Electronic information storage medium and program

Abstract

To provide an electronic information storage medium and a program that can reduce risk on security when executing secure communication between terminals via a public network.SOLUTION: When a SIM acquires terminal information from terminals T at its start-up, the SIM performs authentication of the terminals T by using terminal authentication information stored in an NVM 14 and the terminal information acquired from the terminals T; when succeeding in authentication of the terminals T, the SIM acquires user information from the terminals T, and performs authentication of a user by using user authentication information stored in the NVM 14 and the user information acquired from the terminals T or causes the terminals T to perform authentication of the user; and when succeeding in authentication of the user, the SIM transmits, to the terminals T, a parameter for authentication used in authentication processing to be a premise for executing secure communication between the terminals T.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to the technical field of authentication methods for implementing secure communications between terminals over a public network. [Background technology]

[0002] In a public network such as the Internet, one method for realizing a secure session between end terminals is to transmit and receive data encrypted with a session key between the end terminals. In such a method, the session key needs to be shared between the end terminals in advance. Therefore, the session key is generally shared or derived before the session is established. Specifically, the session key is transferred or exchanged before the session is established between the end terminals, on the premise that the end terminals have exchanged their public keys or a common secret key in advance, or that the end terminals have a public key certificate certified by a trusted third party (e.g., a CA (Certification Authority)), and authentication of the end terminals is ensured in advance. For example, RFC (Request for Comments) 4567 specifies a protocol for transferring and exchanging session keys over SDP (Session Description Protocol) using S / MINE (Secure Multipurpose Internet Mail Extensions) and IPsec (Security Architecture for Internet Protocol), and by assuming that public keys have been exchanged in advance between end terminals, it prevents unauthorized use of key information through man-in-the-middle attacks.

[0003] However, the above-mentioned conventional technology has a problem that authentication at the end terminal must be ensured in advance when sharing (transferring, exchanging) a session key. For example, it is assumed that the end terminals have exchanged public keys or private keys with each other in advance, or that the end terminals have public key certificates certified by a trusted third party. Here, with regard to the former, it is often difficult to exchange keys in advance between arbitrary end terminals, and even if exchange is realized, a problem occurs in that a huge number of keys must be appropriately managed. Also, with regard to the latter, a problem occurs in that it is often difficult for all end terminals to have trusted public key certificates.

[0004] As a method for solving the above problem, for example, Patent Document 1 discloses a method in which a third-party authority device holds authentication information used to authenticate each of the requesting device and the responding device, and when it receives each authentication request from each of the requesting device and the responding device, it authenticates each of the requesting device and the responding device using the held authentication information, and if the authentication request by each of the requesting device and the responding device is successful, it transmits a session key to the requesting device and the responding device so that a session key is shared between the requesting device and the responding device, and the requesting device transmits an authentication request to the third-party authority device requesting that the requesting device be authenticated, and the responding device transmits an authentication request to the third-party authority device requesting that the responding device be authenticated. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent No. 4963425 Summary of the Invention [Problem to be solved by the invention]

[0006] However, in the method disclosed in Patent Document 1, authentication information such as an ID and a password is used to authenticate the end terminal before the session key is shared, so it is not possible to authenticate whether the terminal being used is legitimate. For example, if the above method is executed on a shared terminal that anyone can access, there is a security risk, such as the leakage of authentication information and session keys.

[0007] Therefore, the present invention has been made in consideration of the above points, and aims to provide an electronic information storage medium and program that can reduce security risks when secure communication is carried out between terminals via a public network. [Means for solving the problem]

[0008] In order to solve the above problem, the invention described in claim 1 is an electronic information storage medium mounted on a terminal, comprising: a memory for storing terminal information that has been approved as being authentic, user information that has been approved as being authentic, and authentication parameters used in an authentication process that is a prerequisite for the terminal to perform secure communication with another terminal via a public network; a first acquisition means for acquiring terminal information from a controller of the terminal when the electronic information storage medium is started; a first authentication means for authenticating the terminal using the terminal information stored in the memory and the terminal information acquired by the first acquisition means; and , Yu The authentication device further comprises: a second acquisition means for acquiring user information from a user; a second authentication means for authenticating the user using the user information stored in the memory and the user information acquired by the second acquisition means; and a transmission means for transmitting the authentication parameters to a controller of the terminal if the authentication of the user is successful.

