How to use security systems and security devices

Abstract

This provides a method for using security systems and security devices that can reliably identify the person operating them. [Solution] According to the embodiment, the security system comprises a security device and a biometric authentication device. The biometric authentication device comprises a biosensor, a first interface, and a first processor. The security device comprises a second interface and a second processor. The biosensor acquires information about a person. The first interface communicates with the security device. The first processor performs mutual authentication with the biometric authentication device when the biometric information of the user acquired by the biosensor matches the biometric information of the registered user registered in the security device. The second interface communicates with the biometric authentication device. If the biometric authentication of the user is successful in the biometric authentication device, the second processor performs processing after successful mutual authentication with the biometric authentication device.

Description

Technical Field

[0001] Embodiments of the present invention relate to security systems and methods of using security devices.

Background Art

[0002] Conventionally, security devices such as hardware security modules (HSMs) perform authentication using registered accounts and their passwords. Permissions are determined for the accounts, and the content that can operate the security device may be restricted. Such security devices have a problem that if one knows the password of an account, there is a possibility of impersonating the registered person and using it.

[0003] In addition, some security devices that require a high level of security such as HSMs have a function of completely deleting (zeroing) the data in the device when it is subjected to a security attack. However, conventional security devices also have a problem that when they detect a security attack and execute zeroing, it is impossible to confirm who was operating the device when the security attack occurred.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] The problem to be solved by the present invention is to provide a security system and a method of using a security device that can surely identify the person who operates it.

Means for Solving the Problems

[0006] According to the embodiment, the security system comprises a security device and a biometric authentication device. The biometric authentication device comprises a biosensor, a first interface, and a first processor. The security device comprises a second interface and a second processor. The biosensor acquires information about a person. The first interface communicates with the security device. The first processor performs mutual authentication with the biometric authentication device when the biometric information of the user acquired by the biosensor matches the biometric information of the registered user registered in the security device. The second interface communicates with the biometric authentication device. If the biometric authentication of the user is successful in the biometric authentication device, the second processor performs processing after successful mutual authentication with the biometric authentication device. [Brief explanation of the drawing]

[0007] [Figure 1] Figure 1 shows an example configuration of a security system according to an embodiment. [Figure 2] Figure 2 is a block diagram showing an example configuration of a control device in a security system according to an embodiment. [Figure 3] Figure 3 is a block diagram showing an example configuration of an HSM in a security system according to the embodiment. [Figure 4] Figure 4 is a block diagram showing an example configuration of a biometric authentication card in a security system according to an embodiment. [Figure 5] Figure 5 is a sequence diagram illustrating the process of issuing a biometric authentication card for an HSM in a security system according to an embodiment. [Figure 6] Figure 6 is a sequence diagram illustrating the authentication process for using a biometric authentication card in a security system according to an embodiment of this system. [Modes for carrying out the invention]

[0008] The embodiments will be described below with reference to the drawings. First, the configuration of the security system 1 according to the embodiment will be described.

[0009] Figure 1 is a schematic diagram showing an example of the overall configuration of security system 1 according to the embodiment. As shown in Figure 1, the security system 1 according to this embodiment includes a control device 11, an HSM (security device) 12, a card reader / writer 13, and a biometric authentication card (biometric authentication device) 14. The control device 11 of the security system 1 is connected to the personal information card 15 via the card reader / writer 13. However, as shown by the dotted line in Figure 1, the biometric authentication card 14 may be configured to communicate directly with the HSM 12.

[0010] The control device 11 can be implemented using a computer such as a personal computer (PC). The control device 11 includes an interface for connecting to the HSM 12 and an interface for connecting to the card reader / writer 13. The control device 11 includes a user interface, such as an operation unit for receiving operation instructions from the user and a display unit for displaying operation guidance to the user.

[0011] The HSM (security device) 12 is an example of a security device. In the security system 1 according to this embodiment, the security device exemplified by HSM 12 can be any hardware that has a function to ensure the security of the data it holds or the data that controls access to it.

[0012] The HSM12, an example of a security device, generates and securely stores cryptographic keys used for encryption and digital signatures, and performs cryptographic processing using these securely stored keys. The HSM12 supports cryptographic processing using strong encryption methods, including public-key cryptography.

[0013] For example, in a public-key cryptography scheme, the HSM12 generates a pair of encryption keys—a public key and a private key—within the device, distributes the public key, and stores the private key in a secure memory area. The HSM12 achieves a high level of information security by performing encryption processing without outputting the private key stored in the secure memory area to the outside. Furthermore, the HSM12 has functions such as generating digital signatures and certificates as part of its authentication process using cryptographic keys. The HSM12 performs mutual authentication with external devices using digital signatures based on public-key cryptography.

