the storage device storing the read-out medium key, the first authentication key, and the second authentication key, and the authentication is performed. If not successful, authentication means for performing authentication using the medium key and the other authentication key, and data writing for writing predetermined data to the storage medium if any of the authentication is successful Means. According to this aspect, the convenience of registering data in the storage medium can be improved.

  In the first aspect or the second aspect of the present invention, the storage device of the storage medium stores, for each medium key, medium key validity period information that determines an validity period of the medium key. You may comprise as follows. According to this aspect, security can be enhanced.

  According to a third aspect of the present invention, there is provided a storage medium used in an authentication system that performs authentication using a medium key stored in a storage medium and an authentication key stored in an authentication apparatus, A first medium key corresponding to a first authentication key used in an authentication apparatus of a first institution issuing a medium and a second authentication used in an authentication apparatus of a second institution different from the first institution A storage device for storing a second medium key corresponding to the key is provided. According to this aspect, the convenience of registering data in the storage medium can be improved.

  According to a fourth aspect of the present invention, there is provided an authentication apparatus used in an authentication system that performs authentication using a medium key stored in a storage medium and an authentication key stored in the authentication apparatus. Reading means for reading at least one of the medium keys from the storage medium storing the medium key, and reading another medium key when the authentication is not successful; A storage device that stores an authentication key for use in authentication, and performs authentication using the read medium key and the authentication key. If the authentication is not successful, the other medium key An authentication unit that performs authentication using the authentication key; and a data writing unit that writes predetermined data to the storage medium when any of the authentications is successful. According to this aspect, the convenience of registering data in the storage medium can be improved.

  A fifth aspect of the present invention is a storage medium issuing method in an authentication system that performs authentication using a medium key stored in a storage medium and an authentication key stored in the storage apparatus of the authentication apparatus. A first medium key corresponding to the first authentication key used in the first authentication device is acquired, and a second key corresponding to the second authentication key used in the second authentication device is acquired. A medium key is obtained, the first medium key and the second medium key are stored in a storage medium, and the storage medium is issued. According to this aspect, the convenience of registering data in the storage medium can be improved.

  In the fifth aspect of the present invention, the first institution generates the first authentication key and the first medium key used in the first authentication device of the first institution. The first medium key is acquired, and the second medium key is acquired from a second institution that performs authentication using the second authentication device, and the first medium key and the second medium are acquired. A key for use is stored in the storage medium, and the storage medium is issued. According to this aspect, the convenience of registering data in the storage medium can be improved.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is an explanatory diagram showing a data registration system according to an embodiment of the present invention. The data registration system includes a data registration device 10a, an IC card issuing device 60a, and a terminal 62a managed by the financial institution A, a data registration device 10b, an IC card issuing device 60b, a terminal 62b, and a key management organization X managed by the financial institution B. And a network 90 connecting these devices.

  The data registration devices 10a and 10b perform authentication using a medium key stored in an IC card (not shown) and an authentication key stored in a SAM (not shown) installed in the data registration device. If successful, predetermined data such as biometric information data is registered in the IC card. Here, the SAM is an authentication module that stores an authentication key and performs authentication using a medium key and an authentication key. In this embodiment, for example, a SAM using a semiconductor device is used as the SAM.

  The IC card issuing devices 60a and 60b issue an IC card 700 that stores a medium key.

  The terminals 62a and 62b exchange media keys, authentication keys, and key issuance requests with other terminals and the key server 80.

  The key management institution X is an organization that receives a request for issuing a medium key / authentication key pair from the financial institution A or the financial institution B and generates and manages the medium key / authentication key pair. The key server 80 exists in the key management organization X, and generates and manages a medium key / authentication key pair. In the present embodiment, different-value keys are used for the paired medium key and authentication key, but the same value key may be used.

