JP2003123032A - Ic card terminal and individual authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enjoy each service by using a common PIN in the service for which an IC card corresponding to a plurality of the services requiring individual PIN authentication is used. SOLUTION: An IC card terminal 100, using the IC card 101 storing one or more of service programs processing the service requiring propriety confirmation of a card owner 102, one or more of individual identification numbers used for the propriety confirmation of the card owner and one or more of ciphered identification numbers for which the individual identification numbers are ciphered, is provided with an identification number input means 113 for inputting a first identification number, a card read/write means 110 for communicating with the IC card, and an arithmetic processing means 111 for generating a second identification number by deciphering the ciphered identification number read from the IC card by the first identification number, transmitting the second identification number to the IC card and normally performing the service in the case that the second identification number matches with the individual identification number inside the IC card.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card terminal device and a personal authentication method for performing personal authentication using an IC card.

[0002]

2. Description of the Related Art In recent years, IC cards have become widely used in place of magnetic cards. This is because the IC card is a magnetic card that has a large storage capacity, is equipped with an arithmetic unit (microprocessor) for performing cryptographic processing, etc., and cannot easily observe the inside (has tamper resistance). This is because there is a feature that does not exist in. Applying IC cards with these characteristics to payment systems and identification systems, etc. to improve security compared to magnetic cards and provide new services that could not be realized with magnetic cards. You can For example, services provided by the payment system include electronic money and credit cards, and services provided by the identification system include employee ID cards and driver's licenses.

IC cards are classified into contact type and non-contact type according to their communication systems, and their specifications have already been standardized. For example, the contact type IC card is I
SO (International Organiza)
section for Standardization:
It is standardized as ISO / IEC7816 by the International Organization for Standardization). I based on ISO / IEC7816
The C card internally performs calculation in accordance with the command transmitted from the terminal and sequentially returns the result as a response, thereby performing processing for realizing the service.

Here, commands and responses transmitted and received between the IC card and the terminal are APDU (Applicat).
Ion Protocol Data Unit) and is defined by ISO / IEC7816. Further, in the IC card based on ISO / IEC7816, programs and data are stored in files having a hierarchical structure as shown in FIG.

In FIG. 13, a main file (MF) 90
0 is a top-level file, and only one file exists in the IC card, and a plurality of dedicated files (DF) 901 are located below it.
A, 901B, and 901C are present. The dedicated file stores a program for executing a specific service (hereinafter referred to as a service program) and data necessary for executing the service (hereinafter referred to as service data). Since a plurality of dedicated files can exist in the IC card, by storing a plurality of service programs and service data in different dedicated files, one IC card can use a plurality of services.

In order to execute a specific service program, the terminal first uses a "file selection command" defined as an APDU format command to create a dedicated file in which the specific service program is stored.
Select as the current file. As a result, subsequent commands received by the IC card from the terminal will be processed according to the selected service program. Here, each dedicated file can be identified from the outside by an ID called an application identifier (hereinafter abbreviated as AID). For example, "File selection command"
Can specify a specific dedicated file by specifying the AID.

When receiving a service using an IC card, it may be required to authenticate that the card owner himself / herself is using the card. Authentication for this purpose is called personal authentication. . As a method for realizing personal authentication, PIN authentication in which a cardholder inputs a personal identification number called a PIN into a terminal is generally used. The PIN authentication includes "offline PIN authentication" in which the PIN entered by the cardholder is compared with the PIN stored in the IC card, and the PIN entered by the cardholder.
The PIN that is maintained by the center via the network
There is an “online PIN authentication” that collates with. PIN
It is important to perform personal authentication such as authentication in order to prevent illegal use of the IC card.

[0008]

As described above,
By using an IC card, various services can
C card can be used, but on the other hand, when performing PIN authentication to use each service, the card holder must remember the different PIN for each service and use the PIN properly for each service to be used. May not have to. This is a factor that greatly impairs the convenience of card users.

Therefore, according to the present invention, the IC card owner
When using an IC card that supports multiple services to receive each service, PI that must be performed for each service
An object of the present invention is to provide an IC card terminal and a personal authentication method that can improve the convenience of the IC card owner by making N authentication possible by simply remembering one common PIN.

[0010]

In order to achieve the above object, according to the present invention, there is at least one service program for processing a service which requires confirmation of the validity of the cardholder, and the validity of the cardholder. An IC card terminal using one or more individual personal identification numbers used for confirmation and an IC card storing one or more encrypted personal identification numbers, which is obtained by encrypting the individual personal identification numbers, Security code input means for inputting the security code, card reading / writing means for communicating with the IC card, information storage means for storing information acquired from the IC card, and the encrypted security code for the card. The read / write means reads out from the IC card, stores the information in the information storage means, and reads the encrypted personal identification number stored in the information storage means to read the first secret code. It is decrypted with a number to generate a second personal identification number, and the second personal identification number is transmitted to the IC card by the card reading / writing means, and the second personal identification number is stored in the IC card. And an arithmetic processing unit that normally executes the service when the numbers match.

Further, according to the present invention, there is at least one service program for processing a service which requires the justification of the cardholder, and one individual personal identification number used for the justification of the cardholder. Above, an IC in which one or more encrypted personal identification numbers are stored which are obtained by encrypting the individual personal identification numbers.
A personal authentication method in a system comprising a card and an IC card terminal for providing the service to the card holder using the IC card, wherein the IC card terminal reads the encrypted personal identification number from the IC card. A processing step in which the IC card terminal stores the encrypted personal identification number read from the IC card; a processing step in which the cardholder inputs a first personal identification number into the IC card terminal; A step of decrypting the encrypted personal identification number stored in the terminal with the first personal identification number to generate a second personal identification number; and the IC card terminal using the second personal identification number as the I
And a step of normally executing the service when the second personal identification number matches with the individual personal identification number in the IC card.

