JP3600089B2 - IC card user authentication system and method, and recording medium storing program for determining authentication method in said system - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to user authentication in an IC card that can be used for various purposes by a single card.
[0002]
[Prior art]
An IC card is used for electronic money, a credit card, a prepaid card, and the like because it can hold important information safely and is portable. In recent years, with the emergence of general-purpose card OSs represented by MULTOS, JavaCard, and the like, a multi-purpose IC that can accommodate a plurality of applications on one card and provide a plurality of services with one card A card has been proposed.
[0003]
[Problems to be solved by the invention]
However, at present, when using a multi-purpose IC card, the user is required to input a card-specific PIN (Personal Identification Number) in order to identify the user, and the application that provides the service is required to use a dedicated password or the like. The user is authenticated by having the user input the user authentication information, and the service is started. For this reason, when trying to receive different services in succession, the user has to input different user authentication information every time the service changes, which is not convenient.
[0004]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an IC card user authentication system and method using less user authentication information input by a user, and an authentication method in the system. A recording medium on which the determination program is recorded.
[0005]
[Means for Solving the Problems]
In order to achieve the above object, according to the first aspect of the present invention, there is provided an IC card including a plurality of applications, and user authentication for performing application authentication of each application based on user authentication information input by a user. Means for storing the security level of the application for each application, and the second application is authenticated after the use of the first application is authenticated. When using continuously, the security level of the first application is compared with the security level of the second application, and when the security level of the second application is low, the user is compared with the first application and the second application. Sharing authentication information to the second application Determining that the user authentication information is reused at the time of use authentication of the application and that the security level of the second application is high when the second application has a high security level. We propose the features.
[0006]
According to the invention of claim 2, in the user authentication system according to claim 1, the first application records a security level in a shared memory in an IC card, and the second application is stored in the shared memory. The present invention proposes a method for authenticating a user of an IC card, which is characterized by comparing the security level of a user with the security level of the user.
[0007]
Further, in the invention according to claim 3, in the user authentication system according to claim 1, the second application acquires a security level of the application from the first application, and acquires the acquired security level and its own security. A user authentication method for an IC card, which is characterized by comparing the levels, is proposed.
[0008]
Further, in the invention according to claim 4, in the user authentication system according to claim 1, the management application for managing the security level includes a security level of the first application and a security level of the second application managed by itself. We propose a method of authenticating a user of an IC card, which is characterized by comparing the sizes of.
[0009]
Further, according to the present invention, there is provided an IC card comprising: an IC card having a plurality of applications; and a user authentication means for performing application authentication for each application based on user authentication information input by a user. In a card user authentication system, a recording medium recording a program for determining an authentication method in response to a user's use request, wherein the program is used to continuously execute a second application after the use of the first application is authenticated. When a use request is made, the security level of the first application is compared with the security level of the second application. If the security level of the second application is low, the security level is used by the first application and the second application. Sharing the user authentication information and using the second application when authenticating the use of the second application. Reusing the authentication information, if the security level of the second application is high proposes what and performing use authentication for the second application by the user authentication means.
[0010]
According to the present invention, when the user uses the first application, the authentication is performed based on the user authentication information corresponding to the application input by the user by the user authentication means, and the first application is used. Will be available.
[0011]
When the user uses the second application following the first application, first, the security level of the first application is compared with the security level of the second application. When the security level of the second application is lower than the security level of the first application, the first application and the second application share the user authentication information, and based on the user authentication information, Authentication of the second application is performed. That is, when the use of the first application is authenticated, the use of the second application is authenticated without requiring the user to input user authentication information.
[0012]
On the other hand, if the security level of the second application is higher than the security level of the first application, the authentication is performed by the user authentication means based on the user authentication information corresponding to the second application further input by the user. The application is made available.
[0013]
BEST MODE FOR CARRYING OUT THE INVENTION
(First Embodiment)
A user authentication system for an IC card according to a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a schematic configuration diagram of a user authentication system for an IC card according to the first embodiment.
[0014]
As shown in FIG. 1, the IC card user authentication system includes an IC card 10, an IC card reading terminal 20 serving as a client, and a server 30 for authentication.