[0014] Furthermore, the HSM12 is equipped with sensors to detect external attacks and has a self-destruct function that erases (zeroes out) data stored in the device, such as encryption keys, in the event of an external attack. The HSM12 reliably prevents the leakage of confidential information, including encryption keys, through its self-destruct function. In this embodiment, the HSM12 erases data other than the specific data described later by zeroing it out.

[0015] The card reader / writer 13 is a communication device for communicating with the biometric authentication card 14 and the personal information card 15, which are biometric authentication devices. The card reader / writer 13 only needs to be equipped with a communication device that supports a communication method compatible with the biometric authentication card 14 and the personal information card 15. The card reader / writer 13 only needs to communicate with the biometric authentication card 14 and the personal information card 15 under the control of the control device 11.

[0016] Furthermore, as shown by the dotted line in Figure 1, the biometric authentication card 14 may be configured to communicate with a card reader / writer (communication device) provided by the HSM 12 or a card reader / writer (communication device) connected to an interface provided by the HSM 12. In this case, the HSM 12 communicates with the biometric authentication card 14 without going through the control device 11, and the card reader / writer 13 connected to the control device 11 may be equipped with a communication device for communicating with the personal information card 15.

[0017] The biometric authentication card (biometric authentication device) 14 is a device that performs biometric authentication. The biometric authentication card 14, as an example of a biometric authentication device, acquires the biometric information of a person and performs identity verification based on whether the acquired biometric information matches the pre-registered biometric information (for example, the biometric information of the registrant registered in the issuance process described later). Also, the biometric authentication card 14 may perform biometric authentication (personal authentication) based on biometric information such as fingerprints, face images, voiceprints, vein patterns, and eye irises. In the present embodiment, the biometric authentication card 14 will be described assuming that it is an IC card that performs biometric authentication by fingerprints.

[0018] The personal information card 15 is an example of a medium (electronic device) in which personal information is recorded. In the present embodiment, the personal information card 15 will be described as an IC card for personal identification issued by a public institution such as a My Number card. The personal information card 15 holds information such as name, address, date of birth, and gender as personal information. The personal information card 15 is configured to be able to perform identity verification by means of a password set at the time of issuance. The control device 11 checks whether the one set in the card reader / writer 13 is the personal information card 15 issued to the operator himself / herself, and reads the personal information from the personal information card 15 for which identity verification has been successful.

[0019] Next, the configuration of the control device 11 in the security system 1 according to the embodiment will be described. FIG. 2 is a block diagram showing a configuration example of the control device 11 in the security system 1 according to the embodiment. As shown in FIG. 2, the control device 11 in the security system ① according to the embodiment includes a processor 21, a memory 22, a display unit 23, an operation unit 24, a communication unit 25, an interface 26, and an interface 27.

[0020] The processor 21 executes processes such as control of each unit and various data processes by executing a program. The processor 21 is, for example, a CPU (Central Processing Unit). Note: In the translation of line , there seems to be a typo in the original text where "security system ①" should probably be "security system 1". The translation is done based on the assumption that it's a typo and should be "1".

[0021] Memory 22 includes RAM, ROM, and rewritable non-volatile memory. For example, memory 22 stores programs in ROM or rewritable non-volatile memory. Processor 21 executes processing by using the RAM of memory 22 as working memory to run the programs.

[0022] The display unit 23 is composed of a display device. The display unit 23 displays operation instructions and other information to the operator (user). The operation unit 24 is composed of operating devices such as a keyboard, mouse, and touch panel. The operation unit 24 accepts information input from the operator.

[0023] The communication unit 25 is comprised of communication interfaces and the like. For example, the communication unit 25 includes a network interface for communicating with external devices via a network. The processor 21 uses the communication unit 25 to receive data from and transmit data to external devices.

[0024] Interface 26 is an interface (card reader / writer interface) for connecting the card reader / writer 13. Interface 26 only needs to be compatible with the card reader / writer 13.

[0025] Interface 27 is an interface (HSM interface) for connecting the HSM12. Interface 27 can be anything that is connected to the HSM12. For example, if the HSM12 is a plug-in type device, interface 27 will consist of a PCI slot for inserting the HSM12. If the HSM12 is a network type device, interface 27 will consist of a network interface for connecting the HSM12 via a network (e.g., LAN). If the HSM12 is a USB (Universal Serial Bus) type device, interface 27 will consist of a USB interface for connecting the HSM12 via USB.

[0026] Next, the configuration of the HSM12 as a security device in the security system 1 according to the embodiment will be described. Figure 3 is a block diagram showing an example configuration of the HSM12 in the security system 1 according to the embodiment. As shown in Figure 3, the HSM12 in the security system 1 according to this embodiment includes a processor (second processor) 31, a sensor 32, an interface (second interface) 33, and a memory 34. The memory 34 includes RAM 35, ROM 36, and secure memory 37.