[0009] The invention described in claim 2 is an electronic information storage medium mounted on a terminal, comprising: a memory for storing terminal information that has been approved as being authentic, user information that has been approved as being authentic, and authentication parameters used in an authentication process that is a prerequisite for the terminal to perform secure communication with another terminal via a public network; a first acquisition means for acquiring terminal information from a controller of the terminal when the electronic information storage medium is started up; a first authentication means for authenticating the terminal using the terminal information stored in the memory and the terminal information acquired by the first acquisition means; and a first authentication means for transmitting user information stored in the memory to the terminal when the authentication of the terminal is successful, and And Yu and a transmitting means for transmitting the authentication parameters to the controller of the terminal when authentication of the user performed by the controller using user information from the user is successful.

[0010] The invention described in claim 3 is characterized in that, in the electronic information storage medium described in claim 1 or 2, the transmission means further includes a third authentication means for transmitting an authentication request together with the authentication parameters to an authentication device provided in a private network via the controller of the terminal, and performing authentication processing with the authentication device using the authentication request as a trigger.

[0011] The invention described in claim 4 is characterized in that it executes the steps of: causing a computer included in a terminal equipped with the electronic information storage medium described in claim 1 or 2 to send an authentication request together with the authentication parameters sent from the electronic information storage medium to an authentication device provided in a private network; performing an authentication process with the authentication device using the authentication request as a trigger; and, if authentication is successful in the authentication process, performing a key exchange via the authentication device to generate a shared key to be used in the secure communication between the terminal and the other terminal. Effect of the Invention

[0012] According to the present invention, it is possible to reduce security risks when secure communication is carried out between terminals via a public network. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram illustrating an example of a schematic configuration of a communication system S. [Diagram 2] 1 is a diagram illustrating an example of a schematic configuration of a terminal T. [Diagram 3] FIG. 1 is a diagram illustrating an example of a schematic configuration of a SIM. [Figure 4] 10 is a sequence diagram showing a process flow when authenticating terminal T and a user using a SIM. [Diagram 5] 11 is a sequence diagram showing a process flow when authenticating terminal T using core. FIG. [Figure 6] 11 is a sequence diagram showing a process flow when key exchange is performed between terminals T using the core. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. The preferred embodiments described below are embodiments in which the present invention is applied to a communication system.

[0015] [1. Overview of communication system S] First, a schematic configuration of a communication system S according to the present embodiment will be described with reference to FIG. 1. FIG. 1 is a diagram showing a schematic configuration example of the communication system S. As shown in FIG. 1, the communication system S includes a terminal T1, a terminal T2, a private network NW1, and a public network NW2 such as the Internet. Here, the terminals T1 and T2 are, for example, mobile terminals such as smartphones. In the following description, when the terminals T1 and T2 are collectively referred to as terminals T, the description will be given for each of the terminals T1 and T2. The terminal T is equipped with a subscriber identity module (SIM). The SIM is an example of an electronic information storage medium of the present invention, and may be detachably mounted on the terminal T as an integrated circuit (IC) card, or may be an embedded universal integrated circuit card (eUICC) mounted (for example, soldered) on a board so that it cannot be easily removed or replaced from the terminal T.

[0016] The private network NW1 is a local communication network using technologies such as private LTE and local 5G, and is constructed in a specific area (for example, a factory) by a company other than a mobile communication operator (MNO). The private network NW1 is composed of a wireless network including an eNB (base station) and a core network including a core. The core performs the functions of an MME (Mobility Management Entity) and an AUC (Authentication Centre), and is an example of an authentication device provided in the private network NW1. In the private network NW1, authentication processing is performed using a SIM prepared by a network builder (i.e., a company other than a mobile communication operator). In such authentication processing, for example, an AKA authentication method known in ordinary technologies such as LTE and 5G may be used, and a shared secret key shared between the core side and the terminal T side is used as an authentication parameter. Such authentication parameters can be flexibly written into the SIM by the network builder.

[0017] FIG. 2 is a diagram showing an example of a schematic configuration of terminal T. As shown in FIG. 2, terminal T is configured to include an I / F unit 1, a wireless communication unit 2, a storage unit 3, an operation / display unit 4, and a control unit 5 (an example of a controller). Terminal T may also be equipped with a fingerprint sensor. The fingerprint sensor reads a fingerprint from the pad of a user's finger of terminal T, and outputs the fingerprint data to the control unit 5 as user information. In this way, the user information from the user is acquired by the control unit 5. The I / F unit 1 serves as an interface with the SIM. Examples of such interfaces include SPI (Serial Peripheral Interface), I 2 C (Inter-Integrated Circuit), or ISO 7816. Note that the control unit 5 and the SIM communicate with each other via the I / F unit 1 in accordance with, for example, an APDU (Application Protocol Data Unit) protocol.

