Information processing device, information processing system, user pairing card, administrator pairing card, and information processing method

Abstract

To provide an information processing device, an information processing system, a user pairing card, and an information processing method that allow a plurality of persons to share and use a key device.SOLUTION: An information processing device includes a registration unit in which association information associating administrator information including administrator's address information and biometric information with user information including user's address information and biometric information is registered, a communication unit for performing communication between cards, and a determination unit for determining, based on association information registered in the registration unit, whether the card is a card in which an administrator pairing card and a user pairing card are associated with each other. If it is determined by the determination unit that the card is an associated card, a temporary key information generated by the administrator pairing card in order for a predetermined key device to verify a user pairing card is transmitted via the communication unit to the user pairing card.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an information processing device, an information processing system, and a user pairing card. , Administrator pairing card and an information processing method. [Background technology]

[0002] In recent years, card keys incorporating IC chips have become widely used. Card keys are mainly classified into contact cards that are inserted into a key device, and contactless cards that can be used to lock and unlock doors simply by bringing the card key close to the key device. Card keys are difficult to duplicate and have excellent security, and key devices that can be used to lock and unlock doors with card keys are used in a variety of devices and equipment.

[0003] Patent Document 1 discloses a card key for a vehicle in which a key identifier (ID) is registered in advance in the card key and the key device (on-board device), and the key device compares the key identifier contained in the signal received from the card key with the pre-registered key identifier, and if the two match, it authenticates that the card key is a genuine card key. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 2018-188084 Summary of the Invention [Problem to be solved by the invention]

[0005] It is possible that one key device may be shared by multiple people (e.g., family members, employees, etc.), but in Patent Document 1, the card key and key device have a one-to-one relationship based on an identifier, so multiple people cannot share and use the key device.

[0006] The present invention has been made in view of the above circumstances, and provides an information processing device, an information processing system, and a user pairing card that allow multiple people to share and use a key device. , Administrator pairing card and an information processing method. [Means for solving the problem]

[0007] The present application includes multiple means for solving the above-mentioned problems, and as one example, an information processing device includes a registration unit in which associated information associating administrator information, including the administrator's address information and biometric information, with user information, including the user's address information and biometric information, is registered, a communication unit for performing communication between cards, and a judgment unit for determining whether the administrator pairing card and the user pairing card are associated cards based on the associated information registered in the registration unit, and if the judgment unit determines that the cards are associated, it transmits temporary key information generated by the administrator pairing card to the user pairing card via the communication unit, so that a specified key device can verify the user pairing card. [Effects of the Invention]

[0008] According to the present invention, a key device can be shared and used by multiple people. [Brief explanation of the drawings]

[0009] [Figure 1] 1 is a diagram illustrating an example of a configuration of an information processing system according to an embodiment of the present invention. [Figure 2] 1 is a diagram illustrating an example of a method for providing an information processing device, a key device, an administrator pairing IC card, and a user pairing IC card. [Figure 3] FIG. 10 is a diagram illustrating a pairing process performed by the information processing device. [Figure 4] FIG. 10 is a diagram illustrating an example of operations by an administrator and a user during registration. [Figure 5] FIG. 10 is a diagram illustrating an example of a user registration process performed by an information processing device. [Figure 6]FIG. 10 is a diagram illustrating an example of related information. [Figure 7] FIG. 10 is a diagram illustrating an example of access levels of a key device. [Figure 8] FIG. 10 is a diagram illustrating an example of operations by an administrator and a user during key sharing. [Figure 9] FIG. 10 is a diagram illustrating an example of a key sharing process performed by an information processing device. [Figure 10] FIG. 10 is a diagram illustrating a key sharing process performed by an information processing device. [Figure 11] FIG. 10 is a diagram illustrating an example of an initial communication process between a user pairing IC card and a key device. [Figure 12] FIG. 10 is a diagram illustrating a communication process with a key device. [Figure 13] FIG. 10 is a diagram showing an example of a usage scene of a user pairing IC card and a key device. DETAILED DESCRIPTION OF THE INVENTION

[0010] The present invention will be described below with reference to the drawings showing embodiments thereof. FIG. 1 is a diagram showing an example of the configuration of an information processing system according to this embodiment. The information processing system includes an information processing device 50, a user pairing IC card 40, and a key device 70. The information processing system may include at least one of an administrator identity verification IC card 10, a user identity verification IC card 20, and an administrator pairing IC card 30. The information processing system shares (key sharing) a key (electronic key) for the key device 70 between IC cards (between pairing IC cards). By key sharing, the administrator can allow users to use the electronic key.

[0011] The administrator identity verification IC card 10 and the user identity verification IC card 20 can be used for identity verification, such as a driver's license or My Number card, and can be IC cards issued by public institutions, etc. The administrator identity verification IC card 10 is an identity verification IC card held by the administrator, and the user identity verification IC card 20 is an identity verification IC card held by the user.

[0012] The administrator identity verification IC card 10 includes a communication unit 11 and a storage unit 12. The communication unit 11 has a function for communicating with the information processing device 50, and may use wired communication or near field communication (NFC, Bluetooth, etc.). In other words, the administrator identity verification IC card 10 can communicate with the information processing device 50 by contact or contactless method.

[0013] The storage unit 12 is configured, for example, with a semiconductor memory, and can store a pre-shared key 13 and administrator information 14. The pre-shared key 13 functions as second identification information that identifies the administrator identification IC card 10 as a card for use with an electronic key. In other words, the pre-shared key 13 may be in any format as long as it is information that can authenticate that the card has been manufactured by a genuine manufacturer as a card dedicated to electronic keys.

[0014] The administrator information 14 includes address information 141 and biometric information 142. The address information 141 is the address information of the administrator himself / herself. The biometric information 142 is information for verifying the identity of the administrator, and includes, for example, fingerprint information, iris information, and face information.

[0015] The user identity verification IC card 20 includes a communication unit 21 and a storage unit 22. The communication unit 21 has a function for communicating with the information processing device 50, and may use wired communication or near field communication (NFC, Bluetooth, etc.). In other words, the user identity verification IC card 20 can communicate with the information processing device 50 by contact or contactless method.

