JP2000148939A - Id card security system, device and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve a security effect by using a program enciphered by a secret key and preventing the decoding information of an ID card from being used for an enciphering program as it is and being decoded. SOLUTION: This ID card security device 11 is provided with an ID card slot in which an ID card 18 having a public key is inserted, an enciphered ID card processing program, a secret key decoding mechanism 17 which decodes the enciphered ID card processing program, a searching mechanism which searches a secret key from the public key possessed by the card 18 and an information table which is searched by a public key/secret key searching mechanism 16. In such a case, when the card 18 having the public key is inserted into the ID card slot, the searching mechanism searches the secret key corresponding to the public key from the information table, and the mechanism 17 decodes the ID card processing program, converts it into non-enciphered program and operates based on the non-enciphered program.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an ID card security system for handling an ID card such as a magnetic card, an optical card and an IC card containing a public key, and an apparatus and method thereof.

[0002]

2. Description of the Related Art An example of a conventional security system is as follows.
As a first conventional example, a security device is described in Japanese Patent Application Laid-Open No. 1-35628. As shown in FIG.
This conventional security device 41 includes a decryption verification mechanism 42
, An encryption program 43, a decryption mechanism 44, an ID card 45, decryption information 46-a, and decryption information 46-b.
, An ID card reading mechanism 47, a decryption information storage mechanism 48, a main storage device 49, a display mechanism 50, and a central processing unit 5.

A conventional security device system having such a configuration operates as follows.

That is, an encryption program 43 stored in a storage means, an ID card storing a decryption key is read by a reading mechanism 47, and the encrypted program 43 is encrypted by using the read decryption key. In the decrypting security device 41, the encrypted program 43
A verification unit for writing the authentication data at a predetermined position and storing the authentication data. The verification unit compares the authentication data in the program to determine whether or not the program has been correctly decrypted. The security device is characterized in that the security device is verified.

[0005] As a second conventional example, Japanese Patent Application Laid-Open No. 8-315
No. 089 describes an IC card terminal with enhanced security using an IC card. This gazette aims to make it possible to change an encryption system very easily and quickly in an IC card terminal, and to extremely enhance the security of data stored in the IC card. When writing data to the flash memory, the key KEY stored in the flash memory is used.
In addition, when reading data from the IC card, the data is decrypted using the key KEY. And the key K
The change of EY is performed by converting the rewrite program stored in the flash memory into RAM, erasing the original key KEY, and then replacing the data from the host computer with the new key KEY.
It is performed by writing as.

A third conventional example is disclosed in Japanese Patent Application Laid-Open No. 10-20 / 1998.
Japanese Patent Publication No. 778 discloses an encryption device, a decryption device, and an IC card capable of establishing highly reliable security.

According to this publication, the random number generation unit uses the random number generation method selected by the random number generation method selection unit to determine the random number (first secret key) C based on the random number selection information, while the algorithm selection unit Selects a secret key encryption algorithm E based on the algorithm selection information, and further converts a data B to be encrypted into a secret key ciphertext by using a random number C and the algorithm E by a secret key encrypting unit, and performs public key encryption. After the unit converts the random number C and the algorithm selection information into a public key ciphertext, the united ciphertext creating unit creates a united ciphertext of the secret key ciphertext and the public key ciphertext.

Thus, the first secret key to be delivered from the encrypting side (transmitting side) to the decrypting side (receiving side) can be kept secret. Since the random numbers are generated randomly,
The company says that it cannot illegally find the secret key, which makes it possible to establish highly reliable security.

[0009]

However, the above-mentioned prior art has the following problems. The first problem is that there is decryption information that is not encrypted because it is simply compared with an encrypted program. The second problem is that since the decryption information of the ID card is used as it is in the encryption program, it is not easy to change the decryption key from the security management side.

The present invention uses a program encrypted with a secret key and prevents the decryption information of an ID card from being directly used in an encryption program and decrypted even if there is decryption information that is not encrypted. And increase the security effect.

[0011]

The present invention comprises an ID card having a public key, an encrypted ID card processing program, a secret key decryption mechanism for decrypting the ID card processing program, and the ID card. A public key / private key search mechanism for searching for a secret key from a public key.

Further, the present invention provides an ID card slot into which an ID card having a public key is inserted, and
A D card processing program, a secret key decryption mechanism for decrypting the ID card processing program, a public key / private key search mechanism for searching for a secret key from a public key of the ID card, and a public key / private key search mechanism In the ID card security device provided with the public key / private key information table searched by the public key / private key information table, when the ID card having the public key is inserted into the ID card slot,
A secret key search mechanism for searching a secret key corresponding to the public key from the public key / private key information table, and a secret key decryption mechanism for decrypting the ID card processing program and converting it into a non-encrypted program; It operates according to the non-encrypted program.

