Master security device, operator device, client security device, operation authority setting method, computer-readable storage medium, and security system

Abstract

To provide a master security device capable of setting operation authority including an access right without a password.SOLUTION: A master security device according to an embodiment comprises an input interface, a memory, a processor, and an output interface. The input interface inputs operator identification information associated with operator device identification information. The memory stores the operator identification information. The processor generates verifiable credentials including an operation permission level including access rights to a client security device and device identification information for the client security device. The output interface outputs the tombstones to the operator device based on the operator identification information.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] FIELD Embodiments of the present invention relate to a master security device, an operator device, a client security device, an operation authority setting method, a computer-readable storage medium, and a security system. [Background technology]

[0002] HSMs (Hardware Security Modules) are known for performing cryptographic operations securely. HSMs allow access rights to be set by roles such as administrator, cryptographic operator, and user, or by user ID. In security evaluations based on FIPS (Federal Information Processing Standard) 140-3, to achieve level 3 or higher, HSMs must be able to set access rights by user ID. In such cases, accounts and passwords have typically been used. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] International Publication No. 2023 / 248474 [Patent Document 2] Japanese Patent Publication No. 2023-121312 [Patent Document 3] Japanese Patent Publication No. 2022-108594 [Patent Document 4] Japanese Patent Application Publication No. 2019-125214 Summary of the Invention [Problem to be solved by the invention]

[0004] When access rights are set by user ID in an HSM, the user must remember the password that was set, but this password can be easily forgotten. Also, users who use multiple HSMs must remember multiple sets of accounts and passwords, and there is a demand for reducing the burden of password management.

[0005] The problem to be solved by the present invention is to provide a master security device, an operator device, a client security device, an operation authority setting method, a computer-readable storage medium, and a security system that enable setting of operation authority without a password. [Means for solving the problem]

[0006] In one embodiment, a master security device includes an input interface, a memory, a processor, and an output interface. The input interface receives an operator identification associated with an operator device identification. The memory stores the operator identification. The processor generates verifiable credentials including an operation privilege level including access rights to a client security device and device identification information for the client security device. The output interface outputs the credentials to the operator device based on the operator identification information. [Brief explanation of the drawings]

[0007] [Figure 1] FIG. 1 is a conceptual diagram showing an example of a security system according to an embodiment. [Figure 2] FIG. 2 is a block diagram illustrating an example of a security system according to the embodiment. [Figure 3] FIG. 3 is a diagram showing an example of the data structure of a VC and a VP according to the embodiment. [Figure 4] FIG. 4 is a sequence diagram illustrating an example of a registration process of operator information according to the embodiment. [Figure 5]FIG. 5 is a sequence diagram illustrating an example of a VC generation process according to the embodiment. [Figure 6] FIG. 6 is a sequence diagram illustrating an example of an operator public key registration process according to the embodiment. [Figure 7] FIG. 7 is a sequence diagram showing an example of a signature verification process and an authorization process according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0008] Hereinafter, embodiments will be described with reference to the drawings. Fig. 1 is a conceptual diagram showing an example of a security system according to an embodiment, and Fig. 2 is a block diagram showing an example of a security system according to an embodiment.

[0009] As shown in Figures 1 and 2, the security system according to the embodiment comprises a master security device (Master SD) 1 called an Issuer, an operator device (Operator D) 2 called a Holder, a client security device (Client SD) 3 called a Verifier, and a repository 4 called a Verifiable Data Registry.

[0010] The master SD1 can be realized by a computer. The master SD1 includes a master hardware security module (master HSM) 10. The master HSM 10 includes a processor 11, a memory 12, an input interface 13, an output interface 14, and the like.

[0011] The processor 11 generates verifiable credentials. Verifiable credentials are abbreviated as VC. For example, VC includes multiple sets corresponding to multiple clients SD3, and a predetermined set includes an operation authority level including the access rights of a predetermined client SD3. In other words, VC allows the operation authority level including the access rights of multiple clients SD3 to be individually set.