[0016] The storage unit 22 is configured, for example, with a semiconductor memory, and can store a pre-shared key 23 and user information 24. The pre-shared key 23 functions as second identification information that identifies the user identification IC card 20 as a card for electronic key use. In other words, the pre-shared key 23 may be in any format as long as it is information that can authenticate that the card was manufactured by a genuine manufacturer as a card dedicated to electronic keys. The pre-shared key 23 may be the same information as the pre-shared key 13.

[0017] The user information 24 includes address information 241 and biometric information 242. The address information 241 is the address information of the user himself / herself. The biometric information 242 is information for verifying the identity of the user, and includes, for example, fingerprint information, iris information, and face information.

[0018] The administrator pairing IC card 30 is an IC card that is associated with the key device 70 and is used for pairing with the key device 70. By performing a pairing process, the administrator pairing IC card 230 and the key device 70 are associated with each other. This prevents locking and unlocking even if an unpaired IC card is brought close to the key device 70. In other words, the administrator pairing IC card 30 (card key) and the key device 70 can be associated safely and easily.

[0019] Furthermore, the administrator pairing IC card 30 can share keys with the user pairing IC card 40 through the information processing device 50. This allows the user pairing IC card 40 to function as a card key for the key device 70 without performing pairing processing with the key device 70, and allows the user pairing IC card 40 (card key) to be associated with the key device 70 safely and easily. Key sharing will be described in detail later.

[0020] The administrator pairing IC card 30 includes a communication unit 31, a storage unit 32, and an encryption / decryption / signature unit 35. The communication unit 31 has a function for communicating with the information processing device 50, and may use wired communication or short-range wireless communication. That is, the administrator pairing IC card 30 can communicate with the information processing device 50 by contact or contactless method. The communication unit 31 also has a function for short-range wireless communication with the key device 70.

[0021] The storage unit 32 is configured, for example, with a semiconductor memory, and can store a pre-shared key 33 and administrator information 34. The pre-shared key 33 functions as first identification information that identifies the administrator pairing IC card 30 as a card for electronic key use. In other words, the pre-shared key 33 may be information in any format as long as it can authenticate that the card was manufactured by a genuine manufacturer as a card dedicated to electronic keys. The pre-shared key 33 may be the same information as the pre-shared key 13, or may be different information.

[0022] The administrator information 34 includes address information 341 and biometric information 342. The administrator information 34 (address information 341 and biometric information 342) is the same as the administrator information 14 (address information 141 and biometric information 142).

[0023] When pairing with the key device 70 is completed, the encryption / decryption / signature unit 35 encrypts and decrypts information, generates a signature, and verifies the signature when transmitting and receiving information to and from the key device 70. In addition, the encryption / decryption / signature unit 35 encrypts and transmits temporary key information (described below) to the user pairing IC card 40 during key sharing.

[0024] The user pairing IC card 40 can function as a card key for the key device 70 by performing key sharing with the administrator pairing IC card 30 via the information processing device 50.

[0025] The user pairing IC card 40 includes a communication unit 41, a storage unit 42, and an encryption / decryption / signature unit 45. The communication unit 41 has a function for communicating with the information processing device 50, and may use wired communication or short-range wireless communication. That is, the user pairing IC card 40 can communicate with the information processing device 50 by contact or contactless method. The communication unit 41 also has a function for short-range wireless communication with the key device 70.

[0026] The storage unit 42 is configured, for example, by a semiconductor memory, and can store a pre-shared key 43. The pre-shared key 43 functions as first identification information that identifies the user pairing IC card 40 as a card for electronic key use. In other words, the pre-shared key 43 may be information in any format as long as it can authenticate that the card is manufactured by a genuine manufacturer as a card dedicated to electronic keys. The pre-shared key 43 may be the same information as the pre-shared key 33.

[0027] When key sharing is completed, the encryption / decryption / signature unit 45 encrypts and decrypts information, generates a signature, and verifies the signature when transmitting and receiving information to and from the key device 70. The encryption / decryption / signature unit 45 also decrypts the temporary key information received from the administrator pairing IC card 30 during key sharing.

[0028] The information processing device 50 includes a control unit 51 that controls the entire device, a communication unit 52, a card authentication unit 53, an administrator authentication unit 54, a user authentication unit 55, a determination unit 56, a pairing processing unit 57, an operation unit 58, a memory unit 59, a registration unit 62, a notification unit 63, and an attachment unit 64. The control unit 51 can be configured with a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), etc.

[0029] The storage unit 59 stores a pre-shared key 60 and administrator information 61. The administrator information 61 includes address information 611 and biometric information 612. The pre-shared key 60 can be the same information as the pre-shared keys 13, 23, 33, and 43. Furthermore, for example, if the pre-shared keys 13 and 33 are different, the pre-shared key 60 may include two pieces of information that are the same as the pre-shared keys 13 and 33. The administrator information 61 (address information 611 and biometric information 612) is the same as the administrator information 14 (address information 141 and biometric information 142) and the administrator information 34 (address information 341 and biometric information 342), respectively.

[0030] The communication unit 52 has a function of communicating with the administrator personal identification IC card 10, the user personal identification IC card 20, the administrator pairing IC card 30, the user pairing IC card 40, and the key device 70. The communication may be wired communication or short-range wireless communication. That is, the information processing device 50 can communicate with the administrator personal identification IC card 10, the user personal identification IC card 20, the administrator pairing IC card 30, the user pairing IC card 40, and the key device 70 by contact or contactless method.

[0031] The card authentication unit 53 has a function as a first card authentication unit, and authenticates the administrator pairing IC card 30 and the user pairing IC card 40, respectively, based on whether or not the administrator pairing IC card 30 and the user pairing IC card 40 each have a pre-shared key 60 stored in the storage unit 59. The card authentication unit 53 performs card authentication based on whether or not the pre-shared key 33 held by the administrator pairing IC card 30 matches the pre-shared key 60. The card authentication unit 53 also performs card authentication based on whether or not the pre-shared key 43 held by the user pairing IC card 40 matches the pre-shared key 60. This makes it possible to confirm that the administrator pairing IC card 30 and the user pairing IC card 40 are genuine cards created by genuine manufacturers (vendors).

