Authentication device and authentication control method of a semiconductor chip
View Patent ↗An authentication device and method of a semiconductor chip which sends and receives authentication information, performs a login process for permitting an input to the semiconductor chip and an output from the semiconductor chip, controls acquisition of the authentication information and controls installation or uninstallation of a loadable program, assignment of a session to the loadable program unit, and use of the loadable program unit based on the session.
1. An authentication device of a semiconductor chip sending and receiving authentication information, the authentication device comprising:
a login unit to perform a login process permitting an input to the semiconductor chip and an output from the semiconductor chip;
a loadable program unit to install and uninstall a loadable program and control acquisition of the authentication information;
a control unit to control installation or uninstallation of the loadable program so as to replace an authentication program, and to control assignment of a session to the loadable program unit, and use of the loadable program based on the session; and
a command process unit to open and close a channel for sending and receiving information to and from the semiconductor chip and update a state of the channel based on a number of channels in-use.
2. The authentication device according to claim 1 , wherein the command process unit registers the updated state of the channel.
3. The authentication device according to claim 1 , wherein a user uses the loadable program via a channel.
4. The authentication device according to claim 1 , comprising:
a registration unit to register a user who uses the authentication device.
5. The authentication device according to claim 3 , wherein the user is a first user having registration authority or a second user registered by the first user.
6. The authentication device according to claim 1 , wherein the control unit includes a first information storing unit that stores information of a user, a channel assigned to the user, and the loadable program unit.
7. The authentication device according to claim 6 , wherein the first information storing unit stores authentication information of the user acquired by the loadable program unit.
8. The authentication device according to claim 1 , wherein the control unit includes a second information storing unit related to the session and the loadable program unit.
9. The authentication device according to claim 8 , wherein the second information storing unit stores information indicating a state of the loadable program.
10. The authentication device according to claim 9 , wherein the state of the loadable program includes at least one of an uninstallation state, an installation/unload state, a load state, and a suspension state.
11. The authentication device according to claim 1 , wherein the loadable program is a program that processes the authentication information.
12. The authentication device according to claim 11 , wherein the authentication information is one of a password and biometric information.
13. The authentication device according to claim 1 , wherein the authentication information and a resource generated in the authentication device are encrypted with an encryption key corresponding to user information and the encrypted authentication information and resource are sent to outside of the semiconductor chip.
14. The authentication device according to claim 3 , wherein the authentication information is decrypted with a decryption key corresponding to the user after receiving the authentication information.
15. A method of controlling authentication comprising:
importing user information to an authentication device that is provided in a semiconductor chip, the user information including installable and uninstallable loadable program to replace an authentication program;
performing a login for communication with the semiconductor chip;
registering authentication information of a user subjected to the login;
generating a resource pertaining to the user;
exporting the authentication information and the resource to outside of the semiconductor chip;
opening or closing a channel exchanging information with the semiconductor chip; and
updating a state of the channel based on a number of channels in-use.
16. The method of controlling authentication according to claim 15 , wherein the resource includes a key unique to the user.
17. The method of controlling authentication according to claim 15 , comprising:
performing the importing after opening a channel for sending and receiving information to and from the semiconductor chip, and
closing the opened channel after the exporting.
18. The method of controlling authentication according to claim 15 , comprising:
comparing first authentication information generated when registering the user with second authentication information acquired when performing the login.
19. The method of controlling authentication according to claim 15 , wherein the authentication information is one of a password program and a biometric program.
20. The authentication device according to claim 1 , wherein the command process unit updates the state of the channel when the number of the channels in-use reaches a limit value.
21. The method according to claim 15 , wherein the state of the channel is undated when the number of the channels in-use reaches a limit value.
22. The method according to claim 15 , comprising:
registering the updated state of the channel.