Security system and method for using security device

Abstract

This security system is provided with a security device and a biometric authentication device. The biometric authentication device is provided with a biometric sensor, a first interface, and a first processor. The security device is provided with a second interface and a second processor. The biometric sensor acquires information of a person. The first interface communicates with the security device. The first processor executes mutual authentication with the biometric authentication device if biometric information of a user acquired by the biometric sensor matches biometric information of a registered person registered in the security device. The second interface communicates with the biometric authentication device. If user biometric authentication in the biometric authentication device has been successful, the second processor executes processing after mutual authentication with the biometric authentication device is successful.

Description

How to use security systems and devices

[0001] FIELD OF THE INVENTION Embodiments of the present invention relate to security systems and methods of using security devices.

[0002] Conventionally, security devices such as HSMs (Hardware Security Modules) perform authentication using registered accounts and their passwords. Each account has a set of permissions, which may limit the operations that can be performed on the security device. Such security devices have the problem that if someone knows the account password, they may be able to impersonate the registered person and use the device.

[0003] Furthermore, some security devices that require a high level of security, such as HSMs, have a function to completely delete (zero out) data stored in the device in the event of a security attack. However, conventional security devices have a problem in that, once they detect a security attack and execute zero out, it is not possible to confirm who was operating the device when the security attack occurred.

[0004] International Publication No. 2013 / 175642

[0005] The problem to be solved by the present invention is to provide a method of using a security system and a security device that can reliably identify the person operating the security system.

[0006] According to an embodiment, a security system includes a security device and a biometric authentication device. The biometric authentication device includes a biometric sensor, a first interface, and a first processor. The security device includes a second interface and a second processor. The biometric sensor acquires information about a person. The first interface communicates with the security device. The first processor performs mutual authentication with the biometric authentication device if biometric information of a user acquired by the biometric sensor matches biometric information of a registered person registered in the security device. The second interface communicates with the biometric authentication device. If biometric authentication of a user is successful in the biometric authentication device, the second processor performs processing after mutual authentication with the biometric authentication device is successful.

[0007] Fig. 1 is a diagram showing an example of the configuration of a security system according to an embodiment. Fig. 2 is a block diagram showing an example of the configuration of a control device in the security system according to an embodiment. Fig. 3 is a block diagram showing an example of the configuration of an HSM in the security system according to an embodiment. Fig. 4 is a block diagram showing an example of the configuration of a biometric authentication card in the security system according to an embodiment. Fig. 5 is a sequence diagram for explaining the issuance process of a biometric authentication card for an HSM in the security system according to an embodiment. Fig. 6 is a sequence diagram for explaining the use authentication process of an HSM using a biometric authentication card in the security system according to an embodiment.

[0008] Hereinafter, an embodiment will be described with reference to the drawings. First, the configuration of a security system 1 according to the embodiment will be described.

[0009] Fig. 1 is a diagram schematically illustrating an example of the overall configuration of a security system 1 according to an embodiment. As shown in Fig. 1, the security system 1 according to the embodiment includes a control device 11, an HSM (security device) 12, a card reader / writer 13, and a biometric authentication card (biometric authentication device) 14. The control device 11 of the security system 1 is also connected to a personal information card 15 via the card reader / writer 13. However, as indicated by the dotted line in Fig. 1, the biometric authentication card 14 may be configured to communicate directly with the HSM 12.

[0010] The control device 11 can be realized by a computer such as a personal computer (PC). The control device 11 has an interface for connecting to the HSM 12 and an interface for connecting to the card reader / writer 13. The control device 11 has a user interface such as an operation unit that accepts operation instructions from a user and a display unit that displays operation guides and the like to the user.

[0011] The HSM (security device) 12 is an example of a security device. In the security system 1 according to this embodiment, the security device exemplified by the HSM 12 may be any hardware having a function for ensuring the security of data held by the device or data to which access is controlled.

[0012] The HSM 12, which is an example of a security device, generates and securely stores cryptographic keys used for encryption and digital signatures, and performs cryptographic processing using the securely stored cryptographic keys. The HSM 12 supports encryption processing using strong encryption methods, including public key cryptography.

[0013] For example, in a public key cryptosystem, the HSM 12 generates a pair of encryption keys (public and private) within the device, distributes the public key, and stores the private key in a secure memory area. The HSM 12 achieves high information security by performing encryption processing without externally outputting the private key stored in the secure memory area. The HSM 12 also has functions for generating digital signatures and certificates as authentication processing using the encryption keys. The HSM 12 performs mutual authentication with an external device using a digital signature based on the public key cryptosystem.

[0014] Furthermore, the HSM 12 is equipped with a sensor for detecting external attacks and has a function (self-destruct function) that erases (zeroizes) data stored in the device, such as encryption keys, in the event of an external attack. The HSM 12 reliably prevents the leakage of confidential information, including encryption keys, by using the self-destruct function. In this embodiment, the HSM 12 erases all data other than specific data, which will be described later, by using the zeroization process.