[0032] The card authentication unit 53 functions as a second card authentication unit, and authenticates the administrator personal authentication IC card 10 and the user personal authentication IC card 20, respectively, based on whether or not the administrator personal authentication IC card 10 and the user personal authentication IC card 20 each have a pre-shared key 60 stored in the memory unit 59. The card authentication unit 53 performs card authentication based on whether or not the pre-shared key 13 held by the administrator personal authentication IC card 10 matches the pre-shared key 60. The card authentication unit 53 also performs card authentication based on whether or not the pre-shared key 23 held by the user personal authentication IC card 20 matches the pre-shared key 60. This makes it possible to confirm that the administrator personal authentication IC card 10 and the user personal authentication IC card 20 are genuine cards created by genuine manufacturers (vendors).

[0033] The administrator authentication unit 54 has a function as an acquisition unit, and authenticates the administrator of the administrator identification IC card 10 depending on whether the administrator information 14 acquired from the administrator identification IC card 10 and the biometric information acquired from the administrator via the operation unit 58 match with the administrator information 61 stored in the memory unit 59. The administrator authentication unit 54 also authenticates the administrator of the administrator pairing IC card 30 depending on whether the administrator information 34 acquired from the administrator pairing IC card 30 and the biometric information acquired from the administrator match with the administrator information 61 stored in the memory unit 59.

[0034] The user authentication unit 55 authenticates the user of the user identification IC card 20 based on the user information 24 held in the user identification IC card 20 and the biometric information acquired from the user.

[0035] The pairing processing unit 57 executes pairing between the administrator pairing IC card 30 and the key device 70 via the communication unit 52. By executing pairing, the pairing processing unit 57 can write pairing information for associating the administrator pairing IC card 30 and the key device 70 or information for generating pairing information to each of the administrator pairing IC card 30 and the key device 70. Specifically, the pairing information is written to the memory unit 32 of the administrator pairing IC card 30 and a memory unit 74 (described later) of the key device 70.

[0036] The pairing information may be, for example, an electronic key. The electronic key includes, for example, a key pair of a public key and a private key used in public key cryptography. That is, the pairing processing unit 57 generates a key pair K1 of a public key K1 and a private key K1, and a key pair K2 of a public key K2 and a private key K2. The pairing processing unit 57 transmits the public key K1 and the private key K2 to the administrator pairing IC card 30, and transmits the public key K2 and the private key K1 to the key device 70. Note that the electronic keys may be generated by the administrator pairing IC card 30 and the key device 70, respectively, using a method such as Diffie-Hellman key sharing.

[0037] By performing pairing, the administrator pairing IC card 30 and the key device 70 are associated with each other, and the electronic key of the administrator pairing IC card 30 can be used to lock and unlock the key device 70.

[0038] The operation unit 58 has a biometric authentication sensor and functions as a first reception unit and a second reception unit that receive input of biometric information of the administrator and the user. For example, when the administrator or the user touches the operation unit 58 with their finger, the operation unit 58 can acquire a fingerprint (biometric information). Note that the operation unit 58 may be provided with a camera in addition to (or instead of) the biometric authentication sensor to acquire facial information and iris information of the administrator and the user. The operation unit 58 also has a function of an operation button and can accept operations on the information processing device 50 by the administrator or the user.

[0039] The mounting unit 64 has a mechanism for detachably mounting a card. For example, the mounting unit 64 includes a card slot into which a card can be inserted, and by inserting a card into the card slot, the information processing device 50 is electrically connected to the card and can transmit and receive information to and from the card via the communication unit 52. Note that the mounting unit 64 is not limited to a card slot, and may have a configuration such as a touchpad that can transmit and receive information to and from the card in a contact or non-contact state.

[0040] The notification unit 63 can be configured with a liquid crystal display, an organic EL (Electro Luminescence) display, an LED, or other displays, etc. The notification unit 63 can notify the user of the insertion and removal of a card into the mounting unit 64.

[0041] The registration unit 62 registers related information that associates administrator information, including address information and biometric information of the administrator, with user information, including address information and biometric information of the user. The related information is generated (registered) by the administrator registering the user using the information processing device 50. The related information will be described in detail later.

[0042] The determination unit 56 determines, based on the associated information registered in the registration unit 62, whether the administrator pairing IC card 30 and the user pairing IC card 40 are associated cards.

[0043] If the determination unit 56 determines that the card is an associated card, the control unit 51 transmits temporary key information generated by the administrator pairing IC card 30 to the user pairing IC card 40 via the communication unit 52, so that the key device 70 can verify the user pairing IC card 40. The temporary key information is information used by the key device 70 to verify the user pairing IC card 40. If the key device 70 successfully verifies the temporary key information, the user pairing IC card 40 and the key device 70 are associated with each other, and the key device 70 can be locked and unlocked using the electronic key of the user pairing IC card 40. Details of the key device 70 will be described later.

[0044] That is, the administrator can share temporary key information with the user pairing IC card 40 of a user authorized by the administrator by performing a key sharing process using the administrator pairing IC card 30 that has been associated with the key device 70 through a pairing process in advance. This allows multiple parties (the administrator and users authorized by the administrator) to share and use the key device 70.

[0045] Next, the process of the information processing system of this embodiment will be described. First, the process of providing the information processing device 50, the key device 70, the administrator pairing IC card 30, and the user pairing IC card 40 will be described.

[0046] 2 is a diagram showing an example of a method for providing an information processing device 50, a key device 70, an administrator pairing IC card 30, and a user pairing IC card 40. The processes #P1 to #P12 are explained below. The administrator purchases, rents, or uses the key device 70 or a product that comes with the key device 70 (P1).

[0047] The administrator uses his / her own terminal device (e.g., a smartphone, tablet, personal computer, etc.) to send the administrator's identification information and address information to the authentication device (P2). Here, the identification information can be the administrator's biometric information, but any information that can be used to verify the administrator's identity can be used. The authentication device can be, for example, a server (e.g., a web server) that accepts authentication.

[0048] The authentication device receives the identification information and address information (P3) and performs administrator authentication (P4). If the authentication is unsuccessful, the process ends here. If the authentication is unsuccessful, the administrator may be notified that the authentication was unsuccessful. If the authentication is successful, the authentication device sends a provision instruction to the factory (P9). The factory is, for example, a factory where security is ensured, and various initial settings can be made before shipping the information processing device 50, the key device 70, the administrator pairing IC card 30, and the user pairing IC card 40.