Further, the present invention provides an ID card, an ID card slot into which an ID card having a public key is inserted,
An encrypted ID card processing program, a secret key decryption mechanism for decrypting the ID card processing program,
A public key for searching for a secret key from the public key of the D card /
ID comprising a secret key search mechanism and a public key / private key information table searched by the public key / secret key search mechanism
In the card security method, when an ID card having the public key is inserted into the ID card slot, the public key / private key search mechanism determines a secret key corresponding to the public key from the public key / private key information table. And the secret key decryption mechanism decrypts the ID card processing program, converts it into a non-encrypted program, and operates according to the non-encrypted program.

The present invention also provides a security system for decrypting a program using a secret key decryption mechanism for decrypting the encrypted program with a secret key searched from a public key. It is intended to provide a configuration capable of maintaining high security.

In addition, the present invention refers to FIG. 1 and, specifically, a program 19 encrypted with a secret key and an ID card for reading an ID card storing a public key for decryption.
In the card reading mechanism 14 and the security device 11 for decrypting the encrypted program 19 using the read public key, when the ID card 18 storing the decrypted public key is read, the public key / private The key retrieval mechanism 16 retrieves the secret key corresponding to the public key from the public key / private key information table 15 stored in advance, and decrypts the program encrypted by the secret key decryption mechanism 17 using the secret key. It is intended to provide an advanced security system configuration characterized in that the security system is configured.

The secret key updating mechanism 13 periodically updates the encryption by updating the secret key linked to the public key. In this way, it is possible to maintain a high security.

[0017]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments according to the present invention will be described.
This will be described in detail with reference to the drawings.

[Configuration of the Embodiment] Referring to FIG.
One embodiment of the ID card security system according to the present invention includes a security device (central processing unit 20; main storage device 19) 11, which operates under program control, an encryption program 12, a secret key updating mechanism 13, and an ID card reading device. Mechanism 14 and public key / private key information table 15
Public key / private key search mechanism 16 and secret key decryption mechanism 1
7, an ID card 18 such as a magnetic card, an optical card, or an IC card, a main storage device 19, and a central processing unit 20.

Each of these means operates as follows. The security device 11 constitutes the entire security system. The encryption program 12 is a program encrypted with a secret key. Secret key update mechanism 13
Is means for updating key information to be decrypted. The ID card reading mechanism 14 is a means for reading ID card data including a public key. The public key / private key information table 15 is an information table in which a secret key corresponding to the public key is registered. The public key / private key search mechanism 16 is means for deriving a secret key from a public key using the public key / private key information table 15. The secret key decryption mechanism 17 is means for decrypting the program encrypted by the encryption program 12. The ID card 18 is information including public key data.

Further, the central processing unit 20 transfers the program of the encryption program 12 to the secret key signal mechanism 17, stores the decrypted program in the main storage device 19, and stores the decrypted program in, for example, an ID card according to the command of the program. It outputs cash from the stored electronic money, extracts the comparison result of the treatment state between the past test result and the current test result at the hospital, calculates the treatment cost from this test result and the therapeutic drug, and charges , And the like.

[Explanation of Operation of the Present Embodiment] Next, referring to the flowcharts of FIGS. 1, 2, 3 and 4,
The overall operation of the present embodiment will be described in detail using a specific example.

FIG. 2 is a flowchart for executing a program which detects a secret key from a public key and encrypts the secret key. First, the ID card 18 is inserted into the card slot of the security device 11, and a public key is read from the ID card 18 by the ID card reading mechanism 14 (Step 201 in FIG. 2). Next, the public key / private key search mechanism 16 searches the public key / private key information table 15 for the secret key from the public key read from the ID card 18, and extracts the corresponding secret key (step 202 in FIG. 2). . Using the secret key extracted by the public key / secret key search mechanism 16, the secret key decryption mechanism 17 transmits the encrypted program 1 via the central processing unit 20.
2 is decrypted (step 203 in FIG. 2). Finally, the central processing unit 20 executes the decrypted program (FIG. 2).
Step 204).

FIG. 3 shows a specific example of searching for a secret key corresponding to a public key and updating the corresponding secret key.

As shown in FIG. 3, a secret key for decryption is created (step 301 in FIG. 3). Next, the public key / private key search mechanism 16 searches the public key / private key information table 15 using the public key corresponding to the secret key to be updated (step 302 in FIG. 3). As a result of the search, the corresponding secret key is extracted, and the secret key to be updated is set at the corresponding position of the public key / private key information table 15 (step 303 in FIG. 3). With this method,
A new encryption can be applied and decrypted without reissuing the ID card 18.

FIG. 4 illustrates a specific example for losing the validity of an ID card due to expiration or loss of the ID card.

First, the public key is read from the ID card 18 by the ID card reading mechanism 14 (step 4 in FIG. 4).
01). Next, the public key / private key search mechanism 16 searches the public key / private key information table 15 for a secret key from the read public key, and extracts the corresponding private key (step 402 in FIG. 4). Here, it is confirmed whether a private key corresponding to the public key exists (step 403 in FIG. 4). If there is a secret key corresponding to the public key, the secret key decryption mechanism 17 decrypts the extracted secret key into the encryption program 12 (step 404 in FIG. 4). Finally, the decrypted program is executed (Step 404 in FIG. 4).

