JP5082767B2 - Control equipment - Google Patents

Description

  The present invention provides encrypted data between a security device such as a fingerprint authentication device or a card reader / writer and a control device body such as an automatic teller machine (ATM), automatic cash dispenser (CD) or vending machine. The present invention relates to a control device that transmits and receives.

  Data sent and received between the security device and the control device main unit to which the security device is connected are related to personal information or money information. May suffer irreparable damage. In view of this, there has been proposed a control device that is configured to transmit and receive encrypted data between the security device and the control device main body so as to avoid eavesdropping damage. According to such a control device, since it is extremely difficult to decipher information even if it is wiretapped, the possibility of suffering damage can be significantly reduced.

  By the way, the manufacturer that manufactures and sells the security device may be different from the manufacturer that manufactures and sells the control device. In this case, if the manufacturer that manufactures and sells the control device sets the encryption key in the control device so that the encryption key set by the manufacturer that manufactures and sells the security device matches the encryption key set in the security device, the manufacturer's In addition, the manufacturer that manufactures and sells the security device can decrypt the encrypted data.

  In order to prevent such a situation, a manufacturer that manufactures and sells control devices checks the encryption key set in the security device by the manufacturer that manufactures and sells security devices, and the manufacturer that manufactures and sells control devices is the security device. A new encryption key is set.

  In addition, when exchanging a user terminal which is a security device, a prior art in which an encryption key stored in a user terminal is stored in a user management database, and then a new user terminal acquires the encryption key from the user management database is disclosed. It is known (see, for example, Patent Document 1).

JP 2006-33199 A

  However, if the manufacturer that manufactures the control device sets a new encryption key for the security device, the manufacturer that manufactures the control device must set a new encryption key even if the security device fails. It will not be. For this reason, even if the installation manager of the control device prepares a replacement security device, it cannot be replaced as it is.

  In view of the above circumstances, an object of the present invention is to provide a control device that can newly set an encryption key in an exchanged security device.

To achieve the above object, a control apparatus according to claim 1 of the present invention is to decrypt the device common key that stores the the encrypted key acquisition key and the authentication data is decoded A security device that re-encrypts the authentication data with the decrypted key acquisition key, and a main body that can transmit and receive data between the security device and stores the key acquisition key and the authentication data While encrypting with a common key and transmitting to the security device, receiving the encrypted authentication data again from the security device and decrypting the received again encrypted authentication data with the key acquisition key, Control for authenticating a security device when authentication data before encryption with a common key matches authentication data decrypted with the key acquisition key A control device having a main body, wherein the control device main body, when the authentication data before encryption with the main body common key and the authentication data decrypted with the key acquisition key do not match, The security device storing the key acquisition key and the authentication data is encrypted with the same shipping key as the device shipping key stored in the security device at the time of shipment, and transmitted to the security device. The received authentication data is decrypted with the key acquisition key, and further decrypted with the authentication data before being encrypted with the shipping key and the key acquisition key. The device common key generation data for generating a new device common key is sent to the security device when the authentication data matches And wherein the Rukoto.

The control device according to claim 2 of the present invention, the Oite to claim 1, the control device provided in the main body, the security authentication data encrypted by the device factory key only when authorized personnel has operated Device test limiting means for limiting transmission to a device is provided.

In the control device according to the present invention, the authentication data before being encrypted in the control device main body and the authentication data received by the control device main body and decrypted with the common key of the main device are the same as when the security device is replaced. If not, the authentication data is encrypted with the same shipping key as the device shipping key stored in the control device main body and transmitted to the security device, while the encrypted authentication data is received again from the security device. If the authentication data before being encrypted with the same shipping key as the device shipping key and the authentication data decrypted with the same shipping key as the device shipping key match, the control device main body The device common key generation data for generating the device common key is transmitted to the security device on the assumption that the device has been properly shipped from the device manufacturer / seller. Thereafter, the security device is authenticated by the control device main body, and thereafter, encrypted data can be transmitted and received between the control device main body and the security device. That is, the control device according to the present invention can newly set an encryption key for the replaced security device.

