JP2001266088A - Card and its forger-preventing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a card and its forgery-preventing method, with which the forgery of a magnetic card is made to be difficult. SOLUTION: A magnetic stripe 102 is arranged and also a forgery-preventing IC chip 103 is mounted on the card 101. A card management terminal 105 reads card information on the magnetic strip 102 via a magnetic/IC reader/writer 104, compresses data of the card information and writes it on the IC chip 103 via the reader/writer 104. The terminal 105 reads card information on the magnetic stripe 102 to compress its data, collates it with compressed card information which is read from the IC chip 103 and judges the authenticity of the card 101.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an individual portable card used in the financial and service industries, and more particularly to a cash card, a credit card, a point card, an identification card, a membership card, a medical card, and the like. If a fraudulent card is created and a fraudulent card is used to record magnetic stripes, such as a ticket, or magnetically painted various personal information or value information, the card is forged by a third party. It is about technology that makes it more difficult.

[0002]

2. Description of the Related Art Conventionally, cash is received, deposited, transferred to a third party, paid by credit,
Earn points such as airline mileage, use card service terminals for purchase discounts or redemption of prizes, use member facilities, receive various medical insurance, get on and off vehicles In addition, various card services having personal information, application attributes and values are provided in the world.

As means for preventing unauthorized use of a card for receiving these card services, for example, information recorded on the card is compared with information to be possessed by a legitimate card, or a personal identification number is used by a card user. , Or the cardholder signs it, or checks the authenticity with a face photograph. Alternatively, the legitimate cardholder who has received the card usage details notices the suspicious card usage details, and inquires of the card issuer about the fact, and the possibility of the existence of a counterfeit card is recognized. Or The card company that recognizes the unauthorized use of the card creates a list of invalid cards (blacklist) to stop the service for the card with the card information and distributes it to various card service providers, online terminals, telephones, etc. , The service for the forged card is stopped by denying the inquiry about the validity of the card via the service.

[0004]

However, such a conventional method has the following problems. That is, conventional magnetism, barcode, IC chip, emboss, hologram,
In a card using information from one recording medium such as a magneto-optical card, if a similar recording medium is prepared and the recorded information is duplicated and recorded, it can be easily forged.
Even if a PIN is used to check the identity of the card, or the cardholder's signature, or a photo of the card's authenticity, the PIN can be used to identify the cardholder's attributes (date of birth, phone number, etc.) Or a note on the card or the card case itself, a signature may be imitated, or a photo of the face may be replaced by a third party.

[0005] In addition, the same information recorded magnetically by mounting an IC chip on one magnetic card and making it difficult to forge the IC chip or falsify the information of the IC chip is used.
The idea is to record on the C chip and simply copy the information on the magnetic stripe, or if the information on the magnetic stripe is tampered with, compare it with the information on the IC chip mounted at the same time to detect counterfeiting. In this case, if magnetic information can be copied to an IC chip,
The card is forged and can be used illegally.

[0006] It is an object of the present invention to provide a card which can solve the above-mentioned problem and can improve the reliability of preventing unauthorized use of a service by using a forged card, and a method for preventing the forged card.

[0007]

SUMMARY OF THE INVENTION The present invention is a method for preventing forgery of a card provided with a magnetic stripe and mounted with an IC chip for preventing forgery, wherein the information in the IC chip is read and written by a control device. The control device reads the card information stored through the information reading means on the magnetic stripe, and transfers the card information to the data by either the IC chip or the control device. The compressed or encrypted card information is compressed or encrypted.
It is characterized by a method for preventing forgery of a card to be written on a C chip. When determining whether a card has been counterfeited,
The card information read from the magnetic stripe is data-compressed or encrypted by one of the IC chip and the control device, and the data-compressed or encrypted card information and the IC
The authenticity of the card is determined by comparing and comparing the data with the data compressed or encrypted card information stored in the chip.

The present invention also provides a card provided with a magnetic stripe and mounted with an IC chip for preventing forgery, the IC chip comprising means for encrypting card information on the magnetic stripe inputted from outside, It is characterized by a forgery-preventing card having storage means for storing encrypted card information and means for sending the encrypted card information to the outside in response to a request from the outside.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of a card mounted with an IC chip for preventing forgery and a method for preventing forgery thereof will be described below.

FIG. 1 is a diagram showing a basic device configuration of the present embodiment. As shown in FIG. 1, a card 101 has a magnetic stripe 102 for magnetic recording, and an IC chip 103 for recording information for preventing forgery of magnetic information of the magnetic stripe is also mounted.

