Portable electronic equipment and IC card

Abstract

To provide portable electronic equipment capable of saving consumption of NVM (nonvolatile memory), and an IC card.SOLUTION: Portable electronic equipment comprises an information storage part that keeps at least one piece of bio-information for authentication processing secret and stores it, and a cryptographic key generation part that generates a cryptographic key by using the bio-information in accordance with predetermined instructions.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a portable electronic device and an IC card. [Background technology]

[0002] 2. Description of the Related Art Portable electronic devices such as IC cards (smart cards) incorporating an IC (Integrated Circuit) chip have been widely used in the past.

[0003] Patent Document 1 discloses a technique for encrypting or decrypting data using an encryption key (private key) used for encrypted communication, signatures, etc., which is registered in the NVM (non-volatile memory) of an IC card. Patent Document 1 also discloses a technique for registering biometric information for fingerprint authentication in the NVM of an IC card.

[0004] In terms of IC card security, measures against quantum computers are required, such as quantum-computer-resistant cryptography and the registration of longer cryptographic keys, etc. In addition, the capacity of the NVM of an IC card is small, making it difficult to register multiple pieces of biometric information and cryptographic keys. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2020-46778 A Summary of the Invention [Problem to be solved by the invention]

[0006] An object of the present invention is to provide a portable electronic device and an IC card capable of saving consumption of NVM (non-volatile memory). [Means for solving the problem]

[0007] The portable electronic device of the embodiment includes an information storage unit that stores in secret at least one piece of biometric information for authentication processing, and an encryption key generation unit that generates an encryption key using the biometric information in response to a specified instruction. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a block diagram illustrating an example of the configuration of an encryption system according to the first embodiment. [Diagram 2] FIG. 2 is a diagram showing an example of the configuration of a fingerprint table. [Diagram 3] FIG. 3 is a diagram showing an example of the format of a command for generating an encryption key. [Figure 4] FIG. 4 is a diagram showing an example of the parameter byte P2 of the signature generation command. [Diagram 5] FIG. 5 is a diagram showing an example of a normal response to the signature generation request command. [Figure 6] FIG. 6 is a diagram illustrating an example of an abnormal response to a signature generation request command. [Figure 7] FIG. 7 is a functional block diagram showing functions realized by the processor of the IC card. [Figure 8] FIG. 8 is a diagram showing an example of a format of an encryption key (RSA private key). [Figure 9] FIG. 9 is a sequence diagram showing an outline of an encryption key generation operation when the encryption function is used. [Figure 10] FIG. 10 is a flowchart showing the flow of an encryption key generation process when the encryption function is used. [Figure 11] FIG. 11 is a sequence diagram illustrating an outline of an encryption key generating operation in response to a specific command according to the second embodiment. [Figure 12] FIG. 12 is a flowchart showing the flow of an encryption key generation process in response to a specific command. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, embodiments will be described with reference to the drawings.

[0010] (First embodiment) 1 is a block diagram showing a configuration example of a cryptographic system 100 according to a first embodiment. The cryptographic system 100 according to the embodiment encrypts or decrypts data using a predetermined algorithm. Here, the cryptographic system 100 encrypts (signs) data or decrypts encrypted data using OpenPGP (Pretty Good Privacy). The cryptographic system 100 according to the embodiment generates a cryptographic key using at least one or more pieces of biometric information for authentication processing, and encrypts or decrypts data, as will be described in detail later.

[0011] 1, the encryption system 100 includes a host PC (Personal Computer) 1, an IC (Integrated Circuit) card 2 as a portable electronic device, and a reader / writer 11. The host PC 1 is connected to the reader / writer 11. The reader / writer 11 is also connected to the IC card 2. Note that the encryption system 100 may include other components as necessary in addition to the components shown in FIG. 1, and certain components may be excluded from the encryption system 100.

[0012] The host PC 1 controls the entire cryptographic system 100 .

[0013] For example, the host PC 1 obtains data to be encrypted (e.g., data to be signed) via a network or the like. The host PC 1 transmits the data to be encrypted to the IC card 2 via the reader / writer 11. The host PC 1 also receives the data encrypted by the IC card 2 (e.g., signed data) via the reader / writer 11.