  Exemplary embodiments of a control device according to the present invention will be described below in detail with reference to the accompanying drawings. Note that the present invention is not limited to the embodiments.

  FIG. 1 is a diagram showing a control device which is an embodiment of a control device according to the present invention, and FIG. 2 is a flowchart showing contents of authentication and device test in the control device shown in FIG.

  The control device 1 according to the embodiment includes a security device 2 such as a fingerprint authentication machine or a card reader / writer, and a control device main body 3 such as an automatic teller machine (ATM), an automatic cash dispenser (CD), or a vending machine. Is a control device that transmits / receives encrypted data between them, encrypts data to be transmitted with a common encryption key such as DES (Data Encryption Standard), and decrypts received data.

  As shown in FIG. 1, the security device 2 includes a device control unit 4 and a communication unit 5 connected to the device control unit 4. The device control unit 4 controls the security device 2 and includes a key storage unit 41, an encryption unit 42, a decryption unit 43, and a storage unit 44.

  The key storage means 41 stores a device common key A. The device common key A is a key set by the manufacturer / seller of the control device, and the device shipping key set by the manufacturer / seller of the security device is used as the device common key A until set by the manufacturer / seller of the control device. Is set. The device shipping key is determined for each sales destination (manufacturing / manufacturing manufacturer of the control device), and can be obtained not only by the manufacturer / sales manufacturer of the security device but also by the manufacturer / sales manufacturer of the control device.

  The encryption means 42 encrypts information acquired by the security device 2 such as personal information or money information with the device common key A, and the key acquisition key B received from the control device body 3 at the time of authentication of the security device. The authentication data is encrypted by this.

  The decrypting means 43 decrypts the encrypted control information received from the control device main body 3 with the device common key A, and the device control unit 4 controls the security device 2 with the decrypted control information. It is supposed to be.

  The storage unit 44 stores information required by the security device 2, and stores at least a control program and control data for controlling the security device.

  The communication unit 5 is an interface for connecting to the control device main body 3, and receives the encrypted information from the control device main body 3, while the information encrypted by the device control unit 4 (encryption means 42). Is transmitted to the control device main body 3.

  The control device main body 3 includes a main body control unit 6 and a communication unit 7 connected to the main body control unit 6. The main body control unit 6 controls the control device 1 including the security device 2, and includes a key storage unit 61, an encryption unit 62, a decryption unit 63, and a storage unit 64.

  The key storage means 61 stores a main body common key A and a device shipping key. The main body common key A is a key set by the manufacturer / seller of the control device, and is configured to pair with the device common key A described above. The device shipping key is a key obtained from the manufacturer / seller of the security device, and the security device 2 immediately after purchase can decrypt only the information encrypted with the device shipping key.

  The encryption means 62 encrypts control information to be transmitted to the security device 2 with the main body common key A. When authenticating the security device, a key acquisition key B and authentication data C, which will be described later, are converted into the main body common key A or the device. Encryption is performed using the shipping key.

  The decrypting means 63 decrypts the encrypted information received from the security device 2 with the main body common key A, and decrypts the authentication data C with the key acquisition key B described later when the security device is authenticated. It is like that.

  The storage means 64 stores information required by the control device. In addition to the control program and control data for controlling the control device, at least the authentication data C, the key acquisition key B, the key data D, the vector E is remembered.

  The authentication data C is used for authentication of the security device 2 together with the key acquisition key B, and is encrypted together with the key acquisition key by the main body common key A or the device shipping key in the control device main body 3, and It is collated with the information decrypted by the main body common key A or the device shipping key.

  The key acquisition key B is used not only for authentication of the security device 2 as described above, but also for generating the device common key A in the security device 2, and is encrypted by the key acquisition key B in the control device body 3. The key data D and the vector E are decrypted by the security device 2 to generate a device common key.

  The communication unit 7 is an interface for connecting the security device 2 and transmits the information encrypted by the main body control unit 6 (encryption unit 62), while receiving the encrypted information from the security device 2. It is supposed to be. Note that the communication unit 7 may connect a plurality of security devices 2.