[0012] The memory 12 stores programs etc. The processor 11 operates based on the programs stored in the memory 12. For example, the memory 12 stores a program for generating a VC.

[0013] The input interface 13 is a communication interface or the like, and receives data transmitted from an external device via a network and inputs the data to the processor 11 .

[0014] The output interface 14 is a communication interface or the like, and transmits data or the like generated by the processor 11 to an external device via a network. For example, the output interface 14 transmits VC or the like generated by the processor 11 to an external device.

[0015] The operator D2 can be realized by a portable computer or the like. For example, the operator D2 may be a smartphone or an IC card. The operator D2 includes an operator hardware module (operator HM) 20. The operator HM 20 includes a processor 21, a memory 22, an input interface 23, an output interface 24, and the like.

[0016] The processor 21 generates a verifiable presentation based on the VC transmitted from the master SD1. The verifiable presentation is abbreviated as VP.

[0017] The memory 22 stores programs etc. The processor 21 operates based on the programs stored in the memory 22. For example, the memory 22 stores a program for generating a VP from a VC.

[0018] The input interface 23 is a communication interface or the like, and receives data transmitted from an external device via a network and inputs the data to the processor 21. The input interface 23 receives a VC transmitted from the master SD1.

[0019] The output interface 24 is a communication interface and a display, etc., and transmits data generated by the processor 21 to an external device via a network, and also displays images (two-dimensional codes, etc.) based on the data generated by the processor 21.

[0020] The input interface 23 and the output interface 24 may include interfaces that comply with various short-range wireless communication standards, such as Near Field Communication (NFC), Bluetooth (registered trademark), and ISO / IEC 14443.

[0021] The client SD3 can be realized by a computer, etc. The client SD3 includes a client hardware security module (client HSM) 30. The client HSM 30 includes a processor 21, a memory 22, an input interface 23, an output interface 24, etc.

[0022] In this embodiment, the security system includes multiple clients SD3, and the VC transmitted from one master SD1 indirectly controls the operation authority level, including the access rights, of these multiple clients SD3. In other words, the VP transmitted from one operator D2 directly controls the operation authority level, including the access rights, of these multiple clients SD3.

[0023] The processor 31 acquires an operation authority level including an access right based on the VP transmitted from the operator D2, and sets the operation authority level.

[0024] The memory 32 stores programs etc. The processor 31 operates based on the programs stored in the memory 32.

[0025] The input interface 33 is a communication interface, an optical reader, etc., and receives data transmitted from an external device via a network, reads displayed images (such as two-dimensional codes), and inputs the received or read data to the processor 31.

[0026] The output interface 34 is a communication interface or the like, and transmits data generated by the processor 31 to an external device via a network.

[0027] The input interface 33 and the output interface 34 may include interfaces that comply with various short-range wireless communication standards, such as NFC and Bluetooth.

[0028] For example, repository 4 is formed by a group of computers connected to a network, and repository 4 manages public keys and the like using a blockchain. Repository 4 includes a data registry module (data RM) 40. Data RM 40 includes a processor 41, a memory 42, an input interface 43, an output interface 44, and the like.

[0029] The processor 41 stores the public key transmitted from the master SD1 and the public key transmitted from the operator D2 in the blockchain. The memory 42 stores programs, etc. The input interface 33 and the output interface 34 are communication interfaces, etc.

[0030] FIG. 3 is a diagram showing an example of the data structure of a VC and a VP according to the embodiment. The master SD1 generates a VC. The operator D2 generates a VP from the VC.