A magnetic / IC reader / writer device 104 capable of reading and writing information on a magnetic stripe 102 and an IC chip 103 of a card 101 having the forgery prevention structure is connected to a card management terminal 105. The card management terminal 105 communicates with the card 101 via the magnetic / IC reader / writer 104.
The information of the magnetic stripe 102 and the IC chip 103 is read, and the authenticity determination process is performed.

FIG. 2 is a diagram showing a basic device configuration via a network according to another embodiment. In this system configuration, a card terminal 201 reads information on a magnetic stripe 102 and an IC chip 103 of a card 101 via a magnetic / IC reader / writer device 104 and sends the information to a card management server 203 via a network 202.
The card management server 203 performs authenticity determination processing of the card 101.

FIG. 3 is a diagram showing a schematic configuration of the IC chip 103 of the present embodiment. As shown in FIG. 3, the IC chip 103 includes a communication antenna 301 and an electromagnetic induction device 3.
02, a power storage device 303, a control device 304, an encryption / decryption device 305, and a storage device 306.

The communication antenna 301 is an IC chip 103
An electromagnetic wave serving as a power source for transmitting / receiving information between the IC chip 103 and the magnetic / IC card reader / writer device 104 and driving the IC chip 103 is transmitted to the magnetic / IC card reader / writer device 104.
It is a device to receive from. The electromagnetic induction electromotive device 302
This device converts an electromagnetic wave received by the communication antenna 301 into electric power by electromagnetic induction. The power storage device 303 is a device that stores power generated by the electromagnetic induction power generation device 302 and serves as a power source for driving the IC chip 103.

The control device 304 is a device for controlling the operation of the entire IC chip 103. Encryption / decryption device 305
Is a device that encrypts communication data between the IC chip 103 and the magnetic / IC card reader / writer device 104 and performs conversion processing such as encryption and decryption of information to be transmitted and received. The encryption / decryption device 305 is provided when performing encryption processing or decryption processing in the IC chip 103. The storage device 306 is a device that stores various processing programs and data for controlling the operation of the entire IC chip 103.

The IC chip 103 has a card information storage processing section 310, a card information transmission processing section 311, an information processing section 312, and an authentication judgment processing section 313.

The card information storage processor 310 has a magnetic / I
C card reader / writer device 104 to IC chip 103
Is a processing unit that performs a process of receiving card information stored in the storage device 306 and storing it in the storage device 306.

The card information transmission processing unit 311 is a processing unit that performs processing of extracting card information stored in the storage device 306 of the IC chip 103 and transmitting the card information to the magnetic / IC card reader / writer device 104.

The information processing section 312 includes the IC chip 10
3 is a processing unit that performs data processing (encryption, decryption, data compression, etc.) necessary when reading and writing card information stored in the third storage device 306.

The authenticity judgment processing unit 313 is provided with the magnetic information of the magnetic stripe 102 of the card 101 and the IC of the card 101.
This is a processing unit that performs processing related to the authenticity determination of the card 101 using the information stored in the storage device 306 of the chip 103, and is provided when performing the authenticity determination processing in the IC chip 103.

FIG. 4 is a diagram showing a schematic configuration of the magnetic / IC card reader / writer device 104 and the card management terminal 105 of this embodiment. As shown in FIG. 4, the magnetic / IC card reader / writer 104 is
01 and an IC reader / writer device 402.

The magnetic reader / writer device 401
01 is a device for reading and writing magnetic information of the magnetic stripe 102. The IC reader / writer 402 is a card 1
01 is a device for reading and writing information stored in the storage device 306 of the IC chip 103, and includes a communication antenna 403 and a power supply device 404.

The communication antenna 403 is connected to the IC chip 103
To send and receive data to and from the communication antenna 301
This is a device for transmitting an electromagnetic wave serving as a power supply of the chip 103. The power supply device 404 is connected to the card management terminal 105
Power from the power supply 418 and converts it to electromagnetic waves,
IC via communication antenna 403 and communication antenna 301
This is a device for sending out to the electromagnetic induction device 302 of the chip 103.

The card management terminal 105 is connected to the controller 41
0, memory 411, magnetic disk device 412, keyboard 413, display device 414, CD-ROM device 415, encryption / decryption device 416, I / O control device 41
7, a power supply device 418 and a communication device 419.

