Validity checking system, validity checking method, information processing card, checking device, and authentication apparatus

• US 20090260058A1
• Filed: 09/20/2007
• Published: 10/15/2009
• Est. Priority Date: 09/20/2006
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Huang, Lei
• Granted Patent: US 8,302,176 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

OBJECTIVE A user is prevented from inadvertently inputting authentication information to an unauthorized authentication system. In this manner, authentication information leakage is certainly avoided.

SOLUTION A validity checking system includes an information processing card, an authentication system that performs mutual authentication with the information processing card, and a checking device. The information processing card includes a validity authenticating means that authenticates the validity of the authentication system, and an impersonation preventing means that carries out an impersonation preventing process on the result of the authentication performed by the validity authenticating means. The checking device includes a verifying means that verifies the authentication result subjected to the impersonation preventing process and is output from the information processing card, and a verification result output means that outputs the result of the verification performed by the verifying means to a user in a perceptible manner. The verifying means may not be provided in the checking device, and an independent verification device may be provided.

Claims

1-25. -25. (canceled)

26. A validity checking system comprising:

an information processing card that has an information processing function; and

an authentication system that performs mutual authentication with the information processing card,

wherein

the information processing card includes;

a validity authenticating unit that authenticates validity of the authentication system; and

an impersonation preventing unit that carries out an impersonation preventing process on a result of the authentication performed by the validity authenticating unit, and

the validity checking system further comprises a checking device,

the checking device including;

a verifying unit that receives the authentication result that is subjected to the impersonation preventing process and is output from the information processing card, and verifies the authentication result; and

a verification result output unit that outputs a result of the verification performed by the verifying unit to a user in a perceptible manner.

27. The validity checking system according to claim 26, wherein:

the authentication system receives the authentication result subjected to the impersonation preventing process from the information processing card, and sends the authentication result subjected to the impersonation preventing process to the checking device; and

the checking device receives the authentication result subjected to the impersonation preventing process from the authentication system.

28. The validity checking system according to claim 26, wherein:

the authentication system further includes;

an authentication information output unit that outputs authentication information to the information processing card, the authentication information being for authenticating an identity that is input based on the verification result supplied from the verifying unit; and

a service provision starting unit that receives a result of the identity authentication from the information processing card, and provides a predetermined service based on the result of the identity authentication; and

the information processing card further includes

an identity authentication output unit that compares the authentication information that is output from the authentication information output unit of the authentication system with card holder authentication information registered in the information processing card, and outputs a result of the identity authentication to the authentication system based on a result of the comparison.

29. The validity checking system according to claim 26, wherein:

the information processing card sends registered card holder authentication information to the authentication system, based on the authentication result; and

the authentication system further includes;

an identity authenticating unit that compares authentication information that is input based on the result of the verification performed by the verifying unit with the card holder authentication information received from the information processing card, and performs identity authentication based on a result of the comparison, the authentication information being for authenticating an identity; and

a service provision starting unit that provides a predetermined service based on a result of the identity authentication.

30. The validity checking system according to claim 26, wherein the information processing card further includes an authentication result storing unit that stores the authentication result.

31. The validity checking system according to claim 26, wherein the impersonation preventing unit performs encrypting or digital signature processing on the authentication result.

32. The validity checking system according to claim 26, wherein the authentication result includes a time at which validity of the authentication system is authenticated.

42. An information processing card that is used in the validity checking system according to claim 26,

the information processing card comprising:

a validity authenticating unit that authenticates validity of an authentication system;

an impersonation preventing unit that carries out an impersonation preventing process on a result of the authentication performed by the validity authenticating unit; and

an authentication result output unit that outputs the authentication result subjected to the impersonation preventing process to outside.

43. The information processing card according to claim 42, wherein the impersonation preventing unit performs encrypting or digital signature processing on the authentication result.

44. The information processing card according to claim 42, wherein the authentication result includes a time at which validity of the authentication system is authenticated.

45. The information processing card according to claim 42, wherein stored card holder authentication information is transmitted to outside, based on the authentication result.

46. The information processing card according to claim 42, further comprising:

an authentication result storing unit that stores the authentication result.

47. A checking device that is used in the validity checking system according to claim 26,

the checking device comprising:

a verifying unit that verifies an authentication result subjected to an impersonation preventing process; and

an output unit that outputs a result of the verification performed by the verifying unit, to a user in a perceptible manner.

48. An authentication system that is used in the validity checking system according to claim 26,

the authentication system comprising:

an authentication result acquiring unit that acquires an authentication result subjected to an impersonation preventing process from an information processing card; and

an authentication result transferring unit that transfers the authentication result that is subjected to the impersonation preventing process and is acquired by the authentication result acquiring unit, to a checking device.

49. An authentication system that is used in the validity checking system according to claim 26,

the authentication system comprising:

an authentication information output unit that outputs authentication information that is input based on a result of verification performed by a verifying unit of a checking device, to an information processing card;

an identity authentication receiving unit that receives a result of identity authentication from the information processing card; and

a service provision starting unit that provides a predetermined service, based on the received result of the identity authentication.