  The configuration of the data registration devices 10a and 10b will be described with reference to FIGS. Since the data registration apparatuses 10a and 10b have the same configuration, the following description omits the letters a and b at the end of the code unless it is necessary to distinguish the data registration apparatuses 10a and 10b. To do. FIG. 2 is an explanatory diagram schematically illustrating the configuration of the data registration device 10. FIG. 3 is an explanatory diagram showing the configuration of the data table stored in the data registration device 10. 3A shows the configuration of the data table 135a stored in the data registration device 10a, and FIG. 3B shows the configuration of the data table 135b stored in the data registration device 10b.

  The data registration device 10 includes a main body unit 100, a biometric information acquisition unit 200, and an IC card reader / writer 300.

  The main body unit 100 includes a CPU 110, a hard disk 120, a RAM 160, an input device 170, and a display device 180. The CPU 110 controls the operation of the entire data registration device 10.

  The hard disk 120 stores an authentication program 125, a data writing program 130, and a data table 135. The authentication program 125 is a program for authenticating an organization using an organization code stored in the IC card 700 and an organization code stored in the data table 135, for example. The data writing program 130 is a program for writing predetermined data, for example, biological information data, to the IC card 700. The data table 135 is a storage for storing the institution code of the financial institution that issued the IC card 700 and medium key validity period information data that defines the period during which data can be registered in the IC card 700 for each financial institution. Part.

  The RAM 160 temporarily stores data being processed by the CPU 110 and data written to the IC card by the CPU 110. The input device 170 receives input of data registered in the IC card 700 and an operation to the data registration device 10. In this embodiment, as the input device 170, for example, a keyboard, a mouse, a tablet, or the like is used. The display device 180 displays a message from the data registration device 10. In this embodiment, as the display device 180, for example, a liquid crystal display, a CRT display, or the like is used.

  As shown in FIG. 3, the data table 135 is provided with its own institution code storage unit 136, registrable institution code storage units 140, 142, 144, and contract validity period storage units 150, 152, 154. The own organization code storage unit 136 stores an organization code of an organization that authenticates using the data registration device 10 (hereinafter referred to as “own organization”). The registrable institution code storage units 140, 142, and 144 store the institution codes of the institutions entrusted with data registration to the IC card 700 (hereinafter referred to as “other institutions”). In the contract validity period storage units 150, 152, and 154, contract validity period information data indicating the contract validity period connected with another organization for data registration in the IC card 700 is stored. Here, the contract validity period storage units 150, 152, and 154 correspond to the registrable institution code storage units 140, 142, and 144, respectively. In this embodiment, the contract validity period storage unit corresponding to the own organization code storage unit 136 is not provided, but registration possible period information for indicating a period in which data can be written to the IC card issued by the own organization. A storage unit may be provided.

  The biometric information acquisition unit 200 acquires biometric information data of the user. Here, the biometric information data refers to, for example, biometric features acquired from a user such as finger vein blood vessel pattern information data, retinal blood vessel pattern information data, palm shape information data, and fingerprint information data. What you did. In this embodiment, the biological information acquisition unit 200 includes a biological sensor 210 for acquiring blood vessel pattern information data of the user's finger vein. The biosensor 210 may be, for example, a biosensor that acquires biometric information data such as retinal blood vessel pattern information data, palm shape information data, and fingerprint information data.

  The IC card reader / writer 300 performs data writing to the IC card 700 and data reading from the IC card 700. The IC card reader / writer 300 includes a control unit 310, an IC card slot 320, and a SAM slot 330. The control unit 310 controls data writing to the IC card 700 and data reading from the IC card 700. The IC card 700 is inserted into the IC card slot 320. A SAM 500 is installed in the SAM slot 330.

  The configuration of the IC card issuing devices 60a and 60b will be described with reference to FIG. The handling of the characters a and b at the end of the code is the same as the handling in the data registration device 10. FIG. 4 is an explanatory diagram for schematically explaining the configuration of the IC card issuing device 60.