[0049] At the factory, the pre-shared key 60 is written to the storage unit 59 of the information processing device 50 (P5). The pre-shared key 76 is written to the storage unit 74 of the key device 70 (P6). The pre-shared key 33 is written to the storage unit 32 of the administrator pairing IC card 30 (P7). The pre-shared key 43 is written to the storage unit 42 of the user pairing IC card 40 (P8). The pre-shared keys 33, 43, and 76 are each the same as the pre-shared key 60.

[0050] When the provision instruction is received in process P9, the information processing device 50 writes the administrator information 61 to the storage unit 59 (P10), and the administrator pairing IC card 30 writes the administrator information 34 to the storage unit 32 (P11). The administrator information includes the address information and biometric information transmitted from the administrator.

[0051] The information processing device 50 is shipped to an administrator or a pairing processing device provider, the key device 70 is shipped to an administrator or a key device provider, and the administrator pairing IC card 30 and the user pairing IC card 40 are shipped to the administrator or to both the administrator and the user (P12).

[0052] Next, the pairing process that is the prerequisite will be described.

[0053] 3 is a diagram showing the pairing process performed by the information processing device 50. The key device 70 includes a communication unit 71, a key unit 72, an encryption / decryption / signature unit 73, and a storage unit 74. The communication unit 71 has a function for communicating with the information processing device 50. The communication may be wired communication or short-range wireless communication. That is, the key device 70 can communicate with the information processing device 50 in a contact or contactless manner. The communication unit 71 also has a function for short-range wireless communication with the administrator pairing IC card 30 and the user pairing IC card 40.

[0054] The key unit 72 performs locking and unlocking. When pairing with the administrator pairing IC card 30 is completed, the encryption / decryption / signature unit 73 performs encryption and decryption of information, signature generation, and signature verification when transmitting and receiving information to and from the administrator pairing IC card 30. The storage unit 74 is configured, for example, by a semiconductor memory, and stores a pre-shared key 76.

[0055] As described above, a pairing process is performed in advance between the administrator pairing IC card 30 and the key device 70. As shown in FIG. 3 , after the pairing process is performed, an electronic key A36 is stored as pairing information in the storage unit 32 of the administrator pairing IC card 30. The electronic key A36 may be stored in a location other than the storage unit 32. Similarly, an electronic key A75 is stored as pairing information in the storage unit 74 of the key device 70. The electronic key A75 may be stored in a location other than the storage unit 74. The electronic keys A36 and A75 include, for example, a key pair of a public key and a private key used in public key cryptography.

[0056] Next, a description will be given in order of user registration by the administrator, key sharing, and initial communication with the key device 70. First, a description will be given of user registration by the administrator.

[0057] FIG. 4 is a diagram showing an example of operations performed by an administrator and a user during registration. The administrator operates the operation unit 58 to start the user registration process. The information processing device 50 outputs a guidance message through the notification unit 63. The guidance message may be displayed in text or output as audio. The guidance message may be, for example, "User registration will be performed. Please insert the administrator identification IC card and the user identification IC card." However, this is not limited to this. Following the guidance message, the administrator inserts the administrator identification IC card 10 into the insertion unit 64, and the user inserts the user identification IC card 20 into the insertion unit 64. This allows the information processing device 50 to communicate with both the administrator identification IC card 10 and the user identification IC card 20 and perform the user registration process.

[0058] FIG. 5 is a diagram showing an example of user registration processing by the information processing device 50. The processes of #P21 to #P37 will be described below. The information processing device 50 requests IC card authentication information from the administrator personal identification IC card 10 (P21). The information processing device 50 acquires the IC card authentication information from the administrator personal identification IC card 10 (P22). Here, the IC card authentication information is the pre-shared key 13. The information processing device 50 performs IC card authentication depending on whether the pre-shared key 13 matches the pre-shared key 60 stored in the storage unit 59 (P23).

[0059] If the IC card authentication is successful, a secret communication path is established between the information processing device 50 and the administrator personal identification IC card 10 using the pre-shared key (P24). The information processing device 50 requests administrator information from the administrator personal identification IC card 10 (P25). The information processing device 50 acquires the administrator information from the administrator personal identification IC card 10 (P26). The administrator information includes address information 141 and biometric information 142. The information processing device 50 also acquires the administrator's biometric information (P27). Here, the notification unit 63 can output a guide to the administrator to touch the operation unit 58 with a finger. This proves that the administrator is actually near the information processing device 50, thereby preventing impersonation and the like.

[0060] The information processing device 50 performs administrator authentication depending on whether the acquired administrator information and biometric information match the administrator information 61 stored in the storage unit 59 (P28). If the administrator authentication is successful, the information processing device 50 requests IC card authentication information from the user identity verification IC card 20 (P29). The information processing device 50 acquires the IC card authentication information from the user identity verification IC card 20 (P30). Here, the IC card authentication information is the pre-shared key 23. The information processing device 50 performs IC card authentication depending on whether the pre-shared key 23 matches the pre-shared key 60 stored in the storage unit 59 (P31).

[0061] If the IC card authentication is successful, a secret communication path is established between the information processing device 50 and the user identity verification IC card 20 using the pre-shared key (P32). The information processing device 50 requests user information from the user identity verification IC card 20 (P33). The information processing device 50 acquires the user information from the user identity verification IC card 20 (P34). The user information includes address information 241 and biometric information 242. The information processing device 50 also acquires the user's biometric information (P35). Here, the notification unit 63 can output a guide to the user to touch the operation unit 58 with a finger. This proves that the user is actually present near the information processing device 50, thereby preventing impersonation and the like.

[0062] The information processing device 50 performs user authentication based on whether the biometric information 242 acquired from the user identification IC card 20 matches the biometric information acquired from the user himself / herself (P36). If the user authentication is successful, the information processing device 50 registers the user information (P37). That is, the information processing device 50 registers associated information that associates the administrator information 14 including the administrator's address information 141 and biometric information 142 with the user information 24 including the user's address information 241 and biometric information 242.