  In the control device 1 configured as described above, the control device main body 3 (main body control unit 6) authenticates the security device 2 when the device is installed and when the power is turned on.

  As shown in FIG. 2, when authenticating the security device 2, the main controller 6 stores the key acquisition key B and the authentication data C stored in the storage unit 64 in the key storage unit 61. It is encrypted with the main body common key A and transmitted to the security device 2.

  When the security device 2 receives the encrypted information, the device control unit 4 decrypts the information encrypted with the device common key A stored in the key storage unit 41. At this time, the device control unit 4 acquires the key acquisition key B and the authentication data C.

  Then, the device control unit 4 re-encrypts the authentication data C with the acquired key acquisition key B and transmits it to the control device main body 3.

  When the control device main body 3 receives the information encrypted by the key acquisition key B, the main body control unit 6 decrypts the information encrypted by the key acquisition key stored in the storage unit 64. At this time, the main body control unit 6 acquires the authentication data C.

  Then, the main body control unit 6 determines whether or not the acquired authentication data C (decrypted authentication data) matches the authentication data C (encrypted authentication data) stored in the storage means 64 (step). S1).

  If the acquired authentication data C matches the stored authentication data C (step S1: No), the security device 2 has been authenticated (mutual authentication), so the control device 1 enters the operation mode. After that, the encrypted information is transmitted and received between the security device 2 and the control device main body 3 (step S2).

  On the other hand, if the acquired authentication data C and the stored authentication data C do not match (step S1: Yes), the security device 2 cannot be authenticated, so an authentication error occurs (step S3). Limit use.

  Thus, a device test can be executed when an authentication error occurs or when the security device 2 is replaced (step S4).

  When the device test is executed (step S4), first, the control device body 3 authenticates the security device 2. Since the authentication of the security device 2 is not different from the above-described authentication, the description thereof is omitted.

  In the device test authentication, if the acquired authentication data C matches the stored authentication data (step S5: No), the security device 2 is authenticated as in the above authentication ( Mutual authentication), the control device 1 shifts to the operation mode (step S2), and thereafter, the encrypted information is transmitted and received between the security device 2 and the control device main body.

  On the other hand, in the device test authentication, if the acquired authentication data C and the stored authentication data do not match (step S5: Yes), there is a possibility that the security device 2 has been replaced. 6 sets the device shipping key stored in the key storage means 61 to the common key A (step S6).

  Then, the security device 2 is authenticated using the device shipping key set as the common key A.

  More specifically, the main body control unit 6 encrypts the key acquisition key B and the authentication data C stored in the storage unit 64 with the device shipping key stored in the key storage unit 61, and stores it in the security device 2. Send.

  When the security device 2 receives the encrypted information, the device control unit 4 decrypts the information encrypted with the device common key A stored in the key storage unit 41. Here, if the device common key is a device shipping key, the device control unit 4 acquires the key acquisition key B and the authentication data C.

  Then, the device control unit 4 that has acquired the key acquisition key B and the authentication data C stores the key acquisition key B in the storage unit 44 and re-encrypts the authentication data C with the key acquisition key B. Send to the main unit 3.

  When the control device main body 3 receives the information encrypted by the key acquisition key B, the main body control unit 6 decrypts the information encrypted by the key acquisition key stored in the storage unit 64. At this time, the main body control unit 6 acquires the authentication data C.

  Then, the main body control unit 6 determines whether or not the acquired authentication data C (decrypted authentication data) matches the authentication data C (encrypted authentication data) stored in the storage means 64 (step). S7).

  If the acquired authentication data C and the stored authentication data C do not match (step S7: No), the security device 2 cannot be authenticated, so an authentication error occurs (step S3), and at least the security device 2 is used. Restrict. Note that the case where an authentication error occurs is assumed to be a case where the security device 2 is out of order or a case where the security device 2 is not replaced with a regular security device 2.

  On the other hand, if the acquired authentication data C and the stored authentication data match, it is assumed that the authentication data C has been exchanged for the proper security device 2 and the key data D and the vector E stored in the storage means 64 are acquired. It is encrypted with the key B and transmitted to the security device 2.