[0015] The card reader / writer 13 is a communication device for communicating with the biometric authentication card 14 and the personal information card 15, which serve as biometric authentication devices. The card reader / writer 13 may be any device that includes a communication device of a communication method compatible with the biometric authentication card 14 and the personal information card 15. The card reader / writer 13 may be any device that communicates with the biometric authentication card 14 and the personal information card 15 under the control of the control device 11.

[0016] 1, the biometric authentication card 14 may be configured to communicate with a card reader / writer (communication device) included in the HSM 12 or a card reader / writer (communication device) connected to an interface included in the HSM 12. In this case, the HSM 12 communicates with the biometric authentication card 14 without going through the control device 11, and the card reader / writer 13 connected to the control device 11 may be equipped with a communication device for communicating with the personal information card 15.

[0017] The biometric authentication card (biometric authentication device) 14 is a device that performs biometric authentication. The biometric authentication card 14, which is an example of a biometric authentication device, acquires biometric information of a person and verifies the person's identity based on whether the acquired biometric information matches pre-registered biometric information (e.g., biometric information of a registrant registered in an issuance process described below). The biometric authentication card 14 may be any card that performs biometric authentication (personal authentication) using biometric information such as a fingerprint, a facial image, a voiceprint, a vein pattern, or the iris of an eye. In this embodiment, the biometric authentication card 14 will be described assuming that it is an IC card that performs biometric authentication using a fingerprint.

[0018] The personal information card 15 is an example of a medium (electronic device) on which personal information is recorded. In this embodiment, the personal information card 15 is described as an IC card for personal identification issued by a public institution, such as a My Number card. The personal information card 15 stores personal information such as name, address, date of birth, and gender. The personal information card 15 is configured to enable identity verification using a PIN number set at the time of issuance. The control device 11 confirms whether the personal information card 15 set in the card reader / writer 13 is the one issued to the operator himself / herself, and reads the personal information from the personal information card 15 if the identity of the operator has been verified.

[0019] Next, the configuration of the control device 11 in the security system 1 according to the embodiment will be described. Fig. 2 is a block diagram showing an example configuration of the control device 11 in the security system 1 according to the embodiment. As shown in Fig. 2, the control device 11 in the security system 1 according to the embodiment includes a processor 21, a memory 22, a display unit 23, an operation unit 24, a communication unit 25, an interface 26, and an interface 27.

[0020] The processor 21 executes programs to control each unit, process various data, etc. The processor 21 is, for example, a CPU (Central Processing Unit).

[0021] The memory 22 includes a RAM, a ROM, a rewritable nonvolatile memory, etc. For example, the memory 22 stores a program in the ROM or the rewritable nonvolatile memory. The processor 21 executes the program using the RAM of the memory 22 as a working memory, thereby performing processing.

[0022] The display unit 23 is configured with a display device. The display unit 23 displays operation guides and the like to the operator (user). The operation unit 24 is configured with operation devices such as a keyboard, a mouse, and a touch panel. The operation unit 24 accepts information input by the operator.

[0023] The communication unit 25 is configured with a communication interface, etc. For example, the communication unit 25 includes a network interface for communicating with an external device via a network. The processor 21 uses the communication unit 25 to receive data from the external device and transmit data to the external device.

[0024] The interface 26 is an interface (card reader / writer interface) for connecting the card reader / writer 13. The interface 26 may be any interface that is compatible with the card reader / writer 13.

[0025] The interface 27 is an interface (HSM interface) for connecting the HSM 12. The interface 27 may be any interface for the HSM 12. For example, if the HSM 12 is a plug-in device, the interface 27 is configured by a PCI slot or the like for inserting the HSM 12. If the HSM 12 is a network device, the interface 27 is configured by a network interface for connecting the HSM 12 via a network (e.g., a LAN). If the HSM 12 is a USB (Universal Serial Bus) type device, the interface 27 is configured by a USB interface for connecting the HSM 12 via USB.

[0026] Next, the configuration of the HSM 12 as a security device in the security system 1 according to the embodiment will be described. Fig. 3 is a block diagram showing an example configuration of the HSM 12 in the security system 1 according to the embodiment. As shown in Fig. 3, the HSM 12 in the security system 1 according to the embodiment includes a processor (second processor) 31, a sensor 32, an interface (second interface) 33, and a memory 34. The memory 34 includes a RAM 35, a ROM 36, and a secure memory 37.

[0027] The processor 31 executes programs to control each unit and perform various data processing operations. The processor 31 is, for example, a central processing unit (CPU). The HSM 12 may also include a coprocessor, separate from the processor 31, for performing specific processing such as encryption processing.

