Authentication system, authentication method, authentication device, and program

Abstract

To provide an authentication system, an authentication method, an authentication device, and a program capable of accurately verifying the authenticity of a terminal.SOLUTION: An authentication system according to the present disclosure is provided with a terminal having a storage unit for storing a device certificate generated based on identifier information of the terminal itself and a platform certificate generated based on hardware configuration information of the terminal itself and the device certificate, and a verification system for verifying the validity of each of the device certificate and the platform certificate.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to an authentication system, an authentication method, an authentication device, and a program. [Background technology]

[0002] Security risks are increasing in supply chains, such as production, shipping, and logistics, due to the replacement of hardware or software installed in terminals or the installation of backdoors. Therefore, it is necessary to verify the authenticity of a procured terminal when using it for the first time. For example, Patent Document 1 proposes a system that verifies the authenticity of a terminal through device authentication using a terminal identifier and a digital certificate. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2020-113928 Summary of the Invention [Problem to be solved by the invention]

[0004] However, the verification system disclosed in Patent Document 1 can verify the authenticity of a terminal identifier, but cannot verify the authenticity of the configuration information of the hardware and software installed on the terminal. For example, even if a terminal is replaced with an expansion board such as a PCI Express board with a backdoor installed, as long as the digital certificate stored in the terminal remains valid, the terminal will be determined to be normal and authentication will be performed, which is a problem. Therefore, it is necessary to verify not only the authenticity of the terminal identifier, but also the authenticity of the configuration information of the hardware and software installed on the terminal. [Means for solving the problem]

[0005] The authentication system according to the present disclosure comprises a terminal having a memory unit for storing a device certificate generated based on the terminal's own identifier information and a platform certificate generated based on the terminal's own hardware configuration information and the device certificate, and a verification system for verifying the validity of each of the device certificate and the platform certificate.

[0006] The authentication method according to the present disclosure includes the steps of generating a device certificate and a platform certificate by a production system, storing the device certificate and the platform certificate in a memory unit provided in a terminal, verifying the validity of the device certificate by comparing the device certificate stored in the memory unit with identifier information stored in a database, and, after the validity of the device certificate has been verified, verifying the validity of the platform certificate by comparing the platform certificate stored in the memory unit with hardware configuration information stored in the database, wherein the device certificate is generated based on the identifier information of the terminal, and the platform certificate is generated based on the device certificate and the hardware configuration information of the terminal.

[0007] The authentication device according to the present disclosure includes a means for verifying the validity of a device certificate generated based on identifier information of a connected terminal and stored in a memory unit provided in the terminal, and a means for verifying the validity of a platform certificate generated based on the device certificate and hardware configuration information of the terminal and stored in the memory unit.

[0008] The program disclosed herein causes a computer to generate a device certificate and a platform certificate using a production system, store the device certificate and the platform certificate in a memory unit provided in a terminal, verify the validity of the device certificate by comparing the device certificate stored in the memory unit with identifier information stored in a database, and, after the validity of the device certificate has been verified, verify the validity of the platform certificate by comparing the platform certificate stored in the memory unit with hardware configuration information stored in the database, wherein the device certificate is generated based on the identifier information of the terminal, and the platform certificate is generated based on the device certificate and the hardware configuration information of the terminal. [Effects of the Invention]

[0009] The present disclosure makes it possible to provide an authentication system, an authentication method, an authentication device, and a program that can accurately verify the authenticity of a terminal. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is a block diagram illustrating an example of an authentication system according to the present disclosure. [Figure 2] FIG. 2 is a block diagram illustrating another example of an authentication system according to the present disclosure. [Figure 3] FIG. 3 is an explanatory diagram illustrating an example of a trust chain of certificates held in the storage unit. [Figure 4] FIG. 4 is a sequence diagram showing an example of generating a digital certificate during production of a terminal according to the present disclosure. [Figure 5] FIG. 5 is a sequence diagram showing an example of terminal authentication when a terminal according to the present disclosure is locally procured. [Figure 6] FIG. 6 is a sequence diagram showing an example of a configuration check method when a terminal according to the present disclosure is locally procured. [Figure 7]FIG. 7 is a block diagram illustrating another example of an authentication system according to the present disclosure. [Figure 8] FIG. 8 is a sequence diagram showing another example of generation of a digital certificate during production of a terminal according to the present disclosure. [Figure 9] FIG. 9 is a sequence diagram showing another example of terminal authentication when a terminal according to the present disclosure is locally procured. [Figure 10] FIG. 10 is a block diagram showing an example of a hardware configuration that realizes the authentication function of the authentication device according to the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0011] <Preliminary review by the inventor> Supply chain issues have increased security risks, such as the replacement of hardware and software installed on devices during storage in warehouses or during logistics. In particular, threats such as malicious changes to hardware configurations (such as adding or removing boards) and the installation of backdoors in devices via the supply chain have become a problem.

[0012] Until now, users who acquired devices through the supply chain were unable to confirm at the start of using the device that the device had been manufactured, shipped, and delivered in an authentic state. As a result, there was a possibility that the user might be operating a device that had been tampered with, switched, or spoofed.

[0013] This disclosure makes it possible to detect cyberattacks across the entire supply chain, from terminal production to the start of operation. Therefore, when a terminal starts operation, the possibility of using an unauthorized terminal, such as tampering, substitution, or spoofing, can be reduced, and the authenticity of the terminal can be guaranteed.