[0027] The processor 31 executes various processes, such as controlling each part and processing various data, by running a program. The processor 31 is, for example, a CPU (Central Processing Unit). The HSM12 may also include a coprocessor or other component separate from the processor 31 to perform specific processes such as cryptographic processing.

[0028] Sensor 32 is a detection unit that detects security attacks being performed on the HSM12. Any sensor that can detect security attacks is acceptable for sensor 32. For example, sensor 32 may include a sensor that detects when the HSM12 is subjected to an attack that results in physical destruction.

[0029] Interface (I / F) 33 is an interface for connecting to the control unit 11. For example, if the HSM12 is a plug-in type device, interface 33 consists of an interface that is inserted into a slot provided by the control unit 11. If the HSM12 is a network type device, interface 33 consists of a network interface for connecting to the control unit 11 via a network (e.g., LAN). If the HSM12 is a USB type device, interface 33 consists of an interface that is set to the USB interface of the control unit 11.

[0030] Memory 34 includes RAM 35, ROM 36, and secure memory 37. For example, RAM 35 holds data related to processing such as encryption processing performed by processor 31. ROM 36 is a non-volatile memory that stores programs and control data executed by processor 21. Secure memory 37 is a memory that securely holds data, for example, data used for authentication, including generated encryption keys. Secure memory 37 also has a storage area that stores log data that is not erased by the zeroing process described later.

[0031] Next, the configuration of the biometric authentication card 14 as a biometric authentication device in the security system 1 according to the embodiment will be described. Figure 4 is a block diagram showing an example configuration of a biometric authentication card 14 in the security system 1 according to this embodiment. The biometric authentication card 14 shown in Figure 4 is an example of a biometric authentication device. In this embodiment, the biometric authentication card 14, which is an example of a biometric authentication device, is described as an IC card that performs biometric authentication using a fingerprint, which is an example of biometric information.

[0032] However, in the security system 1 according to this embodiment, the biometric authentication device is not limited to the biometric authentication card 14. The biometric authentication card 14 can be any device that can perform user authentication using biometric information and can perform mutual authentication with the HSM 12 as a security device. For example, the biometric authentication card 14 may be replaced with a device that performs biometric authentication using biometric information other than fingerprints, and the external shape and other aspects may also be replaced with a biometric authentication device other than a card.

[0033] In the configuration example shown in Figure 4, the biometric authentication card 14 has a main body C formed in the shape of a card, such as plastic. The biometric authentication card 14 includes a control module 41, a biometric verification unit 42, and an LED 43 within the main body C. For example, the control module 41 is integrally formed with one or more IC chips connected to a communication interface. The control module 41 is also provided on the main body C, connected to the biometric verification unit 42 and the LED 43.

[0034] In the configuration example shown in Figure 4, the control module 41 includes a processor (first processor) 51, ROM 52, RAM 53, data memory 54, and a communication interface (second interface) 55, among others. The processor 51 includes circuits that perform various processes. The processor 51 is, for example, a CPU. The processor 51 controls the entire IC card, which is a biometric authentication card 14. The processor 51 realizes various processing functions by executing programs stored in the ROM 52 or data memory 54. Some or all of the various functions performed by the processor 51, as described later, may be realized by hardware circuits.

[0035] ROM52 is a non-volatile memory that functions as program memory. ROM52 stores control programs and control data in advance. ROM52 is incorporated into the biometric authentication card 14 during the manufacturing stage with the control programs and data already stored within it. For example, ROM52 stores a program that allows the processor 51 to execute processing in response to commands received from an external device (card reader / writer).

[0036] RAM 53 is a volatile memory that functions as working memory. RAM 53 also functions as a buffer for temporarily storing data being processed by the processor 51. For example, RAM 53 also functions as a communication buffer for temporarily storing data transmitted to and from external devices via the communication interface 55.

[0037] The data memory 54 is a non-volatile memory that allows data to be written to and rewritten. The data memory 54 is composed of, for example, EEPROM (Electrically Erasable Programmable Read Only Memory). Programs and various data corresponding to the processing to be executed according to the specifications of the biometric authentication card 14 are written to the data memory 54. In addition, program files and data files are defined in the data memory 54, and control programs and various data are written to these files.

[0038] Furthermore, the data memory 54 has a storage area in which some or all of its area is tamper-resistant and data can be stored securely. For example, the secure storage area of ​​the data memory 54 stores the biometric information of a legitimate user (registered user), a key pair (private key, public key) that it generates, and the public key of the HSM12. In addition, the biometric information of the registered user stored in the data memory 54 is a fingerprint image or fingerprint feature data for matching with the fingerprint information acquired by the fingerprint sensor, which acts as a biosensor 62.