[0015]
The IC card 10 is a multipurpose IC card including a plurality of applications APa and APb. The applications APa and APb have security levels SL (a) and SL (b), respectively. The security levels SL (a) and SL (b) are values for comparing security levels between applications. Further, the IC card 10 includes a previous security level holding unit 11. The previous security level holding unit 11 is provided in a storage area accessible from each of the applications APa and APb. Further, the previous security level holding unit 11 holds the security level of the application that was previously authenticated by the same user. Note that the initial value of the previous security level holding unit 11 is a minimum value that each application cannot have. The IC card 10 is composed of, for example, MULTOS or JavaCard.
[0016]
The IC card reading device 20 includes a card interface unit 21 with the IC card 10, a user interface unit 22 that is an interface between the user and the IC card 10 and includes a display unit 22a, an input unit 22b, and the like. A server interface unit 23 is provided as an interface between the user interface unit 22 and the server 30. The IC card reader 20 is composed of, for example, a workstation, a personal computer, a dedicated terminal, and the like. As the input unit 22a, for example, a keyboard capable of inputting data, a fingerprint reader, an image recognition device, a voice recognition device, or the like is used.
[0017]
The server 30 includes an authentication processing unit 31 that performs user authentication determination, and a database 32 that is accessed from the authentication processing unit 31 and stores user authentication information of the user in each application. The server 30 refers to the database 32 based on the user authentication information of the application transmitted from the IC card reading device 20 to determine whether or not authentication is possible, and returns the authentication result to the IC card reading device 20. Note that a plurality of authentication processing units 31 may be provided, for example, in a case where the authentication processing unit 31 is provided separately for each application. In this case, they may be distributed on a plurality of hardware or may be provided on a single piece of hardware. Similarly, a plurality of databases 32 may be provided, for example, in a case where the database 32 is provided separately for each application. In this case, they may be distributed on a plurality of hardware or may be provided on a single piece of hardware.
[0018]
In such a system, a user has user authentication information for each application. User authentication information differs for each application.
[0019]
Next, a user authentication procedure in this system will be described with reference to FIG. FIG. 2 is a flowchart illustrating an operation of the application according to the first embodiment.
[0020]
Here, a case will be described where the user receives service a by the second application APb continuously after receiving service a by the first application APa. It is assumed that the security level SL (a) of the first application APa and the security level SL (b) of the second application APb have a relationship of SL (a)> SL (b). Further, in the previous security level holding unit 11 of the IC card 10, a minimum value which each application cannot have is stored as an initial value. Further, the user authentication information for the first application APa of the user is PWa, and the user authentication information for the second application APb is PWb, and the two are different.
[0021]
First, when the user selects the service a using the reading device 20, an activation request is sent to the first application APa. The first application APa compares the security level previously stored in the security level holding unit 11 with its own security level SL (a) (step S101). Since the initial value is stored in the security level holding unit 11 last time, the own security level is higher here. Therefore, the first application APa transmits an input request for the user authentication information PWa of the own application to the reading device 20 (steps S102 and S103). Next, the self security level SL (a) is stored in the previous security level holding unit 11 (step S104). The reading device 20 requests the user to input the user authentication information PWa.
[0022]
Next, the first application APa receives the user authentication information PWa input by the user from the reading device 20, and transmits this to the server 30 (step S105). The server 30 processes the user authentication based on the received user authentication information PWa, and transmits the use permission information of “usable” when the authentication is successful and “unavailable” when the authentication fails, to the first application APa. Send to
[0023]
The first application APa determines the received use permission information (step S106), and if "usable", starts the service a (step S107). If "unusable", an input request for the user authentication information PWa is transmitted to the reading device 20 (steps S106 and S103).
[0024]
Next, when the user receives the service b, when the user selects the service b using the reading device 20, a start request is sent to the second application APb. The second application APb compares the security level SL (a) previously stored in the security level holding unit 11 with its own security level SL (b) (step S101). Since SL (a)> SL (b) based on the precondition described above, that is, the own security level SL (b) is smaller, the second application APb sends the server 30 the shared information User authentication information PWa Is transmitted (steps S102 and S108). The server 30 processes the user authentication based on the received shared information, and transmits to the second application APb use permission information of “usable” when the authentication is successful and “unavailable” when the authentication fails. .
[0025]
The second application APb determines the received use permission information (step S106), and if "usable", starts the service b (step S107). If "unusable", an input request for user authentication information PWb is transmitted to the reading device 20 (steps S106 and S103).
[0026]
According to the above steps, when the user uses the second application APb having a lower security level continuously from the first application APa having a higher security level, the user authentication information PWa is used when the first application APa is used. Is input and the user is correctly authenticated, the service b can be received without inputting the user authentication information PWb for the second application APb. Therefore, it is highly convenient for the user.