[0014] <First Embodiment> An example of an authentication system will be described below with reference to Fig. 1. Fig. 1 is a block diagram showing an example of an authentication system according to the present disclosure. The authentication system 1 is a system related to the supply chain of a terminal 10. In the present disclosure, the supply chain is a general term for processes including production, inspection, inventory management, logistics, and operation of the terminal 10. The authentication system 1 includes the terminal 10 and a verification system 11.

[0015] The terminal 10 is a personal computer, tablet, smartphone, or other information terminal that is delivered to a user via a supply chain and operated by the user. The terminal 10 includes a storage unit 101, which is, for example, a tamper-resistant security chip. The storage unit 101 stores a device certificate 102 and a platform certificate 103 (hereinafter, referred to as the PF certificate 103).

[0016] The device certificate 102 is an electronic certificate generated based on the identifier information of the terminal 10 itself. The device certificate 102 is generated when the terminal 10 is manufactured.

[0017] The PF certificate 103 is an electronic certificate generated based on hardware configuration information of the terminal 10 itself and the device certificate 102. The hardware configuration information is information relating to the configuration of hardware installed in the terminal 10, such as a CPU (Central Processing Unit) or a motherboard. Like the device certificate 102, the PF certificate 103 is generated when the terminal 10 is manufactured. The PF certificate 103 is an electronic certificate linked to the device certificate 102. Therefore, by verifying the legitimacy of the device certificate 102 and the PF certificate 103, the authentication system 1 can authenticate the terminal 10 by linking it to the hardware configuration information installed in the terminal 10.

[0018] The verification system 11 is a system that verifies that the terminal 10 has been delivered to the user in an authentic state through the supply chain. In other words, the user can use the verification system 11 to confirm that the terminal 10 is a normal terminal that has not been switched or spoofed, for example. The verification system 11 verifies the legitimacy of each of the device certificate 102 and the PF certificate 103. By verifying the legitimacy of the device certificate 102, the verification system 11 can detect, for example, switching or spoofing of the terminal 10. Furthermore, by verifying the legitimacy of the PF certificate 103, the verification system 11 can detect replacement of hardware installed in the terminal 10 or changes to configuration information. Therefore, the user of the terminal 10 can become aware of fraud before starting operation of the terminal 10.

[0019] As described above, according to the first embodiment, by verifying the validity of the device certificate 102 and the PF certificate 103 linked to the device certificate 102, it is possible to verify the authenticity of the terminal that has reached the user via the supply chain.

[0020] <Embodiment 2> Configuring the authentication system Another example of an authentication system will be described below with reference to Fig. 2. Fig. 2 is a block diagram showing another example of an authentication system according to the present disclosure.

[0021] The authentication system 1 includes a terminal 10, a verification system 11, a production system 12, a business system 13, and a database 14. The authentication system 1 may be an authentication device including the verification system 11, the production system 12, the business system 13, and the database 14. When the terminal 10 is produced, the production system 12 generates a digital certificate required to verify the authenticity of the terminal 10. The generated digital certificate is stored in the terminal 10, and each piece of information used to generate the digital certificate is stored in the database 14. Then, after the terminal 10 is delivered to the user, the verification system 11 verifies the authenticity of the terminal 10. The verification of the authenticity of the terminal 10 is performed through a device authentication sequence and a configuration check sequence. The verification system 11 verifies the authenticity of the terminal 10 by comparing the digital certificate stored in the terminal 10 with the information used to generate the digital certificate stored in the database 14. If the authenticity of the terminal 10 is recognized, the terminal 10 is authorized to use the business system 13.

[0022] The terminal 10 corresponds to the terminal 10 of the first embodiment. The terminal 10 includes a storage unit 101. The storage unit 101 is a tamper-resistant security chip. More specifically, the storage unit 101 is a chip called a TPM (Trusted Platform Module), and can perform encryption and decryption, signature creation and verification, and digital certificate storage by itself. The storage unit 101 stores a device certificate 102, a platform certificate 103 (hereinafter, PF certificate 103), a storage unit certificate 104, an application certificate 105, and an AIK certificate (Attestation Identity Keys certificate) 106.

[0023] The storage unit certificate 104 is stored in the storage unit 101 before it is installed in the terminal 10. If the storage unit 101 is a TPM, the storage unit certificate 104 is called an EK certificate (Endorsement Key certificate). The storage unit certificate 104 is an electronic certificate generated by the manufacturer of the storage unit 101 and is uniquely assigned to each storage unit 101. The manufacturer of the storage unit 101 generates an asymmetric key internally for each storage unit 101, issues a storage unit certificate 104 for that key, and stores it in the storage unit 101.

[0024] The device certificate 102 is generated by the production system 12 when the terminal 10 is produced, and is stored in the storage unit 101. The device certificate 102 is generated based on the identifier information of the terminal 10 itself and the storage unit certificate 104.

[0025] Like the device certificate 102, the PF certificate 103 is generated by the production system 12 when the terminal 10 is produced, and is stored in the storage unit 101. The PF certificate 103 is generated based on the hardware configuration information of the terminal 10 itself and the device certificate 102.

[0026] After the terminal 10 is delivered to the user, the application certificate 105 is generated by the verification system 11 in a device authentication sequence for verifying the legitimacy of the terminal 10, and is stored in the storage unit 101. The application certificate 105 is then used in a configuration check sequence, as will be described in detail later.

[0027] Similar to the application certificate 105, the AIK certificate 106 is generated by the verification system 11 in the device authentication sequence for verifying the legitimacy of the terminal 10 after the terminal 10 is delivered to the user, and is stored in the storage unit 101. The AIK certificate 106 is a digital certificate derived from the storage unit certificate 104. The AIK certificate 106 is used to identify the storage unit 101 in place of the storage unit certificate 104 in the configuration check sequence. Details will be described later.