[0012] In other words, in order to solve the above-mentioned problems, according to the present invention, there is at least one service program for processing a service that requires the justification of the cardholder, and the justification of the cardholder is confirmed. An IC card terminal using an IC card storing one or more individual personal identification numbers and one or more encrypted personal identification numbers obtained by encrypting the individual personal identification numbers is PIN input means for inputting, card reading / writing means for communicating with the IC card, the encrypted PIN number is read from the IC card by the card reading / writing means, decrypted with the first PIN, An IC processing unit for generating a second personal identification number and transmitting the generated second personal identification number to the IC card by the card read / write unit. When the at, inner second personal identification number matches with the individual identification number, and so as to properly execute the service.

The present invention provides the above IC card terminal,
An information storage means for storing information obtained from the IC card is provided, and the encrypted personal identification number is read from the IC card by the card reading / writing means, stored in the information storage means, and stored in the information storage means. The encrypted personal identification number is read and decrypted with the first personal identification number.

The present invention provides the above IC card terminal,
The encrypted personal identification number is a combination of the individual personal identification number and fixed value data consisting of a specific value, which is encrypted using the first personal identification number, and the arithmetic processing means, If the fixed value data is correct in the data obtained by decrypting the encrypted personal identification number using the first personal identification number, the second personal identification number obtained by the decryption is the It was decided that it would be equal to the individual PIN.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the cardholder and that there is at least one service program for processing a service requiring the validity confirmation of the cardholder. An IC card terminal that uses an IC card in which one or more encrypted personal identification numbers are stored and which communicates with a center device that stores the individual personal identification numbers, and the cardholder is the first A personal identification number input means for inputting a personal identification number, a card reading / writing means for communicating with the IC card, a communication means for communicating with the center device via a network, and the above-mentioned card read / write means for reading from the IC card. The encrypted personal identification number is decrypted by the first personal identification number to generate a second personal identification number, and the second personal identification number is generated by the communication means. And an arithmetic processing means for transmitting to the printer device, when the in the center apparatus second personal identification number matches with the individual identification number, was able to successfully execute the service.

The present invention provides the above IC card terminal,
An information storage means for storing information obtained from the IC card is provided, and the encrypted personal identification number is read from the IC card by the card reading / writing means, stored in the information storage means, and stored in the information storage means. The encrypted personal identification number is read and decrypted with the first personal identification number.

The present invention provides the above IC card terminal,
The encrypted personal identification number is a combination of the individual personal identification number and fixed value data consisting of a specific value, which is encrypted using the first personal identification number, and the arithmetic processing means, If the fixed value data is correct in the data obtained by decrypting the encrypted personal identification number using the first personal identification number, the second personal identification number obtained by the decryption is the It was decided that it would be equal to the individual PIN.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the cardholder and that there is at least one service program for processing a service requiring the validity confirmation of the cardholder. One or more individual personal identification numbers and one encrypted personal identification number obtained by encrypting the individual personal identification number
A personal authentication method in a system including an IC card in which at least one is stored and an IC card terminal that provides the service to the cardholder using the IC card is provided by A processing step of reading from the IC card; a processing step of accumulating the encrypted personal identification number read from the IC card by the IC card terminal;
A processing step of inputting a first personal identification number to a card terminal, and a processing step of decrypting the encrypted personal identification number stored in the IC card terminal with the first personal identification number to generate a second personal identification number. And the IC card terminal sends the second password to the IC card,
And a processing step of normally executing the service when the second personal identification number matches the individual personal identification number in the card.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the card holder and that there is at least one service program for processing a service requiring the validity confirmation of the card holder. An IC card in which one or more encrypted personal identification numbers, which are encrypted individual personal identification numbers, are stored, an IC card terminal that uses the IC card to provide the service to the cardholder, an IC card terminal, and a network. A personal authentication method in a system comprising a center device which is connected via an IC card and stores the individual personal identification number includes a processing step in which the IC card terminal reads the encrypted personal identification number from the IC card, and the IC card A processing step in which the terminal stores the encrypted personal identification number read from the IC card; Processing step of inputting a first personal identification number to the terminal, and processing step of decrypting the encrypted personal identification number stored in the IC card terminal with the first personal identification number to generate a second personal identification number. And the IC card terminal sends the second personal identification number to the center device, and the center device executes the service normally when the second personal identification number matches the individual personal identification number. Steps and are included.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the card holder and that there is at least one service program for processing a service requiring the validity confirmation of the card holder. One or more individual personal identification numbers and one encrypted personal identification number obtained by encrypting the individual personal identification number
A person in a system consisting of an IC card in which one or more pieces of information are stored, an identification number management program for managing the encrypted identification number, and an IC card terminal for providing the service to the cardholder using the IC card. The authentication method includes a processing step in which the cardholder inputs a first personal identification number into the IC card terminal; a processing step in which the IC card terminal transmits the first personal identification number to the IC card; A processing step in which the personal identification number management program executed in the card decrypts the encrypted personal identification number with the first personal identification number to generate a second personal identification number, and transmits the second personal identification number to the IC card terminal; The IC card terminal transmits the second personal identification number to the IC card, and the second personal identification number matches the individual personal identification number inside the IC card. When, and to include the process steps to successfully perform the service.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the card holder and that there is at least one service program for processing a service requiring the validity confirmation of the card holder. One or more individual personal identification numbers and one encrypted personal identification number obtained by encrypting the individual personal identification number
A person in a system consisting of an IC card in which one or more pieces of information are stored, an identification number management program for managing the encrypted identification number, and an IC card terminal for providing the service to the cardholder using the IC card. The authentication method includes a processing step in which the cardholder inputs a first personal identification number into the IC card terminal; a processing step in which the IC card terminal transmits the first personal identification number to the IC card; A processing step in which the personal identification number management program executed in the card decrypts the encrypted personal identification number with the first personal identification number to generate a second personal identification number; and the personal identification number program is stored in the service program. Send the second personal identification number, and if the second personal identification number matches the individual personal identification number, normally execute the service. It was to include a physical step.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the cardholder and that there is at least one service program for processing a service requiring the validity confirmation of the cardholder. An IC card terminal that provides the service to the cardholder by using an IC card in which one or more individual personal identification numbers and a first personal identification number that protects the output of the individual personal identification number to the outside are stored. , A personal identification number input means for allowing the cardholder to input a second personal identification number, a card reading / writing means for communicating with the IC card, and the second personal identification number for the IC card by the IC card reading / writing means. When the second personal identification number coincides with the first personal identification number within the IC card, the individual personal identification number is transmitted to the IC.
A calculation for obtaining the individual PIN number by the card read / write means, transmitting the individual PIN number to the IC card by the card read / write means, and normally executing the service when the individual PIN number is successfully collated in the IC card. And a processing means.