[0028] The sensor 32 is a detection unit that detects a security attack on the HSM 12. The sensor 32 may be any sensor that detects a security attack. For example, the sensor 32 may be a sensor that detects that the HSM 12 has been subjected to an attack that attempts to physically destroy it.

[0029] The interface (I / F) 33 is an interface for connecting to the control device 11. For example, if the HSM 12 is a plug-in type device, the interface 33 is configured as an interface to be inserted into a slot provided in the control device 11. If the HSM 12 is a network type device, the interface 33 is configured as a network interface for connecting to the control device 11 via a network (e.g., LAN). If the HSM 12 is a USB type device, the interface 33 is configured as an interface to be set in the USB interface of the control device 11.

[0030] The memory 34 includes a RAM 35, a ROM 36, and a secure memory 37. For example, the RAM 35 stores data related to processes such as encryption processes executed by the processor 31. The ROM 36 is a non-volatile memory that stores programs executed by the processor 21, control data, and the like. The secure memory 37 is a memory that securely stores data, such as data used for authentication, including a generated encryption key. The secure memory 37 also has a storage area for storing log data that is not erased even by the zeroing process described below.

[0031] Next, the configuration of the biometric authentication card 14 as a biometric authentication device in the security system 1 according to the embodiment will be described. Fig. 4 is a block diagram showing an example of the configuration of the biometric authentication card 14 in the security system 1 according to the embodiment. The biometric authentication card 14 shown in Fig. 4 is an example of a biometric authentication device. In this embodiment, the biometric authentication card 14, which is an example of a biometric authentication device, will be described as an IC card that performs biometric authentication using a fingerprint, which is an example of biometric information.

[0032] However, in the security system 1 according to the embodiment, the biometric authentication device is not limited to the biometric authentication card 14. The biometric authentication card 14 may be any device that can authenticate a person using biometric information and that can perform mutual authentication with the HSM 12 serving as a security device. For example, the biometric authentication card 14 may be replaced with a device that performs biometric authentication using biometric information other than a fingerprint, and may also be replaced with a biometric authentication device that has an external shape other than a card shape.

[0033] In the configuration example shown in Fig. 4, the biometric authentication card 14 has a main body C formed into a card shape from plastic or the like. The biometric authentication card 14 includes a control module 41, a biometric matching unit 42, an LED 43, and the like within the main body C. For example, the control module 41 is integrally formed with one or more IC chips connected to a communication interface. The control module 41 is also provided in the main body C while connected to the biometric matching unit 42 and the LED 43.

[0034] In the configuration example shown in FIG. 4 , the control module 41 includes a processor (first processor) 51, a ROM 52, a RAM 53, a data memory 54, and a communication interface (second interface) 55. The processor 51 includes circuits that execute various processes. The processor 51 is, for example, a CPU. The processor 51 controls the entire IC card serving as the biometric authentication card 14. The processor 51 realizes various processing functions by executing programs stored in the ROM 52 or the data memory 54. Note that some or all of the various functions executed by the processor 51, which will be described later, may be realized by hardware circuits.

[0035] The ROM 52 is a non-volatile memory that functions as a program memory. Control programs, control data, etc. are stored in the ROM 52 in advance. The ROM 52 is incorporated into the biometric authentication card 14 during the manufacturing stage with the control programs, control data, etc. stored in the ROM 52. For example, the ROM 52 stores a program that causes the processor 51 to execute processing in response to commands received from an external device (card reader / writer).

[0036] The RAM 53 is a volatile memory that functions as a working memory. The RAM 53 also functions as a buffer that temporarily stores data being processed by the processor 51. For example, the RAM 53 also functions as a communication buffer that temporarily stores data to be transmitted to and received from an external device via the communication interface 55.

[0037] The data memory 54 is a non-volatile memory to which data can be written and rewritten. The data memory 54 is configured, for example, with an EEPROM (registered trademark) (Electrically Erasable Programmable Read Only Memory). Programs and various data corresponding to the processes to be executed in accordance with the specifications of the biometric authentication card 14 are written to the data memory 54. Program files and data files are also defined in the data memory 54, and control programs and various data are written to these files.

[0038] The data memory 54 has a storage area in which some or all of the area is tamper-resistant and in which data can be securely stored. For example, the secure storage area of ​​the data memory 54 stores biometric information of a legitimate user (registrant), a key pair (private key, public key) generated by the data memory 54 itself, and the public key of the HSM 12. The biometric information of the registrant stored in the data memory 54 is a fingerprint image or fingerprint feature data to be compared with fingerprint information acquired by a fingerprint sensor serving as the biometric sensor 62.

[0039] The communication interface 55 includes a communication circuit and an interface unit. The communication interface 55 is an interface for communicating with a higher-level device that supplies power and commands to the IC card serving as the biometric authentication card 14. The communication interface 55 realizes a communication function using a communication method corresponding to the interface of the card reader / writer 13 connected to the control device 11. The communication interface 55 may support multiple communication methods.