[0028] 3 is an explanatory diagram showing an example of a trust chain of digital certificates held in a storage unit. The device certificate 102 is a digital certificate linked to the storage unit certificate 104. The PF certificate 103 is a digital certificate linked to the device certificate 102 and the storage unit certificate 104. The AIK certificate 106 is a digital certificate linked to the storage unit certificate 104. In other words, the device certificate 102, the PF certificate 103, the storage unit certificate 104, and the AIK certificate 106 form a trust chain starting from the storage unit certificate 104. Trust is guaranteed by the storage unit certificate 104, which is the starting point of the trust chain.

[0029] Returning to the explanation of Fig. 2, the production system 12 is a system that generates the device certificate 102 and the PF certificate 103 when producing the terminal 10. Then, the production system 12 transmits the generated device certificate 102 and PF certificate 103 to the terminal 10. The production system 12 includes a receiving unit 121, a transmitting unit 122, and a certificate issuing unit 123.

[0030] The receiving unit 121 receives a certificate signing request (hereinafter, CSR), hardware configuration information, and Golden Measurement from the terminal 10. The CSR includes a public key stored in the storage unit 101 and identifier information of the terminal 10. The CSR is also signed with a private key stored in the storage unit 101. The Golden Measurement is a record of the activation state of the hardware and software at the time of production of the terminal 10, using a hash value or the like.

[0031] The certificate issuing unit 123 generates a certificate based on the information received by the receiving unit 121 from the terminal 10. The certificate issuing unit 123 generates a device certificate 102 based on the CSR, and generates a PF certificate 103 based on the CSR and hardware configuration information.

[0032] The transmitting unit 122 transmits the device certificate 102 and the PF certificate 103 generated by the certificate issuing unit 123 to the terminal 10. The transmitting unit 122 also transmits the identifier information, hardware configuration information, and Golden Measurement of the terminal 10 to the database 14.

[0033] The database 14 stores information used by the verification system 11 to verify the legitimacy of the terminal 10. The database 14 stores the identifier information, hardware configuration information, and Golden Measurement of the terminal 10 received from the transmission unit 122 of the production system 12 during production of the terminal 10. Furthermore, during verification in the on-site procurement process of the terminal 10 after the terminal 10 has been delivered to the user via the supply chain, the database 14 stores information related to the application certificate 105 generated by the verification system 11 (hereinafter, application authentication information).

[0034] The verification system 11 corresponds to the verification system 11 of the first embodiment. The verification system 11 is a system that verifies that the terminal 10 has been delivered to the user in an authentic state through the supply chain. After the terminal 10 is delivered to the user, the verification system 11 is always connected in the on-site procurement process at the start of use. If the verification system 11 can verify the legitimacy of the terminal 10, it authorizes the terminal 10 to use the business system 13.

[0035] The verification system 11 includes a receiving unit 111 , a transmitting unit 112 , a certificate issuing unit 113 , and a verifying unit 114 .

[0036] The receiving unit 111 receives the device certificate 102, the PF certificate 103, the storage unit certificate 104, the application certificate 105, the AIK certificate 106, and software configuration information from the terminal 10. In addition, the receiving unit 121 receives the identifier information, hardware configuration information, and Golden Measurement of the terminal 10 from the database 14.

[0037] The certificate issuing unit 113 generates an application certificate 105 and an AIK certificate 106 .

[0038] The transmitting unit 112 requests an electronic certificate from the terminal 10, notifies the terminal 10 of the authentication result, etc. The transmitting unit 112 also requests information necessary for verification from the database 14. The transmitting unit 112 transmits the application certificate 105 and the AIK certificate 106 generated by the certificate issuing unit 113 to the terminal 10.

[0039] The verification unit 114 verifies the legitimacy of the terminal 10 by comparing the digital certificate and software configuration information received from the terminal 10 with the information stored in the database 14. The verification method will be described in detail later.

[0040] Authentication Method Next, an example of the processing of the authentication system will be explained. The processing of the authentication system is made up of three sequences.

[0041] 4 is a sequence diagram showing an example of generating a digital certificate during the production of a terminal according to the present disclosure. This sequence is executed before shipping of the terminal 10. In this sequence, the production system 12 generates a digital certificate required for authentication and stores information required to verify the validity of the digital certificate in the database 14.

[0042] First, the terminal 10 generates hardware configuration information (step S101). In this step, the terminal 10 collects information about the hardware installed in the terminal 10, and generates the hardware configuration information based on the collected information. The information about the hardware may include, for example, the version, manufacturer, serial number, settings, and status of the hardware.

[0043] Next, the terminal 10 issues a CSR (step S102). The CSR includes the public key stored in the storage unit 101 and identifier information of the terminal 10. The CSR is also signed with the private key stored in the storage unit 101.

[0044] Next, the terminal 10 transmits the CSR, the hardware configuration information, and the Golden Measurement to the production system 12 (step S103).

[0045] Next, the production system 12 transmits the identifier information, hardware configuration information, and Golden Measurement to the database 14 (step S104). The identifier information is information included in the CSR. The database 14 stores this information received from the production system 12.

[0046] Next, the production system 12 generates the device certificate 102 and the PF certificate 103 (step S105). Then, the production system 12 transmits the generated device certificate 102 and PF certificate 103 to the terminal 10 (step S106). The terminal 10 stores the device certificate 102 and the PF certificate 103 in the storage unit 101.

[0047] After the digital certificate generation sequence during production is completed, the terminal 10 is packaged and shipped. The terminal 10 is then delivered to the user via the supply chain. After being delivered to the user, the terminal 10 is turned on in the on-site procurement process at the start of operation. Once the terminal 10 is activated, it is always connected to the verification system 11.