The control device 410 controls the card management terminal 105
This is a device that controls the entire operation. The memory 411 is a device that stores various processing programs and data for controlling the operation of the entire card management terminal 105.

The magnetic disk device 412 is a storage device for storing various processing programs and data. The keyboard 413 is a device for inputting data, and the display device 414 is a device for displaying various data. The CD-ROM device 415 is a device that reads the contents of a CD-ROM in which various processing programs are recorded.

The encryption / decryption device 416 is a device that encrypts communication data between the card management terminal 105 and the IC chip 103 on the card 101, and performs conversion processing such as encryption and decryption of information to be transmitted and received.

The I / O control device 417 is a device for controlling the operation of the magnetic / IC card reader / writer device 104 from the card management terminal 105. The power supply device 418 is a device for supplying power from the card management terminal 105 to the magnetic / IC card reader / writer device 104.

The communication device 419 is connected to the card management terminal 105.
Is a device that controls communication when transmitting and receiving data to and from another system via the network 202.

The card management terminal 105 has a magnetic information processing unit 420, an IC information processing unit 421, and an authentication processing unit 422.

The magnetic information processing section 420 is a processing section for reading and writing magnetic information of the magnetic stripe 102 of the card 101 between the card management terminal 105 and the card 101.

The IC information processing section 421 is a processing section for transferring information between the card management terminal 105 and the IC chip 103 of the card 101. Unlike the case where information on the magnetic stripe 102 is simply read and written by the magnetic information processing unit 420, information in the IC chip 103 is accessed according to a communication protocol with the IC information processing unit 421. Therefore, this communication protocol is also used for the IC chip 10
3 is one of means for protecting the information in 3 and preventing unauthorized reading.

The authenticity judgment processing unit 422 is provided with the magnetic information of the magnetic stripe 102 of the card 101 and the IC of the card 101
A processing unit that performs processing related to the authenticity determination of the card 101 using the information stored in the storage device 306 of the chip 103.

The configuration of the card terminal 201 is the same as that of the card management terminal 105. However, since the authentication processing of the card 101 is performed by the card management server 203, the authentication processing section 422 and the encryption /
The configuration is the same as the configuration except for the decoding device 416.

FIG. 5 shows the card management server 2 of the present embodiment.
It is a figure which shows the schematic structure of No. 03. As shown in FIG. 5, the card management server 203 includes a control device 501, a memory 50,
2. Magnetic disk device 503, keyboard 504, display device 505, CD-ROM device 506, encryption /
It has a decoding device 507 and a communication device 508.

The control device 501 is connected to the card management server 20
3 is a device for controlling the entire operation. Memory 50
An apparatus 2 stores various processing programs and data for controlling the operation of the entire card management server 203.

The magnetic disk device 503 is a storage device for storing various processing programs and data. CD-
The ROM device 506 stores C in which various processing programs are recorded.
This is a device for reading the contents of the D-ROM.

The encryption / decryption device 507 is a device for encrypting communication data between the card management server 203 and the IC chip 103 on the card 101, and for performing conversion processing such as encryption and decryption of information to be transmitted and received. .

The communication device 508 is connected to the card management server 20
Reference numeral 3 denotes a device that controls communication when transmitting and receiving data to and from the card terminal 201 via the network 202.

The card management server 203 has an authenticity judgment processing section 510. The authentication processing unit 510 includes:
The magnetic information of the magnetic stripe 102 of the card 101 obtained by the card terminal 201 and the IC chip 10 of the card 101
3 using the information stored in the storage device 306 of the third card.
01 is a processing unit that performs processing related to the authenticity determination of No. 01.

FIG. 6 shows a card management terminal 10 according to this embodiment.
5 is a flowchart illustrating a processing procedure of card issuance processing performed by the card management server 203. FIG. 6 shows a processing procedure of a card issuing process by compressing magnetic information.

First, in step 601, magnetic information (such as a card number) to be recorded on the magnetic stripe 102 of the card 101 is generated according to a card issuing rule.

In step 602, card information to be recorded on the IC chip 103 of the card 101 after being compressed by taking a hash value of the magnetic information generated in step 601 is generated. The information processing unit 312 in the IC chip 103 may compress the data.

In step 603, the card management terminal 10
5 or the magnetic information processing unit 420 of the card terminal 201 writes the magnetic information generated in step 601 on the magnetic stripe 102 of the card 101.