[0040] For example, the communication interface 55 may include a contact communication interface that communicates with an external device through contact, or a contactless communication interface that communicates without contact (wirelessly). If the communication interface 55 is a contact communication interface, it includes a contact portion that makes physical and electrical contact with a reader / writer contact portion provided in the card reader / writer 13, a communication control circuit that controls the transmission and reception of signals via this contact portion, etc. If the communication interface 55 is a contactless communication interface, it includes an antenna that transmits and receives radio waves, and a communication circuit that modulates and demodulates the radio waves transmitted and received from the antenna, etc.

[0041] The biometric matching unit 42 has a processor 61 and a biometric sensor 62, and is connected to the control module 41. The biometric matching unit 42 also has a memory that stores an authentication program and the like that the processor 61 uses to perform biometric authentication by biometric (fingerprint) matching.

[0042] The biometric sensor 62 is a fingerprint sensor that reads the user's fingerprint information (fingerprint image), which is an example of biometric information. The fingerprint sensor as the biometric sensor 62 is provided so that the sensor that reads the fingerprint is exposed on the surface of the main body C of the biometric authentication card 14, and reads the fingerprint of a person's finger that is held over the exposed sensor portion. Note that the biometric sensor 62 is not limited to a fingerprint sensor, and may be one that obtains biometric information other than a fingerprint.

[0043] The processor 61 executes a biometric authentication program to perform biometric authentication using fingerprint information as biometric information acquired by the biometric sensor 62. For example, the processor 61 extracts a fingerprint image from an image read by the fingerprint sensor serving as the biometric sensor 62, and performs fingerprint authentication by comparing the fingerprint image extracted from the image read by the fingerprint sensor with the fingerprint image (or fingerprint feature data) of the registrant registered in the data memory 54.

[0044] 1, the processor 61 provided separately from the processor 51 is configured to perform biometric authentication by biometric (fingerprint) matching, but the processor 51 may also perform the biometric authentication. When the processor 51 is made to perform the biometric authentication, biometric information read by the biometric sensor 62 may be supplied to the processor 51. For example, the processor 51 may extract fingerprint information from an image supplied from a fingerprint sensor serving as the biometric sensor 62, and match the extracted fingerprint information with the fingerprint information of the registrant registered in the data memory 54.

[0045] The LED 53 has a light-emitting element. The light-emitting state of the LED 53 is controlled by a control signal from the control module 41. The LED 53 is provided on the main body C in a state where the lit state can be seen on the surface of the main body C, for example.

[0046] Next, a process for issuing a biometric authentication card 14 for the HSM 12 in the security system 1 according to the embodiment will be described. Fig. 5 is a sequence diagram for explaining a process for issuing a biometric authentication card 14 for the HSM 12 in the security system 1 according to the embodiment. First, it is assumed that the accounts (roles) and passwords of persons authorized to operate the HSM 12 are registered in the HSM 12 as a security device. In the security system 1 according to the embodiment, a process for issuing a biometric authentication card 14 as a biometric authentication device for verifying the identity of a user who uses the HSM 12 is performed.

[0047] In response to an operation instruction or the like, the processor 21 of the control device 11 starts the process of issuing the biometric authentication card 14 to be used as a biometric authentication device for the HSM 12. When the processor 21 of the control device 11 starts the process of issuing the biometric authentication card 14, it accepts input of an account and password registered in the HSM 12 to confirm the operation authority of the HSM 12. In response to this, the user (the person issuing the biometric authentication card for the HSM 12) inputs the account and password for which operation authority has been granted into the operation unit 24 of the control device 11.

[0048] When an account and a password are input to the operation unit 24, the processor 21 of the control device 11 supplies the input account and password together with an account authentication request to the HSM 12 via the interface 27 (ST11).

[0049] The HSM 12 receives the account and password entered into the operation unit 24 of the control device 11 via the interface 33. The processor 21 of the HSM 12 performs account authentication by comparing the account and password received via the interface 33 with registered accounts and passwords (ST12). If the account authentication is successful, the processor 21 of the HSM 12 transmits a response indicating that the account authentication has been successful to the control device 11 via the interface 33 (ST13).

[0050] When processor 21 of control device 11 receives a response from HSM 12 indicating that account authentication is possible, it performs personal authentication to confirm the identity of the user using personal information card 15. For example, processor 21 of control device 11 displays on display unit 23 a message instructing the user to insert personal information card 15 into card reader / writer 13 and enter authentication information (e.g., a registered PIN) for personal authentication using the personal information card.

[0051] When personal information card 15 is set in card reader / writer 13 connected to interface 26, processor 21 of control device 11 accepts input of authentication information for personal authentication by personal information card 15 via operation unit 24. When authentication information for authentication is input to operation unit 24 with personal information card 15 set in card reader / writer 13, processor 21 of control device 11 supplies the input authentication information to personal information card 15 together with a personal authentication request (ST14).