[0048] 5 is a sequence diagram showing an example of terminal authentication when a terminal according to the present disclosure is procured on-site. In this sequence, when the verification system 11 receives a connection from the terminal 10, it performs terminal authentication and authenticates that the access is from the terminal 10 for which the production system 12 has generated and sent a certificate. If the terminal authentication is successful, an encrypted communication path between the terminal 10 and the verification system 11 is established.

[0049] First, the terminal 10 generates hardware configuration information (step S201). In this step, similar to step S101, the terminal 10 collects information about the hardware installed in the terminal 10, and generates the hardware configuration information based on the collected information.

[0050] Next, the terminal 10 verifies the PF certificate 103 (step S202). More specifically, the terminal 10 compares the hardware configuration information at the time of production of the terminal 10, which is included in the PF certificate 103 stored in the storage unit 101, with the hardware configuration information generated in step S201. The PF certificate 103 is stored in the storage unit 101, which is a tamper-resistant security chip, and is therefore not subject to tampering. Therefore, if the hardware configuration information generated in step S201 differs from the hardware configuration information at the time of production of the terminal 10, which is included in the PF certificate 103, it is considered that the hardware installed in the terminal 10 has been tampered with or replaced, for example, in the supply chain. If the verification of the PF certificate 103 fails, the terminal 10 is denied use of the business system 13, and the subsequent steps are not executed.

[0051] Next, the terminal 10 transmits the device certificate 102, the PF certificate 103, and the verification result of the PF certificate 103 to the verification system (step S203). Then, the verification system 11 requests the identifier information and the hardware configuration information from the database 14 (step S204). Then, the database 14 transmits the identifier information and the hardware configuration information to the verification system 11 (step S205).

[0052] Next, the verification system 11 performs terminal authentication (step S206). More specifically, the verification system 11 verifies the legitimacy of the device certificate 102 and PF certificate 103 received from the terminal 10, and checks the verification result of the PF certificate 103 in step S202. The verification system 11 verifies the legitimacy of the device certificate 102 stored in the terminal 10 by comparing the identifier information included in the device certificate 102 received from the terminal 10 with the identifier information stored in the database. The verification system 11 also verifies the legitimacy of the PF certificate 103 stored in the terminal 10 by comparing the hardware configuration information included in the PF certificate 103 received from the terminal 10 with the hardware configuration information stored in the database.

[0053] If the terminal authentication fails, the terminal 10 is denied access to the business system 13, and subsequent steps are not executed. If the terminal authentication is successful, an encrypted communication path is established between the terminal 10 and the verification system 11. In the subsequent steps in this sequence, communication between the terminal 10 and the verification system 11 uses the encrypted communication path.

[0054] Next, the verification system 11 notifies the terminal 10 of the success of the authentication (step S207), and the terminal 10 then transmits the storage unit certificate 104 to the verification system 11 (step S208).

[0055] Next, the verification system 11 verifies the storage unit certificate 104 (step S209). The storage unit certificate 104 is issued by a certification authority, which is a trusted third party, and is digitally signed by the certification authority's private key. Therefore, the verification system 11 verifies the validity of the public key included in the storage unit certificate 104 by verifying the signature using a CA (Certification Authority) certificate issued by the certification authority. The CA certificate may be provided by, for example, but is not limited to, the manufacturer of the storage unit 101.

[0056] Next, the verification system 11 generates the application certificate 105 and the AIK certificate 106 (step S210). The application certificate 105 is an electronic certificate for proving that the validity of the device certificate 102 and the PF certificate 103 received from the terminal 10 has been successfully verified, and that there is no problem with the verification result of the PF certificate 103 in step S202. The terminal 10 performs terminal authentication using the application certificate 105, and can communicate with the verification system 11 using an encrypted communication path. The AIK certificate 106 is an electronic certificate derived from the storage certificate 104. The AIK certificate 106 is used to identify the storage 101 instead of the storage certificate 104 in the next configuration check sequence. Using the AIK certificate 106 can prevent the storage certificate 104 from being leaked to the outside.

[0057] Next, the verification system 11 transmits the application certificate 105 and the AIK certificate 106 to the terminal 10 (step S210). Furthermore, the verification system 11 transmits application authentication information to the database 14 (step S211). The application authentication information is information necessary for authentication using the application certificate 105. The terminal 10 stores the application certificate 105 and the AIK certificate 106 received from the verification system 11. Furthermore, the database 14 stores the application authentication information received from the verification system 11.

[0058] 6 is a sequence diagram showing an example of a method for checking the configuration of a terminal when the terminal is procured on-site, according to the present disclosure. In this sequence, the verification system 11 verifies the state of the hardware and software installed in the terminal 10.

[0059] First, the terminal 10 transmits the application certificate 105 to the verification system 11 (step S301). Then, the verification system 11 requests application authentication information from the database 14 (step S302). Then, the database 14 transmits the application authentication information to the verification system 11 (step S303).

[0060] Next, the verification system 11 performs terminal authentication (step S304). More specifically, the verification system 11 verifies the validity of the application certificate 105 received from the terminal 10. The verification system 11 verifies the validity of the application certificate 105 stored in the terminal 10 by comparing the information included in the application certificate 105 received from the terminal 10 with the application authentication information stored in a database. If the terminal authentication fails, the terminal 10 is denied access to the business system 13, and subsequent steps are not executed. If the terminal authentication is successful, an encrypted communication path is established between the terminal 10 and the verification system 11. In the subsequent steps in this sequence, communication between the terminal 10 and the verification system 11 uses an encrypted communication path.