[0014] Furthermore, the host PC 1 acquires the encrypted data via a network or the like. The host PC 1 transmits the encrypted data to the IC card 2 via the reader / writer 11. The host PC 1 receives the data decrypted by the IC card 2 via the reader / writer 11.

[0015] The reader / writer 11 is an interface device for transmitting and receiving data to and from the IC card 2. The reader / writer 11 is configured with an interface according to the communication method of the IC card 2. For example, if the IC card 2 is a contact-type IC card, the reader / writer 11 is configured with a contact section for physically and electrically connecting to a contact section of the IC card 2. Also, if the IC card 2 is a non-contact-type IC card, the reader / writer 11 is configured with an antenna for wireless communication with the IC card 2, a communication control section, and the like.

[0016] With this configuration, the reader / writer 11 performs tasks such as supplying power to the IC card 2, activating (starting up) the IC card 2, supplying a clock, performing reset control, sending various commands, and receiving responses to the sent commands, based on control by the host PC 1.

[0017] The IC card 2 encrypts data or decrypts encrypted data under the control of the host PC 1.

[0018] The IC card 2 has a card-shaped main body C made of plastic or the like. The IC card 2 has an IC module M built into the main body C. The IC module M is formed integrally with an IC chip Ca, a communication unit 25, an MPU (Micro Processing Unit) 26, and a fingerprint sensor 27 connected together, and is embedded in the main body C of the IC card 2.

[0019] 1, the IC module M includes an IC chip Ca, a communication unit 25, an MPU 26, and a fingerprint sensor 27. The IC chip Ca includes a processor 21, a ROM (Read Only Memory) 22, a RAM (Random Access Memory) 23, and an NVM (Non-Volatile RAM) 24. The processor 21 is connected to the ROM 22, the RAM 23, the NVM 24, and the communication unit 25 via a data bus or the like. The communication unit 25 is connected to the MPU 26 via a data bus or the like. The MPU 26 is connected to the fingerprint sensor 27 via a data bus or the like.

[0020] The IC card 2 may include components as necessary in addition to the components shown in FIG. 1, and certain components (such as the fingerprint sensor 27) may be excluded from the IC card 2.

[0021] The processor 21 functions as a control unit that controls the entire IC card 2. The processor 21 performs various processes based on control programs and control data stored in the ROM 22 or the NVM 24. For example, the processor 21 executes a program stored in the ROM 22 to control the operation of the IC card 2 or to perform various processes according to the operating mode of the IC card 2.

[0022] For example, the processor 21 may be a processor that executes a program to control each unit in the IC card 2 and perform information processing. Some of the various functions that the processor 21 executes the program may be realized by a hardware circuit. In this case, the processor 21 controls the functions executed by the hardware circuit.

[0023] The ROM 22 is a non-volatile memory that stores control programs, control data, etc. in advance. The ROM 22 is incorporated into the IC card 2 in a state in which the control programs, control data, etc. are stored during the manufacturing stage. That is, the control programs and control data stored in the ROM 22 are incorporated in advance according to the specifications of the IC card 2.

[0024] The RAM 23 is a volatile memory. The RAM 23 temporarily stores data being processed by the processor 21. For example, the RAM 23 functions as a calculation buffer, a reception buffer, and a transmission buffer. The calculation buffer temporarily holds the results of various arithmetic operations executed by the processor 21. The reception buffer holds command data received from the reader / writer 11 via the communication unit 25. The transmission buffer holds messages (response data) to be transmitted to the reader / writer 11 via the communication unit 25. .

[0025] The NVM 24 is configured by a non-volatile memory such as a flash ROM to which data can be written and rewritten. The NVM 24 stores control programs, applications, and various data according to the operational use of the IC card 2. For example, program files and data files are created in the NVM 24. The control programs and various data are written in each created file.

[0026] The NVM 24 also stores a fingerprint table, etc. The fingerprint table will be described later.

[0027] The communication unit 25 is an interface for transmitting and receiving data to and from the reader / writer 11. In other words, the communication unit 25 is an interface for transmitting and receiving data to and from the host PC 1 through the reader / writer 11.