[0039] The communication interface 55 comprises a communication circuit and an interface unit. The communication interface 55 is an interface for communicating with a higher-level device that supplies power and commands to the IC card, which is the biometric authentication card 14. The communication interface 55 implements a communication function using a communication method corresponding to the interface of the card reader / writer 13 connected to the control device 11. The communication interface 55 may support multiple communication methods.

[0040] For example, the communication interface 55 may be a contact communication interface that communicates by contact with an external device, or it may be a contactless communication interface that communicates wirelessly. If the communication interface 55 is a contact communication interface, it includes a contact part that makes physical and electrical contact with the reader / writer contact part provided on the card reader / writer 13, and a communication control circuit that controls the transmission and reception of signals through this contact part. If the communication interface 55 is a contactless communication interface, it includes an antenna that transmits and receives radio waves and a communication circuit that modulates and demodulates the radio waves transmitted and received from the antenna.

[0041] The biometric authentication unit 42 includes a processor 61 and a biosensor 62, and is connected to the control module 41. The biometric authentication unit 42 also has a memory that stores authentication programs and the like for the processor 61 to perform biometric authentication by biometric (fingerprint) authentication.

[0042] The biosensor 62 is a fingerprint sensor that reads the user's fingerprint information (fingerprint image), which is an example of biometric information. The fingerprint sensor as biosensor 62 is provided so that the sensor that reads the fingerprint is exposed on the surface of the main body C of the biometric authentication card 14, and reads the fingerprint of the person's finger held over the exposed sensor part. Note that the biosensor 62 is not limited to a fingerprint sensor, and may acquire biometric information other than fingerprints.

[0043] The processor 61 performs biometric authentication using fingerprint information as biometric information acquired by the biosensor 62 by executing a biometric authentication program. For example, the processor 61 extracts a fingerprint image from the image read by the fingerprint sensor, which acts as the biosensor 62, and performs fingerprint authentication by comparing the fingerprint image extracted from the image read by the fingerprint sensor with the registered person's fingerprint image (or fingerprint feature data) registered in the data memory 54.

[0044] In the configuration example shown in Figure 1, a separate processor 61 is configured to perform biometric authentication using biometric (fingerprint) matching. However, the processor 51 may also perform biometric authentication. When the processor 51 performs biometric authentication, the biometric information read by the biosensor 62 should be supplied to the processor 51. For example, the processor 51 may extract fingerprint information from the image supplied by the fingerprint sensor (which acts as the biosensor 62) and compare the extracted fingerprint information with the registered user's fingerprint information registered in the data memory 54.

[0045] LED 53 has a light-emitting element. The light-emitting state of LED 53 is controlled by a control signal from the control module 41. LED 53 is installed on the main body C in a state where its lit state can be seen on the surface of the main body C, for example.

[0046] Next, the process for issuing a biometric authentication card 14 for the HSM 12 in the security system 1 according to the embodiment will be described. Figure 5 is a sequence diagram illustrating the process of issuing a biometric authentication card 14 for the HSM 12 in the security system 1 according to the embodiment. First, the HSM12, as a security device, is assumed to have the account (role) and password of the person with operational authority registered. In the security system 1 according to this embodiment, a process is performed to issue a biometric authentication card 14 as a biometric authentication device for verifying the identity of the user using the HSM12.

[0047] The processor 21 of the control device 11 starts the process of issuing a biometric authentication card 14 to be used as a biometric authentication device for the HSM 12 in response to operation instructions. When the processor 21 of the control device 11 starts the process of issuing the biometric authentication card 14, it accepts input of the account and password registered in the HSM 12 in order to confirm the operating authority of the HSM 12. In response, the user (the person who issues the biometric authentication card for the HSM 12) enters the account and password to which they have been granted operating authority into the operation unit 24 of the control device 11.

[0048] When the processor 21 of the control device 11 receives an account and password input into the operation unit 24, it supplies the input account and password to the HSM 12 via the interface 27 along with an account authentication request (ST11).

[0049] The HSM12 receives the account and password entered into the control unit 24 of the control device 11 via interface 33. The processor 21 of the HSM12 performs account authentication by comparing the account and password received via interface 33 with the registered account and password (ST12). If the account authentication is successful, the processor 21 of the HSM12 sends a response indicating that the account authentication is complete to the control device 11 via interface 33 (ST13).

[0050] When the processor 21 of the control device 11 receives a response from the HSM 12 indicating that account authentication is possible, it performs personal authentication using the personal information card 15 to verify the user's identity. For example, the processor 21 of the control device 11 displays instructions on the display unit 23 to insert the personal information card 15 into the card reader / writer 13 and enter authentication information for personal authentication using the personal information card (for example, a registered PIN).

[0051] When the personal information card 15 is placed in the card reader / writer 13 connected to the interface 26, the processor 21 of the control device 11 accepts the input of authentication information for personal authentication using the personal information card 15 from the operation unit 24. When the personal information card 15 is placed in the card reader / writer 13 and authentication information for authentication is input to the operation unit 24, the processor 21 of the control device 11 supplies the input authentication information to the personal information card 15 along with the personal authentication request (ST14).