[0061] Next, the verification system 11 notifies the terminal 10 of the successful authentication and executes remote attestation (step S305). Remote attestation is a technique for verifying the validity of the activation state of the hardware and software installed in the terminal 10.

[0062] Next, the terminal 10 transmits the result of the remote attestation to the verification system 11 (step S306). The information transmitted as the result of the remote attestation includes at least software configuration information and an AIK certificate 106. The software configuration information is information about the running state of the software. The result of the remote attestation is signed with the AIK.

[0063] Next, the verification system 11 requests the Golden Measurement from the database 14 (step S307). Then, the database 14 transmits the Golden Measurement to the verification system 11 (step S308).

[0064] Next, the verification system 11 verifies the software configuration (step S309). The remote attestation result received from the terminal 10 includes current software configuration information. The Golden Measurement received from the database 14 includes software configuration information at the time of production of the terminal 10. Therefore, by comparing the software configuration information of the terminal 10 connected to the verification system 11 with the software configuration information stored in the database 14, it can be verified that the software installed in the terminal 10 connected to the verification system 11 has not been tampered with or replaced, for example. If the verification of the software configuration fails, the terminal 10 is denied access to the business system 13, and subsequent steps are not executed.

[0065] Next, the verification system 11 requests the PF certificate 103 from the terminal 10 (step S310). Then, the terminal 10 transmits the PF certificate 103 to the verification system 11 (step S311). Then, the verification system 11 requests hardware configuration information from the database 14 (step S312). Then, the database 14 transmits the hardware configuration information to the verification system 11 (step S313).

[0066] Next, the verification system 11 verifies the hardware configuration (step S314). The verification system 11 verifies the hardware configuration by verifying the validity of the PF certificate 103. More specifically, the verification system 11 verifies the validity of the PF certificate 103 stored in the terminal 10 by comparing the hardware configuration information included in the PF certificate 103 received from the terminal 10 with the hardware configuration information stored in the database. By verifying the validity of the PF certificate 103 of the terminal 10 connected to the verification system 11, it can be verified that the hardware installed in the terminal 10 connected to the verification system 11 has not been tampered with or replaced, for example. If the verification of the hardware configuration is successful, the verification system 11 authorizes the terminal 10 to use the business system 13 (step S315). On the other hand, if the verification of the hardware configuration is unsuccessful, the terminal 10 is denied access to the business system 13.

[0067] As described above, according to the second embodiment, the authentication system 1 manages the terminals 10 across the supply chain by linking the identifier information of the terminal 10 with the configuration information of the hardware that constitutes the terminal 10 and the information of the software installed on the terminal 10. By performing authentication using a digital certificate generated for each managed terminal 10 in a manner that links the terminal 10 with the configuration information, it is possible to prove that the terminal 10 is a valid terminal 10.

[0068] <Third Embodiment> The third embodiment will be described, focusing on the differences from the second embodiment.

[0069] Configuring the authentication system Another example of an authentication system will be described below with reference to Fig. 7. Fig. 7 is a block diagram showing another example of an authentication system according to the present disclosure. As shown in Fig. 7, an authentication system 1 according to the third embodiment includes a terminal 10, a verification system 11, a production system 12, a business system 13, and a database 14, similar to the authentication system 1 according to the second embodiment. However, in the authentication system 1 according to the third embodiment, the memory unit certificate 104 does not exist in the memory unit 101 provided in the terminal 10.

[0070] In the authentication system 1 according to the second embodiment, a chain of trust is formed starting from the memory certificate 104. On the other hand, in the authentication system 1 according to the third embodiment, since the memory certificate 104 does not exist, a chain of trust is formed starting from the memory private key 107 generated by the memory 101. Furthermore, since the memory certificate 104 does not exist, the AIK certificate 106, which is an electronic certificate derived from the memory certificate 104 as a parent, is not generated in the authentication system 1 according to the third embodiment.

[0071] The storage unit private key 107 is generated when the terminal 10 is manufactured. The storage unit 101 generates a pair of a private key and a public key. This private key is the storage unit private key 107. The generated storage unit private key 107 is stored in the storage unit 101.

[0072] As in the second embodiment, the device certificate 102 is generated by the production system 12 when the terminal 10 is produced, and is stored in the storage unit 101. The device certificate 102 is generated based on the identifier information of the terminal 10 itself and the storage unit private key 107.

[0073] As in the second embodiment, the PF certificate 103 is generated by the production system 12 when the terminal 10 is produced, and is stored in the storage unit 101. The PF certificate 103 is generated based on the hardware configuration information of the terminal 10 itself and the device certificate 102.

[0074] The device certificate 102 is an electronic certificate linked to the storage private key 107. The PF certificate 103 is also an electronic certificate linked to the device certificate 102. In other words, the device certificate 102, the PF certificate 103, and the storage private key 107 form a chain of trust starting from the storage private key 107. Trust is guaranteed by the storage private key 107, which is the starting point of the chain of trust.

[0075] The application certificate 105, terminal 10, verification system 11, production system 12, business system 13, and database 14 have the same configuration as the authentication system 1 according to the second embodiment, and therefore description thereof will be omitted.

[0076] Authentication Method Next, an example of the processing of the authentication system will be described. The processing of the authentication system in the third embodiment is made up of three sequences, similar to the second embodiment.

[0077] 8 is a sequence diagram showing another example of generation of a digital certificate during production of a terminal according to the present disclosure. This sequence is executed before shipping of the terminal 10, similar to the second embodiment. Note that in this sequence according to the third embodiment, step S101 and steps S103 to S106 are similar to those in the second embodiment, and detailed description thereof will be omitted.