In order to solve the above-mentioned problems, the present invention is used for confirming the validity of the card holder and that there is at least one service program for processing a service requiring the validity confirmation of the card holder. The service is provided using an IC card in which one or more individual personal identification numbers, first biometric information for protecting the output of the individual personal identification number to the outside, and a management program for managing the biometric information are stored. An IC card terminal provided to a card holder, biometric information reading means capable of reading second biometric information from the card holder, card reading / writing means for communicating with the IC card, and the second biometric information. Is transmitted to the IC card by the IC card read / write means, and when the second biometric information matches the first biometric information inside the IC card. To, the IC the individual personal identification number
A calculation for obtaining the individual PIN number by the card read / write means, transmitting the individual PIN number to the IC card by the card read / write means, and normally executing the service when the individual PIN number is successfully collated in the IC card. And a processing means.

The present invention provides the above IC card terminal,
As the first biometric information and the second biometric information,
Fingerprints were used.

[0025]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below. Here, in the following embodiments, a case where a contact type IC card is used will be described. However, the contact type is not an item necessary for the present invention. The invention is applicable. Further, in the following embodiments, the command transmitted / received between the terminal and the IC card is assumed to be the APDU format command, but the use of the APDU format command is not an item necessary for the present invention, and the APDU format command is used. The present invention can be applied to any command set as long as it can realize a function equivalent to the format. Further, in the following embodiments, a terminal having a function of performing payment for electronic money or a credit card is assumed as the terminal, but such a terminal is not an item necessary for the present invention, The present invention can be applied to any terminal that performs personal authentication.

First, the first embodiment will be described.
FIG. 1 shows the configuration of an IC card and a terminal according to the present embodiment for performing personal authentication. In FIG. 1, personal authentication is
It is performed among the payment terminal 100, the IC card 101, the card holder 102, the clerk 103, and the network 104. The configuration shown in FIG.
However, it is assumed that the IC card 101 is used to make payment using electronic money or a credit card. Therefore, the payment terminal 100 is a terminal having a payment function using an IC card, and is assumed to be, for example, a credit terminal or an ATM of a financial institution. In addition, the IC card 101
It is configured to provide multiple services such as electronic money and credit cards. The cardholder 102 is the PIN used for personal authentication and is the IC card 10
Common P that can be commonly used by multiple services provided by 1
It is assumed that IN105 is stored.

Next, the internal structure of the settlement terminal 100 will be described. The payment terminal 100 includes a card reading / writing means 11
0, arithmetic processing means 111, display device 112, PIN input means 113, information storage means 114, operation means 115, and communication means 116.

The card reading / writing means 110 has a function of transmitting (writing) a command to the IC card 101 and receiving (reading) a response from the IC card in order to communicate with the IC card 101.

The arithmetic processing means 111 is composed of, for example, a microprocessor and a program storage memory, and has a function of controlling the entire payment terminal 100 based on a program stored in the program storage memory and performing a payment process.

The display means 112 displays various information such as the payment amount to the cardholder 102.

The PIN input means 113 is used by the cardholder 1
02 has a function of inputting a PIN for personal authentication using, for example, a ten-key pad.

The information storage means 114 is the IC card 101.
Also, it has a function of temporarily or permanently accumulating the information acquired from the network 104 or the information input by the cardholder 102 or the clerk 103, and is composed of, for example, a hard disk or a semiconductor memory.

The operation means 115 provides an interface for the clerk 103 to operate the payment terminal 100, and is composed of, for example, a keyboard, a bar code reader, a display and the like.

The communication means 116 has a function of communicating with the center via the network 104, and is used for performing online PIN authentication, for example. Here, when the settlement terminal 100 is an unmanned terminal such as an ATM of a financial institution, the operation unit 115 may be omitted and the clerk 103 may not be present. Further, when the payment processing by the payment terminal 100 is completed offline, the communication unit 116 may be omitted.

Next, the internal structure of the IC card 101 will be described. The IC card 101 has a communication unit 117, an information storage unit 118, and an arithmetic processing unit 119.

The communication means 117 communicates with the card read / write means 110 of the payment terminal 100, and the payment terminal 100.
It has a function of receiving a command from the user and returning a response to the payment terminal 100.

The information storage means 118 has a function of temporarily or permanently storing a program or data for executing a service provided by the IC card, information acquired from the settlement terminal 100, or the like, for example, a ROM (Read).
Only Memory), RAM (Random)
Access Memory), and a semiconductor memory such as a flash memory.

The arithmetic processing means 119 has a function of controlling the entire IC card by using a microprocessor and executing a program stored in the information storage means 118.

Next, the IC card 10 according to the present embodiment
FIG. 2 shows the structure of the information stored in item 1. Figure 2 shows the IC
It is a file structure inside the information storage means 118 that constitutes the card 101, and includes a main file (MF) 120, dedicated files (DF) 121A, 121B, 121C, and P.
It is composed of an IN management-dedicated file 122. These files have a hierarchical structure in which the main file 120 is located at the top and the dedicated file 121 is located at the lower layer.
The A, 121B, 121C and the PIN management dedicated file 122 are located. Different AIDs are assigned to the respective dedicated files and can be identified from the outside.

Next, the internal structure of the dedicated files 121A, 121B and 121C will be described. The dedicated file 121A stores a service program 131A that executes a specific payment service, and an individual PIN 141A that is data necessary for executing personal authentication by offline PIN authentication in this payment service. Similarly, the dedicated file 121B stores a service program 131B and an individual PIN 141B. Further, the dedicated file 121C stores a service program 131C, and the service program 1C
The settlement service executed by 31C performs online PIN authentication as personal authentication. Therefore, PIN data is not stored in the dedicated file 121C.