[0018] The wireless communication unit 2 is composed of a communication module for connecting to the private network NW1 and a communication module for connecting to the public network NW2. The communication module for connecting to the private network NW1 has a modem that detects an eNB within the communication range of the private network NW1, and is capable of wireless communication with the eNB. On the other hand, the communication module for connecting to the public network NW2 has a short-range wireless function such as Wi-Fi (registered trademark), and is capable of wireless communication with a wireless router connected to the public network NW2.

[0019] The storage unit 3 is composed of, for example, a non-volatile memory, and stores an operating system and application programs (including the program of the present invention). The storage unit 3 stores terminal information of the terminal T in advance. The terminal information may be any information unique to the terminal T, and examples include an IMEI (International Mobile Equipment Identifier) ​​or a hash value generated from the IMEI. The operation and display unit 4 has an input function for receiving input from a user and a display function for displaying various information on a display (for example, a touch panel). The operation and display unit 4 outputs a password, etc. input by the user to the control unit 5 as user information. As a result, the user information from the user is acquired by the control unit 5.

[0020] The control unit 5 (an example of a computer) is composed of, for example, a central processing unit (CPU), a random access memory (RAM), and a read only memory (ROM). The control unit 5 connects to the SIM via the I / F unit 1 and communicates with the SIM. The control unit 5 transmits a start command (reset command) to the SIM via the I / F unit 1 to start (reset) the SIM at the start of communication. In response to this, after receiving an initial response (for example, an answer to reset (ATR)) from the SIM, the control unit 5 reads out terminal information from the storage unit 3 and transmits the terminal information to the SIM via the I / F unit 1. In response to this, the SIM uses the terminal information to authenticate the terminal T.

[0021] Then, when the authentication of the terminal T is successful, the control unit 5 transmits the user information acquired from the user through the operation and display unit 4 or the fingerprint sensor to the SIM via the I / F unit 1. In response to this, the SIM uses the user information to authenticate the user. Alternatively, when the authentication of the terminal T is successful, the control unit 5 may use the user information acquired from the user to authenticate the user. Then, when the authentication of the user is successful, the control unit 5 transmits an authentication request together with the authentication parameters acquired from the SIM via the wireless communication unit 2 to the core provided in the private network NW1, and performs authentication processing with the core using the authentication request as a trigger. When the authentication related to the authentication processing is successful in both the terminal T1 and the terminal T2, thereafter, secure communication with measures against eavesdropping and tampering is realized between the terminal T1 and the core, and between the terminal T2 and the core, and using such communication, key exchange for generating a shared key (session key) used in secure communication between the terminal T1 and the terminal T2 is performed using the core. This makes it possible to eliminate the need for prior issuance of a certificate or authentication by a trusted third party (eg, a CA).

[0022] Fig. 3 is a diagram showing an example of a schematic configuration of a SIM. As shown in Fig. 3, the SIM is configured to include an I / F unit 11, a RAM 12, a ROM 13, an NVM (Nonvolatile Memory) 14, and a CPU 15. The I / F unit 11 serves as an interface with a control unit 5 of a terminal T. When a start command (reset command) from the terminal T is received by the I / F unit 11, the SIM starts up and transmits an initial response to the terminal T via the I / F unit 11. The NVM 14 is a nonvolatile memory such as a flash memory. An operating system and application programs are stored in the ROM 13 or the NVM 14.

[0023] Furthermore, NVM14 (an example of memory) stores terminal information (hereinafter referred to as "terminal authentication information") that has been approved as being valid, user information (hereinafter referred to as "user authentication information") that has been approved as being valid, and authentication parameters used in authentication processing (e.g., AKA authentication) that is a prerequisite for implementing secure communication. Here, if the SIM is installed in terminal T1, the NVM14 stores terminal authentication information of terminal T1. On the other hand, if the SIM is installed in terminal T2, the NVM14 stores terminal authentication information of terminal T2. Note that the terminal and user are approved as being valid by, for example, a network builder of private network NW1 (i.e., a company other than a mobile communication operator).