[0078] First, the terminal 10 generates hardware configuration information in the same manner as in the second embodiment (step S101).

[0079] Next, the terminal 10 generates a key pair and issues a CSR (step S102). More specifically, first, the storage unit 101 generates a pair of a private key and a public key. This private key is designated as the storage unit private key 107. The storage unit private key 107 is stored in the storage unit 101. The CSR includes the public key and identifier information of the terminal 10. The CSR is also signed with the storage unit private key 107.

[0080] Next, the terminal 10 transmits the CSR, hardware configuration information, and Golden Measurement to the production system 12 (step S103), as in the second embodiment. Next, the production system 12 transmits the identifier information, hardware configuration information, and Golden Measurement to the database 14 (step S104), as in the second embodiment.

[0081] Next, the production system 12 generates the device certificate 102 and the PF certificate 103 (step S105), and then transmits the generated device certificate 102 and PF certificate 103 to the terminal 10 (step S106).

[0082] 9 is a sequence diagram showing another example of terminal authentication when a terminal according to the present disclosure is procured locally. In this sequence, similar to the second embodiment, the verification system 11 performs terminal authentication when the terminal 10 connects to the verification system 11, and authenticates that the access is from the terminal 10 for which the production system 12 has generated and sent a digital certificate. If the terminal authentication is successful, an encrypted communication path is established between the terminal 10 and the verification system 11. In the terminal authentication sequence according to the third embodiment, steps S201 to S207 and step S212 are the same as those in the second embodiment, and detailed description thereof will be omitted. In addition, in the third embodiment, the storage unit certificate 104 does not exist. Therefore, in this sequence, the authentication system 1 does not generate the AIK certificate 106, which is a digital certificate derived from the storage unit certificate 104.

[0083] First, the terminal 10 generates hardware configuration information (step S201). Next, the terminal 10 verifies the PF certificate 103 (step S202). Next, the terminal 10 transmits the device certificate 102, the PF certificate 103, and the verification result of the PF certificate 103 to the verification system (step S203). Then, the verification system 11 requests the identifier information and the hardware configuration information from the database 14 (step S204). Then, the database 14 transmits the identifier information and the hardware configuration information to the verification system 11 (step S205).

[0084] Next, the verification system 11 performs terminal authentication (step S206). If the terminal authentication fails, the terminal 10 is denied access to the business system 13, and subsequent steps are not executed. If the terminal authentication is successful, an encrypted communication path is established between the terminal 10 and the verification system 11. In subsequent steps in the terminal authentication sequence, communication between the terminal 10 and the verification system 11 uses the encrypted communication path. Next, the verification system 11 notifies the terminal 10 of successful authentication (step S207).

[0085] Next, the verification system 11 generates the application certificate 105 (step S210) and transmits the application certificate 105 to the terminal 10 (step S211). The verification system 11 also transmits application authentication information to the database 14 (step S212). The terminal 10 stores the application certificate 105 received from the verification system 11. The database 14 also stores the application authentication information received from the verification system 11.

[0086] Next, the configuration check shown in Fig. 6 is performed in the same manner as in the second embodiment. In the third embodiment, the AIK certificate 106 is not generated. Therefore, when the terminal 10 transmits the result of the remote attestation to the verification system 11 (step S306), the result of the remote attestation is signed with the storage unit private key 107.

[0087] As described above, according to the third embodiment, even if the storage unit certificate 104 generated by the storage unit manufacturer does not exist in the storage unit 101 provided in the terminal 10, the authentication system 1 can form a chain of trust starting from the storage unit private key 107, which is a private key generated by the storage unit 101. Therefore, in managing terminals 10 across a supply chain, the authentication system 1 can manage the terminals 10 by linking the identifier information of the terminal 10 with the configuration information of the hardware that constitutes the terminal 10 and the information of the software installed on the terminal 10. By performing authentication using a digital certificate generated for each managed terminal 10 in a manner that links the terminal 10 with the configuration information, it is possible to prove that the terminal 10 is authentic.

[0088] <Hardware configuration that realizes the authentication function of the authentication device> The verification system 11, production system 12, business system 13, and database 14 may be configured as an authentication device. A part or all of the authentication process performed by the authentication device can be realized by a general-purpose computer system. A brief explanation will be given below with reference to FIG. 10.

[0089] 10 is a block diagram showing an example of a hardware configuration that realizes the authentication function of an authentication device according to the present disclosure. Computer 300 includes, for example, a CPU (Central Processing Unit) 301, which is a control device, a RAM (Random Access Memory) 302, and a ROM (Read Only Memory) 303. Computer 300 also includes an IF (Interface) 304, which is an interface with the outside, and an HDD (Hard Disk Drive) 305, which is an example of a non-volatile storage device. Furthermore, computer 300 may also include input devices such as a keyboard and a mouse, and a display device such as a display, as other components not shown.

[0090] The HDD 305 stores an operating system (OS) (not shown) and a control program 306. The control program 306 is a computer program that implements the authentication process of the authentication device.

[0091] The CPU 301 controls various processes in the computer 300, and access to the RAM 302, ROM 303, IF 304, and HDD 305. In the computer 300, the CPU 301 reads and executes the OS and control program 306 stored in the HDD 305. In this way, the computer 300 realizes the authentication function of the authentication device.