[0063] The determination unit 56 can determine whether the administrator pairing IC card 30 and the user pairing IC card 40 are associated cards depending on whether the biometric information received by the operation unit 58 matches the user's biometric information registered in the registration unit 62.

[0064] The registration unit 62 can register related information when the user authentication unit 55 has successfully authenticated the user himself / herself. Furthermore, when the user authentication unit 55 has successfully authenticated the user himself / herself, the registration unit 62 can register the user information including the user ID (user identification information) unique to the user.

[0065] FIG. 6 is a diagram showing an example of related information. As shown in FIG. 6, an administrator can register multiple users. The multiple users may be family members, employees in the same department or related departments, or people in charge of an organization or group. The user information of each user is linked to the administrator information of the administrator. The user information includes a user ID (user identification information) for identifying the user, the user's address information, and biometric information. If the users are family members, the address information of each user may match.

[0066] The control unit 51 has a function as a setting unit and can set an access level for the key device 70 in association with a user ID. The access level may be set by an administrator via the operation unit 58 for each registered user, for example.

[0067] FIG. 7 illustrates an example of access levels for the key device 70. When multiple locations can be locked and unlocked using the key device 70, the range of access that can be locked and unlocked can be varied depending on the access level. For example, access levels 1 to 3 can be defined, with the restricted access range increasing in order of access level 1, 2, and 3. In the example of FIG. 7, users with IDs 001, 002, and 003 have access levels 1, 2, and 3, respectively. User ID 003 has the most restricted access range. The access range can be, for example, but is not limited to, the range of access within a vehicle (opening / closing doors, starting the engine, operating lights, etc.), the range of access within a building (sections, rooms, etc.), the range of in-house equipment that can be operated, and so on. This allows the administrator to restrict the access rights of users and also to vary the access rights depending on the user.

[0068] Next, key sharing will be described. By using key sharing, it is possible to create a user pairing IC card 40 in which temporary key information authenticated by the key device 70 is written, so that the user pairing IC card 40 can be provided to a user authorized by an administrator.

[0069] FIG. 8 is a diagram showing an example of operations performed by an administrator and a user during key sharing. The administrator operates the operation unit 58 to start the key sharing process. The information processing device 50 outputs a guidance message through the notification unit 63. The guidance message may be displayed in text or output as audio. The guidance message may be, for example, "Key sharing will be performed. Please insert the administrator pairing IC card and the user pairing IC card." However, this is not limiting. Following the guidance message, the administrator attaches (inserts) the administrator pairing IC card 30 into the attachment unit 64, and the user attaches (inserts) the user pairing IC card 40 into the attachment unit 64. This allows the information processing device 50 to communicate with each of the administrator pairing IC card 30 and the user pairing IC card 40 and perform the key sharing process.

[0070] 9 is a diagram showing an example of key sharing processing by the information processing device 50. The processes of #P51 to #P70 will be described below. The information processing device 50 requests IC card authentication information from the IC card 30 for administrator pairing (P51). The information processing device 50 acquires the IC card authentication information from the IC card 30 for administrator pairing (P52). Here, the IC card authentication information is the pre-shared key 33. The information processing device 50 performs IC card authentication depending on whether the pre-shared key 33 matches the pre-shared key 60 stored in the storage unit 59 (P53).

[0071] If the IC card authentication is successful, a secret communication path is established between the information processing device 50 and the administrator pairing IC card 30 using the pre-shared key (P54). The information processing device 50 requests administrator information from the administrator pairing IC card 30 (P55). The information processing device 50 acquires the administrator information from the administrator pairing IC card 30 (P56). The administrator information includes address information 341 and biometric information 342. The information processing device 50 also acquires the administrator's biometric information (P57). Here, the notification unit 63 can output a guide to the administrator to touch the operation unit 58 with a finger. This proves that the administrator is actually present near the information processing device 50, thereby preventing impersonation and the like.

[0072] The information processing device 50 performs administrator authentication depending on whether the acquired administrator information and biometric information match administrator information 61 stored in the storage unit 59 (P58). If administrator authentication is successful, the information processing device 50 requests IC card authentication information from the user pairing IC card 40 (P59). The information processing device 50 acquires IC card authentication information from the user pairing IC card 40 (P60). Here, the IC card authentication information is the pre-shared key 43. The information processing device 50 performs IC card authentication depending on whether the pre-shared key 43 matches the pre-shared key 60 stored in the storage unit 59 (P61).

[0073] If the IC card authentication is successful, a secret communication path is established between the information processing device 50 and the user pairing IC card 40 using the pre-shared key (P62). The information processing device 50 acquires the user's biometric information (P63). Here, the notification unit 63 can output a guide to the user to touch the operation unit 58 with a finger. This proves that the user is actually in the vicinity of the information processing device 50, thereby preventing impersonation and the like.

[0074] The information processing device 50 searches for user information linked to the administrator information (P64). That is, the information processing device 50 searches for related information registered in the registration unit 62 and determines whether or not the same biometric information as the biometric information acquired through the operation unit 58 is present in the user information associated with the administrator information. If the same biometric information as the biometric information acquired through the operation unit 58 is present, the information processing device 50 transmits the user information to the user pairing IC card 40 (P65). The transmitted user information includes the user ID, the user's address information, and the biometric information. As a result, the user information is registered in the user pairing IC card 40.

[0075] In other words, if the information processing device 50 determines that the card is an associated card by the judgment unit 56, it can transmit the user information registered in the registration unit 62 to the user pairing IC card 40 via the communication unit 52.

[0076] The information processing device 50 establishes a secret communication path between the administrator pairing IC card 30 and the user pairing IC card 40 via the communication unit 52 (P66). Specifically, to establish the secret communication path, the information processing device 50 can instruct the administrator pairing IC card 30 and the user pairing IC card 40 to generate a session key. To generate the session key, for example, a method such as the Diffie-Hellman key sharing method (DH method) can be used. The DH method is an algorithm that generates a common number using a pair of a private number and a public number, and can generate a common key (session key) that has the generated common number as information.

[0077] The information processing device 50 requests the administrator pairing IC card 30 to create temporary key information for the key device 70 (P67). In the first communication with the user pairing IC card 40, the key device 70 verifies the temporary key information held by the user pairing IC card 40.