50. An authentication system that is used in the validity checking system according to claim 26,

the authentication system further comprising an identity authenticating unit that compares authentication information with card holder authentication information, and performs identity authentication based on a result of the comparison, the authentication information being input based on a result of verification performed by the verifying unit of the checking device, the card holder authentication information being received from the information processing card.

33. A validity checking system comprising:

an information processing card that has an information processing function; and

an authentication system that performs mutual authentication with the information processing card,

wherein

the information processing card includes;

a validity authenticating unit that authenticates validity of the authentication system; and

an impersonation preventing unit that performs an impersonation preventing process on a result of the authentication performed by the validity authenticating unit, and

the validity checking system further comprises;

a verification device that includes a verifying unit that receives the authentication result that is subjected to the impersonation preventing process and is output from the information processing card, and verifies the authentication result; and

a checking device that includes a verification result output unit that outputs a result of the verification received from the verification device to a user in a perceptible manner.

34. A validity checking method that is used in a validity checking system that includes an information processing card, an authentication system that performs mutual authentication with the information processing card, and a checking device that receives information output from the information processing card,

the validity checking method comprising:

a validity authenticating step of authenticating validity of the authentication system, the validity authenticating step being carried out by the information processing card;

an impersonation preventing step of carrying out an impersonation preventing process on a result of the authentication performed in the validity authenticating step, the impersonation preventing step being carried out by the information processing card;

an authentication result outputting step of outputting the authentication result subjected to the impersonation preventing process to outside, the authentication result outputting step being carried out by the information processing card;

a verifying step of receiving the authentication result that is subjected to the impersonation preventing process and is output from the information processing card, and verifying the authentication result, the verifying step being carried out by the checking device; and

a verification result outputting step of outputting a result of the verification performed in the verifying step to a user in a perceptible manner, the verification result outputting step being carried out by the checking device.

35. The validity checking method according to claim 34, wherein:

the information processing card sends the authentication result subjected to the impersonation preventing process to the authentication system in the authentication result outputting step; and

the validity checking method further comprises

an authentication result transferring step of receiving the authentication result subjected to the impersonation preventing process by the information processing card, and transferring the authentication result to the checking device, the authentication result transferring step being carried out by the authentication system prior to the verifying step.

36. The validity checking method according to claim 34, further comprising:

an authentication information outputting step of outputting authentication information for authenticating an identity to the information processing card, the authentication information being input based on the verification result that is output in the verification result outputting step, the authentication information outputting step being carried out by the authentication system;

an identity authentication outputting step of performing identity authentication by comparing the authentication information output from the authentication system in the authentication information outputting step with card holder authentication information registered in the information processing card, and sending a result of the identity authentication to the authentication system based on a result of the comparison, the identity authentication outputting step being carried out by the information processing card; and

a service provision starting step of receiving the identity authentication result from the information processing card, and providing a predetermined service based on the identity authentication result, the service provision starting step being carried out by the authentication system.

37. The validity checking method according to claim 34, further comprising:

a card holder authentication information outputting step of sending stored card holder authentication information to the authentication system, based on the authentication result, the card holder authentication information outputting step being carried out by the information processing card;

an identity authenticating step of comparing authentication information for authenticating an identity that is input based on the verification result output from the verification result outputting step, with the card holder authentication information received from the information processing card, and authenticating an identity based on a result of the comparison, the identity authenticating step being carried out by the authentication system; and

a service provision starting step of providing a predetermined service based on a result of the identity authentication, the service provision starting step being carried out by the authentication system.

38. The validity checking method according to claim 34, further comprising

an authentication result storing step of storing the authentication result, the authentication result storing step being carried out by the information processing card.

39. The validity checking method according to claim 34, wherein the impersonation preventing step includes performing encrypting or digital signature processing on the authentication result.

40. The validity checking method according to claim 34, wherein the authentication result includes a time at which validity of the authentication system is authenticated.

41. A validity checking method that is used in a validity checking system that includes an information processing card, an authentication system that performs mutual authentication with the information processing card, a verification device that receives information output from the information processing card, and a checking device that receives a verification result output from the verification device,

the validity checking method comprising:

a validity authenticating step of authenticating validity of the authentication system, the validity authenticating step being carried out by the information processing card;

an impersonation preventing step of carrying out an impersonation preventing process on a result of the authentication performed in the validity authenticating step, the impersonation preventing step being carried out by the information processing card;

an authentication result outputting step of outputting the authentication result subjected to the impersonation preventing process to the verification device, the authentication result outputting step being carried out by the information processing card;

a verifying step of verifying the authentication result subjected to the impersonation preventing process, the verifying step being carried out by the verification device;

a first verification result outputting step of sending the verification result to the checking device, the first verification result outputting step being carried out by the verification device; and

a second verification result outputting step of outputting the verification result to a user in a perceptible manner, the second verification result outputting step being carried out by the checking device.