Verification system and program check method for verification system

• US 7,273,170 B2
• Filed: 03/18/2005
• Issued: 09/25/2007
• Est. Priority Date: 08/19/2004
• Status: Active Grant

• Current Assignee: Fujitsu Frontech Limited (Fujitsu Limited), Fujitsu Limited
• Original Assignee: Fujitsu Frontech Limited (Fujitsu Limited), Fujitsu Limited
• Inventors: Katsumata, Yutaka, Higashiura, Yasuyuki, Eguchi, Shinichi, Kishino, Takumi, Iwasaki, Shinya
• Primary Examiner(s): LEE, SEUNG H
• Application Number:
  US11/083,288
• Publication Number:
  US 20060038006A1
• Time in Patent Office: 921 Days
• Field of Search: 235/380, 235/436, 235/451
• US Class Current: 235/382
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

In a verification system which verifies individual input data against registered data to perform individual authentication, the verification program is checked for alteration. Programs for verification in a processing unit are checked for alteration by a check program in the tamper-proof environment of a lower-level storage unit. Hence illicit use of the verification system through program alteration can be prevented.

Claims

1. A verification system, which verifies data input by a user against registered data to perform individual authentication, comprising:

an input unit for inputting data of said user;

a storage unit for storing said registered data; and

a processing unit for executing a verification program that reads said registered data from said storage unit and verifies said registered data against said input data,

wherein said storage unit installs a check program which checks said verification program and loads said check program into said processing unit, and

said processing unit executes said check program to check for alteration of said verification program, and

wherein said storage unit comprises;

a storage card held by the user; and

a card reader/writer which reads and writes said storage card, receives an execution result of said check program from said processing unit, and checks for alteration of said verification program by said execution result, and

wherein said card reader/writer prohibits access to said storage card by said processing unit, when said card reader/writer detects alteration of said verification program.

2. The verification system according to claim 1, wherein said processing unit has an environment file in which are set programs to be checked and executes said check program for verification programs set in said environment file.

3. The verification system according to claim 1, wherein said card reader/writer receives the execution result of said check program by said processing unit, compares said execution result with an execution result held in advance, and checks for alteration of said verification program.

4. The verification system according to claim 3, wherein said card reader/writer receives hash values of said check program calculated by said processing unit using a hashing algorithm, compares said hash values with hash values held in advance, and checks for alteration of said verification program.

5. The verification system according to claim 1, wherein said input unit, at the time of startup of said processing unit, executes said check program.

6. The verification system according to claim 1, wherein said input unit comprises a biological information detection unit which detects biological information of said user.

7. The verification system according to claim 1, wherein said verification program comprises:

a storage unit access program to access said storage unit; and

a verification program which verifies said registered data read from said storage unit against said input data.

8. A program check method for a verification system, which verifies data input by a user against registered data and performs individual authentication, comprising the steps of:

reading a check program from a card reader/writer which reads and writes a storage for storing said registered data into a processing unit, said processing unit executes a verification program that reads said registered data from said storage and performs verification with said input data;

executing said check program, to check for alteration of said verification program in said processing unit;

receiving an execution result of said check program by said processing unit with said card reader/writer;

checking for alteration of said verification program using said execution result in said card reader/writer; and

prohibiting access to said storage card by said processing unit when alteration of said verification program is detected in said card reader/writer.

9. The program check method for a verification system according to claim 8,

wherein said checking step comprises a step of checking the verification programs set in an environment file provided in said processing unit by said check program.

10. The program check method for a verification system according to claim 8, wherein said checking step comprises:

a step of receiving the execution result of said check program by said processing unit in said card reader/writer; and

a step of comparing said execution result with an execution result held in advance, and checking for alteration of said verification program in said card reader/writer.

11. The program check method for a verification system according to claim 10, wherein said checking step comprises:

a step of receiving hash values of said check program computed by said processing unit using a hashing algorithm; and

a step of comparing said hash values with hash values held in advance and checking for alteration of said verification program.

12. The program check method for a verification system according to claim 8, wherein said checking step comprises a step of executing said check program at the time of startup of said processing unit.

13. The program check method for a verification system according to claim 8, further comprising a biological information detection step of detecting biological information of said user for said verification.

14. The program check method for a verification system according to claim 8, wherein said check step comprises a step of checking a verification program having a storage unit access program to access said storage unit and a verification program which verifies said input data against said registered data read from said storage unit.