  The IC card issuing device 60 includes a CPU 610, a hard disk 620, a RAM 640, an input device 650, a display device 660, and an IC card slot 670. The CPU 610 controls the operation of the entire IC card issuing device 60.

  The hard disk 620 stores a data writing program 625. The data writing program 625 is a program for writing, for example, a medium key issuing authority code, medium key validity period information data, and a medium key into the IC card 700. The medium key issuing institution code is the institution code of the financial institution that issued the medium key. When the financial institution requests the key management institution to issue the medium key, the institution code of the financial institution that requested the issuance is used instead of the key management institution. In other words, in this case, the organization that requested the issue is the medium key issue organization. The medium key valid period is a period during which authentication using the medium key is possible.

  The RAM 640 temporarily stores data being processed by the CPU 610 and data to be written to the IC card 700. The input device 650 receives input of data registered in the IC card 700 and an operation to the IC card issuing device 60. Display device 660 displays a message from IC card issuing device 60. The IC card 700 is inserted into the IC card slot 670.

  The configuration of the SAMs 500a and 500b will be described with reference to FIGS. The handling of the characters a and b at the end of the code is the same as the handling in the data registration device 10. FIG. 5 is an explanatory diagram showing the configuration of the SAM 500. FIG. 6 is an explanatory diagram showing a configuration of a data table stored in the SAM 500. As shown in FIG. 6A shows the configuration of the data table 530a stored in the SAM 500a, and FIG. 6B shows the configuration of the data table 530b stored in the SAM 500b.

  The SAM 500 includes a control unit 510 and a memory 520. The control unit 510 controls the operation of the SAM 500 and performs authentication using the medium key read from the IC card 700 and the authentication key in the memory 520. The memory 520 stores an IC card authentication program 525 and a data table 530. In this embodiment, a nonvolatile memory is used as the memory 520. The IC card authentication program 525 is a program for performing authentication using a medium key and an authentication key. The data table 530 is provided with authentication key storage units 532 and 534 for storing authentication keys. In the present embodiment, the authentication key storage unit 532 stores an authentication key corresponding to the medium key of the IC card 700 issued by its own organization, and the authentication key storage unit 534 stores information other than its own organization. An authentication key corresponding to the medium key stored in the IC card 700 issued by the institution is stored.

  The configuration of the IC cards 700a and 700b will be described with reference to FIGS. The handling of the characters a and b at the end of the code is the same as the handling in the data registration device 10. FIG. 7 is an explanatory diagram showing the configuration of the IC card 700. FIG. 8 is an explanatory diagram showing a configuration of a data table stored in the IC card 700. 8A shows the configuration of the data table 730a stored in the IC card 700a, and FIG. 8B shows the configuration of the data table 730b stored in the IC card 700b.

  The IC card 700 includes a control unit 710 and a memory 720. The control unit 710 controls the operation of the IC card 700. The memory 720 stores a data table 730. In this embodiment, a nonvolatile memory is used as the memory 720. The data table 730 is provided with a medium key issuing authority code storage unit 740, a medium key validity period storage unit 750, a medium key storage unit 760, and a biometric information storage unit 770. The medium key issuing institution code storage unit 740 stores the institution code of the institution that issued the medium key. In this embodiment, the engine code of the own engine is stored. The medium key validity period storage unit 750 stores period information data (hereinafter referred to as “medium key validity period data”) that can be authenticated using a medium key for each medium key issuing organization. The medium key storage unit 760 stores a medium key for each medium key issuing organization. The biological information storage unit 770 stores biological information data. Here, since the biometric information data is written by the data registration device 10 after the IC card 700 is issued, the biometric information data is not stored in the biometric information storage unit 738 when the IC card 700 is issued. In this embodiment, the IC card 700a is further provided with a medium key issuing authority code storage unit 742a, a medium key validity period storage unit 752a, and a medium key storage unit 762a.