At step 604, the card management terminal 10
5 and the card information storage processing unit 31 of the IC chip 103 of the card 101 and the IC information processing unit 421 of the card terminal 201.
0, the card information generated in step 602 is stored in the storage device 306 of the IC chip 103 of the card 101. However, if the information processing unit 312 in the IC chip 103 performs data compression in step 602, there is no step 604 since the IC information already generated is stored in the storage device 306 of the IC chip 103.

FIG. 7 is a flowchart showing a processing procedure of the processing for judging the authenticity of the card according to the present embodiment. FIG.
Represents a processing procedure of processing performed by the authentication judgment processing unit 422 of the card management terminal 105, the authentication judgment processing unit 510 of the card management server 203, or the authentication judgment processing unit 313 of the IC chip 103.

First, at step 701, the card management terminal 10
5 or the magnetic information processing unit 420 of the card terminal 201 reads the magnetic information recorded on the magnetic stripe 102 of the card 101.

In step 702, the card management terminal 10
5 or the IC recorded on the IC chip 103 of the card 101 by the IC information processing unit 421 of the card terminal 201.
Read information.

Next, in step 703, step 70
Card 101 using the magnetic information of the magnetic stripe 102 and the IC information of the IC chip 103 obtained in steps 1 and 702.
Is authenticated.

In the case of the embodiment shown in FIG. 6, the magnetic information of the magnetic stripe 102 is compressed by taking a hash value or the like, and it is determined whether or not it matches the card information of the IC chip 103. When the card management terminal 105 or the card management server 203 determines the authenticity, the card management terminal 105 or the card management server 203 compresses the magnetic information input from the magnetic stripe 102 and
03, the compressed magnetic information is acquired from the magnetic stripe 102, and it is determined whether or not the compressed magnetic information from the IC chip 103 matches the compressed magnetic information from the IC chip 103.
This method requires less processing in the IC chip 103,
The cost of the C chip 103 can be reduced.

When the IC chip 103 performs the authenticity judgment processing, there are two methods, that is, the data compression is performed by the card management terminal 105 or the card management server 203, or the data compression is performed in the IC chip 103. In the former case, the magnetic information compressed by the card management terminal 105 or the card management server 203 is sent to the IC chip 103, and the compressed information received by the authenticity determination processing unit 313 of the IC chip 103 and the storage device 30
Then, the authenticity is determined by comparing the compressed magnetic information stored in No. 6 with the compressed magnetic information, and the result is notified to the card management terminal 105 or the card management server 203. In the latter case, the card management terminal 105 or the card management server 203 transmits the magnetic information input from the magnetic stripe 102 to the IC chip 103.
Send to The information processing unit 312 of the IC chip 103
Compress the received magnetic information. Authentication judgment processing section 313
Compares the compressed information with the compressed magnetic information stored in the storage device 306 to determine the authenticity, and notifies the card management terminal 105 or the card management server 203 of the result.

As a result of the authenticity determination processing in step 703, if it is determined that the card 101 is genuine, the card 101 is determined to be genuine, and
Proceed to 4 to execute a normal application process to be provided for card use. Card 10 if determined to be fake
1 proceeds to step 705 as a fake, and rejects the acceptance of the application process using the card.

FIG. 8 is a flowchart showing a processing procedure of a card issuing process according to another embodiment. FIG. 8 shows a processing procedure of a card issuing process by encrypting magnetic information.

First, in step 801, magnetic information (such as a card number) to be recorded on the magnetic stripe 102 of the card 101 is generated according to a card issuing rule.

In step 802, the magnetic information generated in step 801 is encrypted to generate IC information to be recorded on the IC chip 103 of the card 101. As the device for encryption, the encryption / decryption device 41 of the card management terminal 105 is used.
6 or the encryption / decryption device 507 of the card management server 203
May be encrypted, or the encryption / decryption device 305 in the IC chip 103 may encrypt.

In step 803, the card management terminal 10
5 or the magnetic information processing unit 420 of the card terminal 201 writes the magnetic information generated in step 801 on the magnetic stripe 102 of the card 101.

At step 804, the card management terminal 10
5 and the card information storage processing unit 31 of the IC chip 103 of the card 101 and the IC information processing unit 421 of the card terminal 201.
In step S <b> 802, the IC information generated in step 802 is stored in the storage device 306 of the IC chip 103 of the card 101. However, in step 802, the encryption in the IC chip 103 is performed.
When the / decryption device 305 performs encryption, the step 804 does not exist because the already generated IC information is stored in the storage device 306 of the IC chip 103.