[0027]
On the other hand, when the user continuously uses the first application APa having a low security level from the second application APb having a low security level, it is necessary to input the user authentication information relating to the first application APa. Become.
[0028]
(Second embodiment)
A user authentication system for an IC card according to a second embodiment of the present invention will be described with reference to the drawings. FIG. 3 is a schematic configuration diagram of an IC card user authentication system according to the second embodiment. The same elements as those in the first embodiment are denoted by the same reference numerals, and description thereof is omitted.
[0029]
The difference between the user authentication system according to the present embodiment and the first embodiment lies in the configuration of the IC card 40 and the operation of each application. The details will be described below.
[0030]
The IC card 40 is a multipurpose IC card provided with a plurality of applications APa and APb, as in the first embodiment. The applications APa and APb have security levels SL (a) and SL (b), respectively. In addition, the applications APa and APb can perform data communication with each other.
[0031]
The IC card 40 includes a previous application information holding unit 41. The previous application information holding unit 41 is provided in a storage area accessible from each of the applications APa and APb. In the previous application information holding unit 41, application information authenticated last time by the same user is stored. In the last time, nothing is stored in the application information holding unit 41 in the initial state.
[0032]
Next, a user authentication procedure in this system will be described with reference to FIG. FIG. 4 is a flowchart illustrating the operation of the application according to the second embodiment.
[0033]
Here, a case will be described where the user receives service a by the second application APb continuously after receiving service a by the first application APa. It is assumed that the security level SL (a) of the first application APa and the security level SL (b) of the second application APb have a relationship of SL (a)> SL (b). Further, nothing is stored in the previous application information holding unit 41 of the IC card 40. Further, the user authentication information for the first application APa of the user is PWa, and the user authentication information for the second application APb is PWb, and the two are different.
[0034]
First, when the user selects the service a using the reading device 20, an activation request is sent to the first application APa. The first application APa checks the application information holding unit 41 last time (step S201). In the initial state, the value of the previous application information holding unit 41 is empty, so the first application APa transmits an input request for the user authentication information PWa of the own application to the reading device 20 (steps S201 and S205). . Next, the self application information AP-info (a) is stored in the previous application information holding unit 41 (step S206). The reading device 20 requests the user to input the user authentication information PWa.
[0035]
The first application APa receives the user authentication information PWa input by the user from the reading device 20, and transmits this to the server 30 (step S207). The server 30 processes the user authentication based on the received user authentication information PWa, and transmits the use permission information of “usable” when the authentication is successful and “unavailable” when the authentication fails, to the first application APa. Send to
[0036]
The first application APa determines the received use permission information (step S208), and if "usable", starts the service a (step S209). If “unusable”, an input request for the user authentication information PWa is transmitted to the reading device 20 (steps S208 and S205).
[0037]
Next, when the user receives the service b, when the user selects the service b using the reading device 20, a start request is sent to the second application APb. The second application APb checks the previous application information holding unit 41 (step S201). Here, since the application information AP-info (a) is stored, it is obtained (step S202). Next, the second application APb communicates with the first application APa to acquire the security level SL (a) because the acquired application information relates to the first application APa (step S203). . Next, the second application APb compares the security level SL (b) with the acquired security level SL (a) (Step S204). Since SL (a)> SL (b) based on the precondition described above, the second application APb sends the server 30 the shared information User authentication information PWa Is transmitted (steps S204, S210). The server 30 processes the user authentication based on the received shared information, and transmits to the second application APb use permission information of “usable” when the authentication is successful and “unavailable” when the authentication fails. .
[0038]
The second application APb determines the received use permission information (step S208), and starts the service b if "usable" (step S209). If “unusable”, an input request for the user authentication information PWb is transmitted to the reading device 20 (steps S208 and S205).
[0039]
According to the above steps, as in the first embodiment, when the user continuously uses the first application APa having a high security level and the second application APb having a low security level, the first application is performed. If the user A inputs the user authentication information PWa and is correctly authenticated when using the application APa, the service b can be received without inputting the user authentication information PWb related to the second application APb. Therefore, it is highly convenient for the user.
[0040]
On the other hand, when the user continuously uses the first application APa having a low security level from the second application APb having a low security level, it is necessary to input the user authentication information relating to the first application APa. Become.