[0028] When the IC card 2 is realized as a contact-type IC card, the communication unit 25 is composed of a communication control unit and a contact unit for transmitting and receiving signals by physically and electrically contacting the reader / writer 11. For example, the IC card 2 is activated by receiving an operating power supply and an operating clock from the reader / writer 11 via the contact unit.

[0029] When the IC card 2 is realized as a contactless IC card, the communication unit 25 is composed of a communication control unit such as a modulation / demodulation circuit for wireless communication with the reader / writer 11, and an antenna. For example, the IC card 2 receives radio waves from the reader / writer 11 via an antenna and a modulation / demodulation circuit. The IC card 2 is activated by generating operating power and an operating clock from the radio waves using a power supply unit (not shown).

[0030] The communication unit 25 is an interface for transmitting and receiving data to and from the MPU 26. The communication unit 25 acquires fingerprint matching results and the like through the MPU 26.

[0031] MPU 26 processes the fingerprint image from fingerprint sensor 27. For example, MPU 26 performs a matching process on the fingerprint image from fingerprint sensor 27. That is, MPU 26 determines whether the fingerprint image matches preset fingerprint information. MPU 26 transmits the matching result to processor 21 through communication unit 25. For example, MPU 26 transmits information indicating the fingerprint information that matches the fingerprint image (such as a fingerprint ID, which will be described later) to processor 21.

[0032] The fingerprint sensor 27 acquires a fingerprint image from a user's finger. For example, the fingerprint sensor 27 includes a CCD (Charge Coupled Device) sensor. The fingerprint sensor 27 transmits the fingerprint image to the MPU .

[0033] The fingerprint sensor 27 may extract features from the fingerprint image and generate fingerprint information indicating the features. The fingerprint sensor 27 may transmit the generated fingerprint information to the MPU .

[0034] Next, the fingerprint table will be described.

[0035] The fingerprint table stores fingerprint information that is registered in advance for matching a fingerprint image input to the fingerprint sensor 27. Fig. 2 is a diagram showing an example of the configuration of the fingerprint table.

[0036] As shown in FIG. 2, the fingerprint table stores a "fingerprint ID" and "fingerprint information" in association with each other.

[0037] The "fingerprint ID" is an identifier that identifies pre-registered fingerprint information. Here, the "fingerprint ID" is a numerical value.

[0038] "Fingerprint information" is fingerprint information that is registered in advance for matching with a fingerprint image from fingerprint sensor 27. "Fingerprint information" indicates the fingerprint to be registered. For example, "fingerprint information" indicates features extracted from a fingerprint image. Note that "fingerprint information" may be a fingerprint image. The configuration of "fingerprint information" is not limited to a specific configuration. In the example shown in FIG. 2, "fingerprint information" with a "fingerprint ID" of "1" is fingerprint information of the thumb of a registrant. "Fingerprint information" with a "fingerprint ID" of "2" is fingerprint information of the index finger of a registrant.

[0039] The fingerprint table is stored in advance in the NVM 24. The fingerprint table (fingerprint information) stored in the NVM 24 as an information storage unit is biometric information. The fingerprint table (fingerprint information) stored in the NVM 24 is secret information, like an encryption key registered in a conventional NVM.

[0040] For example, the host PC 1 transmits a command for generating a fingerprint table to the IC card 2 through the reader / writer 11. The processor 21 of the IC card 2 obtains a fingerprint image of a registrant through the fingerprint sensor 27 in accordance with the command. After obtaining the fingerprint image, the processor 21 generates fingerprint information from the fingerprint image. After generating the fingerprint information, the processor 21 generates a fingerprint table using the generated fingerprint information and stores the fingerprint table in the NVM 24.

[0041] The processor 21 may obtain fingerprint information from the MPU 26. The processor 21 may generate fingerprint information of a plurality of fingers to generate a fingerprint table. The processor 21 may update the fingerprint table according to a command from the host PC 1. The fingerprint table may be stored in the MPU 26.

[0042] In addition, the host PC 1 transmits a command for generating an encryption key to the IC card 2 through the reader / writer 11. Along with the command, the host PC 1 transmits information for generating an encryption key (such as the encryption key length and exp specification) and a fingerprint ID to the IC card 2.