  When the security device 2 receives the information encrypted with the key acquisition key, the security device 2 decrypts the information encrypted with the key acquisition key B stored in the storage means 44 in the authentication using the device shipping key. To do. At this time, the device control unit acquires the key data D and the vector E.

  The device control unit that has acquired the key data D and the vector E generates a device common key A and stores it in the key storage unit. Then, the control device 1 shifts to the operation mode (step S2), and thereafter, encrypted information is transmitted and received between the security device 2 and the control device main body 3.

  According to the control device 1 according to the embodiment described above, the authentication data C encrypted in the control device main body 3 and the authentication data C received by the control device main body 3 coincide with each other as when the security device 2 is replaced. If not, the security device 2 is authenticated using the device shipping key. If the security device 2 can be authenticated, the control device main body 3 transmits key data D and a vector E (device common key generation data) for generating a device common key to the security device 2. Encrypted data can be transmitted and received between the control device body 3 and the security device 2. That is, the control device 1 according to the present embodiment can newly set a device common key A for the exchanged security device 2.

  According to the control device 1 according to the embodiment described above, the key acquisition key B and the authentication data C are used as authentication data, but the key acquisition key B is not necessarily required, only the authentication data C. It is good also as what authenticates by. In this case, the security device 2 re-encrypts the authentication data C using the device common key A.

  Further, device test restriction means (not shown) that can be operated only by an authorized person (for example, an administrator of the control device) and can execute a device test only when the authorized person operates. May be provided in the control device main body 3. The device test restricting means is an operation means (not shown) that accepts only the operation of the authorized person by collating the authorized person with a key, card, password, etc., and only when the operation means accepts the operation. Limiting means (not shown) that enables the transmission of the authentication data C encrypted with the device shipping key, the key data D encrypted with the key acquisition key B and the vector E to the security device 2 after shifting to the device test Only when the operation means accepts the operation, the device test shifts, and the authentication data C encrypted with the device shipping key is transmitted to the security device 2. As described above, when the device test restriction means is provided in the control device main body 3, the security device 2 can be safely authenticated when the security device 2 is replaced, and the device common key A can be more securely set in the security device 2. Can do.

It is a block diagram which shows the control apparatus which is embodiment of this invention. It is a flowchart which shows the content of the authentication and device test in the control apparatus shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Control apparatus 2 Security apparatus 3 Control apparatus main body 4 Apparatus control part 41 Key storage means 42 Encryption means 43 Decryption means 44 Storage means 5 Communication part 3 Control apparatus main body 6 Main body control part 61 Key storage means 62 Encryption means 63 Decryption 64 means for storing 7 communication unit A common key B key for key acquisition C authentication data D key data E vector

Claims (2)

A security device that decrypts the encrypted key acquisition key and the authentication data with the device common key stored therein and encrypts the decrypted authentication data again with the decrypted key acquisition key;
Data can be transmitted / received to / from the security device, and the key acquisition key and authentication data are encrypted with the main body common key and transmitted to the security device, and then encrypted again from the security device. The received authentication data and the re-encrypted authentication data decrypted with the key acquisition key and the authentication data before being encrypted with the main body common key and the key acquisition key A control device that authenticates the security device when the data matches
A control device having
The control device main body stores the key acquisition key and authentication data when the authentication data before being encrypted with the main body common key does not match the authentication data decrypted with the key acquisition key Encrypted with the same shipping key as the device shipping key stored in the security device at the time of shipment of the security device and transmitted to the security device, while receiving the authentication data encrypted again from the security device and received Re-encrypted authentication data with the key acquisition key,
Further, device common key generation data for generating a new device common key is transmitted to the security device when the authentication data before encryption with the shipping key matches the authentication data decrypted with the key acquisition key. A control device characterized by A device test restriction unit provided in the control device main body, and provided with device test restriction means for restricting transmission of authentication data encrypted with a device shipping key to a security device only when operated by an authorized person. The control device according to 1.