[0078] The administrator pairing IC card 30 generates temporary key information (P68). The temporary key information is accompanied by a digital signature using the electronic key A36 that was generated when the administrator pairing IC card 30 and the key device 70 performed the pairing process. This makes it possible to guarantee that the temporary key information was generated by a genuine administrator pairing IC card 30.

[0079] The administrator pairing IC card 30 encrypts the generated temporary key information using the session key and transmits the encrypted temporary key information to the information processing device 50 (P69). The information processing device 50 transmits the encrypted temporary key information to the user pairing IC card 40 (P70).

[0080] As described above, if the information processing device 50 determines that the card is an associated card by the judgment unit 56, it can transmit the temporary key information with an electronic signature generated by the administrator pairing IC card 30 to the user pairing IC card 40 via the communication unit 52.

[0081] In addition, if the information processing device 50 determines that the card is an associated card by the judgment unit 56, it can transmit temporary key information encrypted with the session key generated by the administrator pairing IC card 30 to the user pairing IC card 40 via the communication unit 52.

[0082] Furthermore, as described above, the information processing method of this embodiment registers, by the registration unit 62, related information that associates administrator information, including the administrator's address information and biometric information, with user information, including the user's address information and biometric information, and determines whether the administrator pairing IC card 30 and the user pairing IC card 40 are related cards based on the registered related information.If it is determined that the cards are related, the temporary key information generated by the administrator pairing IC card 30 is transmitted to the user pairing IC card 40 via the communication unit 52, which communicates between the cards, so that the key device 70 can verify the user pairing IC card.

[0083] 10 is a diagram showing key sharing processing by the information processing device 50. As shown in Fig. 10, by performing the key sharing processing, the user pairing IC card 40 stores user information 44 including a user ID 441, address information 442, and biometric information 443 in the storage unit 42. The user pairing IC card 40 also stores temporary key information 46 (the same as temporary key information 37) acquired from the administrator pairing IC card 30 in the storage unit 42. A digital signature using the electronic key A36 generated when the administrator pairing IC card 30 and the key device 70 performed the pairing processing is attached to the temporary key information 46.

[0084] Next, the initial communication between the user pairing IC card 40 and the key device 70 will be described.

[0085] FIG. 11 is a diagram showing an example of the initial communication process between the user pairing IC card 40 and the key device 70. The processes of #P81 to #P88 are explained below. The key device 70 requests IC card authentication information from the user pairing IC card 40 (P81). The key device 70 acquires the IC card authentication information from the user pairing IC card 40 (P82). Here, the IC card authentication information is the pre-shared key 43. The key device 70 performs IC card authentication depending on whether the pre-shared key 43 matches the pre-shared key 76 stored in the storage unit 74 (P83).

[0086] If IC card authentication is successful, a secret communication path is established between the user pairing IC card 40 and the key device 70 using the pre-shared key (P84). The key device 70 requests temporary key information from the user pairing IC card 40 (P85). The user pairing IC card 40 transmits the temporary key information and the user ID to the key device 70 (P86). In future communications with the user pairing IC card 40, the key device 70 can identify the user pairing IC card 40 by the user ID.

[0087] The key device 70 verifies the temporary key information (P87). If the electronic signature attached to the temporary key information matches the electronic signature generated by the administrator pairing IC card 30, it can be confirmed that the temporary key information was generated by the authentic administrator pairing IC card 30. If the verification of the temporary key information is successful, the user pairing IC card 40 and the key device 70 share an electronic key (P88). The electronic key includes, for example, a key pair of a public key and a private key used in public key cryptography. Thereafter, the user pairing IC card 40 and the key device 70 are associated with each other, and the key device 70 can be locked and unlocked using the electronic key of the user pairing IC card 40.

[0088] As described above, in the information processing system of this embodiment, the user pairing IC card 40 receives, via the information processing device 50, temporary key information generated by the administrator pairing IC card 30 and used by the key device 70 to verify the user pairing IC card 40 from the administrator pairing IC card 30 at the communication unit 41, and transmits the received temporary key information to the key device 70 via the communication unit 41. The key device 70 receives the temporary key information at the communication unit 71 and verifies the temporary key information at the encryption / decryption / signature unit 73 serving as a verification unit. If the encryption / decryption / signature unit 73 successfully verifies the temporary key information, the user pairing IC card 40 and the key device 70 can share the electronic key A1 as the first electronic key.

[0089] The key device 70 also includes a storage unit 74 that stores an electronic key A75 (second electronic key) shared with the administrator pairing IC card 30 through the pairing process, and the encryption / decryption / signature unit 73 can verify, based on the electronic key A75, the electronic signature attached to the temporary key information generated by the administrator pairing IC card 30. This makes it possible to confirm that the temporary key information is information obtained from the administrator pairing IC card 30 through legitimate procedures.

[0090] The user pairing IC card 40 also includes a communication unit 41 (receiving unit) that receives, from the administrator pairing IC card 30, temporary key information generated by the administrator pairing IC card 30 and used by the key device 70 to verify the user pairing IC card 40, and the communication unit 41 transmits the received temporary key information to the key device 70. The key device 70 verifies the temporary key information, and if the verification is successful, the user pairing IC card 40 can share an electronic key with the key device 70.

[0091] FIG. 12 is a diagram showing the communication process with the key device 70. The temporary key information stored in the storage unit 42 of the user pairing IC card 40 contains an electronic signature generated using electronic key A, and the key device 70 can verify the temporary key information 46 obtained from the user pairing IC card 40 using electronic key A75. The key device 70 also stores a user ID 771 in the storage unit 74. The user ID 771 can be used to identify the user pairing IC card 40. The user pairing IC card 40 and the key device 70 also share electronic keys A147 and A772.

[0092] FIG. 13 is a diagram showing an example of a usage scenario of the user pairing IC card 40 and the key device 70. The user IDs of three users registered by the administrator are ID=01, 02, and 03. Each user has their own user pairing IC card 40. The access level to the vehicle is set according to the user ID. For example, user ID=01 is permitted to access all functions such as door opening / closing, engine start, and display. User ID=02 is permitted only to door opening / closing. User ID=03 is not permitted only to start the engine.