[0024] The CPU 15 functions as a first acquisition means, a second acquisition means, a first authentication means, a second authentication means, a third authentication means, a transmission means, and a key exchange means in the present invention. Specifically, when the CPU 15 acquires (receives) terminal information from the control unit 5 of the terminal T via the I / F unit 11 at the time of starting up the SIM, the CPU 15 authenticates the terminal T using the terminal authentication information stored in the NVM 14 and the terminal information acquired from the control unit 5 of the terminal T. In authenticating the terminal T, for example, it is determined whether or not the terminal authentication information matches the terminal information, and if it is determined that they match, the authentication is successful, and thereafter, the function of a SIM is provided to the terminal T.

[0025] When the authentication of the terminal T is successful, the CPU 15 acquires user information from the control unit 5 of the terminal T via the I / F unit 11, and performs authentication of the user using the user authentication information stored in the NVM 14 and the user information acquired from the control unit 5 of the terminal T. In the user authentication, for example, it is determined whether the above-mentioned user authentication information and the above-mentioned user information match, and when it is determined that they match, the authentication is successful, and the user is permitted to use the terminal T thereafter. Alternatively, when the authentication of the terminal T is successful, the CPU 15 may transmit the user authentication information stored in the NVM 14 to the control unit 5 of the terminal T via the I / F unit 11. In this case, the control unit 5 of the terminal T authenticates the user using the user authentication information and the user information from the user, and the result is transmitted to the SIM, and the user is permitted to use the terminal T thereafter.

[0026] Then, if the user authentication is successful, the CPU 15 transmits the authentication parameters stored in the NVM 14 to the control unit 5 of the terminal T via the I / F unit 11. As a result, an authentication request is transmitted from the terminal T to the core together with the authentication parameters, and authentication processing is performed with the core. Note that, if the user authentication is successful, the CPU 15 may transmit an authentication request together with the authentication parameters to the core via the control unit 5 of the terminal T, and perform authentication processing with the core using the authentication request as a trigger. In this case, the control unit 5 of the terminal T will perform protocol conversion of the authentication parameters and authentication request from the SIM and transfer them to the core.

[0027] [2. Operation of communication system S] Next, the operation of the communication system S will be described.

[0028] (2.1. Authentication of terminal T and user using SIM) First, with reference to Fig. 4, authentication of terminal T and a user using a SIM will be described. Fig. 4 is a sequence diagram showing a process flow when authentication of terminal T and a user is performed using a SIM. In Fig. 4, when power is supplied to terminal T with a SIM mounted therein, or when a reset button provided on terminal T is pressed, control unit 5 transmits a start-up command (reset command) to the SIM via I / F unit 1 (step S1). When the SIM receives the start-up command from control unit 5, it starts up and transmits an initial response to control unit 5 via I / F unit 11 (step S2).

[0029] Next, when the control unit 5 receives the initial response from the SIM, it reads out the terminal information from the storage unit 3 and transmits an authentication command (for example, a VERIFY command APDU) including the read out terminal information to the SIM via the I / F unit 1 (step S3). When the SIM receives the authentication command from the control unit 5, it reads out the terminal authentication information from the NVM 14 and obtains the terminal information from the authentication command, and judges whether the terminal authentication information matches the terminal information (step S4). That is, authentication of the terminal T is performed. Then, when the SIM judges that the terminal authentication information does not match the terminal information (step S4: NO), it transmits a response indicating that the authentication of the terminal T has failed to the control unit 5 via the I / F unit 11 (step S5). In this case, the control unit 5 performs error processing, and thereafter, the function as a SIM is not provided to the terminal T. On the other hand, when the SIM judges that the terminal authentication information matches the terminal information (step S4: YES), it transmits a response indicating that the authentication of the terminal T has succeeded to the control unit 5 via the I / F unit 11 (step S6).

[0030] Next, when the control unit 5 receives a response from the SIM indicating successful authentication, it causes the operation / display unit 4 to display information prompting the user to input user information, and acquires the user information input by the user (step S7). Next, the control unit 5 transmits a request command (e.g., a GET DATA command APDU) indicating a request for user authentication information to the SIM via the I / F unit 1 (step S8). When the SIM receives the request command from the control unit 5, it reads out the user authentication information from the NVM 14, and transmits a response including the user authentication information to the control unit 5 via the I / F unit 11 (step S9).