[0043] Fig. 3 is a diagram showing an example of the format of a command for generating an encryption key. The example shown in Fig. 3 is a command that uses an existing encryption function and has an added function.

[0044] 3 is, for example, a command message for a signature generation command. The format of this command message is defined by ISO / IEC 7816-4 and is composed of CLA (class byte), INS (instruction byte), P1 (parameter byte), P2 (parameter byte), Lc, Data, and Le.

[0045] 4 is a diagram showing an example of the parameter byte P2 of the signature generation command. As shown in FIG 4, various parameters can be specified as the parameter byte P2.

[0046] In this embodiment, for example, parameters such as "use generated encryption key" and "generate and use encryption key" are specified.

[0047] The "Generate and use encryption key" parameter makes it possible to specify the biometric information to be used to generate the encryption key. In the example shown in FIG. 4, multiple pieces of biometric information (fingerprint feature points, facial feature points) are registered. When multiple pieces of biometric information are registered, the biometric information to be used to generate the encryption key can be selected based on a command. For example, the command "10000001" specifies fingerprint feature points as the biometric information to be used to generate the encryption key. The command "10000010" specifies facial feature points as the biometric information to be used to generate the encryption key.

[0048] Lc is called the Lc field, and Data is called the Data field. Random number data required for processing is set in the Data field. A data length indicating the length of the random number data in the Data field is set in the Lc field. For example, in authentication processing, authentication data required for processing is set in the Data field, and an authentication data length indicating the length of the authentication data is set in the Lc field.

[0049] Le is called the Le field. The Le field is set with the maximum length of data returned from the IC card 2. When "00" is set in the Le field, the data length set in the Lc field is specified.

[0050] Fig. 5 is a diagram showing an example of a normal response to a signature generation request command. When the IC card 2 executes the signature generation request command normally, it transmits a normal response as shown in Fig. 5 to the host PC 1 via the reader / writer 11. When the IC card 2 does not execute the signature generation request command normally, it transmits an abnormal response (see Fig. 6) to the host PC 1 via the reader / writer 11.

[0051] More specifically, when the IC card 2 normally executes the signature generation request command, it transmits a response including the signature data and a status word (e.g., "9000") indicating normal completion to the host PC 1 via the reader / writer 11, as shown in Fig. 5. The status word indicating normal completion is called a normal completion status word.

[0052] Fig. 6 is a diagram showing an example of an abnormal response to a signature generation request command. When the signature generation request command cannot be executed normally, the IC card 2 transmits a response including a status word (e.g., "zzzz") indicating an abnormal end to the host PC1 via the reader / writer 11, as shown in Fig. 6.

[0053] The processor 21 of the IC card 2 generates an encryption key based on the biometric information (fingerprint feature points) in accordance with the command "10000001."

[0054] Next, there will be described functions realized by the processor 21 of the IC card 2. The functions realized by the IC card 2 are realized by the processor 21 executing a program stored in the ROM 22, the NVM 24, or the like.

[0055] 7 is a functional block diagram showing functions realized by the processor 21 of the IC card 2. As shown in FIG 7, the processor 21 of the IC card 2 includes a fingerprint image acquisition unit 211, a matching unit 212, an encryption key generation unit 213, and an encryption and decryption unit 214.

[0056] The fingerprint image acquisition unit 211 has a function of acquiring a fingerprint image using the fingerprint sensor 27 .

[0057] It is assumed here that the IC card 2 is set in the reader / writer 11 and is in a state in which data can be transmitted and received between the IC card 2 and the host PC 1.

[0058] The host PC 1 transmits, via the reader / writer 11, to the IC card 2 an authentication request command instructing authentication based on a fingerprint.

[0059] The fingerprint image acquiring unit 211 receives the authentication request command via the communication unit 25. Upon receiving the authentication request command, the fingerprint image acquiring unit 211 activates the fingerprint sensor 27.

[0060] Here, it is assumed that the user places his / her finger on fingerprint sensor 27 to input a fingerprint.

[0061] The fingerprint image acquisition unit 211 acquires a fingerprint image through the fingerprint sensor 27 .