[0031] The VC includes multiple sets corresponding to multiple clients SD3. Each set includes an operation authority level including access rights for each client SD3, and device identification information for each client SD3. Details are as follows:

[0032] For example, one set included in the VC includes operation authority management information. The operation authority management information includes operator identification information (operator identification code, operator name, operator image, etc.), HSM operation authority level including access rights, target HSM identification information, operation authority start date and time, and operation authority end date and time. Furthermore, one set included in the VC includes administrator public key identification information and administrator digital signature. The master SD1 generates an administrator key pair including an administrator private key and an administrator public key, and generates an administrator digital signature encrypted with the administrator private key. The administrator public key identification information is information that identifies the administrator public key.

[0033] The VP includes the above-mentioned VC, and further includes an operator public key identification information and an operator digital signature. The operator D2 generates an operator key pair including an operator private key and an operator public key, and generates an operator digital signature encrypted with the operator private key. The operator public key identification information is information that identifies the operator public key.

[0034] Just as VCs are made up of multiple sets, VPs are also made up of multiple sets. One set of VPs includes one set of VCs, operator public key identification information, and operator digital signature.

[0035] By configuring multiple sets of VCs and VPs, one set corresponds to one client SD3. In other words, one set controls the operation authority level including the access rights of one client SD3. In other words, by generating a VC including multiple sets, the master SD1 can individually control the operation authority level including the access rights of multiple clients SD3.

[0036] FIG. 4 is a sequence diagram illustrating an example of a registration process of operator information according to the embodiment. The administrator device is a personal computer or smartphone equipped with a processor, memory, an interface, etc. The interface is an IC card reader. The administrator device reads official IC card information from an official IC card issued by a public institution (ST101). The official IC card is a My Number card, etc.

[0037] The administrator device outputs the read official IC card information to the master SD1 via a network or the like (ST102).

[0038] The input interface 13 of the master SD1 inputs the official IC card information output from the administrator device via a network, etc. Furthermore, the output interface 14 of the master SD1 outputs the official IC card information to the validation server via a network, etc. (ST103).

[0039] The verification server inputs the official IC card information, queries the database, and verifies the official IC card information. If the verification server successfully verifies the input official IC card information (ST104), it outputs the verification result (success) to the master SD1 via a network or the like (ST105). The verification result may include information about the official institution based on the official IC card information.

[0040] The input interface 13 of the master SD1 inputs the verification result via a network or the like, and the processor 11 registers the operator information included in the official IC card information in the memory 12 (ST106). The operator information includes operator identification information. The input interface 13 of the master SD1 also accepts operator device identification information, and the processor 11 associates the operator device identification information with the operator information and registers them.

[0041] FIG. 5 is a sequence diagram illustrating an example of a VC generation process according to the embodiment. The administrator device outputs operation authority management information to the master SD1 via a network or the like (ST201). The operation authority management information includes operator identification information, an HSM operation authority level including access rights, target HSM identification information, operation authority start date and time, and operation authority end date and time.

[0042] The input interface 13 of the master SD1 inputs the operation authority management information. The memory 12 stores the operation authority management information. The processor 11 generates an administrator private key from a random number, and generates an administrator public key from the administrator private key. That is, the processor 11 generates an administrator key pair including the administrator private key and the administrator public key (ST202).

[0043] The processor 11 stores the administrator private key in the memory 12 (ST203).

[0044] The output interface 14 outputs the administrator public key and the administrator public key identification information to the repository 4 (ST204).

[0045] The input interface 43 of the repository 4 inputs the administrator public key and the administrator public key identification information, and the processor 41 registers the administrator public key and the administrator public key identification information in the blockchain (ST205).

[0046] The processor 11 extracts at least a portion of the target data included in the operation authority management information and generates a hash value from the extracted target data. For example, the processor 11 generates a hash value from at least a portion of the target data of the operator identification information. The processor 11 encrypts the hash value of the target data with the administrator private key to generate an administrator digital signature (ST206).

[0047] The processor 11 generates a VC including the operation authority management information, the administrator public key identification information, and the administrator digital signature (ST207).

[0048] The processor 11 acquires operator device identification information associated with the operator information based on the operator information included in the operator authority management information. The output interface 14 outputs a VC to a predetermined operator D2 based on the operator device identification information associated with the operator identification information (ST208).