[0041]
(Third embodiment)
A user authentication system for an IC card according to a third embodiment of the present invention will be described with reference to the drawings. FIG. 5 is a schematic configuration diagram of an IC card user authentication system according to the third embodiment. The same elements as those in the first embodiment are denoted by the same reference numerals, and description thereof is omitted.
[0042]
The difference between the user authentication system according to the present embodiment and the first embodiment lies in the configuration of the IC card 50 and the operation of each application. The details will be described below.
[0043]
The IC card 50 is a multipurpose IC card including a plurality of applications APa and APb and a management program 51 which is a dedicated application for managing user authentication, as in the first embodiment. The IC card 50 includes a previous security level holding unit 52. The previous security level holding unit 52 is provided in a storage area accessible from the management program 51. Further, the previous security level holding unit 52 holds the security level of the application previously authenticated by the same user. Note that the initial value of the previous security level holding unit 52 is a minimum value that each application cannot have. Further, the IC card 50 includes a security level database (hereinafter, referred to as “SL-DB”) 53 that stores a security level of each application APa and AP (b). The SL-DB 53 is accessed from the management program 50.
[0044]
Next, a user authentication procedure in this system will be described with reference to FIGS. FIG. 6 is a flowchart illustrating the operation of the management program according to the third embodiment, and FIG. 7 is a flowchart illustrating the operation of the application according to the third embodiment.
[0045]
Here, a case will be described where the user receives service a by the second application APb continuously after receiving service a by the first application APa. It is assumed that the security level SL (a) of the first application APa and the security level SL (b) of the second application APb have a relationship of SL (a)> SL (b). Further, in the previous security level holding unit 52 of the IC card 50, a minimum value which each application cannot have is stored as an initial value. Further, the user authentication information for the first application APa of the user is PWa, and the user authentication information for the second application APb is PWb, and the two are different.
[0046]
First, when the user selects the service a using the reading device 20, application information AP-info (a) related to the first application APa is sent to the management program 51. The management program 51 receives the application information AP-info (a) (step S301), and searches and acquires the security level SL (a) of the first application APa from the SL-DB 53 based on this information (step S302). ). Next, the management program 51 compares the acquired security level SL (a) with the value of the previous security level holding unit 52 (Step S303). Here, the previous security level holding unit 52 stores a minimum value that cannot be held by another application as an initial value. Then, the acquired security level SL (a) is stored in the previous security level holding unit 52 (step S304), and a request for inputting user authentication information is transmitted to the first application APa (step S305).
[0047]
On the other hand, the first application APa transmits the input request for the user authentication information PWa of its own application to the reading device 20 because the received information is the input request for the user authentication information (steps S401 and S402 in FIG. 7). ). The reading device 20 requests the user to input the user authentication information PWa.
[0048]
Next, the first application APa receives the user authentication information PWa input by the user from the reading device 20, and transmits this to the server 30 (step S403). The server 30 processes the user authentication based on the received user authentication information PWa, and transmits the use permission information of “usable” when the authentication is successful and “unavailable” when the authentication fails, to the first application APa. Send to
[0049]
The first application APa determines the received use permission information (step S404), and if "usable", starts the service a (step S405). If “unusable”, an input request for the user authentication information PWa is transmitted to the reading device 20 (steps S404 and S402).
[0050]
Next, when the user receives the service b, when the user selects the service b using the reading device 20, application information AP-info (b) relating to the second application APb is sent to the management program 51. The management program 51 receives the application information AP-info (b) (Step S301 in FIG. 6), and acquires the security level SL (b) of the second application APb from the SL-DB 53 based on this information (Step S301). S302). Next, the management program 51 compares the obtained security level SL (b) with the SL (a) stored in the security level holding unit 52 last time (step S303). Since SL (a)> SL (b) based on the precondition described above, the management program 51 sends the shared information to the second application APb. User authentication information PWa Is transmitted (steps S303, S306).
[0051]
On the other hand, since the received information is the shared information, the second application APb transmits the shared information to the server 30 (steps S401 and S406 in FIG. 7). The server 30 processes the user authentication based on the received shared information, and transmits to the second application APb use permission information of “usable” when the authentication is successful and “unavailable” when the authentication fails. .
[0052]
Next, the second application APb determines the received use permission information (step S404), and if "usable", starts the service b (step S405). If “unusable”, an input request for the user authentication information PWb is transmitted to the reading device 20 (steps S404 and S402).