[0052] Personal information card 15 receives a personal authentication request including authentication information from control device 11 via card reader / writer 13. Personal information card 15 performs personal authentication by comparing the received authentication information with authentication information already registered on the card (ST15). If personal information card 15 is successful in personal authentication, it transmits a response indicating that personal authentication has been successful to control device 11 via card reader / writer 13 (ST16).

[0053] When processor 21 of control device 11 receives a response from personal information card 15 indicating that personal authentication has been successful, it requests the transfer (reading) of personal information from personal information card 15 for which personal authentication has been successful (ST17). For example, processor 21 of control device 11 obtains information that can verify the identity of the user as personal information from personal information card 15 for which personal authentication has been successful. As a specific example, the personal information obtained from personal information card 15 is information such as address, name, date of birth, and gender.

[0054] When personal information card 15 receives a request to transfer personal information from control device 11 via card reader / writer 13, it reads out the personal information it holds. After reading out the personal information, personal information card 15 transmits the read out personal information to control device 11 that made the transfer request (ST18).

[0055] When the processor 21 of the control device 11 acquires the personal information from the personal information card 15, it transfers the acquired personal information to the HSM 12 as the personal information of the user to be authenticated by the biometric authentication card 14 to be issued (ST19). In response, the HSM 12 stores the personal information of the user acquired from the control device 11 via the interface 33 in the RAM 35 (ST20).

[0056] Furthermore, when the processor 21 of the control device 11 transfers the personal information of the user read from the personal information card 15 to the HSM 12, it causes the biometric authentication card 14 issued as a biometric authentication device for the HSM 12 to be set in the card reader / writer 13. For example, the processor 21 of the control device 11 displays on the display unit 23 a guide to set in the card reader / writer 13 the biometric authentication card 14 issued as a biometric authentication device for the HSM 12.

[0057] When the biometric authentication card 14 is set in the card reader / writer 13, the processor 21 of the control device 11 transmits to the HSM 12 an issuance request requesting that the biometric authentication card 14 set in the card reader / writer 13 be issued as a biometric authentication device for the HSM 12 (ST21). Here, the processor 21 of the control device 11 may transmit to the HSM 12 an issuance request to issue the biometric authentication card 14 set in the card reader / writer 13 as a biometric authentication device for the HSM 12 in response to an operation instruction from the user.

[0058] When the HSM 12 receives a request to issue a biometric authentication card 14, it establishes a communication state with the biometric authentication card 14 set in the card reader / writer 13 (ST22). The HSM 12 and the biometric authentication card 14 may communicate under the control of the processor 21 of the control device 11, or may communicate directly without the control of the control device 11. Here, the HSM 12 will be described as establishing a communication state in which it communicates directly with the biometric authentication card 14 without the control of the control device 11.

[0059] For example, when the HSM 12 and the biometric authentication card 14 communicate directly, if the biometric authentication card 14 is set in the card reader / writer 13 connected to the control device 11 as shown by the solid line in Fig. 1, the HSM 12 can communicate with the biometric authentication card 14 by bypassing an interface of the control device 11. Also, if the HSM 12 and the biometric authentication card 14 are connected directly without going through the control device 11 as shown by the dotted line in Fig. 1, the HSM 12 can communicate with the biometric authentication card 14 without going through the control device 11.

[0060] When the processor 31 of the HSM 12 receives a request to issue the biometric authentication card 14 and establishes communication with the biometric authentication card 14, it requests identification information (individual identification number) from the biometric authentication card 14 to uniquely identify the biometric authentication card 14 (ST23).

[0061] When the processor 51 of the biometric authentication card 14 receives a request for the individual identification number from the HSM 12 via the communication interface 55, it reads its own individual identification number stored in the ROM 52 or the data memory 54 and transmits the read individual identification number to the HSM 12 (ST24).

[0062] When the processor 31 of the HSM 12 receives the individual identification number from the biometric authentication card 14, it stores the individual identification number acquired from the biometric authentication card 14 in the RAM 35 (ST25). When the processor 31 of the HSM 12 acquires the individual identification number of the biometric authentication card 14, it requests the biometric information to be registered to the biometric authentication card 14 (ST26). Note that the registration of the biometric information of the registrant in the biometric authentication card 14 may be performed after the processing described below.

[0063] When the processor 51 of the biometric authentication card 14 receives a biometric information registration request from the HSM 12, it acquires the user's biometric information using the biometric sensor 62. If the biometric information acquired by the biometric sensor 62 is appropriate data for biometric information to be registered, the processor 51 of the biometric authentication card 14 registers the biometric information acquired by the biometric sensor 62 as the user's biometric information. For example, the processor 51 temporarily stores the biometric information acquired by the biometric sensor 62, and if matching with the stored biometric information is successful, the processor 51 registers the acquired biometric information in the data memory 54 as appropriate biometric information to be registered. When the processor 51 of the biometric authentication card 14 registers the biometric information, it notifies the HSM 12 that registration of the biometric information is complete.