[0049] The input interface 23 of the operator D2 inputs the VC, and the memory 22 stores the VC.

[0050] FIG. 6 is a sequence diagram illustrating an example of an operator public key registration process according to the embodiment. The output interface 14 of the master SD1 outputs the operator identification information to the operator D2 (ST301).

[0051] The input interface 23 of the operator D2 receives the operator identification information output from the master SD1, and the memory 22 stores the operator identification information.

[0052] The processor 21 generates an operator private key from the random number, and generates an operator public key from the operator private key. That is, the processor 21 generates an operator key pair including an operator private key and an operator public key (ST302).

[0053] The processor 21 stores the operator private key in the memory 22 (ST303).

[0054] The output interface 24 outputs the operator public key and the operator public key identification information to the master SD1 (ST304).

[0055] The input interface 13 of the master SD1 inputs the operator public key and the operator public key identification information, and the output interface 14 outputs the operator public key and the operator public key identification information to the repository 4 (ST305).

[0056] The input interface 43 of the repository 4 inputs the operator public key and the operator public key identification information, and the processor 41 registers the administrator public key and the administrator public key identification information in the blockchain (ST306).

[0057] FIG. 7 is a sequence diagram showing an example of a signature verification process and an authorization process according to the embodiment. The input interface 23 of the operator D2 receives the VC from the master SD1 (ST208), and the processor 21 generates a hash value from at least a part of the target data of the operator identification information. The processor 11 encrypts the hash value of the target data with the operator private key to generate an administrator digital signature (ST401).

[0058] The processor 21 generates a VP including the VC and the administrator's digital signature (ST402). The memory 22 stores the VP as a log.

[0059] The output interface 24 outputs the VP to the client SD3 (ST403). For example, the output interface 24 transmits the VP to the client SD3 via a network. Alternatively, the output interface 24 transmits the VP to the client SD3 by short-range wireless communication conforming to various short-range wireless communication standards. Alternatively, the output interface 24 displays an image (such as a two-dimensional code) corresponding to the VP.

[0060] The input interface 33 of the client SD3 inputs the VP. For example, the input interface 33 receives the VP via a network. Alternatively, the input interface 33 receives the VP via short-range wireless communication conforming to various short-range wireless communication standards. Alternatively, the input interface 33 optically reads an image (such as a two-dimensional code) corresponding to the VP.

[0061] The VP includes a VC, and the VC includes the administrator public key identification information and the operator public key identification information. The output interface 34 outputs the request including the administrator public key identification information and the request including the operator public key identification information to the repository 4 (ST404).

[0062] The input interface 43 of the repository 4 inputs a request including the administrator public key identification information and a request including the operator public key identification information, and the processor 41 acquires the administrator public key corresponding to the administrator public key identification information from the blockchain, and also acquires the operator public key corresponding to the operator public key identification information from the blockchain. The output interface 44 outputs the administrator public key and the operator public key to the client SD3 (ST405).

[0063] The input interface 33 of the client SD3 receives the administrator public key and the operator public key.

[0064] Processor 31 decrypts the administrator digital signature included in the VC in the VP with the administrator public key to generate a hash value. Processor 31 also extracts at least a portion of the target data included in the operation authority management information and generates a hash value from the extracted target data. Processor 31 compares the two hash values ​​to verify the administrator digital signature (ST406). Processor 31 determines whether the verification of the administrator digital signature was successful if the two hash values ​​match, and determines whether the verification of the administrator digital signature was unsuccessful if the two hash values ​​do not match.

[0065] Processor 31 also decrypts the operator's digital signature included in the VP with the operator's public key to generate a hash value. Processor 31 also extracts at least a portion of the target data included in the operation authority management information and generates a hash value from the extracted target data. Processor 31 compares the two hash values ​​to verify the operator's digital signature (ST407). Processor 31 determines whether the verification of the operator's digital signature is successful based on whether the two hash values ​​match, and determines whether the verification of the operator's digital signature is unsuccessful based on whether the two hash values ​​do not match.