[0062] Furthermore, the matching unit 212 has a function of matching the acquired fingerprint image with pre-registered fingerprint information.

[0063] For example, the collation unit 212 performs the collation process using the MPU 26 .

[0064] MPU 26 acquires a fingerprint image through fingerprint sensor 27. After acquiring the fingerprint image, MPU 26 compares the fingerprint image with each piece of fingerprint information in the fingerprint table. For example, MPU 26 generates fingerprint information indicating fingerprint characteristics from the fingerprint image. After generating the fingerprint information, MPU 26 compares the generated fingerprint information with each piece of fingerprint information in the fingerprint table.

[0065] If there is any fingerprint information that has been successfully matched, the MPU 26 transmits to the matching unit 212 a fingerprint ID indicating that fingerprint information.

[0066] Furthermore, if there is no fingerprint information that has been successfully matched, the MPU 26 transmits to the matching unit 212 information indicating that the matching has failed.

[0067] Moreover, the encryption key generating unit 213 has a function of generating an encryption key corresponding to fingerprint information that has been successfully matched.

[0068] Here, Fig. 8 is a diagram showing an example of the format of an encryption key (RSA private key). As shown in Fig. 8, the encryption key generation unit 213 of this embodiment converts a part or the whole of biometric information (fingerprint minutiae) using specific data and a specific encryption algorithm to generate an encryption key. The specific data is, for example, binary data. The specific encryption algorithm is, for example, an algorithm that inserts specific data at the end.

[0069] The specific data is generated when the IC card 2 is manufactured and stored in the NVM 24 .

[0070] The specific data may be generated each time from when the IC card 2 is started to when processing of a command that uses the encryption function begins.

[0071] The method of generating the encryption key is not limited to the above, and a part or the whole of the biometric information may be used as a random number to generate the encryption key (for example, a private key for elliptic curve cryptography).

[0072] As described above, the encryption key generation unit 213 of this embodiment generates an encryption key using a unique command (a command that uses an encryption function (adding a function to an existing function)).

[0073] In addition, the encryption and decryption unit 214 has a function of encrypting predetermined data or decrypting encrypted data using the generated encryption key.

[0074] For example, the host PC 1 transmits, via the reader / writer 11, a processing command to the IC card 2 to encrypt predetermined data.

[0075] The encryption and decryption unit 214 receives the processing command through the communication unit 25. Upon receiving the processing command, the encryption and decryption unit 214 encrypts the predetermined data using the generated encryption key. After encrypting the predetermined data, the encryption and decryption unit 214 transmits the encrypted predetermined data to the host PC 1 through the reader / writer 11.

[0076] Furthermore, the host PC 1 transmits, via the reader / writer 11, a processing command to the IC card 2 for decrypting the encrypted data.

[0077] The encryption and decryption unit 214 receives the processing command through the communication unit 25. Upon receiving the processing command, the processor 21 decrypts the encrypted data using the generated encryption key. After decrypting the encrypted data, the encryption and decryption unit 214 transmits the decrypted data to the host PC 1 through the reader / writer 11.

[0078] Next, a description will be given of an example of the operation of the IC card 2. Here, it is assumed that the IC card 2 is set in the reader / writer 11 and is in a state in which it can transmit and receive data to and from the host PC 1.

[0079] Here, Fig. 9 is a sequence diagram showing an outline of an encryption key generation operation when an encryption function is used. The example shown in Fig. 9 is an example in which a function is added to a command that uses an existing encryption function.

[0080] The host PC 1 transmits a processing command (signature generation command) for encrypting predetermined data to the IC card 2 via the reader / writer 11 (step S101). Fingerprint minutiae are designated as biometric information to be used for generating an encryption key as P2 (parameter byte) of the signature generation command.

[0081] When the IC card 2 receives the signature generation command via the reader / writer 11, it generates an encryption key from fingerprint minutiae (step S102), and generates signature data (step S103).

[0082] The IC card 2 transmits the generated signature data and a normal status word, which means that the encryption key generation has ended normally, to the host PC 1 via the reader / writer 11 (step S104).

[0083] Here, the encryption key generation in step S102 will be described in detail.