Next, the PIN management dedicated file 122 will be described. The PIN management dedicated file 122 is a PI
This is a dedicated file for N management. The PIN management-dedicated file 122 contains service programs 131A and 131A.
A PIN management program 132 that manages individual PINs used individually by B and 131C, and PIN management data 142A, 142B, and 142C that are data managed by the PIN management program 132 are stored. Here, the PIN management data 142A includes data necessary for the offline PIN authentication executed by the service program 131A. Similarly, the PIN management data 142B includes data required for offline PIN authentication executed by the service program 131B. The PIN management data 142C is the online PIN executed by the service program 131C.
It contains the data required for authentication.

In this description, the information storage means 118
Although three service programs are included and the PIN management program manages three PIN management data, the present invention is also applicable to an IC card that includes any number of service programs. It is possible. For example, when the IC card 101 includes four service programs, the PIN management program may manage four PIN management data. Further, according to the present invention, the service program in the IC card 101 is an online PIN
The present invention can be applied to both the authentication configuration and the offline PIN authentication configuration.

Next, the configuration and usage of PIN management data managed by the PIN management program 132 according to this embodiment will be described. First, FIG. 3 shows the configuration and generation procedure of PIN management data. In FIG. 3, PI
The N management data 142 includes the AID 202 and the control flag 2
03 and the encrypted individual PIN 204 are included. The AID 202 is an application identifier of a dedicated file in which a service program corresponding to the PIN management data 142 is stored. Control flag 2
Reference numeral 03 indicates a PIN authentication method (online or offline) corresponding to the PIN management data 142. For example,
It is assumed that 1 bit is allocated to the control flag 203, and an individual PIN for online is held in the case of “0” and an individual PIN for offline is held in the PIN management data 142 in the case of “1”. The encrypted individual PIN 204 is an encrypted individual PIN, and is the encrypted individual PIN 20.
The content of the original individual PIN cannot be inferred from only 4 items.

As a procedure for generating the PIN management data 142, first, in step S200, the correct AID 20
Set 2. Next, as step S201, the correct control flag 203 is set. Next, in step S202, the data obtained by combining the individual PIN 141 and the fixed pattern 201 is set to the common PIN 105 set by the card owner.
Is used as an encryption key, and the output ciphertext is used as the encrypted individual PIN 204. Here, the fixed pattern 201 is a specific bit string and is set as a fixed value. As the encryption process executed in step S202, it is possible to use DES, which is an encryption algorithm based on the block cipher system, for example. Alternatively, another encryption algorithm may be used.

The above-described generation procedure is performed when newly registering the PIN management data 142, when changing the common PIN 105, and when changing the individual PIN 141.
When changing the common PIN, the PIN management data generated by the new common PIN may be replaced with the PIN management data up to now. Similarly, when changing the individual PIN, the PIN management data generated from the new individual PIN may be replaced with the PIN management data up to now.

Next, FIG. 4 shows a processing procedure for extracting an individual PIN from PIN management data. This processing procedure is shown in FIG.
Calculation means 111 constituting the settlement terminal 100 shown in FIG.
It is executed by using. In FIG. 4, the PIN management data 142 is configured to include the AID 202, the control flag 203, and the encrypted individual PIN 204, as described above.

First, in step S300, AID20
2 is checked to see if it matches the application identifier of the dedicated file in which the service program using the individual PIN is stored. If the AIDs do not match, this process is illegally terminated. If the AIDs match, then in step S301, the control flag 203 is checked, and the PIN authentication method (offline or online) indicated by the control flag 203 matches the PIN authentication method performed by the service program using the individual PIN. Find out what to do. If the PIN authentication methods do not match, the process is illegally terminated. If the PIN authentication methods match, then in step S302, the common PIN 10
Decryption processing is performed using 5 as an encryption key, and the output plaintext is separated into the individual PIN 141 and the fixed pattern 201. Here, as the common PIN 105, the one input by the cardholder 102 to the terminal 100 is used.

Next, in step S303, it is verified whether the acquired fixed pattern 201 has a correct value. Here, it is assumed that the terminal 100 knows the correct value of the fixed pattern in advance. If the fixed pattern 201 is not a correct value, this process is terminated abnormally. If the fixed pattern 201 has a correct value, it is considered that the individual PIN 141 has been correctly acquired, and this processing ends normally.

Next, the payment terminal 100 according to this embodiment.
The processing flow of will be described. Figure 5 shows cardholder 1
Reference numeral 02 is a flow chart when the settlement processing is performed by the settlement terminal 100 using the IC card 101. Here, it is assumed that the settlement processing is executed by using the arithmetic processing means 111 which constitutes the settlement terminal 100 shown in FIG. Also,
In this example, the IC card is the service program 131.
Although the PIN management program 132 is stored, the payment terminal 100 does not communicate with the plurality of programs stored in the IC card 101 at the same time. Further, the command transmitted from the payment terminal 100 to the IC card 101 will be described using the APDU format.

First, the IC card 101 is the settlement terminal 100.
Is inserted into the IC card, initialization processing of the IC card is performed in step S500. In this process, the settlement terminal 100 sends a reset request to the IC card 101, and then the IC
For example, a reset response is received from the card 101. Next, the payment terminal 100 performs step S5.
All Ps stored in the IC card 101 as 01
Read IN management data. In this process, first, the payment terminal 100 sends a file selection command to the IC card 101.
Is issued to select the PIN management-dedicated file in which the PIN management program 132 is stored. Subsequently, the settlement terminal 100 issues a data read command to the PIN management program 132 to read all the PIN management data 142. The read PIN management data is stored in the information storage means 114 shown in FIG.