[0031] Next, when the control unit 5 receives a response from the SIM, it acquires user authentication information from the response and judges whether the user authentication information matches the user information acquired in step S7 (step S10). That is, authentication of the user of the terminal T is performed. Then, when the control unit 5 judges that the user authentication information matches the user information (step S10: YES), it transmits a request command indicating a request for authentication parameters to the SIM via the I / F unit 1 (step S11). When the SIM receives the request command from the control unit 5, it reads authentication parameters from the NVM 14 and transmits a response including the authentication parameters to the control unit 5 via the I / F unit 11 (step S12). In this way, when the authentication parameters are transmitted from the SIM to the control unit 5, it proceeds to authentication of the terminal T using the core. Note that when it is judged that the user authentication information does not match the user information (step S10: NO), the control unit 5 performs error processing, and the user is not permitted to use the terminal T thereafter.

[0032] As another example of step S8, the control unit 5 may transmit to the SIM an authentication command including the user information acquired in step S7, instead of a request command. In this case, when the SIM receives the authentication command from the control unit 5, it reads out the user authentication information from the NVM 14 and acquires the user information from the authentication command, and determines whether the user authentication information matches the user information. If it is determined that the user authentication information matches the user information, the SIM transmits to the control unit 5 a response including the authentication parameters stored in the NVM 14.

[0033] (2.2. Authentication of terminal T using core) Next, with reference to FIG. 5, the authentication of terminal T using the core will be described. FIG. 5 is a sequence diagram showing a process flow when authentication of terminal T is performed using the core. In FIG. 5, when the control unit 5 of terminal T receives a response including authentication parameters from the SIM, it acquires the authentication parameters from the response and transmits an authentication request together with the authentication parameters to the core via the wireless communication unit 2 and the eNB (step S21). This starts authentication processing with the core. When the core receives the authentication parameters and the authentication request from terminal T, it calculates an authentication value using a predetermined algorithm (for example, an algorithm of the AKA authentication method) based on the authentication parameters (step S22). Next, the core transmits the calculation result indicating the authentication value calculated in step S22 and the authentication parameters to terminal T via the eNB (step S23).

[0034] Next, when the control unit 5 receives the calculation result and the authentication parameters from the core, it calculates an authentication value using a predetermined algorithm (the same algorithm as the algorithm used in step S22) based on the authentication parameters (step S24). Next, the control unit 5 checks the calculation result from the core (step S25). For example, it is checked whether the authentication value indicated in the calculation result from the core matches the authentication value calculated in step S24. Next, if it is confirmed that the two authentication values ​​match, the control unit 5 transmits the calculation result indicating the authentication value calculated in step S24 to the core via the wireless communication unit 2 and the eNB (step S26). Note that if the two authentication values ​​do not match, the process of step S26 is not performed.

[0035] Next, when the core receives the calculation result from terminal T, it checks the calculation result (step S27). For example, it is checked whether the authentication value indicated in the calculation result from terminal T matches the authentication value calculated in step S22. Next, if it is checked that the two authentication values ​​match, the core transmits an authentication result indicating successful authentication to terminal T via the eNB (step S28). In this way, when the authentication result indicating successful authentication is transmitted from the core to terminal T, the process proceeds to key exchange between terminals T using the core. Note that if the two authentication values ​​do not match, an authentication result indicating failed authentication is transmitted to terminal T.

[0036] (2.3. Key exchange between terminals T using core) Next, key exchange between terminals T (terminals T1 and T2) using the core will be described with reference to Fig. 6. Fig. 6 is a sequence diagram showing the process flow when key exchange is performed between terminals T using the core. Note that in the example of Fig. 6, it is assumed that authentication using the SIM (2.1) and authentication using the core (2.2) have been completed in each of terminals T1 and T2, as described above.

[0037] In Fig. 6, the control unit 5 of terminal T1, for which authentication (2.2) using the core has been successful, generates a key pair (public key A and private key A') unique to terminal T1 (step S31). Next, the control unit 5 of terminal T1 transmits a key sharing request together with the public key A included in the key pair generated in step S31 to the core via the wireless communication unit 2 and the eNB (step S32). When the core receives the public key A and the key sharing request from terminal T1, it transfers the public key A and the key sharing request via the eNB to terminal T2, for which authentication (2.2) using the core has been successful (step S33). Note that if authentication (2.2) of terminal T2 using the core has failed, information indicating a refusal of the key sharing request is returned to terminal T1.