[0066] Based on the successful verification of the administrator's electronic signature and the operator's electronic signature, the processor 31 sets an operation authority level, including the access right, based on the authority start date and time and the authority end date and time included in the VC (ST408). The processor 31 also compares a previously acquired blacklist with the operation eye examination management information included in the VC, and if the operator identification information is included in the blacklist, restricts the operation authority, including the access right. For example, the access right includes access information (such as an operator identification code) based on the operator identification information. After the operation authority level is set, when the input interface 33 inputs the access information, the processor 31 compares the access information included in the operation authority with the input access information, and determines whether the access is permitted based on a match between the two, or whether the access is not permitted based on a match between the two.

[0067] According to this embodiment, the master SD1 issues a VC to an operator D2, and the operator D2 issues a VP to the client SD3, with the operator's digital signature added to the issued VC. The client SD3 verifies the administrator's digital signature included in the VC and the operator's digital signature included in the VP, and sets an operation authority level including access rights based on the VC output from the master SD1. This provides a mechanism that allows the client SD3 to be used at the correct operation authority level without requiring a password or the like.

[0068] Furthermore, since the VC includes multiple sets corresponding to multiple clients SD3, the master SD1 can control the operation authority including the access rights of multiple clients SD3 through the VC.

[0069] Furthermore, the master SD1 can set different levels of authority for each target client SD3 by generating a VC by pairing an operation authority level including access rights with the target HSM identification number.

[0070] Furthermore, by storing the VP as a log, the client SD3 can identify the person (device) who has granted the operation authority from the log.

[0071] Furthermore, the master SD1 transmits a VC to the operator D2, and the operator D2 transmits a VP to the client SD3, thereby enabling online maintenance of the client SD3.

[0072] By using an official IC card containing the four pieces of information, name, address, date of birth, and gender, the master SD1 can issue a VC containing the four pieces of information. This allows the identity of the operator of the client SD3 to be verified easily and reliably.

[0073] The program according to this embodiment may be transferred in a state stored in an electronic device such as the master SD1, the operator D2, or the client SD3, or may be transferred without being stored in the electronic device. In the latter case, the program may be transferred via a network or in a state stored in a storage medium. The storage medium is a non-transitory tangible medium. The storage medium is a computer-readable medium. The storage medium may be any medium, such as an optical disk or a memory card, that can store a program and is readable by a computer, and its form is not important. The electronic device downloads the program transferred (provided) via a network and installs it in its memory, or reads the program from the storage medium and installs it in its memory.

[0074] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims. [Explanation of symbols]

[0075] 1...Master Security Device (Master SD) 2...Operator device (operator D) 3...Client Security Device (Client SD) 4. Repository 10...Master Hardware Security Module (Master HSM) 11...Processor 12...Memory 13...Input interface 14...Output interface 20...Operator hardware module (operator HM) 21...Processor 22...Memory 23...Input interface 24...Output interface 30...Client Hardware Security Module (Client HSM) 31...Processor 32...Memory 33...Input interface 34...Output interface 40...Data Registry Module (Data RM) 41...Processor 42...Memory 43...Input interface 44...Output interface

Claims

1. an input interface for inputting operator identification information associated with the operator device identification information; a memory for storing the operator identification information; a processor for generating verifiable credentials including an operational privilege level including access rights to a client security device and a device identity of said client security device; an output interface that outputs the credentials to an operator device based on the operator identification information; A master security device comprising:

2. the processor generates an administrator key pair including an administrator public key and an administrator private key, generates an administrator digital signature from the operator identification information using the administrator private key, and generates the credentials including the administrator digital signature; The master security device of claim 1 , wherein the output interface outputs the administrator public key to a server for storage in a blockchain.

