Authentication system and authentication method
In an authentication method according to the present disclosure, (1) a device transmits device history information with a CRL added thereto (hereinafter, device history information with added CRL) to a controller, (2) the controller transmits the device history information with added CRL to a server, and (3) if the version of the CRL included in the device history information with added CRL is older than the version of the CRL stored on the server, the server judges that the controller is unauthorized.
1. An authentication method in an authentication system including a server, a device, and a first controller that controls the device, the authentication method comprising:
storing, at the device, a first certificate revocation list and device history information, the first certificate revocation list having first age-identifying information;
storing, at the server, a second certificate revocation list, the second certificate revocation list having second age-identifying information;
transmitting, from the device to the first controller, device history information with the first age-identifying information of the first certificate revocation list;
transmitting, from the first controller to the server, the device history information with the first age-identifying information of the first certificate revocation list and added authentication information;
comparing, at the server, the first age-identifying information of the first certificate revocation list to the second age-identifying information of the second certificate revocation list;
if the first age-identifying information is indicated to be older than the second age-identifying information, judging that the first controller is unauthorized; and
if the first age-identifying information is indicated to be same as or younger than the second age-identifying information, judging that the first controller is authorized and judging that the first controller is set to receive an updated certificate revocation list from the server,
wherein, when the first controller is judged to be unauthorized, the server no longer transmits the updated certificate revocation list to the first controller.
2. The authentication method according to claim 1 , wherein
when the server judges that the first controller is unauthorized,
the server transmits the second certificate revocation list to a second controller connected to the device,
the second controller transmits the second certificate revocation list to the device, and
the device updates the first certificate revocation list with the second certificate revocation list.
3. The authentication method according to claim 1 , wherein
when the server judges that the first controller is unauthorized,
the server
records unauthorized determination information indicating that the first controller is unauthorized,
when there is a process request from the first controller, references the unauthorized determination information, and
rejects the process request from the first controller, such that the server does not perform a process specified in the process request.
4. The authentication method according to claim 1 , wherein
when the server judges that the first controller is unauthorized,
the server transmits the second certificate revocation list to the device, and
the device updates the first certificate revocation list with the second certificate revocation list.
5. The authentication method according to claim 1 , wherein the device history information includes authentication information.
6. The authentication method according to claim 1 , wherein at least one of the first age-identifying information and the second age-identifying information is a time stamp.
7. An authentication system comprising:
a server;
a device; and
a controller that controls the device, wherein
the device stores a first certificate revocation list and device history information, the first certificate revocation list having first age-identifying information,
the server stores a second certificate revocation list, the second certificate revocation list having second age-identifying information,
the device transmits, to the controller, device history information with the first age-identifying information of the first certificate revocation list,
the controller transmits, to the server, the device history information with the first age-identifying information of the first certificate revocation list and added authentication information,
the server compares the first age-identifying information of the first certificate revocation list to the second age-identifying information of the second certificate revocation list,
if the first age-identifying information is indicated to be older than the second age-identifying information, judges that the controller is unauthorized, and
if the first age-identifying information is indicated to be same as or younger than the second age-identifying information, judging that the controller is authorized and judging that the controller is set to receive an updated certificate revocation list from the server,
wherein, when the controller is judged to be unauthorized, the server no longer transmits the updated certificate revocation list to the controller.
8. A device, connected to the authentication system according to claim 7 .