[0092] The above-mentioned program includes instructions (or software code) that, when loaded into a computer, cause the computer to perform one or more functions described in this disclosure. The program may be stored on a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable medium or tangible storage medium includes RAM, ROM, flash memory, solid-state drive (SSD) or other memory technology, CD-ROM, digital versatile disc (DVD), Blu-ray disc or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The program may also be transmitted on a transitory computer-readable medium or communication medium. By way of example and not limitation, transitory computer-readable medium or communication medium includes electrical, optical, acoustic, or other forms of propagated signals.

[0093] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above-described embodiments. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. Furthermore, each embodiment can be combined with other embodiments as appropriate.

[0094] Each drawing is merely an example for describing one or more embodiments. Each drawing may relate not only to one particular embodiment, but also to one or more other embodiments. As will be understood by those skilled in the art, various features or steps described with reference to any one drawing can be combined with features or steps shown in one or more other drawings to create, for example, an embodiment not explicitly shown or described. Not all features or steps shown in any one drawing are necessary to describe an exemplary embodiment, and some features or steps may be omitted. The order of steps described in any drawing may be changed as appropriate.

[0095] Some or all of the above-described embodiments can be described as, but are not limited to, the following supplementary notes.

[0096] (Appendix 1) a terminal including a storage unit for storing a device certificate generated based on identifier information of the terminal itself and a platform certificate generated based on hardware configuration information of the terminal itself and the device certificate; a verification system that verifies the validity of each of the device certificate and the platform certificate. Authentication system.

[0097] (Appendix 2) the storage unit stores a storage unit certificate generated by a manufacturer of the storage unit; the device certificate is generated based on the storage unit certificate and the identifier information; 1. An authentication system as described in Appendix 1.

[0098] (Appendix 3) the storage unit stores a storage unit private key generated by the storage unit; the device certificate is generated based on the storage unit private key and the identifier information; 1. An authentication system as described in Appendix 1.

[0099] (Appendix 4) The method further includes a production system that generates the device certificate and the platform certificate when the terminal is produced, and transmits the generated device certificate and the platform certificate to the terminal. 10. An authentication system according to claim 2 or 3.

[0100] (Appendix 5) further comprising a database that stores the identifier information and the hardware configuration information of the terminal; 1. The authentication system described in Appendix 4.

[0101] (Appendix 6) The verification system includes: verifying the authenticity of the device certificate by comparing the device certificate stored in a storage unit of a terminal connected to the verification system with the identifier information stored in the database; verifying the authenticity of the platform certificate by comparing the platform certificate stored in a storage unit of a terminal connected to the verification system with the hardware configuration information stored in the database; 1. The authentication system described in Appendix 5.

[0102] (Appendix 7) the database stores software configuration information of the terminal at the time of production of the terminal, the software configuration information being received from a production system; the verification system further verifies the validity of the software configuration information of the terminal connected to the verification system by comparing the software configuration information of the terminal connected to the verification system with the software configuration information stored in the database; 1. The authentication system described in Appendix 6.

[0103] (Appendix 8) Further equipped with business systems, the verification system authorizes the terminal to use the business system when the authenticity of the device certificate, the platform certificate, and the software configuration information is confirmed. 1. The authentication system described in Appendix 7.

[0104] (Appendix 9) The storage unit is a tamper-resistant security chip. 1. The authentication system described in Appendix 8.

[0105] (Appendix 10) generating a device certificate and a platform certificate by a production system; storing the device certificate and the platform certificate in a storage unit provided in the terminal; verifying the authenticity of the device certificate by comparing the device certificate stored in the storage unit with identifier information stored in a database; and after the authenticity of the device certificate has been verified, verifying the authenticity of the platform certificate by comparing the platform certificate stored in the storage unit with hardware configuration information stored in the database. 1. An authentication method comprising: the device certificate is generated based on the identifier information of the terminal; the platform certificate is generated based on the device certificate and hardware configuration information of the terminal; Authentication method.

[0106] (Appendix 11) The identifier information and the hardware configuration information are When the terminal is manufactured, the information is stored in a database from the terminal. The authentication method described in Appendix 10.

[0107] (Appendix 12) The device certificate is generated based on a storage unit certificate generated by the manufacturer of the storage unit and the identifier information, The authentication method described in Appendix 11.

[0108] (Appendix 13) The device certificate is generated based on the storage unit private key generated by the storage unit and the identifier information, The authentication method described in Appendix 12.

[0109] (Appendix 14) The database stores software configuration information of the terminal when the terminal is manufactured, the method further comprises a step of verifying the authenticity of the software configuration information of the terminal by comparing the software configuration information of the terminal with the software configuration information stored in the database after the authenticity of the device certificate has been verified; 14. The authentication method described in Appendix 12 or 13.

[0110] (Appendix 15) means for verifying the validity of a device certificate generated based on identifier information of the connected terminal and stored in a storage unit of the terminal; means for verifying the validity of a platform certificate generated based on the device certificate and hardware configuration information of the terminal, the platform certificate being stored in the storage unit; Authentication device.

[0111] (Appendix 16) If the authenticity of the device certificate and the platform certificate can be verified, the connection of the terminal to the business system is authenticated. 16. The authentication device of claim 15.

[0112] (Appendix 17) The device certificate is generated based on a storage unit certificate generated by the manufacturer of the storage unit and the identifier information, 17. The authentication device of claim 16.

[0113] (Appendix 18) The device certificate is generated based on the storage unit private key generated by the storage unit and the identifier information, 17. The authentication device of claim 16.