[0052] The personal information card 15 receives a personal authentication request containing authentication information from the control device 11 via the card reader / writer 13. The personal information card 15 performs personal authentication by comparing the received authentication information with the authentication information already registered on the card (ST15). If personal authentication is successful, the personal information card 15 sends a response indicating successful personal authentication to the control device 11 via the card reader / writer 13 (ST16).

[0053] When the processor 21 of the control device 11 receives a response from the personal information card 15 indicating that personal authentication is possible, it requests the transfer (reading) of personal information from the personal information card 15 that has been successfully authenticated (ST17). For example, the processor 21 of the control device 11 obtains information from the personal information card 15 that can be used to verify the identity of the user as personal information. Specifically, the personal information obtained from the personal information card 15 may include information such as address, name, date of birth, and gender.

[0054] When the personal information card 15 receives a request from the control device 11 to transfer personal information via the card reader / writer 13, it reads the personal information it holds. After reading the personal information, the personal information card 15 transmits the read personal information to the control device 11 that made the transfer request (ST18).

[0055] When the processor 21 of the control device 11 obtains personal information from the personal information card 15, it transfers the obtained personal information to the HSM 12 as the personal information of the user authenticated by the biometric authentication card 14 to which the card is issued (ST19). In response, the HSM12 stores the user's personal information obtained from the control unit 11 via interface 33 in RAM 35 (ST20).

[0056] Furthermore, when the processor 21 of the control device 11 transfers the user's personal information read from the personal information card 15 to the HSM 12, it causes the biometric authentication card 14, which will be issued as a biometric authentication device for the HSM 12, to be set in the card reader / writer 13. For example, the processor 21 of the control device 11 displays a message on the display unit 23 indicating that the biometric authentication card 14, which will be issued as a biometric authentication device for the HSM 12, should be set in the card reader / writer 13.

[0057] When a biometric authentication card 14 is placed in the card reader / writer 13, the processor 21 of the control device 11 sends an issuance request to the HSM 12 requesting that the biometric authentication card 14 placed in the card reader / writer 13 be issued as a biometric authentication device for the HSM 12 (ST21). Here, the processor 21 of the control device 11 may also send an issuance request to the HSM 12 in response to an operation instruction from the user, requesting that the biometric authentication card 14 placed in the card reader / writer 13 be issued as a biometric authentication device for the HSM 12.

[0058] When the HSM12 receives a request to issue a biometric authentication card 14, it establishes a communication state with the biometric authentication card 14 set in the card reader / writer 13 (ST22). The HSM12 and the biometric authentication card 14 may communicate under the control of the processor 21 of the control device 11, or they may communicate directly without the control of the control device 11. Here, the HSM12 will be described as establishing a communication state in which it communicates directly with the biometric authentication card 14 without the control of the control device 11.

[0059] For example, if the HSM12 and the biometric authentication card 14 communicate directly, and the biometric authentication card 14 is set in a card reader / writer 13 connected to the control device 11, as shown by the solid line in Figure 1, then the HSM12 should communicate with the biometric authentication card 14 by bypassing the interface of the control device 11. Alternatively, if the HSM12 and the biometric authentication card 14 are connected directly without going through the control device 11, as shown by the dotted line in Figure 1, then the HSM12 should communicate with the biometric authentication card 14 without going through the control device 11.

[0060] When the HSM12 processor 31 receives a request to issue a biometric authentication card 14 and establishes communication with the biometric authentication card 14, it requests identification information (individual identification number) from the biometric authentication card 14 to uniquely identify the biometric authentication card 14 (ST23).

[0061] When the processor 51 of the biometric authentication card 14 receives a request for an individual identification number from the HSM 12 via the communication interface 55, it reads its own individual identification number stored in the ROM 52 or data memory 54 and sends the read individual identification number to the HSM 12 (ST24).

[0062] When the HSM12 processor 31 receives an individual identification number from the biometric authentication card 14, it stores the individual identification number obtained from the biometric authentication card 14 in RAM 35 (ST25). When the HSM12 processor 31 obtains the individual identification number from the biometric authentication card 14, it requests the biometric authentication card 14 to register biometric information (ST26). Note that the registration of the registrant's biometric information on the biometric authentication card 14 may be performed after the process described later.

[0063] When the processor 51 of the biometric authentication card 14 receives a biometric information registration request from the HSM 12, it acquires the user's biometric information using the biosensor 62. If the biometric information acquired by the biosensor 62 is appropriate data to be registered, the processor 51 of the biometric authentication card 14 registers the biometric information acquired by the biosensor 62 as the user's biometric information. For example, the processor 51 temporarily holds the biometric information acquired by the biosensor 62, and if the matching with the held biometric information is successful, it registers the acquired biometric information in the data memory 54 as appropriate biometric information to be registered. Once the biometric information is registered, the processor 51 of the biometric authentication card 14 notifies the HSM 12 that the registration of the biometric information is complete.