[0084] Fig. 10 is a flowchart showing the flow of encryption key generation processing when using the encryption function. As shown in Fig. 10, the IC card 2 accepts a command input (step S11). The IC card 2 determines whether a command using the encryption function (signature generation command) has been input (step S12).

[0085] When the IC card 2 determines that a command that uses the encryption function (signature generation command) has not been input (No in step S12), the IC card 2 proceeds to another command processing routine.

[0086] On the other hand, if the IC card 2 determines that a command that uses the encryption function (signature generation command) has been input (Yes in step S12), it determines whether encryption key generation is necessary (step S13).

[0087] When the IC card 2 determines that encryption key generation is not necessary (No in step S13), the process proceeds to a command processing routine that uses the encryption function.

[0088] On the other hand, if the IC card 2 determines that encryption key generation is necessary (Yes in step S13), it determines whether or not biometric information (fingerprint feature points) specified in P2 of the signature generation command is present (step S14).

[0089] If the IC card 2 determines that the biometric information (fingerprint feature points) specified in P2 of the signature generation command does not exist (No in step S14), it sends a status word meaning an abnormality in P2 of the signature generation command to the host PC1 via the reader / writer 11 (step S15) and returns to step S11.

[0090] On the other hand, if the IC card 2 determines that the biometric information (fingerprint features) specified in P2 of the signature generation command is present (Yes in step S14), it generates an encryption key from the fingerprint features (step S16), transmits a status word indicating normal completion to the host PC 1 via the reader / writer 11 (step S17), and proceeds to a command processing routine that uses the encryption function.

[0091] As described above, the IC card 2 of the present embodiment does not prevent the execution of processing according to commands that do not use encryption functions when generating an encryption key, whereas commands that use encryption functions are processed after completing the generation of the encryption key.

[0092] As described above, according to this embodiment, by generating an encryption key using pre-stored biometric information, the storage area of ​​NVM (non-volatile memory) used to register an encryption key in the conventional technology is not required, thereby saving consumption of NVM (non-volatile memory).

[0093] Second embodiment Next, a second embodiment will be described.

[0094] The second embodiment differs from the first embodiment in that the encryption key is generated by a command that uses an encryption function, in that the encryption key is generated by a specific command (a command for generating the encryption key). In the following description of the second embodiment, the description of the same parts as in the first embodiment will be omitted, and only the differences from the first embodiment will be described.

[0095] Fig. 11 is a sequence diagram showing an outline of an encryption key generation operation in response to a specific command according to the second embodiment. In this embodiment, the encryption key is generated by a specific command (a command for generating an encryption key). The specific command is, for example, the command received first after the IC card 2 outputs an initial response. The encryption key is generated before the target command is processed. In the following, a key generation command for a public key cryptosystem will be described as an example of the specific command.

[0096] The host PC 1 transmits a key generation command for the public key cryptography to the IC card 2 via the reader / writer 11 (step S201). As P2 (parameter byte) of the key generation command for the public key cryptography, fingerprint minutiae are specified as biometric information to be used for generating the encryption key.

[0097] When the IC card 2 receives the key generation command for the public key cryptosystem via the reader / writer 11, it generates an encryption key from fingerprint minutiae (step S202).

[0098] When the IC card 2 generates the encryption key, it transmits a normal status word, which means that the encryption key generation has ended normally, to the host PC 1 via the reader / writer 11 (step S203).

[0099] When the IC card 2 receives the normal status word, it transmits a signature generation command to the IC card 2 via the reader / writer 11 (step S204).

[0100] When the IC card 2 receives the signature generation command, it generates signature data (step S205).

[0101] The IC card 2 transmits the generated signature data and a normal status word, which means that the signature data generation has ended normally, to the host PC 1 via the reader / writer 11 (step S206).

[0102] Here, the encryption key generation in step S202 will be described in detail.

[0103] Fig. 12 is a flowchart showing the flow of encryption key generation processing in response to a specific command. As shown in Fig. 12, the IC card 2 accepts a command input (step S21). The IC card 2 determines whether a key generation command for a public key cryptosystem has been input (step S22).

[0104] If the IC card 2 determines that a key generation command for a public key cryptosystem has not been input (No in step S22), the IC card 2 proceeds to another command processing routine.