Next, in step S502, the terminal 10
0 selects the service program 131 stored in the IC card 101 by the selection of the cardholder 102 or the like. In this processing, first, the settlement terminal 100 issues a file selection command to the IC card 101 to select the dedicated file in which the service program 131 is stored. Subsequently, the payment terminal 100 issues a specific command to the service program 131, so that the process based on the service program 131 is executed.
Continue until IN authentication is required.

Next, the cardholder 102 sends the common PIN1.
If 05 is input, the terminal 10
The common PIN input to 0 is used to decrypt the individual PIN from the PIN management data previously read from the IC card. In this process, all Ps read from the IC card
For the IN management data, the individual P described with reference to FIG.
The process of extracting IN is executed until it succeeds. here,
If the individual PIN extraction process is unsuccessful, the payment method may be interrupted first. Alternatively, if the individual PIN extraction process fails, the common PIN input to the terminal 100 may be regarded as an individual PIN and the subsequent payment process may be continued. In the latter case, the cardholder 102 is allowed to input either the common PIN or the individual PIN in step S503.

Next, in step S504, it is checked whether PIN authentication is performed offline or online. If offline PIN authentication is to be performed, the payment terminal 100 transmits the extracted individual PIN to the IC card 101 in step S505. In this process,
By issuing a PIN verification command to the service program 131, the settlement terminal 100 transmits the individual PIN to the IC card 101, and internally collates the individual PIN. On the other hand, if online authentication is to be performed, the payment terminal 100 determines the extracted individual PI in step S506.
N is transmitted to the center via the network. After the offline PIN authentication or the online PIN authentication is completed according to the procedure described above, in step S507, the terminal 100 performs the rest of the payment process and the IC card 10
It continues by issuing a specific command to 1.

Next, the second embodiment will be described.
The configurations of the IC card and the payment terminal according to the present embodiment are the same as those described in the first embodiment with reference to FIG. The configuration of information stored in the IC card according to this embodiment is the same as the configuration described with reference to FIG. 2 in the first embodiment. Further, the processing procedure for extracting the individual PIN from the PIN management data is the same as the processing procedure described with reference to FIG. 4 in the first embodiment. However, in the present embodiment, it is assumed that the terminal 100 can simultaneously communicate with the PIN management program stored in the IC card 101 and a plurality of service programs. In the present embodiment, the PIN management program 132 stored in the IC card 101 is the PIN.
It is assumed that the process of extracting the individual PIN from the management data is performed.

The method of realizing this embodiment will be described below. First, FIG. 6 is a configuration diagram of an APDU format command. In FIG. 6, the command in the APUD format includes a class 610, an instruction 611, a parameter 1 (612), a parameter 2 (613), Lc 614, data 615, and Le 616. The class 610 is an identifier of a service program that communicates using a command. The instruction 611 indicates the instruction code of the command. Parameter 1 (612) and parameter 2 (613) store the value of the parameter depending on the instruction 611. Lc61
4 represents the length of the next field, data 615. Data 615 is a field for storing data to be transmitted to the IC card. Le616 represents the length of the response sent back from the IC card.

Further, in FIG. 6, the class 610 is
Instruction type 620, security message type 62
1 and a logical channel number 622.
The instruction type 620 is a field for classifying the instruction 611. The security message type is a field indicating whether or not encryption processing for preventing wiretapping and tampering of the data 615 is performed. The logical channel number 622 is used to distinguish the command issued to the program stored in the IC card by using the logical address. That is, the logical channel number 62
By making the value of 2 different, it becomes possible to simultaneously communicate with a plurality of programs in the IC card.

In the above description, the command in the APDU format has been described as an example. However, as long as it has a function equivalent to the function using the logical channel, commands of other formats can be applied to the present invention. It is possible.

Next, the payment terminal 100 according to this embodiment.
The processing flow of will be described. FIG. 7 shows cardholder 1
Reference numeral 02 is a flow chart when the settlement processing is performed by the settlement terminal 100 using the IC card 101. In this example,
The command transmitted from the payment terminal 100 to the IC card 101 will be described as using the APDU format. The IC card is the service program 131 and PIN.
The payment terminal 100 stores the management program 132.
Uses the logical channel A as the logical channel number of the command issued to the service program 131, and P
It is assumed that the logical channel B is used as the logical channel number of the command issued to the IN management program 132 and the communication is simultaneously performed.

First, the IC card 101 is the settlement terminal 100.
Is inserted into the IC card, initialization processing of the IC card is performed in step S700. In this process, the settlement terminal 100 sends a reset request to the IC card 101, and then the IC
For example, a reset response is received from the card 101.

Next, the payment terminal 100 proceeds to step S70.
1, the service program 13 stored in the IC card 101 is selected by the cardholder 102.
Select 1. In this process, first, the payment terminal 100
File selection command I using logical channel A
By issuing to the C card 101, the dedicated file in which the service program 131 is stored is selected. Subsequently, the payment terminal 100 issues a specific command to the service program 131 using the logical channel A, so that processing based on the service program 131 is performed.
Continue until PIN authentication is required.

Before executing the PIN authentication, the settlement terminal 100 sends the file selection command to the IC card 101 using the logical channel B in step S702.
Is issued and the dedicated file in which the PIN management program 132 is stored is selected.

Next, when the cardholder 102 inputs the common PIN into the settlement terminal 100, the settlement terminal 100 sets the common PIN in the IC card 101 in step S703.
And the IC card 101 sends back an individual PIN. In this process, the settlement terminal 100 uses the logical channel B to issue an individual PIN acquisition command to the PIN management program 132. Here, it is assumed that the individual PIN acquisition command stores a common PIN, an application identifier AID corresponding to the service program 131, and a flag indicating whether the individual PIN to be acquired is for online or offline. When the PIN management program 132 acquires these data, the PIN management program 132 follows the processing procedure described in the first embodiment with reference to FIG.
Is extracted and returned to the settlement terminal 100.

Next, in step S704, settlement terminal 100 checks whether PIN authentication is performed offline or online.

If offline PIN authentication is to be performed, the settlement terminal 100 transmits the acquired individual PIN to the IC card 101 in step S705. In this process, the settlement terminal 100 issues a PIN verification command to the service program 131, thereby causing the IC card 101
The individual PIN is collated internally.