[0064] Once the registration of biometric information in the biometric authentication card 14 is complete, the processor 31 of the HSM12 generates and exchanges a key for mutual authentication with the biometric authentication card 14. That is, the processor 31 of the HSM12 sends a key generation request to the biometric authentication card 14 (ST29) and also generates a key within the HSM12 itself.

[0065] Specifically, the HSM12 processor 31 generates random numbers through a key generation process to create a pair of private and public keys (ST30). The HSM12 processor 31 stores the generated private key in a secure memory area such as secure memory 37 (ST31), and sends the public key (the HSM12's public key) that pairs with the private key to the biometric authentication card 14 (ST32).

[0066] Meanwhile, the processor 51 of the biometric authentication card 14 generates a pair of private and public keys in response to a key generation request from the HSM 12 (ST33). The processor 51 of the biometric authentication card 14 stores the generated private key in a secure storage area in the data memory 54 (ST34), and sends the public key (the public key of the biometric authentication card 14) that is paired with the private key to the HSM 12 (ST35).

[0067] When the processor 51 of the biometric authentication card 14 obtains a public key from the HSM 12, it stores the obtained key information as the public key of the HSM 12 in the data memory 54 (ST36). Also, when the processor 31 of the HSM 12 obtains a public key from the biometric authentication card 14, it stores the obtained key information as the public key of the biometric authentication card 14 (ST37).

[0068] In other words, the HSM12 and the biometric authentication card 14 each securely store their own private keys and disclose the public key corresponding to their private keys to the other. As a result, the HSM12 securely stores its own private key and also stores the public key of the biometric authentication card 14. The biometric authentication card 14 stores its own private key and also stores the public key of the HSM12.

[0069] The HSM12 processor 31 considers the process of issuing the biometric authentication card 14 for use with the HSM12 to be complete once it has finished saving the generated private key and exchanging the public key with the biometric authentication card 14. When the HSM12 processor 31 has finished the process of issuing the biometric authentication card 14 for use with the HSM12, it notifies the control device 11 that the issuance of the biometric authentication card 14 is complete (ST38). When the control device 11's processor 21 receives notification from the HSM12 that the issuance of the biometric authentication card 14 is complete, it may also notify the device by displaying on the display unit 23 that the process of issuing the biometric authentication card 14 for use with the HSM12 is complete.

[0070] Through the issuance process described above, the security system 1 according to this embodiment issues a biometric authentication card 14 for authenticating the user using the HSM 12. The biometric authentication card 14 issued in the above-described issuance process has the biometric information of the registrant whose identity was verified with the personal information card 15, and has key information set for mutual authentication with the HSM. In addition, the HSM 12 has an encryption key set for mutual authentication with the issued biometric authentication card 14.

[0071] Next, the authentication process for using the HSM12 with the biometric authentication card 14 in the security system 1 according to the embodiment will be described. Figure 6 is a sequence diagram illustrating the authentication process for using the HSM12 with the biometric authentication card 14 in the security system 1 according to the embodiment. In the security system 1 according to this embodiment, the processor 21 of the control device 11 requests biometric authentication for identity verification from the biometric authentication card 14 set in the card reader / writer 13 in response to an operation instruction (ST51). For example, a user of the HSM 12 sets the biometric authentication card 14, which has been processed as a biometric authentication device for the HSM 12, into the card reader / writer 13 and instructs the operation unit 24 of the control device 11 to request the use of the HSM 12. In response, the processor 21 of the control device 11 requests biometric authentication for identity verification from the biometric authentication card 14 set in the card reader / writer 13 in response to an operation instruction.

[0072] The biometric authentication card 14 receives a request for identity verification by biometric authentication from the control device 11 via the communication interface 55 (ST51). When the processor 51 of the biometric authentication card 14 receives the request for identity verification by biometric authentication, it performs biometric authentication using the biometric matching unit 42 (ST52). In response to a request from the processor 51, the biometric matching unit 42 of the biometric authentication card 14 compares the user's biometric information acquired by the biometric sensor 62 with the registered user's biometric information and notifies the processor 51 of the result of the biometric information comparison.

[0073] The processor 51 of the biometric authentication card 14 determines that biometric authentication (identity verification) has been successful if the biometric information acquired by the biometric sensor 62 matches the biometric information of the registered person. If biometric authentication (identity verification) is successful, the processor 51 of the biometric authentication card 14 notifies the control device 11 of the success of biometric authentication (ST53).