[0053]
According to the above steps, when the user uses the second application APb having a lower security level continuously from the first application APa having a higher security level, the user authentication information PWa is used when the first application APa is used. Is input and the user is correctly authenticated, the service b can be received without inputting the user authentication information PWb for the second application APb. Therefore, it is highly convenient for the user.
[0054]
On the other hand, when the user continuously uses the first application APa having a higher security level from the second application APb having a lower security level, it is necessary to input user authentication information relating to the first application APa. Become.
[0055]
As described above, according to the user authentication system for an IC card according to the first to third embodiments, the user does not need to input the user authentication information for each application. The burden is reduced and the convenience is high. Even if the user authentication information is stolen, a service with a high security level cannot be used with user authentication information of a service with a low security level. Therefore, when the system is introduced, the damage can be minimized by introducing a fingerprint recognition method or the like in which the user authentication information is not easily stolen into a service with a high security level.
[0056]
In the first to third embodiments, a server having a database of user authentication information is installed for performing user authentication, but the present invention is not limited to this. For example, the user authentication unit may be provided in an IC card or a reading device.
[0057]
In the first to third embodiments, the security level is compared between applications, and processing is performed for a case where one is small and a case where one is large. Is omitted. Such processing can be easily realized if the same security level is not set in a plurality of applications. If the same security level exists in a plurality of applications, processing in this case may be provided. In this case, it is preferable to re-use the user authentication information from the viewpoint of emphasizing the convenience of the user, and to require the user to input the user authentication information from the viewpoint of emphasizing security. It is preferable to select one of them according to the situation.
[0058]
【The invention's effect】
As described in detail above, according to the present invention, it is not necessary to input a plurality of pieces of user authentication information when using a plurality of applications at a time using an IC card, so that management and burden on the user are reduced. Is done. Even if the user authentication information is stolen, a service with a high security level cannot be used with the user authentication information of a service with a low security level. Therefore, when the system is introduced, the damage can be minimized by adopting a fingerprint authentication method or the like in which the user authentication information is not easily stolen for a service with a high security level.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram of an IC card user authentication system according to a first embodiment;
FIG. 2 is a flowchart illustrating an operation of an application according to the first embodiment;
FIG. 3 is a schematic configuration diagram of an IC card user authentication system according to a second embodiment;
FIG. 4 is a flowchart illustrating an operation of an application according to the second embodiment;
FIG. 5 is a schematic configuration diagram of an IC card user authentication system according to a third embodiment;
FIG. 6 is a flowchart illustrating the operation of a management program according to a third embodiment;
FIG. 7 is a flowchart illustrating an operation of an application according to the third embodiment;
[Explanation of symbols]
10, 40, 50: IC-card, 20: reading device, 30: server, APa: first application, APb: second application

Claims (5)

In an IC card user authentication system comprising: an IC card having a plurality of applications; and a user authentication unit for performing application authentication for each application based on user authentication information input by a user.
The IC card includes storage means for storing the security level of each application for each application,
When the second application is continuously used after the use of the first application is authenticated, the security levels of the first application and the second application are compared, and the security level of the second application is determined. If low, the first application and the second application share the user authentication information and reuse the user authentication information at the time of use authentication of the second application, and the security level of the second application is high. A user authentication system for an IC card, comprising: a determination unit for performing use authentication of a second application by the user authentication unit. The user authentication system according to claim 1,
The first application records a security level in a shared memory in the IC card,
A user authentication method for an IC card, wherein the second application compares the security level stored in the shared memory with its own security level. The user authentication system according to claim 1,
An IC card user authentication method, wherein the second application obtains a security level of the application from the first application, and compares the obtained security level with its own security level. The user authentication system according to claim 1,
A user authentication method for an IC card, wherein a management application that manages a security level compares a security level of a first application and a security level of a second application that are managed by the management application. In an IC card user authentication system comprising: an IC card having a plurality of applications; and a user authentication means for performing application authentication for each application based on user authentication information input by a user. Recording a program for determining an authentication method in response to a user's use request,
When there is a continuous use request of the second application after the use of the first application has been authenticated, the security level of the first application is compared with that of the second application, and the second application is compared. If the security level of the second application is low, the first application and the second application share the user authentication information and reuse the user authentication information at the time of authenticating the use of the second application. A recording medium storing a program for determining an authentication method in a user authentication system for an IC card, wherein when the level is high, use authentication for a second application is performed by the user authentication means.

Images