If the secret key corresponding to the public key is not found in the public key / private key information table 15 in step 403, the public key recorded on the ID card 18 cannot be used, and the security device 11 It does not operate and displays that fact on the display device (step 405 in FIG. 4).

In the above embodiment, the purpose of use of the ID card 18 is not described.
The D card can be used for various ID cards such as a telephone card, a train ID card, and a bank ID card. In addition, by inserting the present ID card into the security device 11, the above-mentioned purpose of use is achieved,
The validity of the ID card can be confirmed.

The public key is stored in the ID card, and the security device 11 allows the user to input the public key from a keyboard (not shown), and stores the public key entered by the user and the ID card. By performing the operation according to the above-described embodiment after confirming the agreement with the public key, the user can be confirmed, and a further security effect can be obtained. The same applies to the case where the user has a private key. Assuming that the public key is recorded on the ID card, the public key / private key search mechanism 16 reads the public key / private key from the read public key. The secret key is searched from the secret key information table 15, and the corresponding secret key is extracted (step 402 in FIG. 4). The secret key is compared with the secret key input by the user operation. After confirming that the user is the authenticator, the secret key decryption mechanism 17 converts the encrypted program 12 into a legitimate program, so that the security can be further enhanced.

[0030]

According to the present invention, by providing an ID card with a public key and a security system with a secret key, a secret key for decrypting a program can be updated with security information. Since the secret key corresponding to the public key of the ID card can be invalidated in order to lose the validity of the ID card, an advanced security system can be maintained.

[Brief description of the drawings]

FIG. 1 is a configuration block diagram of a security system of the present invention.

FIG. 2 is an operation flowchart of the security system of the present invention.

FIG. 3 is an operation flowchart of the security system of the present invention.

FIG. 4 is an operation flowchart of the security system of the present invention.

FIG. 5 is an operation flowchart of a conventional security system.

[Explanation of symbols]

 11, 41 security device 12 encryption program 13 secret key update mechanism 14 ID card reading mechanism 15 public key / private key information table 16 public key / private key search mechanism 17 secret key decryption mechanism 18, 45 ID card 19, 49 main memory Apparatus 20, 51 Central processing unit 42 Decryption verification mechanism 43 Encryption program 44 Decryption mechanism

Claims (7)

[Claims] 1. An ID card having a public key, an ID card processing program encrypted with a secret key,
I comprising a secret key decryption mechanism for decrypting a card processing program, and a public key / private key search mechanism for searching for the secret key from a public key of the ID card.
D card security system. 2. The ID card security system according to claim 1, further comprising: a public key / private key information table; and a reading mechanism for reading a public key of said ID card. system. 3. The ID card security system according to claim 1, further comprising a secret key updating mechanism for updating the secret key, and generating an updated secret key for decrypting the encrypted ID card processing program. An ID card security system, wherein a public key corresponding to the updated private key is set in a public key / private key table searched by the public key / private key search mechanism. 4. An ID card slot into which an ID card having a public key is inserted, an encrypted ID card processing program, a secret key decryption mechanism for decrypting the ID card processing program, and a public key possessed by the ID card. An ID card security device comprising: a public key / private key searching mechanism for searching for a secret key from a key; and a public key / private key information table searched by the public key / private key searching mechanism. When an ID card is inserted into the ID card slot, the public key / private key search mechanism searches a secret key corresponding to the public key from the public key / private key information table, and the secret key decryption mechanism determines An ID that decrypts an ID card processing program, converts it into a non-encrypted program, and operates according to the non-encrypted program. Over de security apparatus. 5. The ID card security device according to claim 4, further comprising a secret key updating mechanism for updating the secret key, and generating an updated secret key for decrypting the encrypted ID card processing program. An ID card security device, wherein a public key corresponding to the updated private key is set in a public key / private key table searched by the public key / private key search mechanism. 6. An ID card, an ID card slot into which an ID card having a public key is inserted, and an encrypted ID card.
A D card processing program, a secret key decryption mechanism for decrypting the ID card processing program, a public key / private key search mechanism for searching for a secret key from a public key of the ID card, and a public key / private key search mechanism And a public key / private key information table searched by a public key / private key information table, wherein when the ID card having the public key is inserted into the ID card slot, the public key / private key search mechanism performs the public key / private key search. A secret key corresponding to the public key is searched from a key / private key information table, and the secret key decryption mechanism decrypts the ID card processing program, converts the ID card processing program into a non-encrypted program, and operates according to the non-encrypted program. An ID card security method comprising: 7. The ID card security method according to claim 6, wherein said ID card is further inserted into said ID card slot and compared with a public key designated by a user. An ID card security method comprising: searching for an ID card.