[0064] When the registration of the biometric information in the biometric authentication card 14 is completed, the processor 31 of the HSM 12 generates and exchanges a key for mutual authentication with the biometric authentication card 14. That is, the processor 31 of the HSM 12 transmits a request for key generation to the biometric authentication card 14 (ST29), and also generates a key in the HSM 12 itself.

[0065] That is, the processor 31 of the HSM 12 generates random numbers by key generation processing to generate a pair of a private key and a public key (ST30). The processor 31 of the HSM 12 stores the generated private key in a secure storage area such as the secure memory 37 (ST31), and transmits the public key (public key of the HSM 12) that forms a pair with the private key to the biometric authentication card 14 (ST32).

[0066] Meanwhile, the processor 51 of the biometric authentication card 14 generates a pair of a private key and a public key in response to the key generation request from the HSM 12 (ST33). The processor 51 of the biometric authentication card 14 stores the generated private key in a secure storage area in the data memory 54 (ST34), and transmits the public key paired with the private key (the public key of the biometric authentication card 14) to the HSM 12 (ST35).

[0067] When the processor 51 of the biometric authentication card 14 acquires the public key from the HSM 12, it stores the acquired key information in the data memory 54 as the public key of the HSM 12 (ST36). Also, when the processor 31 of the HSM 12 acquires the public key from the biometric authentication card 14, it stores the acquired key information as the public key of the biometric authentication card 14 (ST37).

[0068] In other words, the HSM 12 and the biometric authentication card 14 each securely store their own private key and publish the public key corresponding to their own private key to the other. As a result, the HSM 12 securely stores its own private key and also stores the public key of the biometric authentication card 14. The biometric authentication card 14 stores its own private key and also stores the public key of the HSM 12.

[0069] When the processor 31 of the HSM 12 has completed storing the generated private key and exchanging the public key with the biometric authentication card 14, it determines that the issuance process of the biometric authentication card 14 for use with the HSM 12 has been completed. When the processor 31 of the HSM 12 has completed the issuance process of the biometric authentication card 14 for use with the HSM 12, it notifies the control device 11 of the completion of issuance of the biometric authentication card 14 (ST38). When the processor 21 of the control device 11 receives the notification from the HSM 12 that the issuance of the biometric authentication card 14 has been completed, it may display on the display unit 23 to notify the completion of the issuance process of the biometric authentication card 14 for use with the HSM 12.

[0070] Through the above-described issuance process, the security system 1 according to the embodiment issues a biometric authentication card 14 for authenticating a user who uses the HSM 12. The biometric authentication card 14 issued through the above-described issuance process is registered with the biometric information of the registrant whose identity has been confirmed using the personal information card 15, and is set with key information for mutual authentication with the HSM. Furthermore, an encryption key for mutual authentication with the issued biometric authentication card 14 is set in the HSM 12.

[0071] Next, a description will be given of a process for authenticating the use of the HSM 12 using the biometric authentication card 14 in the security system 1 according to the embodiment. FIG. 6 is a sequence diagram for describing a process for authenticating the use of the HSM 12 using the biometric authentication card 14 in the security system 1 according to the embodiment. In the security system 1 according to the embodiment, the processor 21 of the control device 11 requests the biometric authentication card 14 set in the card reader / writer 13 to verify the user's identity through biometric authentication in response to an operational instruction or the like (ST51). For example, a user who uses the HSM 12 sets the biometric authentication card 14 issued as a biometric authentication device for the HSM 12 in the card reader / writer 13 and issues a command to the operation unit 24 of the control device 11 requesting use of the HSM 12. In response to this, the processor 21 of the control device 11 requests the biometric authentication card 14 set in the card reader / writer 13 to verify the user's identity through biometric authentication in response to an operational instruction or the like.

[0072] The biometric authentication card 14 receives a request for identity verification by biometric authentication from the control device 11 via the communication interface 55 (ST51). Upon receiving the request for identity verification by biometric authentication, the processor 51 of the biometric authentication card 14 performs biometric authentication using the biometric matching unit 42 (ST52). In response to the request from the processor 51, the biometric matching unit 42 of the biometric authentication card 14 matches the user's biometric information acquired by the biometric sensor 62 with the biometric information of a registered user, and notifies the processor 51 of the matching result of the biometric information.

[0073] If the biometric information acquired by the biometric sensor 62 matches the biometric information of the registered person, the processor 51 of the biometric authentication card 14 determines that the biometric authentication (identity verification) has been successful. If the biometric authentication (identity verification) has been successful, the processor 51 of the biometric authentication card 14 notifies the control device 11 of the success of the biometric authentication (ST53).