  The issue of the IC card 700 storing the medium key will be described with reference to FIG. FIG. 9 is a flowchart for explaining the issuance of the IC card 700 storing the medium key. In the following description, it is assumed that a contract is made that the IC card 700a issued by the financial institution A can be registered in the card registration device of the financial institution B.

  The terminal 62a located in the financial institution A requests a medium key from the terminal 62b of the financial institution B (step SA200). When the terminal 62b does not have the medium key to be sent to the terminal 62a, the terminal 62b requests the key server 80 of the key management organization X to issue the medium key B1b and the authentication key B2b, and the medium key B1b and the authentication key The key B2b is acquired (step SB210).

  The terminal 62b sends the authentication key B2b to the SAM writing device (not shown). The SAM writing device stores the authentication key B2b in the authentication key storage unit 534b of the data table 530 of the SAM 500b removed from the data registration device 10b (step SB220). Note that the authentication key B2a is already stored in the authentication key storage unit 532b of the SAM 500b. The SAM 500b in which the authentication key B2b is stored is attached to the SAM slot 330b of the data registration device 10b.

  The terminal 62b sends the medium key B1b to the terminal 62a of the financial institution A (step SB230). The terminal 62a of the financial institution A acquires the medium key B1b (Step SA240). The terminal 62b sends the institution code of the financial institution A to which the medium key B1b is sent to the data registration apparatus 10b. The CPU 110b of the data registration device 10b stores the institution code of the financial institution A in the registrable institution code storage unit 140b of the data table 135 (step SB250). The steps so far may be executed once after the contract.

  The terminal 62a sends the medium keys A1 and B1b to the IC card issuing device 60a. The CPU 610a of the IC card issuing device 60a stores the institution code of the financial institution A (“1234” in this embodiment) in the medium key issuing institution code storage unit 740a of the IC card 700a, and the medium in the medium key validity period storage unit 750a. The medium key validity period data (in the present embodiment, “2010/1/1 to 2010/12/31”) of the service key A1, the medium key A1 in the medium key storage unit 760a, and the medium key issuing authority code The storage unit 742a stores the institution code of the financial institution B (“1111” in this embodiment), and the medium key validity period storage unit 752a stores the medium key validity period data of the medium key B1b (“2010/1 in this embodiment). / 1 to 2010/12/31), the medium key B1b is stored in the medium key storage unit 762a, and the IC card issuing device 60a issues the IC card 700a (step SA). 60). In addition, engine code and medium key lifetime data is input from, for example, the input device 650a.

  Data registration in the IC card 700 will be described with reference to FIGS. 10 and 11. FIG. 10 is a flowchart (part 1) illustrating data registration to the IC card 700. FIG. 11 is a flowchart (part 2) illustrating data registration in the IC card 700.

  The CPU 110 of the data registration device 10 stores the registration data for the IC card 700 in the RAM 160 (step S300). Here, the registration data to the IC card 700 is input from, for example, the input device 170 or acquired using the biosensor 210.

  When the IC card 700 is inserted into the IC card slot 320 of the data registration device 10, the CPU 110 reads from the medium key issuing authority code storage unit 740 and the medium key validity period storage unit 750 related to the data 1 of the IC card 700. The institution code (hereinafter referred to as “medium key issuing institution code”) and medium key validity period information data are read and stored in the RAM 160 (step S310).

  The CPU 110 reads the own organization code from the own organization code storage unit 136 of the data table 135 of the hard disk 120 and compares it with the medium key issuing organization code (step S320). When the self-organization code and the medium key issuing authority code match (step S320, match), the CPU 110 reads the medium key from the medium key storage unit 760 of the data table 730 of the memory 720 of the IC card 700, The data is sent to the SAM 500 (step S400) and waits for the authentication result from the SAM 500 to be returned.