[0114] (Appendix 19) generating a device certificate and a platform certificate by the production system; storing the device certificate and the platform certificate in a storage unit provided in the terminal; verifying the authenticity of the device certificate by comparing the device certificate stored in the storage unit with identifier information stored in a database; a program that causes a computer to verify the authenticity of the device certificate by comparing the platform certificate stored in the storage unit with hardware configuration information stored in the database after the authenticity of the device certificate has been verified, the program comprising: the device certificate is generated based on the identifier information of the terminal; the platform certificate is generated based on the device certificate and the hardware configuration information of the terminal; program.

[0115] Some or all of the elements (e.g., configurations and functions) described in Supplementary Notes 2 to 9 that are dependent on Supplementary Notes 1 may also be dependent on Supplementary Notes 10 to 19 in the same dependency relationship as Supplementary Notes 2 to 9. Some or all of the elements described in any Supplementary Note may be applied to various hardware, software, recording means for recording software, systems, and methods. [Explanation of symbols]

[0116] 1. Authentication System 10 devices 11 Verification System 12 Production System 13 Business Systems 14 Database 101 Storage section 102 Device Certificate 103 Platform Certificate 104 Memory Certificate 105 App Certificates 106 AIK Certificate 107 Storage private key 111 Receiving unit 112 Transmitter 113 Certificate Issuance Department 114 Verification Department 121 Receiving unit 122 Transmitter 123 Certificate Issuance Department 300 Computers 301 CPU 302 RAM 303 ROM 304 IF 305 HDD 306 Control Program

Claims

1. a terminal including a storage unit for storing a device certificate generated based on identifier information of the terminal itself and a platform certificate generated based on hardware configuration information of the terminal itself and the device certificate; a verification system that verifies the validity of each of the device certificate and the platform certificate. Authentication system.

2. the storage unit stores a storage unit certificate generated by a manufacturer of the storage unit; the device certificate is generated based on the storage unit certificate and the identifier information; The authentication system of claim 1 .

3. the storage unit stores a storage unit private key generated by the storage unit; the device certificate is generated based on the storage unit private key and the identifier information; The authentication system of claim 1 .

4. The method further includes a production system that generates the device certificate and the platform certificate when the terminal is produced, and transmits the generated device certificate and the platform certificate to the terminal.

4. The authentication system according to claim 2 or 3.

5. further comprising a database that stores the identifier information and the hardware configuration information of the terminal; The authentication system according to claim 4.

6. The verification system includes: verifying the authenticity of the device certificate by comparing the device certificate stored in a storage unit of a terminal connected to the verification system with the identifier information stored in the database; verifying the authenticity of the platform certificate by comparing the platform certificate stored in a storage unit of a terminal connected to the verification system with the hardware configuration information stored in the database; The authentication system according to claim 5 .

7. the database stores software configuration information of the terminal at the time of production of the terminal, the software configuration information being received from a production system; the verification system further verifies the validity of the software configuration information of the terminal connected to the verification system by comparing the software configuration information of the terminal connected to the verification system with the software configuration information stored in the database; The authentication system of claim 6.

8. Further equipped with business systems, the verification system authorizes the terminal to use the business system when the authenticity of the device certificate, the platform certificate, and the software configuration information is confirmed. The authentication system of claim 7.

9. The storage unit is a tamper-resistant security chip. The authentication system of claim 8.

10. generating a device certificate and a platform certificate by a production system; storing the device certificate and the platform certificate in a storage unit provided in the terminal; verifying the authenticity of the device certificate by comparing the device certificate stored in the storage unit with identifier information stored in a database; and after the authenticity of the device certificate has been verified, verifying the authenticity of the platform certificate by comparing the platform certificate stored in the storage unit with hardware configuration information stored in the database.

1. An authentication method comprising: the device certificate is generated based on the identifier information of the terminal; the platform certificate is generated based on the device certificate and hardware configuration information of the terminal; Authentication method.

11. The identifier information and the hardware configuration information are When the terminal is manufactured, the information is stored in a database from the terminal. The authentication method of claim 10.

12. The device certificate is generated based on a storage unit certificate generated by the manufacturer of the storage unit and the identifier information, The authentication method of claim 11.

13. The device certificate is generated based on the storage unit private key generated by the storage unit and the identifier information, The authentication method of claim 12.

14. The database stores software configuration information of the terminal when the terminal is manufactured, the method further comprises a step of verifying the authenticity of the software configuration information of the terminal by comparing the software configuration information of the terminal with the software configuration information stored in the database after the authenticity of the device certificate has been verified; 14. The authentication method according to claim 12 or 13.

15. means for verifying the validity of a device certificate generated based on identifier information of the connected terminal and stored in a storage unit of the terminal; means for verifying the validity of a platform certificate generated based on the device certificate and hardware configuration information of the terminal, the platform certificate being stored in the storage unit; Authentication device.

16. If the authenticity of the device certificate and the platform certificate can be verified, the connection of the terminal to the business system is authenticated.

16. The authentication device of claim 15.

17. The device certificate is generated based on a storage unit certificate generated by the manufacturer of the storage unit and the identifier information, 17. The authentication device of claim 16.

18. The device certificate is generated based on the storage unit private key generated by the storage unit and the identifier information, 17. The authentication device of claim 16.

19. generating a device certificate and a platform certificate by the production system; storing the device certificate and the platform certificate in a storage unit provided in the terminal; verifying the authenticity of the device certificate by comparing the device certificate stored in the storage unit with identifier information stored in a database; a program that causes a computer to verify the authenticity of the device certificate by comparing the platform certificate stored in the storage unit with hardware configuration information stored in the database after the authenticity of the device certificate has been verified, the program comprising: the device certificate is generated based on the identifier information of the terminal; the platform certificate is generated based on the device certificate and the hardware configuration information of the terminal; program.

Images