[0074] When the processor 21 of the control device 11 receives a notification from the biometric authentication card 14 that the biometric authentication has been successful, the processor 21 of the control device 11 requests the HSM 12 to perform mutual authentication with the biometric authentication card 14 whose biometric authentication has been successful (ST54). For example, the processor 21 of the control device 11 requests mutual authentication by specifying the individual identification information of the biometric authentication card 14 whose biometric authentication has been successful.

[0075] When the processor 31 of the HSM 12 receives a request for mutual authentication with the biometric authentication card 14 for which biometric authentication has been successful, the processor 31 establishes a state of communication with the biometric authentication card 14 set in the card reader / writer 13. Once the processor 31 of the HSM 12 has established a state of communication with the biometric authentication card 14 for which mutual authentication has been requested, the processor 31 generates a digital signature using the private key held by the processor 31 itself (the private key corresponding to the public key made public to the biometric authentication card 14) (ST55).

[0076] After generating an electronic signature using its own private key, the processor 31 of the HSM 12 sends the signature value of the generated electronic signature to the biometric authentication card 14 for which biometric authentication has been successful (ST56). Note that the HSM 12 may generate an electronic signature in advance using its own private key. In this case, the processor 31 of the HSM 12 may transmit the electronic signature generated in advance to the biometric authentication card for which mutual authentication is requested.

[0077] The biometric authentication card 14 receives the signature value together with the request for mutual authentication from the HSM 12 via the communication interface 55. When the processor 51 of the biometric authentication card 14 receives the signature value together with the request for mutual authentication from the HSM 12, it performs signature verification to verify the validity of the signature value received from the HSM 12 using the public key of the HSM 12 (ST57).

[0078] When the processor 51 of the biometric authentication card 14 confirms the validity of the signature value from the HSM 12 by signature verification, it generates a digital signature using a private key held by the biometric authentication card 14 (a private key corresponding to the public key made public to the HSM 12) (ST58). After generating a digital signature using its own private key, the processor 51 of the biometric authentication card 14 sends the signature value of the generated digital signature to the HSM 12 (ST59).

[0079] The HSM 12 receives the signature value of the electronic signature generated by the biometric authentication card 14 using its own private key via the interface 33. When the processor 31 of the HSM 12 receives the signature value from the biometric authentication card 14, it performs signature verification to verify the validity of the signature value received from the biometric authentication card 14 using the public key of the biometric authentication card 14 (ST60).

[0080] When the processor 31 of the HSM 12 confirms the validity of the signature value from the biometric authentication card 14 through signature verification, it determines that mutual authentication with the biometric authentication card 14 has been successful. When mutual authentication with the biometric authentication card 14, whose identity has been successfully confirmed through biometric authentication, is successful, the processor 31 of the HSM 12 notifies the control device 11 that mutual authentication has been successful (ST61), and permits use of the HSM 12 (various processes).

[0081] Here, when the processor 31 of the HSM 12 permits use of the HSM 12 (various processes), it stores in RAM 35 or the like the individual identification number of the biometric authentication card 14 for which mutual authentication was successful (biometric authentication was successful) and the personal information of the user whose identity was successfully confirmed by biometric authentication.

[0082] After receiving notification that mutual authentication between the HSM 12 and the biometric authentication card 14 has been successful, the processor 31 of the control device 11 can request various processes, such as encryption processing, from the HSM 12. That is, after mutual authentication between the HSM 12 and the biometric authentication card 14 has been successful, the processor 31 of the control device 11 requests processing from the HSM 12 in accordance with an instruction from the user (ST62).

[0083] In response, the processor 31 of the HSM 12 executes the process requested by the control device 11. Every time the processor 31 of the HSM 12 executes a process, it stores log data in the secure memory 37, which associates the individual identification number of the biometric authentication card 14 and the user's personal information with information indicating the process content (ST63). This allows the HSM 12 to use the log data stored in the secure memory 37 to identify not only the process content but also the user who requested the process and the biometric authentication card whose identity has been confirmed by biometric authentication.

[0084] Furthermore, the HSM 12 stores log data including the user's personal information stored in the secure memory 37 so that it will not be erased even during zeroization processing in the event of a security attack. In other words, when the processor 31 of the HSM 12 detects a security attack, including a physical attack, detected by the sensor 32, it executes zeroization processing to erase stored data including authentication data such as encryption keys other than the log data including the user's personal information.

[0085] In other words, the HSM 12 according to this embodiment does not delete log data containing personal information of users during the zeroization process in the event of a security attack. This allows the HSM 12 to not only delete authentication data such as key information that must be kept secret in the event of a security attack, but also to identify processes executed at the time of or immediately before the security attack, as well as the users who instructed those processes, from the log data that is not deleted during the zeroization process.