On the other hand, if online authentication is to be carried out, the settlement terminal 100 transmits the acquired individual PIN to the center via the network in step S706.

According to the procedure described above, the offline P
After IN authentication or online PIN authentication is completed,
In step S707, the terminal 100 continues the remaining payment processing by issuing a specific command to the IC card 101.

Next, a third embodiment will be described.
Configuration of IC card and payment terminal according to the present embodiment,
The configuration of the information stored in the IC card is the same as the configuration described in the second embodiment. Further, in the present embodiment, the PIN stored in the IC card 101
It is assumed that the management program or a plurality of service programs can send and receive APDU format commands to each other inside the IC card 101. Such processing can be realized by using a "delegation function" which is one of the functions of MULTIS known as an operating system for IC cards.

This delegation function will be described with reference to FIG. In FIG. 8, the IC card 101 has
A program A650 and a program B651 are stored. First, the payment terminal 100 uses the program A650.
In response to the command A in the APDU format, the program A 650 issues the command B in the APDU format to the program B 651 to execute an arbitrary process.
Let 651 act on your behalf. Next, the program B 651 uses the result of the proxy processing as the response B and the program A 650.
Return to. Then, based on the result of the response B, the program A 650 returns the response A to the payment terminal 100.

As described above, when a certain program inside the IC card 101 receives a command from the outside of the IC card 101, a part of the processing performed based on the received command is executed by another program inside the IC card 101. The function to act by sending a command to is called the delegation function.

In the present embodiment, the above-mentioned delegation function is used, but as the operating system of the IC card, another operating system having the same function as the delegation function is used without using MULTIS. It doesn't matter.

Next, the payment terminal 100 according to this embodiment.
The processing flow of will be described. FIG. 9 shows cardholder 1
Reference numeral 02 is a flow chart when the settlement processing is performed by the settlement terminal 100 using the IC card 101. In this example,
The command transmitted from the payment terminal 100 to the IC card 101 uses the APDU format. Further, the IC card stores a service program 131 and a PIN management program 132, and the settlement terminal 100 uses the logical channel A as the logical channel number of the command issued to the service program 131 and issues it to the PIN management program 132. It is assumed that the logical channel B is used as the logical channel number of the command and the communication is simultaneously performed.

First, the IC card 101 is the settlement terminal 100.
Is inserted into the IC card, initialization processing of the IC card is performed in step S800. In this process, the settlement terminal 100 sends a reset request to the IC card 101, and then the IC
For example, a reset response is received from the card 101.

Next, the payment terminal 100 proceeds to step S80.
1, the service program 13 stored in the IC card 101 is selected by the cardholder 102.
Select 1. In this process, first, the payment terminal 100
However, by issuing a file selection command to the IC card 101 using the logical channel A, the dedicated file in which the service program 131 is stored is selected. Subsequently, the settlement terminal 100 issues a specific command to the service program 131 using the logical channel A, thereby performing processing based on the service program 131 until PIN authentication is required.

Before executing the PIN authentication, the settlement terminal 100 sends the file selection command to the IC card 101 using the logical channel B in step S802.
Is issued and the dedicated file in which the PIN management program 132 is stored is selected.

Next, when the cardholder 102 inputs the common PIN into the settlement terminal 100, the settlement terminal 100 sets the common PIN in the IC card 101 in step S803.
And the PIN verification is performed inside the IC card 101. In this process, first, the settlement terminal 100 uses the logical channel B to issue a PIN verification command to the PIN management program 132. Here, it is assumed that the PIN verification command stores the common PIN and the application identifier AID corresponding to the service program 131. Next, when the PIN management program 132 acquires these data, it extracts the individual PIN according to the processing procedure described with reference to FIG. 4 in the first embodiment. Next, the PIN management program 132 sends the PIN verification command storing the extracted individual PIN to the service program 13
1 is issued, the service program 131 is caused to collate the individual PIN, and the collation result is obtained. And PIN
The management program 132 returns the collation result to the payment terminal 100. Here, the process of step S803 can be realized by using the above-described delegation function.

After the PIN authentication is completed according to the procedure described above, in step S804, the terminal 100 continues the remaining payment processing by issuing a specific command to the IC card 101.

Next, a fourth embodiment will be described.
First, the configurations of the IC card and the settlement terminal according to the present embodiment are shown in FIG. The configuration shown in FIG. 10 is the same as the configuration shown in FIG. 1 in the description of the first embodiment, but PI
The difference is that the N input means 113 is replaced with the fingerprint reading means 190, and that the cardholder 102 does not have to store the common PIN 105.

Here, the fingerprint reading unit 190 has a function of reading the fingerprint of the cardholder 102 and extracting fingerprint information. Therefore, in the present embodiment, the cardholder 102 performs personal authentication by causing his / her fingerprint to be read by the fingerprint reading unit 190 instead of inputting the PIN to the payment terminal 100.

Next, FIG. 11 shows the structure of information stored in the IC card according to this embodiment. The configuration shown in FIG. 11 is the same as the configuration shown in FIG. 2 in the explanation of the first embodiment, but the PIN is exclusively stored in the PIN management dedicated file 122.
Instead of storing the management data 142A, 142B, 142C, data 144A consisting of an AID and an individual PIN,
The difference is that 144B and 144C and fingerprint information 191 are stored. Here, the AID forming the data 144A corresponds to the dedicated file 121A, and the individual PIN
Is used for offline PIN authentication executed by the service program 131A stored in the dedicated file 121A. Similarly, the AI forming the data 144B
D corresponds to the dedicated file 121B, and individual PIN is an offline P executed by the service program 131B.
Used for IN authentication. Also, the AID forming the data 144C corresponds to the dedicated file 121C, and the individual PIN
Is used for online PIN authentication executed by the service program 131C. Also, fingerprint information 191
Is information corresponding to the fingerprint of the cardholder 102.
Here, the data 144A, 144B, 144C cannot be read out to the outside unless the collation of the fingerprint information 191 succeeds.