3. 2. The master security device of claim 1, wherein the credentials include the operator identification information, an authorization start date and time, and an authorization end date and time.

4. the credentials include a plurality of sets corresponding to a plurality of client security devices; 10. The master security device of claim 1, wherein each set includes an operating authority level for each client security device and device identification information for each client security device.

5. an operator device that receives operator identification information and verifiable credentials output from a master security device and outputs a verifiable presentation to a client security device, an input interface for inputting the credentials from the master security device, the credentials including an operation authority level including access rights to the client security device and device identification information of the client security device; a memory for storing said credentials; a processor that generates an operator key pair including an operator public key and an operator private key, generates an operator digital signature from the operator identification information using the operator private key, and generates a verifiable presentation including the credentials and the operator digital signature; an output interface for outputting the presentation to the client security device; An operator device comprising:

6. the processor generates a two-dimensional code corresponding to the presentation; The operator device of claim 5 , wherein the output interface displays the two-dimensional code.

7. The operator device of claim 5 , wherein the output interface is an interface that complies with a short-range wireless communication standard.

8. a client security device that receives a verifiable presentation output from an operator device and is granted an operation authority level including access rights based on the presentation, the operator device receives the verifiable credentials output from the master security device, generates an operator key pair including an operator public key and an operator private key, generates an operator digital signature using the operator private key, and generates the verifiable presentation including the credentials and the operator digital signature; the master security device generates an administrator key pair including an administrator public key and an administrator private key, generates an administrator digital signature using the administrator private key, and generates the credentials including an operation authority level for the client security device, device identification information of the client security device, and the administrator digital signature; the client security device, an input interface for inputting the presentation; a memory for storing said presentation; a processor that verifies the administrator digital signature and the operator digital signature included in the presentation, and grants an operation authority level based on information included in the presentation if the verification is successful; A client security device comprising:

9. The master security device outputs the administrator public key to a server to store the administrator public key in a blockchain; The operator device outputs the operator public key to the server to store the operator public key in a blockchain; the input interface inputs the administrator public key and the operator public key from the blockchain; 9. The client security device of claim 8, wherein the processor verifies the administrator digital signature based on the administrator public key and verifies the operator digital signature based on the operator public key.

10. inputting operator identification information associated with the operator device identification information; storing the operator identification information; generating verifiable credentials including an operational privilege level including access rights to a client security device and a device identity for said client security device; outputting the credentials to an operator device based on the operator identification information; Operation permission output method.

11. On the computer, inputting operator identification information associated with the operator device identification information; storing the operator identification information; generating verifiable credentials including an operational privilege level, including access rights to a client security device, and a device identity for said client security device; and a computer-readable storage medium storing a program for executing a procedure for outputting the credentials to an operator device based on the operator identification information.

12. 1. A security system comprising a master security device, an operator device, and a client security device, The master security device a first input interface for inputting operator identification information associated with the operator device identification information; a first memory that stores the operator identification information; a first processor that generates an administrator key pair including an administrator public key and an administrator private key, generates an administrator digital signature using the administrator private key, and generates verifiable credentials including an operation authority level including access rights to the client security device, device identification information of the client security device, and the administrator digital signature; a first output interface configured to output the credentials to an operator device based on the operator identification information; Equipped with The operator device a second input interface for inputting the credentials from the master security device, the credentials including an operation authority level including an access right for the client security device and device identification information for the client security device; a second memory for storing said credentials; a second processor that generates an operator key pair including an operator public key and an operator private key, generates an operator digital signature from the operator identification information using the operator private key, and generates a verifiable presentation including the credentials and the operator digital signature; a second output interface for outputting the presentation to the client security device; Equipped with the client security device, a third input interface for inputting the presentation; a third memory for storing said presentation; a third processor that verifies the administrator digital signature and the operator digital signature included in the presentation, and grants an operation authority level based on information included in the presentation if the verification is successful; A security system comprising:

Images