[0093] As described above, according to this embodiment, secret information such as temporary key information can be securely transmitted offline from the administrator pairing IC card 30 (corresponding to a parent card) to one or more user pairing IC cards 40 (corresponding to child cards) using the small, portable information processing device 50. Since temporary key information verified by the key device 70 is written in the user pairing IC card 40, the user pairing IC card 40 can be created without requiring input of a password or the like.

[0094] Furthermore, as a preliminary process before the key sharing process, the identity authentication of the administrator and the user is performed based on official cards such as the administrator identity verification IC card 10 and the user identity verification IC card 20, thereby realizing safe and reliable key sharing with official card information as the root of trust. Furthermore, since the administrator and the user provide their own biometric information to the information processing device 50, it is possible to confirm that the administrator and the user are near the information processing device 50, thereby preventing impersonation and further improving safety.

[0095] The information processing device of this embodiment includes a registration unit in which associated information associating administrator information, including the administrator's address information and biometric information, with user information, including the user's address information and biometric information, is registered; a communication unit that performs communication between cards; and a judgment unit that determines whether the administrator pairing card and the user pairing card are associated cards based on the associated information registered in the registration unit.If the judgment unit determines that the cards are associated, it transmits temporary key information generated by the administrator pairing card to the user pairing card via the communication unit, so that a specified key device can verify the user pairing card.

[0096] The information processing device of this embodiment includes a memory unit that stores first identification information that identifies the card as an electronic key card, and a first card authentication unit that authenticates each of the administrator pairing card and the user pairing card based on whether or not each of the administrator pairing card and the user pairing card has the first identification information stored in the memory unit.

[0097] The information processing device of this embodiment includes a memory unit that stores second identification information that identifies the card as an electronic key card, and a second card authentication unit that authenticates each of the administrator identity verification card and the user identity verification card based on whether or not each of the administrator identity verification card and the user identity verification card has the second identification information stored in the memory unit.

[0098] The information processing device of this embodiment includes a first reception unit that receives input of biometric information of an administrator, an acquisition unit that acquires the administrator information from the administrator pairing card, and an administrator authentication unit that authenticates the administrator of the administrator pairing card based on the administrator information acquired by the acquisition unit, the biometric information accepted by the first reception unit, and the administrator information registered in the registration unit.

[0099] The information processing device of this embodiment includes a second reception unit that receives input of a user's biometric information, and the judgment unit determines whether the administrator pairing card and the user pairing card are associated cards depending on whether the biometric information received by the second reception unit matches the user's biometric information registered in the registration unit.

[0100] The information processing device of this embodiment includes a memory unit that stores administrator information including the administrator's address information and biometric information, and an acquisition unit that acquires the administrator information from an administrator identification card, and the administrator authentication unit authenticates the administrator of the administrator identification card based on the administrator information acquired by the acquisition unit, the biometric information accepted by the first acceptance unit, and the administrator information stored in the memory unit.

[0101] The information processing device of this embodiment includes an acquisition unit that acquires user information from a user identity verification card, and a user authentication unit that authenticates the user of the user identity verification card based on the biometric information accepted by the second acceptance unit and the user information acquired by the acquisition unit.

[0102] In the information processing apparatus of this embodiment, the registration unit registers the related information when the user authentication unit has successfully authenticated the user himself / herself.

[0103] In the information processing apparatus of this embodiment, when the user authentication unit has successfully authenticated the user, the registration unit registers the user information by including user identification information unique to the user.

[0104] The information processing apparatus of this embodiment includes a setting unit that sets an access level for the key device in association with the user identification information.

[0105] In the information processing device of this embodiment, if the judgment unit determines that the card is an associated card, it transmits the user information registered in the registration unit to the user pairing card via the communication unit.

[0106] In the information processing device of this embodiment, if the judgment unit determines that the card is an associated card, it sends temporary key information with an electronic signature generated by the administrator pairing card to the user pairing card via the communication unit.

[0107] In the information processing device of this embodiment, if the judgment unit determines that the card is an associated card, it sends temporary key information encrypted with the session key generated by the administrator pairing card to the user pairing card via the communication unit.

[0108] The information processing device of this embodiment includes a mounting unit for mounting a card in a detachable manner, and a notification unit for notifying a user of a guide for mounting or removing the card in the mounting unit.

[0109] The information processing system of this embodiment is an information processing system comprising the above-mentioned information processing device, a user pairing card, and a key device, wherein the user pairing card comprises a receiving unit that receives temporary key information generated by the administrator pairing card from the administrator pairing card via the information processing device, for the key device to verify the user pairing card, and a transmitting unit that transmits the temporary key information received by the receiving unit to the key device, the key device comprises a verification unit that receives and verifies the temporary key information, and the user pairing card and the key device share a first electronic key if verification is successful by the verification unit.

[0110] In the information processing system of this embodiment, the key device includes a memory unit that stores a second electronic key shared with the administrator pairing card, and the verification unit verifies the electronic signature attached to the temporary key information generated by the administrator pairing card based on the second electronic key.

[0111] The user pairing IC card of this embodiment includes a receiving unit that receives temporary key information generated by the administrator pairing card from the administrator pairing card for a specific key device to verify the user pairing card, and a transmitting unit that transmits the temporary key information received by the receiving unit to the key device, and when the key device verifies the temporary key information, an electronic key is shared with the key device.

