Data updating method and data updating system

• US 20030217270A1
• Filed: 05/14/2003
• Published: 11/20/2003
• Est. Priority Date: 05/20/2002
• Status: Active Grant

• Current Assignee: Systemneeds Incorporated
• Original Assignee: Systemneeds Incorporated
• Inventors: Nakayama, Keisuke
• Granted Patent: US 7,266,695 B2
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The present invention provides a data updating method and a data updating system which can update data of an IC card through a network without mistaking the IC card targeted for updating. When each of issuer client authentication, personal authentication, issuer server authentication and device authentication is performed, a server transmits update data encrypted by a public key used for the device authentication to a client. Then, the client outputs the encrypted update data to an IC card. In the IC card, the update data is decrypted by a secret key used for the device authentication. Based on the decrypted update data, rewriting is carried out in the IC card.

Claims

1. A data updating method comprising the steps of:

causing a server to perform device authentication for a device which stores a secret key used for the device authentication, and to transmit update data encrypted by using a public key corresponding to the secret key to a client to which the device is connected;

causing the client to input the update data to the device; and

causing the device to decrypt the update data by the secret key, and to update data therein based on the decrypted update data.

3. The data updating method according to claim 1, wherein an issuer authenticator encrypted by a common key or a public key is stored in the device which stores the secret key used for the device authentication, the server uses a secret key corresponding to the common key or the public key and decrypts the encrypted issuer authenticator from the device by the common key or the secret key to obtain an issuer identifier, and issuer server authentication is performed by comparing and collating the obtained issuer identifier with an issuer identifier to be stored.

5. The data updating method according to claim 3, wherein the client obtains an issuer authenticator from an issuer and, before the issuer server authentication, issuer client authentication is performed by comparing and collating the issuer authenticator read from the device with the obtained issuer authenticator.

6. The data updating method according to claim 5, wherein the device comprises a personal authentication function, and data updating is performed by carrying out issuer client authentication, personal authentication, issuer server authentication and device authentication.

2. A data updating method comprising the steps of:

causing a server to perform device authentication for a device which stores a secret key used for the device authentication, and to transmit update data encrypted by using a public key corresponding to the secret key to a client to which the device is connected;

causing the client to input the update data to the device; and

causing the device to store the update data, to decrypt the update data by the secret key each time the update data is used, and to use the decrypted update data.

4. The data updating method according to claim 2, wherein an issuer authenticator encrypted by a common key or a public key is stored in the device which stores the secret key used for the device authentication, the server uses a secret key corresponding to the common key or the public key and decrypts the encrypted issuer authenticator from the device by the common key or the secret key to obtain an issuer identifier, and issuer server authentication is performed by comparing and collating the obtained issuer identifier with an issuer identifier to be stored.

7. A data updating system comprising:

a device to store a secret key used for device authentication;

a server to transmit, when device authentication is performed, update data encrypted by a public key corresponding to the secret key to the device where the device authentication has been carried out; and

a client to receive the encrypted update data which has been transmitted, and to output the update data to the device,

wherein the device decrypts the encrypted update data inputted from the client by the secret key, and performs data updating therein based on the decrypted update data.

9. The data updating system according to claim 7, wherein the server generates a random number, transmits the random number to the client, decrypts an encrypted random number received from the client by a public key corresponding to a received device identifier, and compares and collates the decrypted random number with the generated random number to perform device authentication,

the client outputs the random number received from the server to the device, and transmits an encrypted random number inputted from the device and a device identifier to the server, and

the device encrypts the random number inputted from the client by a secret key to be stored, and outputs the device identifier to be stored and the encrypted random number to the client.

10. The data updating system according to claim 9, wherein the server transmits the random number and a common key to encrypt the device identifier to the client, decrypts an encrypted device identifier received from the client by the common key, decrypts the random number encrypted by the public key corresponding to the decrypted device identifier, and compares and collates the decrypted random number with the generated random number to perform device authentication,

the client outputs the random number and the common key received from the server to the device, and transmits an encrypted random number inputted from the device and an encrypted device identifier to the server, and

the device encrypts the random number inputted from the client by a secret key to be stored, encrypts the device identifier to be stored by the common key, and outputs the encrypted random number and the encrypted device identifier to the client.

11. The data updating system according to claim 7, wherein the device outputs a device authenticator encrypted by a secret key to the client,

the client transmits the device authenticator inputted from the device to the server, and

the server decrypts the device authenticator received from the client by a public key corresponding to the device authenticator to obtain a device identifier, and compares and collates the obtained device identifier with a device identifier to be stored to perform device authentication.

12. The data updating system according to claim 9, wherein a communication packet between the server and the client is encrypted.

13. The data updating system according to claim 11, wherein a communication packet between the server and the client is encrypted.

14. The data updating system according to claim 9, wherein the device stores a common key or a public key used for issuer authentication, and outputs an issuer authenticator encrypted by the common key or the public key to the client,

the client transmits the encrypted issuer authenticator to the server, and

the server stores the common key or a secret key used for the issuer authentication, decrypts the encrypted issuer authenticator received from the client by the stored common or secret key to obtain an issuer identifier, and compares and collates the obtained issuer identifier with an issuer identifier to be stored to perform issuer server authentication.

15. The data updating system according to claim 11, wherein the device stores a common key or a public key used for issuer authentication, and outputs an issuer authenticator encrypted by the common key or the public key to the client,

the client transmits the encrypted issuer authenticator to the server, and

the server stores the common key or a secret key used for the issuer authentication, decrypts the encrypted issuer authenticator received from the client by the stored common or secret key to obtain an issuer identifier, and compares and collates the obtained issuer identifier with an issuer identifier to be stored to perform issuer server authentication.

16. The data updating system according to claim 14, wherein the client obtains an issuer authenticator from an issuer and, before the issuer server authentication, issuer client authentication is performed by comparing and collating the issuer authenticator read from the device with the obtained issuer authenticator.

17. The data updating method according to claim 15, wherein the client obtains an issuer identifier from an issuer and, before the issuer server authentication, issuer client authentication is performed by comparing and collating the issuer authenticator read from the device with the obtained issuer authenticator.

18. The data updating system according to claim 16, wherein the device comprises a personal authentication function, the client performs issuer client authentication, the device performs personal authentication, the server performs issuer server authentication and device authentication, and the device performs data updating.

19. The data updating system according to claim 17, wherein the device comprises a personal authentication function, the client performs issuer client authentication, the device performs personal authentication, the server performs issuer server authentication and device authentication, and the device performs data updating.

8. A data updating system comprising:

a device to store a secret key used for device authentication;

a server to transmit, when device authentication is performed, update data encrypted by a public key corresponding to the secret key to the device where the device authentication has been carried out; and

a client to receive the encrypted update data which has been transmitted, and to output the update data to the device,

wherein the device stores the encrypted update data inputted from the client, decrypts the update data by the secret key each time the update data is used, and uses the decrypted update data.