[0074] When the processor 21 of the control unit 11 receives notification from the biometric authentication card 14 that biometric authentication has been successful, it requests mutual authentication with the HSM 12 using the biometric authentication card 14 that has successfully performed biometric authentication (ST54). For example, the processor 21 of the control unit 11 requests mutual authentication by specifying the individual identification information of the biometric authentication card 14 that has successfully performed biometric authentication.

[0075] When the HSM12 processor 31 receives a request for mutual authentication with a biometric authentication card 14 that has successfully performed biometric authentication, it secures a communication state with the biometric authentication card 14 set in the card reader / writer 13. Once the HSM12 processor 31 has secured a communication state with the biometric authentication card 14 for which mutual authentication has been requested, it generates an electronic signature using the private key it holds (the private key corresponding to the public key disclosed to the biometric authentication card 14) (ST55).

[0076] The HSM12 processor 31 generates an electronic signature using its private key and sends the signature value of the generated electronic signature to the biometric authentication card 14 that has successfully performed biometric authentication (ST56). The HSM12 may also pre-generate the electronic signature to be generated using its private key. In this case, the HSM12 processor 31 should send the pre-generated electronic signature to the biometric authentication card for which mutual authentication is requested.

[0077] The biometric authentication card 14 receives a signature value from the HSM 12 along with a mutual authentication request via the communication interface 55. When the processor 51 of the biometric authentication card 14 receives the signature value from the HSM 12 along with the mutual authentication request, it performs signature verification (ST57) to verify the validity of the signature value received from the HSM 12 using the public key of the HSM 12.

[0078] The processor 51 of the biometric authentication card 14, after verifying the validity of the signature value from the HSM 12 through signature verification, generates an electronic signature using the private key held by the biometric authentication card 14 (the private key corresponding to the public key exposed to the HSM 12) (ST58). After generating the electronic signature using its own private key, the processor 51 of the biometric authentication card 14 sends the signature value of the generated electronic signature to the HSM 12 (ST59).

[0079] The HSM12 receives the signature value of the digital signature generated by the biometric authentication card 14 using its private key via interface 33. Upon receiving the signature value from the biometric authentication card 14, the HSM12's processor 31 performs signature verification (ST60) to verify the validity of the signature value received from the biometric authentication card 14 using the public key of the biometric authentication card 14.

[0080] When the HSM12 processor 31 verifies the validity of the signature value from the biometric authentication card 14 through signature verification, it considers mutual authentication with the biometric authentication card 14 to be successful. When the HSM12 processor 31 confirms that mutual authentication with the biometric authentication card 14, whose identity has been verified by biometric authentication, is successful, it notifies the control device 11 that mutual authentication has been successful (ST61) and permits the use of the HSM12 (various processes).

[0081] Here, when the processor 31 of the HSM12 permits the use of the HSM12 (various processes), it stores the individual identification number of the biometric authentication card 14 that has successfully undergone mutual authentication (biometric authentication has succeeded) and the personal information of the user whose identity has been successfully verified by biometric authentication in the RAM 35 or similar.

[0082] After receiving confirmation that mutual authentication between the HSM12 and the biometric authentication card 14 has been successful, the processor 31 of the control device 11 can request various processes, such as encryption, from the HSM12. In other words, after mutual authentication between the HSM12 and the biometric authentication card 14 has been successful, the processor 31 of the control device 11 requests processing from the HSM12 in accordance with the user's instructions (ST62).

[0083] In response, the processor 31 of the HSM12 executes the processing requested by the control unit 11. Each time processing is executed, the processor 31 of the HSM12 stores log data in the secure memory 37 that associates the individual identification number of the biometric authentication card 14 with the user's personal information and information indicating the processing content (ST63). As a result, the HSM12 can identify not only the processing content but also the user who requested the processing and the biometric authentication card that confirmed the user's identity through biometric authentication, based on the log data stored in the secure memory 37.

[0084] Furthermore, the HSM12 stores log data, including the user's personal information, in secure memory 37 so that it is not erased during the zeroing process in the event of a security attack. In other words, if the HSM12's processor 31 detects a security attack, including a physical attack detected by the sensor 32, it performs a zeroing process to erase stored data, including authentication data such as encryption keys, other than log data containing the user's personal information.

[0085] In other words, the HSM12 according to this embodiment does not delete log data containing the user's personal information during the zeroing process in the event of a security attack. As a result, the HSM12 can not only delete authentication data such as key information that should be kept confidential in the event of a security attack, but it can also identify the processes executed when or immediately before the security attack occurred, as well as the user who instructed those processes, from the log data that is not deleted during the zeroing process.

[0086] As described above, the security system according to the embodiment stores in the HSM the personal information of a registrant whose identity has been verified with a personal information card issued by a public institution, and the identification information (individual identification number) of the biometric authentication card on which the registrant's biometric information is registered. The biometric authentication card and the HSM perform mutual authentication when biometric authentication by the biometric authentication card is successful. If mutual authentication is successful, the HSM performs processing in response to the processing request from the user whose biometric authentication was successful.