As a method for encrypting magnetic information, there are a method for encrypting instead of data compression, a public key / private key method, a common key method, and the like. The first method is to encrypt magnetic information using an encryption key instead of data compression processing. The public key / private key method is a method of encrypting magnetic information with one public key or secret key of a public key pair, and decrypting magnetic information with the other secret key or public key of the public key pair. The common key method encrypts magnetic information with a common key,
This is a method for decrypting magnetic information encrypted with the same common key. Hereinafter, the encryption processing or the decryption processing is performed by the card management terminal 10.
5 or the card management server 203 or an IC
The following four embodiments are possible depending on whether the processing is performed in the chip 103.

(1) Embodiment in which encryption processing is performed instead of data compression The encryption / decryption device 416 or the encryption / decryption device 507 encrypts magnetic information using an encryption key and sends the encrypted magnetic information to the IC chip 103 via the IC information processing unit 421. Send. IC chip 103
The card information storage processing unit 310 of this receives this and stores it in the storage device 306. In step 702 of the processing for determining the authenticity of the card shown in FIG.
Alternatively, the authenticity determination processing unit 510 transmits a command requesting the encrypted magnetic information to the IC chip 103 via the IC information processing unit 421 or the IC information processing unit 421 of the card terminal 201, respectively. The encryption / decryption device 305 of the IC chip 103 converts the encrypted magnetic information stored in the storage device 306 into the authenticity judgment processing unit 422 or the authentication judgment processing unit 5.
Send to 10. In step 703, the authenticity judgment processing unit 422 or the authentication judgment processing unit 510 encrypts the magnetic information read from the magnetic stripe 102 in step 701 with an encryption key, and matches the encrypted magnetic information received from the IC chip 103. Whether it is authentic or not is determined.

In this embodiment, the encryption processing is performed on the card management terminal 105 / card management server 203 side.
There is an advantage that the cost of the C chip 103 can be reduced. However, the encryption / decryption device 416 or the encryption / decryption device 5
The encryption key used by 07 must not be revealed.

(2) Embodiment in which both the encryption / decryption processing is performed on the card management terminal 105 / card management server 203 side The encryption / decryption device 416 or the encryption / decryption device 507 encrypts magnetic information using a public key or a secret key. The information is transmitted to the IC chip 103 via the IC information processing unit 421. IC
The card information storage processing unit 310 of the chip 103 receives this and stores it in the storage device 306. In step 702 of the processing for determining the authenticity of the card shown in FIG. 7, the authentication determination processing unit 422 or the authentication
A command requesting the encrypted magnetic information is transmitted to the IC chip 103 via the C information processing unit 421 or the IC information processing unit 421 of the card terminal 201. The encryption / decryption device 305 of the IC chip 103 transmits the encrypted magnetic information stored in the storage device 306 to the authentication processing unit 422 or the authentication processing unit 510. In step 703, the authenticity judgment processing unit 422 or the authentication judgment processing unit 510 receives this, and the encryption / decryption device 416 or the encryption / decryption device 5
In step 701, the data is decrypted with a secret key or a public key, and in step 701, it is determined whether the magnetic information matches the magnetic information read from the magnetic stripe 102.

This embodiment has an advantage that the cost of the IC chip 103 can be reduced since both the encryption processing and the decryption processing are performed on the card management terminal 105 / card management server 203 side. However, the public key / private key used by the encryption / decryption device 416 or the encryption / decryption device 507 must not be revealed. A common key method may be used instead of the public key method.

(3) Embodiment in which encryption processing is performed on the IC chip 103 side and decryption processing is performed on the card management terminal 105 / card management server 203 side The card management terminal 105 or the card management server 203
The magnetic information is transmitted to the IC chip 103 as it is. IC
The chip 103 receives this, and the encryption / decryption device 305 encrypts the magnetic information using the secret key, and stores it in the storage device 306 via the card information storage processing unit 310. In step 702, the IC chip 103 determines whether the authenticity
2 or a request for magnetic information from the authentication processing unit 510, the card information transmission processing unit 311 transmits the encrypted magnetic information to the authentication processing unit 422 or the authentication processing unit 510. In step 703, the authenticity judgment processing unit 422
Alternatively, the authenticity determination processing unit 510 receives this, decrypts the encrypted magnetic information with the public key via the encryption / decryption device 416 or the encryption / decryption device 507, and combines the decrypted magnetic information with the magnetic information in step 701. Whether the magnetic information matches the magnetic information read from the stripe 102 is determined.