[0105] On the other hand, if the IC card 2 determines that a key generation command for the public key cryptography has been input (Yes in step S22), it determines whether biometric information (fingerprint features) specified in the key generation command for the public key cryptography is present (step S23).

[0106] If the IC card 2 determines that the biometric information (fingerprint features) specified in the key generation command for the public key cryptography does not exist (No in step S23), it transmits a status word meaning that the specified biometric information (fingerprint features) does not exist to the host PC 1 via the reader / writer 11 (step S24), and returns to step S21.

[0107] On the other hand, if the IC card 2 determines that the biometric information (fingerprint features) specified in the key generation command for the public key cryptography is present (Yes in step S23), it generates an encryption key from the fingerprint features (step S25), transmits a status word indicating normal completion to the host PC 1 via the reader / writer 11 (step S26), and returns to step S21.

[0108] As described above, according to this embodiment, by generating an encryption key using pre-stored biometric information, the storage area of ​​NVM (non-volatile memory) used to register an encryption key in the conventional technology is not required, thereby saving consumption of NVM (non-volatile memory).

[0109] In each embodiment, the IC card 2 is provided with the fingerprint sensor 27, but the present invention is not limited to this. The host PC 1 or the reader / writer 11 may be provided with the fingerprint sensor 27.

[0110] In addition, in each embodiment, fingerprint features are used as biometric information, but the present invention is not limited to this, and authentication processing may be performed using biometric information other than fingerprint features. For example, the processor 21 of the IC card 2 may perform authentication processing using biometric information such as iris, veins, voiceprint, or face features.

[0111] In the first embodiment, the encryption key is generated by a command that uses the encryption function, and in the second embodiment, the encryption key is generated by a specific command (a command for generating the encryption key), but this is not limiting. For example, the encryption key may be generated in the background immediately after the IC card 2 is set in the reader / writer 11 and is ready to transmit and receive data to and from the host PC 1 (in other words, after the IC card 2 is started up).

[0112] Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and spirit of the invention, and are included in the scope of the invention and its equivalents described in the claims. [Explanation of symbols]

[0113] 2 Portable electronic devices, IC cards 24 Information storage section 213 Encryption key generation section MIC Module

Claims

1. an information storage unit that stores at least one piece of biometric information for authentication processing in a confidential manner; an encryption key generation unit that generates an encryption key using the biometric information in response to a predetermined instruction; A portable electronic device comprising:

2. the encryption key generation unit converts a part or the whole of the biometric information using a specific algorithm to generate the encryption key; 2. The portable electronic device of claim 1.

3. the encryption key generation unit converts a part or the whole of the biometric information and specific data using a specific algorithm to generate the encryption key; 2. The portable electronic device of claim 1.

4. The specific data is generated at the time of manufacturing the portable electronic device and stored in the information storage unit.

4. The portable electronic device according to claim 3.

5. The specific data is generated each time from when the portable electronic device is turned on until when processing of a command using a cryptographic function is started.

4. The portable electronic device according to claim 3.

6. the encryption key generation unit generates an encryption key using the biometric information in accordance with a command that uses an encryption function; 2. The portable electronic device of claim 1.

7. the encryption key generation unit generates an encryption key using the biometric information in accordance with a specific command for generating an encryption key; 2. The portable electronic device of claim 1.

8. The specific command is the command received first after the portable electronic device outputs an initial response.

8. The portable electronic device according to claim 7.

9. When a plurality of pieces of biometric information are registered in the information storage unit, the encryption key generation unit is configured to select, based on a command, the biometric information to be used for generating the encryption key.

2. The portable electronic device of claim 1.

10. the encryption key generation unit generates the encryption key in the background after the portable electronic device is started up; 2. The portable electronic device of claim 1.

11. the encryption key generation unit does not prevent execution of a process according to a command that does not use an encryption function when generating the encryption key; 2. The portable electronic device of claim 1.

12. An IC card comprising a card body having an embedded IC module, The IC module includes: an information storage unit that stores at least one piece of biometric information for authentication processing in a confidential manner; an encryption key generation unit that generates an encryption key using the biometric information in response to a predetermined instruction; An IC card comprising:

Images