[0087] As a result, the security system according to this embodiment can control the system so that the HSM can be used only when biometric authentication using the biometric authentication card is successful with a registered person whose identity has been verified with a personal information card, and when mutual authentication between the biometric authentication card and the HSM is successful. As a result, only persons whose identity has been verified with an official personal information card can operate the HSM, and the use of the HSM, which is a security device, can be strictly controlled.

[0088] Furthermore, the security system according to the above embodiment can be implemented even if the biometric authentication card and the HSM are located in remote locations. For example, even if the user is in a remote location far from the HSM, the user, whose identity has been verified by biometric authentication on the biometric authentication card, can request processing from the remote HSM to perform processing such as encryption, and it will also be possible to perform maintenance on the HSM from a remote location.

[0089] Furthermore, in the security system according to this embodiment, if the HSM performs processing after successful mutual authentication with a biometric authentication card that has successfully performed biometric authentication, it can store log data containing the user's personal information and the biometric authentication card's identification information so that it is not deleted even during the zeroing process. As a result, according to this embodiment, the HSM can later confirm not only the processing details but also personal information that can identify the user. In addition, even if the HSM as a security device according to this embodiment is subjected to a security attack and the zeroing process is performed, the log data containing the user's personal information is not deleted, so the user who was using it up to the zeroing process can be reliably identified.

[0090] The program according to this embodiment may be transferred while stored in an electronic device such as a device, or it may be transferred without being stored in an electronic device. In the latter case, the program may be transferred via a network, or it may be transferred while stored in a storage medium. The storage medium is a non-temporary tangible medium. The storage medium is a computer-readable medium. The storage medium may be any medium that can store a program and is read by a computer, such as an optical disc or memory card, and its form is not limited. The electronic device downloads the program transferred (provided) via a network and installs it in memory, or reads the program from the storage medium and installs it in memory.

[0091] While several embodiments of the present invention have been described, these embodiments are presented as examples only and are not intended to limit the scope of the invention. These novel embodiments can be carried out in a variety of other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims of the invention and its equivalents. [Explanation of Symbols]

[0092] 1…Security system 11…Control device 12…HSM (Security Device) 13…Card reader / writer 14…Biometric authentication card (biometric authentication device) C…Main body 15…Personal Information Card 21… Processor 22...Memory 23...Display section 24...Operation unit 25… Communications Department 26… Interface 27… Interface 31…Processor (Second Processor) 32...Sensor 33…Interface (Second Interface) 34…Memory 37…Secure Memory 41…Control module 42... Biometric verification unit 51…Processor (First Processor) 54…Data memory 55…Communication interface (second interface) 61… Processor 62…Biosensors

Claims

1. A security system comprising a security device and a biometric authentication device, The biometric authentication device is A biosensor that acquires information about a person, A first interface that communicates with the security device, A first processor that performs mutual authentication with the biometric authentication device when the user's biometric information acquired by the biosensor matches the registered user's biometric information registered in the security device, The security device is A second interface for communicating with the biometric authentication device, The biometric authentication device includes a second processor that executes processing after successful mutual authentication with the biometric authentication device, in the event that the user's biometric authentication is successful with the biometric authentication device. Security system.

2. The security device further has a memory that holds the personal information of the registrant who registers biometric information with the biometric authentication device. When the second processor executes processing after successful mutual authentication with the biometric authentication device, it stores the log data containing the personal information in the memory. The security system according to claim 1.

3. The second processor stores log data including the personal information and the individual identification information of the biometric authentication device in the memory. The security system according to claim 2.

4. The second processor of the security device deletes stored data, excluding log data containing personal information, when a security attack is detected. The security system according to claim 2.

5. The aforementioned biometric authentication device is a biometric authentication card. The security system according to claim 1.

6. Authentication method in a security system comprising a security device and a biometric authentication device, The biometric authentication device performs biometric authentication using the user's biometric information and the registered user's biometric information registered in the security device. If the biometric authentication by the biometric authentication device is successful, mutual authentication is performed between the biometric authentication device and the security device. When mutual authentication between the biometric authentication device and the security device is successful, the security device executes processing in response to a processing request from the user whose biometric authentication was successful. How to use security devices.

7. Furthermore, the security device stores in memory the personal information of the registered person whose biometric information has been registered with the biometric authentication device. When the security device performs a process, log data containing the personal information is stored within the security device. A method for using the security device described in claim 6.

8. When the security device performs processing, log data including the personal information and the identification information of the biometric authentication device is stored within the security device. A method for using the security device described in claim 7.

9. If a security attack is detected on the security device, the security device will delete all stored data except for log data containing personal information. A method for using the security device described in claim 7.

Images