This embodiment is different from the method (2) in that the IC
Although the cost of the chip 103 increases, the encryption / decryption device 4
There is an advantage that even if the public key used by the encryption / decryption device 16 or the encryption / decryption device 507 is exposed, the encrypted magnetic information output from the IC chip 103 cannot be predicted. This embodiment is not suitable for the common key method.

(4) Embodiment in which Both Encryption and Decryption Processes are Performed on the IC Chip 103 The card management terminal 105 or the card management server 203
The magnetic information is transmitted to the IC chip 103 as it is. IC
The chip 103 receives this, and the encryption / decryption device 305 encrypts the magnetic information using the public key or the secret key, and stores the encrypted magnetic information in the storage device 306 via the card information storage processing unit 310. In step 702, the IC chip 103 receives a request for magnetic information from the authentication processing unit 422 or the authentication processing unit 510, and transmits the encrypted magnetic information via the encryption / decryption device 305 to a secret key or a public key. To decrypt
The decrypted magnetic information is sent to the authentication processing unit 422 or the authentication processing unit 510. The authenticity judgment processing unit 422 or the authentication judgment processing unit 510 judges whether the magnetic information read from the magnetic stripe 102 in step 701 matches the magnetic information received from the IC chip 103 or not.
Note that a common key method may be used instead of the public key method.

FIG. 9 is a flowchart showing the procedure of a card issuing process according to still another embodiment. FIG. 9 illustrates a processing procedure of issuing a card 101 by separating card information such as a card number as a result of calculating a plurality of combined numbers and separating the plurality of combined numbers.

First, in step 901, card information such as a card number to be given to the card 101 is generated according to a card issuing rule.

At step 902, the numerical value of the generated card information is separated into a plurality of combined numbers. Here, the plurality of composite numbers is a number such that the original card information is composited by performing a predetermined operation on these composite numbers. For example, card number 12
34 can be separated into two composite numbers, such as the sum of 1200 and 0034, the sum of 1030 and 0204, and the like.

At step 903, the card management terminal 10
5 and the magnetic stripe 102 of the card 101 via the magnetic information processing section 420 of the card terminal 201,
Write one or more numerical values that leave at least one of the respective composite numbers obtained in step 2 and the original card information. In step 904, the card management terminal 105 or the card terminal 201
IC information processing unit 421 and IC chip 1 of card 101
03 by the card information storage processing unit 310 of the card 10
At least one remaining numerical value is stored in the storage device 306 of each IC chip 103.

In the case of the embodiment shown in FIG.
The authenticity of the third card 101 is determined as follows. The authenticity judgment processing unit 422 or the authentication judgment processing unit 510 performs a predetermined operation on each composite number read from the magnetic stripe 102 and the IC chip 103, and
Alternatively, it is determined whether or not it matches the original card information read from the IC chip 103. This method uses the IC chip 10
3, it is assumed that at least one of the plurality of combined numbers and the original card information cannot be easily read.
Unless such information can be read from the IC chip 103, it is impossible to predict the numerical value output by the IC chip 103.

The original card information is transferred to the magnetic stripe 10
Alternatively, the information may not be stored in the IC chip 103 nor in the IC chip 103, and may be acquired from a database held by the card management terminal 105 or the card management server 203. In that case, the authenticity judgment processing unit 422 or the authentication judgment processing unit 510 performs a predetermined operation on each of the combined numbers read from the magnetic stripe 102 and the IC chip 103 to obtain the original card information acquired from this database. It is determined whether they match.

FIG. 10 is a flowchart showing the procedure of a card issuing process according to still another embodiment. FIG.
The figure shows a processing procedure for issuing a card 101 by dividing card information which is a numerical value having a plurality of digits such as a card number into two or more numerical values by digits. At this time, the card 101 is equipped with a plurality of IC chips 103 for storing numerical values each having a divided number of digits.

First, in step 1001, card information such as a card number to be recorded on the magnetic stripe 102 of the card 101 is generated according to a card issuing rule.

In step 1002, step 1001
The card information generated in step (c) is divided by the number to be recorded on the plurality of IC chips 103 of the card 101, and each IC chip 10
3 to generate numerical values to be recorded. For example, when the card number is a 16-digit numerical value and the number of IC chips 103 is 2, the upper 8-digit numerical value and the lower 8-digit numerical value are divided.