  When the authentication result from the SAM 500 is approval (step S410, approval), the CPU 110 sends a write command and predetermined data to the control unit 310 of the IC card reader / writer 300, and sends the write command and predetermined data to the control unit 310. Predetermined data is written (step S420). When the authentication result from the SAM 500 is disapproved (step S410, disapproval), the CPU 110 displays a “write impossible” message on the display device 180 (step S430).

  When the self-institution code and the medium key issuing authority code do not match (step S320, mismatch), the CPU 110 stores the medium key issuing authority code storage unit 742 and the medium key validity period related to the data 2 of the IC card 700. The institution code (hereinafter referred to as “second medium key issuing institution code”) and medium key validity period information data are read from the storage unit 752 and stored in the RAM 160 (step S330). The CPU 110 compares the own organization code with the second medium key issuing organization code (step S340).

  If the own institution code and the second medium key issuing institution code match (step S340, coincidence), the CPU 110 searches the registrable institution code storage units 140, 142, and 144 in the data table 135 to find the first The engine code that matches the key issuing authority code for the two media is searched (step S350). When the CPU 110 finds an institution code that matches the second medium key issuing institution code, the contract validity period storage unit corresponding to the registrable institution code storage unit in which the second medium key institution code is stored The contract validity period information data is read from the data and stored in the RAM 160 (step S360).

  CPU 110 compares the contract validity period information data with the medium key validity period information data (step S370). When the contract validity period information data and the medium key validity period information data do not match (step S370, mismatch), the CPU 110 stores the medium key validity period information data stored in the RAM 160 and the IC card 700. The medium key validity period information data in the medium key validity period storage unit 752 of the data table 730 is updated with the contract validity period information data (step S380).

  The CPU 110 acquires the current date and time from an internal clock (not shown) of the data registration device 10, and the current date and time is within the period indicated by the medium key validity period information data (hereinafter referred to as “medium key validity period”). Whether or not (step S390). If the current date and time is included in the medium key validity period (step S390, Yes), the CPU 110 proceeds to step S400 and performs the above-described operation. If the current date and time is not included in the medium key validity period (No at Step S390), the CPU 110 proceeds to Step S430 and causes the display device 180 to display a “write impossible” message. (Step S430).

  If the host organization code and the second medium key issuing organization code do not match (step S 340, mismatch), the CPU 110 proceeds to step S 430 and causes the display device 180 to display a “write impossible” message ( Step S430).

  As described above, according to the present embodiment, the IC card 700a stores the medium keys A1 and B1b, the IC card 700b stores the medium key B1a, and the SAM 500b of the data registration device 10b stores the authentication key B2a. , B2b are stored. Since the medium key B1a and the authentication key B2a correspond to each other, and the medium key B1b and the authentication key B2b correspond to each other, the IC cards 700a and 700b can be authenticated and registered in the data registration device 10b. is there. Therefore, the convenience of data registration to the IC cards 700a and 700b is improved.

  According to the present embodiment, the authentication key B2a is issued by the financial institution B and corresponds to the medium key B1a of the IC card 700b issued by the IC card issuing device 60b of the financial institution B. The authentication key B2b is This corresponds to the medium key B1b of the IC card 700a issued by the IC card issuing device 60a of the financial institution A. Therefore, the data registration device 10b of the financial institution B can authenticate the IC card 700a issued by the financial institution A in addition to the IC card 700b issued by the financial institution B, and can write biometric information. Therefore, the convenience of registering data in the IC card 700a is improved.

  According to the present embodiment, the medium key B1b and the authentication key B2b are issued by the financial institution B, and the medium key B1b is sent from the financial institution B to the financial institution A. Therefore, the IC card issuing device 60a can issue to the financial institution A the IC card 700a that can be registered by the data registration device 10b of the financial institution B. Therefore, the convenience of registering data in the IC card 700a is improved.

  According to the present embodiment, the IC card 700 has medium key validity period storage units 750 and 752 for storing medium key validity period information data. Therefore, since it becomes impossible to perform authentication using the medium key and the authentication key outside the predetermined period, security can be improved.