[0112] In the information processing method of this embodiment, a registration unit registers related information that associates administrator information, including the administrator's address information and biometric information, with user information, including the user's address information and biometric information, and determines whether the administrator pairing card and the user pairing card are related cards based on the registered related information.If it is determined that the cards are related cards, a communication unit that communicates between cards transmits temporary key information generated by the administrator pairing card to the user pairing card so that a specified key device can verify the user pairing card. [Explanation of symbols]

[0113] 10. IC card for administrator identification 11 Communications Department 12 Storage section 13 Pre-shared key 14 Administrator information 141 Address Information 142 Biometric Information 20. IC card for user identification 21 Communications Department 22 Memory section 23 Pre-shared key 24 User information 241 Address Information 242 Biometric Information 30 Administrator pairing IC card 31 Communications Department 32 Storage section 33 Pre-shared key 34 Administrator information 341 Address Information 342 Biometric Information 35 Encryption, Decryption, and Signature 36 Electronic key A 37 Temporary Key Information 40 User pairing IC card 41 Communications Department 42 Storage section 43 Pre-shared key 44 User information 441 User ID 442 Address Information 443 Biometric Information 45 Encryption, Decryption, and Signature 46 Temporary Key Information 47 Electronic key A1 50 Information processing equipment 51 Control section 52 Communications Department 53 Card Authentication Department 54 Administrator authentication section 55 User authentication unit 56 Judgment section 57 Pairing processing unit 58 Control section 59 Memory section 60 pre-shared key 61 Administrator information 611 Address Information 612 Biometric Information 62 Registration Department 63 Notification Department 64 Mounting part 70 Key Devices 71 Communications Department 72 Keys 73 Encryption, Decryption, and Signature 74 Memory section 75 Electronic key A 76 Pre-shared key 77 User information 771 User ID 772 Electronic key A1

Claims

1. a registration unit in which associated information is registered, the associated information being administrator information including address information and biometric information of the administrator and user information including address information and biometric information of the user; a communication unit for performing communication between cards; a storage unit that stores first identification information that identifies the card as an electronic key; a first card authentication unit that authenticates each of the administrator pairing card and the user pairing card based on whether or not each of the administrator pairing card and the user pairing card has first identification information stored in the storage unit; a reception unit that receives input of biometric information of a user; a determination unit that determines whether or not the biometric information received by the reception unit matches the biometric information of the user registered in the registration unit; Equipped with When the authentication is successful in the first card authentication unit and the determination unit determines that the biometric information matches, the administrator transmits temporary key information generated by the administrator pairing card to the user pairing card via the communication unit, so that a predetermined key device can verify the user pairing card. Information processing device.

2. a storage unit that stores second identification information that identifies the card as an electronic key; a second card authentication unit that authenticates each of the administrator personal identification card and the user personal identification card based on whether or not each of the administrator personal identification card and the user personal identification card has second identification information stored in the storage unit; Equipped with The information processing device according to claim 1 .

3. a first reception unit that receives input of biometric information of an administrator; an acquisition unit that acquires administrator information from the administrator pairing card; an administrator authentication unit that authenticates the administrator of the administrator pairing card based on the administrator information acquired by the acquisition unit, the biometric information accepted by the first acceptance unit, and the administrator information registered in the registration unit; Equipped with 3. The information processing device according to claim 1.

4. a storage unit that stores administrator information including address information and biometric information of the administrator; an acquisition unit for acquiring administrator information from an administrator identification card; Equipped with The administrator authentication unit authenticating the administrator of the administrator identification card based on the administrator information acquired by the acquisition unit, the biometric information accepted by the first acceptance unit, and the administrator information stored in the storage unit; The information processing device according to claim 3 .

5. an acquisition unit that acquires user information from a user identification card; a user authentication unit that authenticates the user of the user identification card based on the biometric information received by the reception unit and the user information acquired by the acquisition unit; Equipped with The information processing device according to claim 1 .

6. The registration unit If the user authentication unit successfully authenticates the user, the related information is registered. The information processing device according to claim 5 .

7. The registration unit If the user authentication unit successfully authenticates the user, the user's unique user identification information is included in the user information and registered.

7. The information processing device according to claim 5 or 6.

8. a setting unit that sets an access level for the key device in association with the user identification information; The information processing device according to claim 7 .

9. If the determination unit determines that the biometric information matches, the user information registered in the registration unit is transmitted to the user pairing card via the communication unit. The information processing device according to claim 1 .

10. If the determination unit determines that the biometric information matches, the administrator pairing card transmits temporary key information with an electronic signature generated by the administrator pairing card to the user pairing card via the communication unit. The information processing device according to claim 1 .

11. If the determination unit determines that the biometric information matches, the administrator pairing card transmits temporary key information encrypted with a session key generated by the administrator pairing card to the user pairing card via the communication unit. The information processing device according to claim 1 .

12. a mounting portion for detachably mounting a card; a notification unit that notifies a guide for inserting or removing a card into or from the mounting unit; Equipped with The information processing device according to claim 1 .

13. 13. An information processing system comprising the information processing device according to claim 1, a user pairing card, and a key device, The user pairing card is a receiving unit that receives, via the information processing device, from the administrator pairing card, temporary key information generated by the administrator pairing card for the key device to verify the user pairing card; a transmitting unit that transmits the temporary key information received by the receiving unit to the key device; Equipped with The key device a verification unit that receives and verifies the temporary key information, The user pairing card and the key device If the verification is successful, the first electronic key is shared. Information processing system.

14. The key device a storage unit that stores a second electronic key shared with the administrator pairing card; The verification unit verifying, based on the second electronic key, an electronic signature attached to the temporary key information generated by the administrator pairing card; The information processing system according to claim 13.

15. a receiving unit that receives, from the administrator pairing card, temporary key information generated by the administrator pairing card and used by a predetermined key device to verify the user pairing card; a transmitting unit that transmits the temporary key information received by the receiving unit to the key device; Equipped with If the key device verifies the temporary key information, an electronic key is shared with the key device. User pairing card.

16. A generation unit that generates temporary key information to which an electronic signature using an electronic key generated when an administrator pairing card and a key device perform a pairing process is attached; an encryption unit that encrypts the temporary key information using a session key; a transmitting unit that transmits the encrypted temporary key information to the user pairing card via the information processing device; Equipped with Administrator pairing card.

17. registering, by a registration unit, associated information that associates administrator information, including address information and biometric information of the administrator, with user information, including address information and biometric information of the user; storing first identification information that identifies the card as an electronic key card in a storage unit; authenticating the administrator pairing card and the user pairing card based on whether or not each of the administrator pairing card and the user pairing card has first identification information stored in the storage unit; Accept the input of the user's biometric information, determining whether the received biometric information matches the biometric information of the user registered in the registration unit; When it is determined that the authentication of each of the administrator pairing card and the user pairing card is successful and that the biometric information matches, the administrator pairing card transmits temporary key information generated by the administrator pairing card to the user pairing card via a communication unit that performs communication between cards, so that a predetermined key device can verify the user pairing card. Information processing methods.

Images