At step 1003, the card management terminal 1
05 and the magnetic stripe 102 of the card 101 via the magnetic information processing unit 420 of the card terminal 201
Write the card information generated in step 001. Step 10
04, the IC chip 103 mounted on the card 101
Repeat the next step as many times as.

At step 1005, the card management terminal 1
05 and the card information storage processor 3 of the IC chip 103 of the card 101 and the IC information processor 421 of the card terminal 201.
The respective numerical values divided in step 1002 are stored in the storage device 306 of each of the IC chips 103 of the card 101 via 10.

In the case of this embodiment, the authenticity judgment processing of step 703 judges whether or not the numerical value obtained by combining the numerical values read from the IC chip 103 matches the card information read from the magnetic stripe 102. Card 101
If a plurality of IC chips 103 are mounted thereon, the cost increases, so that forgery becomes more difficult than when one IC chip 103 is mounted.

FIG. 11 is a flowchart showing a processing procedure of a process for reducing the frequency of judging the authenticity of a card by using key information such as the accumulated amount of money used. FIG.
5 shows a processing procedure of processing performed by the authentication judgment processing unit 422 of the card management terminal 105 and the authentication judgment processing unit 510 of the card management server 203.

First, at step 1101, the I of the card 101
Through the card information transmission processing unit 311 of the C chip 103, the key information for authentication determination stored in the storage device 306 of the IC chip 103 is extracted, and the card management terminal 10
5 and the IC information processing unit 421 of the card terminal 201.
The key information is information recorded on the IC chip 103, such as the amount of shopping and the accumulated amount of use.

At step 1102, the card management terminal 1
The key information extracted in step 1101 is updated in accordance with the current card use by the IC information processing unit 421 of the card terminal 201 or the card information 201. For example, it is updated based on the current purchase amount, or the current use amount is added to the total use amount of the card 101 up to the previous time. As a result, when it is not necessary to check the authenticity, the updated key information is stored in the storage device 30 of the IC chip 103 by the card information storage processor 310 of the IC chip 103 of the card 101.
6 and the normal application process using the card is executed, and the process is terminated. On the other hand, if it is necessary to check the authenticity, proceed to the next step. Step 1103
Then, if the key information exceeds a predetermined amount, it is determined that a check is necessary.

At step 1104, the card management terminal 1
05 or the magnetic information processing unit 420 of the card terminal 201
Thus, the magnetic information recorded on the magnetic stripe 102 of the card 101 is read.

At step 1105, the card management terminal 1
05 or the IC information processing unit 421 of the card terminal 201
As a result, the I recorded on the IC chip 103 of the card 101
Read C information. Here, steps 1104 and 110
The processing of step 5 is the same as the processing of steps 701 and 702.

Next, in step 1106, the authenticity of the card 101 is determined using the obtained magnetic information of the magnetic stripe 102 and the card information of the IC chip 103. Here, the process of step 703 is performed.

In the case of the embodiment shown in FIG. 6, the magnetic information of the magnetic stripe 102 is compressed and the IC chip 103 is compressed.
Compare with the card information of In the case of the embodiment shown in FIG. 8, the magnetic information of the magnetic stripe 102 is encrypted to match the IC information of the IC chip 103, or the IC information of the IC chip 103 is decrypted to Compare or match. FIG.
In the case of the embodiment shown in FIG.
It is confirmed whether or not correct information can be generated by combining the information with the magnetic information of the magnetic stripe 102. In the case of the embodiment shown in FIG. 10, the IC information of each of the plurality of IC chips 103 is combined and compared with the magnetic information of the magnetic stripe 102 for comparison.

As a result of the authenticity determination processing in step 1106, if it is determined that the card 101 is genuine, the process proceeds to step 1108 in which the card 101 is genuine, and normal application processing to be provided for use of the card is executed. If it is determined that the card 101 is fake, the processing proceeds to step 1107 as the fake card 101, and rejection of application processing using the card is rejected.

According to the embodiment shown in FIG.
Instead of determining the authenticity of the card 101 each time the user uses 01, the frequency of the authenticity determination of the card 101 is reduced by the key information. With this method, the card management terminal 10
5 or the processing of the card management server 203 and communication via the network 202 can be reduced.

As described above, in this embodiment, forgery of a recording medium can be made difficult by mounting a forgery prevention IC chip. Further, by arbitrarily combining the apparatus configuration shown in the present embodiment, the apparatus configuration via the network, the card issuing processing procedure, and the card authenticity determination procedure, it is possible to further enhance the forgery prevention effect of the recording medium management system. is there. An embodiment that is appropriate in consideration of the necessary degree of security of the card 101 and the cost of the IC chip 103 may be adopted.