  According to this embodiment, the financial institution A uses a medium key A1 corresponding to the authentication key A2 used for the data registration apparatus 10a and a medium key B1b corresponding to the authentication key B2b used for the data registration apparatus 10b. Is issued and the IC card 700a is issued. According to this method, the IC card 700a that can be authenticated can be issued by any of the data registration devices 10a and 10b. Therefore, the convenience of data registration to the IC card 700a is improved.

  According to the present embodiment, the financial institution A that issues the IC card 700a is the same as the institution that performs authentication using the data registration apparatus 10a, and the medium for the medium from the financial institution B that performs authentication using the data registration apparatus 10b. The key B1b is acquired and the IC card 700a is issued. Therefore, even the data registration device 10b of the financial institution B can authenticate the IC card 700a issued by the financial institution A. Therefore, the convenience of registering data in the IC card 700a is improved.

Modification 1:
A modification of the present embodiment will be described with reference to FIG. FIG. 12 is a flowchart for explaining data registration to the IC card 700 in the modification. The first modification is an embodiment in the case where no engine code is stored in the data registration device 10 and the IC card 700.

  The CPU 110 of the data registration device 10 stores registration data for the IC card 700 in the RAM 160 (step S500). Here, the registration data to the IC card 700 is input from the input device 170 or acquired using the biosensor 210, for example, as in the present embodiment.

  When the IC card 700 is inserted into the IC card slot 320 of the data registration device 10, the CPU 110 reads medium key validity period information data from the medium key validity period storage unit 750 of the IC card 700 and stores it in the RAM 160. (Step S510).

  The CPU 110 acquires the current date and time from an internal clock (not shown) of the data registration device 10 and determines whether or not the current date and time is within the medium key validity period (step S520). When the current date and time is included in the medium key validity period (step S520, Yes), the medium key is read from the medium key storage unit 760 of the data table 730 of the memory 720 of the IC card 700 and sent to the SAM 500. (Step S530), waiting for the authentication result from the SAM 500 to be returned.

  When the authentication result from the SAM 500 is approval (step S540, approval), the CPU 110 writes predetermined data into the IC card 700 (step S550).

  If the current date / time is not included in the medium key validity period (step S520, No), or if the authentication result from the SAM 500 is not approved (step S540, not approved), the CPU 110 stores the data 2 of the IC card 700. From the medium key validity period storage unit 752 according to the above, medium key validity period information data is read and stored in the RAM 160 (step S560).

  CPU 110 obtains the current date and time from an internal clock (not shown) of data registration device 10 and determines whether or not the current date and time is within the medium key validity period (step S570). When the current date and time is included in the medium key valid period (step S570, Yes), the medium key is read from the medium key storage unit 762 of the data table 730 of the memory 720 of the IC card 700 and sent to the SAM 500. (Step S580), waiting for the authentication result from the SAM 500 to be returned.

  When the authentication result from the SAM 500 is approval (step S590, approval), the CPU 110 writes predetermined data into the IC card 700 (step S550).

  If the current date / time is not included in the medium key validity period (No in step S570), or if the authentication result from the SAM 500 is not approved (step S590, not approved), the CPU 110 “writes” to the display device 180. A message “impossible” is displayed (step S600).

  As described above, authentication and data registration can also be performed according to the first modification.

Modification 2:
In this embodiment, the terminal 62b sends the medium key B1b to the terminal 62a. However, when the financial institution C and the financial institution C are affiliated, the same medium key B1b is not shown in the terminal of the financial institution C. It may also be sent to 62c (not shown). In this case, the IC card issuing device 60c (not shown) of the financial institution C issues the IC card 700c that stores the medium key B1b. The authentication key B2b of the data registration device 10b of the financial institution B corresponds to both the medium key B1b of the IC card 700a issued by the financial institution A and the medium key B1b of the IC card 700c issued by the financial institution C. To do. As a result, a single authentication key can correspond to a plurality of IC card medium keys. Further, the number of authentication keys stored in the data registration device 10b can be reduced.