[0038] Next, when the control unit 5 of terminal T2 receives public key A and the key agreement request from the core, it generates a key pair (public key B and private key B') unique to terminal T2 (step S34). Next, the control unit 5 of terminal T2 transmits a key agreement response together with public key B included in the key pair generated in step S34 to the core via the wireless communication unit 2 and the eNB (step S35). When the core receives public key B and the key agreement response from terminal T2, it transfers public key B and the key agreement response to terminal T1 via the eNB (step S36).

[0039] Next, when the control unit 5 of the terminal T1 receives the public key B and the key sharing response from the core, it generates a shared key (session key) with the terminal T2 based on the public key B and the private key A' included in the key pair generated in step S31 (step S37). Meanwhile, the control unit 5 of the terminal T2 generates a shared key (session key) with the terminal T1 based on the public key A received together with the key sharing request as described above and the private key B' included in the key pair generated in step S34 (step S38). The shared key is generated by a known key calculation method (for example, the ECDH (Elliptic curve Diffie-Hellman key exchange) calculation method). Thereafter, the terminals T1 and T2 perform secure communication using the generated common key.

[0040] As described above, according to the above embodiment, when the SIM acquires terminal information from terminal T at the time of startup, it authenticates terminal T using the terminal authentication information stored in NVM14 and the terminal information acquired from terminal T, and if the authentication of terminal T is successful, it acquires user information from terminal T and authenticates the user using the user authentication information stored in NVM14 and the user information acquired from terminal T, or terminal T authenticates the user, and if the authentication of the user is successful, it is configured to transmit to terminal T authentication parameters used in the authentication process that is a prerequisite for performing secure communication between terminals T, thereby reducing security risks when performing secure communication between terminals T via a public network. [Explanation of symbols]

[0041] 1 I / F section 2 Wireless Communication Section 3 Storage section 4 Operation / display section 5. Control section 11 I / F section 12 RAM 13 ROM 14 NVM 15 CPU T1 Terminal T2 Terminal NW1 Private Network NW2 Public Network S Communication Systems

Claims

1. An electronic information storage medium mounted on a terminal, a memory for storing terminal information that has been approved as being authentic, user information that has been approved as being authentic, and authentication parameters used in an authentication process that is a prerequisite for the terminal to perform secure communication with another terminal via a public network; a first acquisition means for acquiring terminal information from a controller of the terminal when the electronic information storage medium is started; a first authentication means for authenticating the terminal using the terminal information stored in the memory and the terminal information acquired by the first acquisition means; A second acquisition means for acquiring user information from a user when authentication of the terminal is successful; a second authentication means for authenticating the user using the user information stored in the memory and the user information acquired by the second acquisition means; a transmission means for transmitting the authentication parameters to a controller of the terminal if the authentication of the user is successful; An electronic information storage medium comprising:

2. An electronic information storage medium mounted on a terminal, a memory for storing terminal information that has been approved as being authentic, user information that has been approved as being authentic, and authentication parameters used in an authentication process that is a prerequisite for the terminal to perform secure communication with another terminal via a public network; a first acquisition means for acquiring terminal information from a controller of the terminal when the electronic information storage medium is started; a first authentication means for authenticating the terminal using the terminal information stored in the memory and the terminal information acquired by the first acquisition means; a transmitting means for transmitting user information stored in the memory to the terminal when authentication of the terminal is successful, and for transmitting the authentication parameters to the controller of the terminal when authentication of the user performed by the controller using the user information and user information from the user is successful; An electronic information storage medium comprising:

3. the transmission means transmits an authentication request together with the authentication parameters to an authentication device provided in a private network via a controller of the terminal; a third authentication means for performing an authentication process with the authentication device using the authentication request as a trigger; 3. The electronic information storage medium according to claim 1, further comprising:

4. A computer included in a terminal in which the electronic information storage medium according to claim 1 or 2 is installed, transmitting an authentication request together with the authentication parameters transmitted from the electronic information storage medium to an authentication device provided in a private network; performing an authentication process with the authentication device using the authentication request as a trigger; performing, when authentication is successful in the authentication process, a key exchange for generating a shared key to be used in the secure communication between the terminal and the other terminal via the authentication device; A program characterized by executing the above.

Images