[0088]

According to the present invention, a forged card can be detected by using information of a forgery-preventing IC chip mounted on a recording medium, so that unauthorized use of the card due to forgery can be prevented. is there.

[Brief description of the drawings]

FIG. 1 is a diagram showing a basic device configuration of an embodiment.

FIG. 2 is a diagram illustrating a basic device configuration via a network according to the embodiment.

FIG. 3 is a diagram illustrating a schematic configuration of an IC chip according to an embodiment.

FIG. 4 is a diagram illustrating a schematic configuration of a magnetic / IC card reader / writer device and a card management terminal according to the embodiment;

FIG. 5 is a diagram illustrating a schematic configuration of a card management server according to the embodiment.

FIG. 6 is a flowchart illustrating a card issuing processing procedure according to the embodiment;

FIG. 7 is a flowchart illustrating a processing procedure of card authenticity determination processing according to the embodiment.

FIG. 8 is a flowchart illustrating another card issuing processing procedure according to the embodiment;

FIG. 9 is a flowchart illustrating still another card issuing processing procedure according to the embodiment;

FIG. 10 is a flowchart illustrating still another card issuing processing procedure according to the embodiment;

FIG. 11 is a flowchart showing a processing procedure of card authenticity determination executed according to the conditions of the embodiment.

[Explanation of symbols]

101: card, 102: magnetic stripe, 103: I
C chip, 105: card management terminal, 201: card terminal, 203: card management server

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06K 19/07 G11B 5/02 Z 19/06 20/10 H 19/10 G06K 19/00 H G11B 5 / 02 B 20/10 RF term (reference) 2C005 HA01 HA02 HB01 HB04 HB08 HB09 HB13 HB14 HB20 JA02 JA26 JB32 JB33 JC10 LB04 LB09 LB11 LB18 LB19 LB20 LB31 LB32 LB52 MA02 MA03 MB01 MB07 MB08 MB10 SA09 QA1 SA27 AA13 BB02 BB09 5B058 CA15 CA22 CA31 KA08 KA32 KA35 5D044 AB10 BC01 BC10 CC08 CC10 DE72 EF10 GK17 5D091 AA12 BB06 CC30 FF10 HH01 HH04 JJ21

Claims (5)

[Claims] 1. A forgery prevention method for a card provided with a magnetic stripe and mounted with an IC chip for forgery prevention, wherein information in the IC chip is accessed according to a communication protocol with a control device for reading and writing the information. Reading the card information stored by the control device through the information reading means on the magnetic stripe, and compressing the card information by one of the IC chip and the control device, A forgery prevention method for a card, comprising writing card information that has been data-compressed to the IC chip. 2. A forgery prevention method for a card provided with a magnetic stripe and mounted with an IC chip for forgery prevention, wherein information in the IC chip is accessed according to a communication protocol with a control device for reading and writing the information. Reading the card information stored by the control device through the information reading means on the magnetic stripe, and compressing the card information by one of the IC chip and the control device, A forgery prevention method for a card, comprising comparing and comparing data-compressed card information with data-compressed card information stored in an IC chip to determine the authenticity of the card. 3. A forgery prevention method for a card provided with a magnetic stripe and mounted with an IC chip for forgery prevention, wherein information in the IC chip is accessed according to a communication protocol with a control device for reading and writing the information. The control device reads the card information stored through the information reading means on the magnetic stripe, and encrypts the card information by one of the IC chip and the control device. A forgery preventing method for a card, comprising writing the converted card information to the IC chip. 4. A method for preventing forgery of a card provided with a magnetic stripe and mounted with an IC chip for preventing forgery, wherein information in the IC chip is accessed according to a communication protocol with a control device for reading and writing the information. The control device considers the numerical value of the given card information as a numerical value obtained by calculating a plurality of composite numbers and separates the numerical value into the plurality of composite numbers. At least one of the numerical values leaving at least one is written to the magnetic stripe via the magnetic stripe writing means, and the remaining at least one numerical value is written to the IC.
A method for preventing forgery of a card, wherein the card is written to the IC chip via a chip writing means. 5. A card provided with a magnetic stripe and mounted with an IC chip for preventing forgery, said IC chip comprising: means for encrypting card information on said magnetic stripe inputted from outside; A card for storing forged card information, and means for sending out the encrypted card information to the outside in response to a request from the outside.