[0086] As described above, the security system according to the embodiment stores in the HSM the personal information of a registrant whose identity has been confirmed using a personal information card issued by an official institution, in association with the identification information (individual identification number) of the biometric authentication card on which the biometric information of the registrant has been registered. The biometric authentication card and the HSM perform mutual authentication when biometric authentication using the biometric authentication card is successful. When mutual authentication is successful, the HSM performs processing in response to a processing request from the user whose biometric authentication was successful.

[0087] As a result, the security system according to the embodiment can control the HSM so that it can be used only when biometric authentication using the biometric authentication card with a registered person whose identity has been confirmed using a personal information card is successful, and when mutual authentication between the biometric authentication card and the HSM is successful. As a result, only people whose identity has been confirmed using an official personal information card can operate the HSM, and the use of the HSM, which is a security device, can be strictly managed.

[0088] Furthermore, the security system according to the above-described embodiment can be realized even when the biometric authentication card and the HSM are located in remote locations. For example, even if a user is located in a remote location far from the HSM, the user, whose identity has been confirmed by biometric authentication using the biometric authentication card, can request processing from the HSM in the remote location and have the HSM execute processing such as encryption, and it is also possible to perform maintenance on the HSM from the remote location.

[0089] Furthermore, in the security system according to the embodiment, when an HSM executes a process after successful mutual authentication with a biometric authentication card that has successfully performed biometric authentication, the HSM can store log data including the user's personal information and the biometric authentication card's identification information so that the log data is not deleted even during the zeroization process. This allows the HSM to later check not only the process details but also personal information that can identify the user. Furthermore, even if the HSM as a security device according to the embodiment executes the zeroization process after a security attack, the log data including the user's personal information is not deleted, so the user who was using the HSM prior to zeroization can be reliably identified.

[0090] The program according to this embodiment may be transferred in a state where it is stored in an electronic device such as a device, or may be transferred in a state where it is not stored in an electronic device. In the latter case, the program may be transferred via a network, or may be transferred in a state where it is stored in a storage medium. The storage medium is a non-transitory tangible medium. The storage medium is a computer-readable medium. The storage medium may be any medium, such as an optical disk or a memory card, that can store a program and is readable by a computer, and its form is not important. The electronic device downloads the program transferred (provided) via a network and installs it in its memory, or reads the program from the storage medium and installs it in its memory.

[0091] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims.

[0092] 1...Security system 11...Control device 12...HSM (security device) 13...Card reader / writer 14...Biometric authentication card (biometric authentication device) C...Main body 15...Personal information card 21...Processor 22...Memory 23...Display unit 24...Operation unit 25...Communication unit 26...Interface 27...Interface 31...Processor (second processor) 32...Sensor 33...Interface (second interface) 34...Memory 37...Secure memory 41...Control module 42...Biometric matching unit 51...Processor (first processor) 54...Data memory 55...Communication interface (second interface) 61...Processor 62...Biometric sensor

Claims

1. A security system comprising a security device and a biometric authentication device, wherein the biometric authentication device comprises: a biometric sensor that acquires information about a person; a first interface that communicates with the security device; and a first processor that performs mutual authentication with the biometric authentication device when the biometric information of a user acquired by the biometric sensor matches the biometric information of a registered person registered in the security device; and the security device comprises: a second interface that communicates with the biometric authentication device; and a second processor that performs processing after the mutual authentication with the biometric authentication device is successful when the biometric authentication of the user is successful in the biometric authentication device.

2. The security system of claim 1, wherein the security device further has a memory for storing personal information of the person who registers biometric information in the biometric authentication device, and the second processor, when executing processing after successful mutual authentication with the biometric authentication device, stores log data including the personal information in the memory.

3. The security system according to claim 2, wherein the second processor stores log data including the personal information and the individual identification information of the biometric authentication device in the memory.

4. The security system according to claim 2, wherein the second processor of the security device erases stored data excluding log data including the personal information when a security attack is detected.

5. The security system of claim 1, wherein the biometric authentication device is a biometric authentication card.

6. A method of using a security device, comprising: an authentication method in a security system comprising a security device and a biometric authentication device, wherein the biometric authentication device performs biometric authentication using the biometric information of a user and the biometric information of a registered user registered in the security device; if the biometric authentication by the biometric authentication device is successful, mutual authentication is performed between the biometric authentication device and the security device; and if the mutual authentication between the biometric authentication device and the security device is successful, the security device performs processing in response to a processing request from the user whose biometric authentication was successful.

7. A method of using a security device as described in claim 6, further comprising the steps of: the security device storing in memory personal information of the person who has registered their biometric information in the biometric authentication device; and storing log data including the personal information within the security device when the security device executes processing.

8. A method of using a security device according to claim 7, wherein log data including the personal information and identification information of the biometric authentication device is stored in the security device when the security device executes a process.

9. A method of using a security device according to claim 7, wherein, when a security attack on said security device is detected, said security device erases stored data excluding log data including said personal information.

Images