Modification 3:
In the present embodiment, the case where there are two medium keys stored in the IC card 700 and two authentication keys stored in the SAM 500 of the data registration apparatus 10 has been described. However, for the medium stored in the IC card 700 There may be a case where there are two keys and one authentication key stored in the SAM 500 of the data registration device 10. If one medium key of the IC card 700 corresponds to the authentication key, the data registration apparatus 10 can perform authentication and data registration. Further, the IC card 700 has the data registration device 10 having an authentication key corresponding to the authentication key corresponding to one medium key and the authentication key corresponding to the authentication key corresponding to the other medium key. Authentication and data registration are possible in both data registration devices. Therefore, the convenience of registering data in the IC card 700 is improved.

  There may be a case where one medium key is stored in the IC card 700 and two authentication keys are stored in the SAM 500 of the data registration apparatus 10. If the medium key of the IC card 700 corresponds to one of the two authentication keys of the SAM 500, the data registration device 10 can authenticate the IC card 700 and register data. The data registration apparatus authenticates IC card 700 having a medium key corresponding to one authentication key and IC card 700 having a medium key corresponding to the other authentication key, and performs data registration. be able to. Therefore, the convenience of registering data in the IC card 700 is improved.

Modification 4:
In this embodiment, the IC card issuing device 60a obtains the medium key B1b stored in the IC card 700a to be issued from the terminal 62b, but conversely, the authentication in which the terminal 62a is stored in the SAM 500b of the data registration device 10b. The key for use may be acquired and sent to the terminal 62b. Similarly, the IC card 700a issued by the IC card issuing device 60a can be registered in any of the data registration devices 10a and 10b. Therefore, the convenience of registering data in the IC card 700a is improved.

Modification 5:
In this embodiment, one authentication key corresponds to one medium key, but a plurality of medium keys may correspond to one authentication key. When the own organization distributes a medium key corresponding to one authentication key to another organization, it can use a different media key for each other organization. Therefore, security can be improved.

Modification 6:
In this embodiment, when the contract validity period and the medium key validity period do not match, the medium key validity period stored in the RAM 160 and the medium key validity period storage unit 752 of the data table 730 of the IC card 700 are displayed. The medium key validity period information data is updated with the contract validity period information data read from any one of the contract validity period storage units 140, 142, and 144 (FIG. 11, step S380). Good.

Modification 7:
In this embodiment, two authentication keys are stored in one SAM 500, but one authentication key is stored in the SAM 500, and two SAMs are mounted in the IC card reader / writer 300, and one SAM is stored. May be made to correspond to the medium key of the IC card issued by the own organization, and the authentication key stored in the other SAM may be made to correspond to the medium key of the IC card issued by the other organization. This also makes it possible to limit the number of SAMs mounted on the IC card reader / writer to a maximum of two.

Modification 8:
In this embodiment, the terminal 62b of the financial institution B receives the request from the terminal 62a of the financial institution A and sends the medium key B1b. However, it may be sent before receiving the request.

Modification 9:
In this embodiment, the CPU 110 reads out the engine code from the medium key issuing authority code storage unit 740 and issues the medium key issuance when the read out engine code does not match the engine code stored in the own engine code storage unit 136. Although the engine code is read from the engine code storage unit 742, the engine codes stored in the medium key issuing authority code storage unit 740 and the medium key issuing authority code storage unit 742 may be read simultaneously.

  In the first modification, the CPU 110 reads the medium key from the medium key storage unit 760, and reads the medium key from the medium key storage unit 762 when the response from the SAM 500 is a disapproval of authentication. The medium keys stored in the key storage unit 760 and the medium key storage unit 762 may be read simultaneously.