Next, the payment terminal 100 according to the present embodiment.
The processing flow of will be described. In FIG. 12, the cardholder 102 uses the IC card 101 to settle the payment terminal 100.
It is a flow diagram when performing a payment process in. The flow chart shown in FIG. 12 is the same as the flow shown in FIG. 7 in the description of the second embodiment up to step S702, but the cardholder 102 inputs the common PIN into the payment terminal 100, The difference is that the fingerprint is read by the payment terminal 100.

That is, in step S1000,
The fingerprint read by the payment terminal 100 is converted into fingerprint information by the fingerprint reading means, and the payment terminal 100 transmits the fingerprint information to the IC card 101 to have the IC card 101 return a specific individual PIN. In this process, payment terminal 100 issues an individual PIN acquisition command to PIN management program 132. Here, in the individual PIN command, fingerprint information and an application identifier corresponding to the service program 131 are stored.
Upon receiving the individual PIN command, the N management program 132 collates the fingerprint information, and if the collation is successful, the individual management program 132 corresponds to the designated application identifier.
The IN is returned to the payment terminal 100. By using this individual PIN, the payment terminal 100 uses the same PIN as in the second embodiment.
It becomes possible to perform IN authentication.

As described above, in the present embodiment, when the cardholder 102 receives any service that can be executed using the IC card 101,
The PIN authentication required to be performed for each service can be executed only by causing the payment terminal 100 to read the fingerprint. Here, the cardholder 102 inputs the common PIN instead of causing the payment terminal 100 to read the fingerprint, and I
Instead of recording fingerprint information on the C card 101, a common P
The IN is recorded and the common PIN is stored in the IC card 101.
Even if the individual PIN can be read from the IC card when the collation is successful, the present invention is applicable.

[0083]

As described above, according to the present invention,
When the IC card owner receives each service by using the IC card corresponding to a plurality of services, the PIN authentication that needs to be performed for each service is only to remember one common PIN or to read the fingerprint. With the configuration that can be executed by, it becomes possible to improve the convenience of the IC card owner.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of an IC card and a terminal according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of information stored in the IC card according to the first embodiment of the present invention.

FIG. 3 is a diagram showing a configuration and generation procedure of PIN management data according to the first embodiment of the present invention.

FIG. 4 is a diagram showing a decryption procedure of PIN management data according to the first embodiment of the present invention.

FIG. 5 is a diagram showing a processing flow of the payment terminal according to the first embodiment of the present invention.

FIG. 6 is a diagram showing a command configuration according to a second embodiment of the present invention.

FIG. 7 is a diagram showing a processing flow of a payment terminal according to the second embodiment of the present invention.

FIG. 8 is a diagram showing a processing flow of inter-program communication according to the third embodiment of the present invention.

FIG. 9 is a diagram showing a processing flow of a payment terminal according to the third embodiment of the present invention.

FIG. 10 is a diagram showing the configurations of an IC card and a terminal according to a fourth embodiment of the present invention.

FIG. 11 is a diagram showing a configuration of information stored in an IC card according to a fourth embodiment of the present invention.

FIG. 12 is a diagram showing a processing flow of a payment terminal according to the fourth embodiment of the present invention.

FIG. 13 is a diagram showing a file structure of an IC card.

[Explanation of symbols]

100 payment terminal 101 IC card 102 cardholder 103 clerk 104 network 105 common PIN 110 card read / write means 111 arithmetic processing means 112 display means 113 PIN input means 114 information storage means 115 Operation means 116 means of communication 117 Communication means 118 Information storage means 119 arithmetic processing means

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04L 9/32 H04L 9/00 673E (72) Inventor Minoru Takami 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Incorporated company Hitachi, Ltd. Digital Media Development Headquarters (72) Inventor Yoshimichi Kudo 292 Yoshida-cho, Totsuka-ku, Yokohama, Kanagawa Stock Company F-Term (Reference) 5B035 AA14 BB09 CA11 CA38 5B058 CA27 KA02 KA04 KA33 KA35 KA37 YA02 5B085 AE01 AE04 AE12 AE23 5J104 AA07 KA01 NA35

Claims (13)