  The embodiments of the present invention have been described above based on some examples. However, the above-described embodiments of the present invention are for facilitating the understanding of the present invention and limit the present invention. It is not a thing. The present invention can be changed and improved without departing from the spirit and scope of the claims, and it is needless to say that the present invention includes equivalents thereof.

It is explanatory drawing which shows the data registration system which concerns on the Example of this invention. 3 is an explanatory diagram schematically illustrating a configuration of a data registration device 10. FIG. 3 is an explanatory diagram showing a configuration of a data table stored in a data registration device 10. FIG. It is explanatory drawing which illustrates the structure of the IC card issuing apparatus 60 typically. It is explanatory drawing which shows the structure of SAM500. It is explanatory drawing which shows the structure of the data table stored in SAM500. 2 is an explanatory diagram showing a configuration of an IC card 700. FIG. It is explanatory drawing which shows the structure of the data table stored in the IC card. It is a flowchart explaining issue of the IC card 700 which stored the key for media. 5 is a flowchart (part 1) for explaining data registration in the IC card 700; 5 is a flowchart (part 2) for explaining data registration in the IC card 700; It is a flowchart explaining the data registration to IC card 700 in a modification.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Data registration apparatus 62 ... Terminal 80 ... Key server 90 ... Network 100 ... Main-body part 110 ... CPU
DESCRIPTION OF SYMBOLS 120 ... Hard disk 125 ... Authentication program 130 ... Data writing program 135 ... Data table 136 ... Own organization code storage part 140, 142, 144 ... Registrable organization code storage part 150, 152, 154 ... Contract validity period storage part 160 ... RAM
DESCRIPTION OF SYMBOLS 170 ... Input device 180 ... Display apparatus 200 ... Biometric information acquisition part 210 ... Biometric sensor 300 ... IC card reader / writer 310 ... Control part 320 ... IC card slot 330 ... SAM slot 500 ... SAM
DESCRIPTION OF SYMBOLS 510 ... Control part 520 ... Memory 530 ... Data table 532 ... Authentication key storage part 534 ... Authentication key storage part 610 ... CPU
620 ... Hard disk 625 ... Data writing program 640 ... RAM
650: Input device 660 ... Display device 670 ... IC card slot 700 ... IC card 710 ... Control unit 720 ... Memory 730 ... Data table 740, 742 ... Medium key issuing authority code storage unit 750, 752 ... Medium key validity period storage Unit 760, 762 ... Medium key storage unit 770 ... Biometric information storage unit A, B, C ... Financial institution X ... Key management institution A1 ... Medium key A2 ... Authentication key B1a ... Medium key B1b ... Medium key B2a ... Authentication key B2b ... Authentication key

Claims (2)

An authentication system that performs authentication using a medium key stored in a storage medium and an authentication key stored in an authentication device,
The storage medium is
A storage device for storing a first medium key and a second medium key different from the first medium key;
The authentication device
Reading means for reading the medium key from the storage medium;
A storage device for storing an authentication key for use in authentication;
Authentication means for performing authentication using the read medium key and the authentication key, wherein authentication is performed using one medium key and the authentication key, and the authentication is not successful. Authentication means for performing authentication using another medium key and the authentication key;
Data writing means for writing predetermined data to the storage medium when any of the authentications succeeds ;
Equipped with a,
The storage device of the authentication device stores a first authentication key and a second authentication key different from the first authentication key as the authentication key,
The reading means reads one of the first medium key and the second medium key;
The authentication means performs authentication using the read one medium key and the first authentication key, and performs authentication using the read one medium key and the second authentication key. ,
If authentication using one of the read media keys is not successful
The reading means reads the other medium key,
The authentication means performs authentication using the read other medium key and the first authentication key, and performs authentication using the read other medium key and the second authentication key. ,
Authentication system. The authentication system according to claim 1 ,
The first authentication key corresponds to the first medium key of the first storage medium issued by the first institution;
The second authentication key corresponds to a second medium key of a second storage medium issued by a second institution different from the first institution;
Authentication system.

Images