[Claims] 1. A service program for processing a service that requires the justification of a cardholder, one or more, and an individual personal identification number, which is used to confirm the justification of the cardholder, and Using an IC card in which one or more encrypted personal identification numbers are stored
A C card terminal, in which the cardholder can input a first personal identification number, personal identification number input means, card reading / writing means for communicating with the IC card, and the encrypted personal identification number by the card reading / writing means. Read from the IC card, decrypt with the first PIN,
And a processing unit for transmitting the generated second personal identification number to the IC card by the card reading and writing means, wherein the second personal identification number is the individual personal identification number within the IC card. An IC card terminal characterized in that, when they match, the service is normally executed. 2. An information storage means for storing information obtained from the IC card is provided, and the encrypted personal identification number is read from the IC card by the card reading / writing means and stored in the information storage means. 2. The IC card terminal according to claim 1, wherein the encrypted personal identification number stored in the information storage means is read and decrypted with the first personal identification number. 3. The encrypted personal identification number is a combination of the individual personal identification number and fixed value data consisting of a specific value, which is encrypted using the first personal identification number. The arithmetic processing means, if the fixed value data is correctly included in the data obtained by decrypting the encrypted personal identification number using the first personal identification number, the second obtained by the decryption. 3. The personal identification number is determined to be equal to the individual personal identification number, as claimed in claim 1 or claim 2.
IC card terminal described in. 4. An encrypted personal identification code in which one or more service programs for processing a service that requires the justification of the cardholder are encrypted, and an individual personal identification number used to confirm the justification of the cardholder. An IC card terminal that uses an IC card in which one or more numbers are stored and communicates with a center device that stores the individual personal identification number, wherein the cardholder can input the first personal identification number. The input means, the card read / write means for communicating with the IC card, the communication means for communicating with the center device via a network, and the encrypted personal identification number read from the IC card by the card read / write means An arithmetic processing unit for decrypting with a personal identification number of 1 to generate a second personal identification number and transmitting the second personal identification number to the center device by the communication means. When the second personal identification number matches the individual personal identification number in the center device,
An IC card terminal characterized in that the service is executed normally. 5. An information storage means for storing information obtained from the IC card is provided, and the encrypted personal identification number is read from the IC card by the card read / write means and stored in the information storage means. The IC card terminal according to claim 4, wherein the encrypted personal identification number stored in the information storage means is read out and decrypted with the first personal identification number. 6. The encrypted personal identification number is a combination of the individual personal identification number and fixed value data consisting of a specific value, which is encrypted using the first personal identification number. The arithmetic processing means, if the fixed value data is correctly included in the data obtained by decrypting the encrypted personal identification number using the first personal identification number, the second obtained by the decryption. The IC card terminal according to claim 5, wherein the personal identification number is determined to be equal to the individual personal identification number. 7. A service program for processing a service that requires the justification of the card holder, one or more service programs, and one or more personal identification numbers used for checking the justification of the card holder, An IC card in which one or more encrypted personal identification numbers are stored, which is an encrypted personal identification number;
A personal identification method in a system comprising an IC card terminal for providing the service to the cardholder using a C card, the IC card terminal reading the encrypted personal identification number from the IC card. A processing step in which the IC card terminal stores the encrypted personal identification number read from the IC card; a processing step in which the cardholder inputs a first personal identification number into the IC card terminal; and the IC card terminal A step of decrypting the encrypted personal identification number stored by the first personal identification number to generate a second personal identification number; and the IC card terminal transmitting the second personal identification number to the IC card. Then, when the second personal identification number matches the individual personal identification number inside the IC card, a processing step for normally executing the service is performed. Authentication method, characterized in that it comprises a-up. 8. An encryption password in which one or more service programs for processing a service that requires the justification of the cardholder are encrypted, and an individual personal identification number used to confirm the justification of the cardholder. An IC card in which one or more numbers are stored; an IC card terminal that uses the IC card to provide the service to the cardholder;
A personal authentication method in a system consisting of a C card terminal and a center device which stores the individual personal identification number via a network, wherein the IC card terminal transmits the encrypted personal identification number from the IC card. A processing step of reading, a processing step of accumulating the encrypted personal identification number read from the IC card by the IC card terminal, a processing step of the cardholder inputting a first personal identification number to the IC card terminal, A step of decrypting the encrypted personal identification number stored in the IC card terminal with the first personal identification number to generate a second personal identification number; and the IC card terminal providing the second personal identification number The data is transmitted to the center device, and the second data is transmitted by the center device.
And a personal identification number coincides with the individual personal identification number, the personal identification method includes a processing step of normally executing the service. 9. A service program for processing a service that requires the justification of a cardholder, and at least one personal identification number used to verify the justification of the cardholder. An IC card in which one or more encrypted personal identification numbers are encrypted and a personal identification number management program for managing the encrypted personal identification number is stored, and the service is provided by the IC card using the IC card. A personal identification method in a system comprising an IC card terminal provided to a person, wherein the cardholder inputs a first personal identification number to the IC card terminal, and the IC card terminal sets the first personal identification number. A processing step of transmitting a personal identification number to the IC card, and the personal identification number management program executed in the IC card transmits the encrypted personal identification number to the first And a step of generating a second personal identification number by decrypting it with the personal identification number and transmitting the second personal identification number to the IC card, the IC card terminal transmitting the second personal identification number to the IC card. A personal authentication method, which comprises a processing step of normally executing the service when the second personal identification number matches the individual personal identification number inside the card. 10. A service program for processing a service that requires the justification of a cardholder, one or more, and an individual personal identification number, which is used for confirming the justification of the cardholder, and An IC card in which one or more encrypted personal identification numbers are encrypted and a personal identification number management program for managing the encrypted personal identification number is stored, and the service is provided by the IC card using the IC card. A personal identification method in a system comprising an IC card terminal provided to a person, wherein the cardholder inputs a first personal identification number to the IC card terminal, and the IC card terminal uses the first personal identification number. A processing step of transmitting a personal identification number to the IC card; and a personal identification number management program executed in the IC card, transmitting the encrypted personal identification number to the first A step of decrypting with a first personal identification number to generate a second personal identification number; the personal identification number program transmits a second personal identification number to the service program, and the second personal identification number is used for the individual personal identification number. And a processing step of normally executing the service when the numbers match with each other. 11. A service program for processing a service that requires the justification of a cardholder, one or more, and an individual personal identification number used for verifying the justification of the cardholder, An IC card terminal for providing the service to the cardholder by using an IC card that stores a first personal identification number for protecting the personal identification number from being output to the outside, wherein the cardholder 2. A personal identification number input means capable of inputting a personal identification number 2, and the IC
A card read / write means for communicating with a card, and the second password for the IC card read / write means by the IC card read / write means.
When the second personal identification number matches the first personal identification number in the IC card, the individual personal identification number is acquired by the IC card reading / writing means, and the individual personal identification number is sent. An IC card, comprising: an arithmetic processing unit that normally executes the service when the card is transmitted to the IC card by the card reading and writing unit and the collation of the individual personal identification number in the IC card is successful. Terminal. 12. A service program for processing a service that requires the justification of the cardholder, one or more, and an individual personal identification number used for verifying the justification of the cardholder, In an IC card terminal for providing the service to the cardholder using an IC card in which first biometric information for protecting the output of the personal identification number and a management program for managing the biometric information are stored , Biometric information reading means capable of reading second biometric information from the cardholder, and the IC
A card read / write means for communicating with a card, and the IC card read / write means for transferring the second biometric information to the IC
When the second biometric information matches the first biometric information inside the IC card, the individual personal identification number is acquired by the IC card reading / writing means, and the individual personal identification number is transmitted. An IC card, comprising: an arithmetic processing unit that normally executes the service when the card is transmitted to the IC card by the card reading and writing unit and the collation of the individual personal identification number in the IC card is successful. Terminal. 13. The fingerprint is used as the first biometric information and the second biometric information.
IC card terminal described in.