JP2006268779A - Portable electronic device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a portable electronic device wherein even collation using former personal identification information is enabled for a fixed period of time even after an owner rewrites personal identification information into unintended value because of input error or the like. <P>SOLUTION: An IC card includes a nonvolatile memory and a control element for reading and/or writing data from and/or to the nonvolatile memory and determines whether the owner of the IC card is legitimate or not by carrying out processing corresponding to an instruction inputted from the outside, outputting a result of the processing to the outside and, when a peculiar PIN is registered beforehand and a PIN for collation is inputted from the outside together with a PIN collation instruction, collating the relevant PIN with the registered PIN. In such an IC card, the nonvolatile memory comprises a region for storing a current PIN, a region for storing a PIN before PIN rewrite and a counter for counting the number of times of collation using the new PIN, and collation using the former PIN is also enabled until the fixed number of times of collation using the new PIN. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention has a control element such as a non-volatile memory that can be written and rewritten and a CPU (Central Processing Unit), and includes means for selectively inputting / outputting data to / from the outside. The present invention relates to a portable electronic device called an IC card with a built-in IC chip, and in particular, a PIN (Personal Identifier Number), which is registered as unique personal authentication information, is registered in advance and used for verification input from the outside. It is related with the portable electronic device which determines whether the owner of the said portable electronic device is a valid owner by collating with PIN.

Recently, as portable electronic devices, nonvolatile memories (EEPROM), volatile memories (RAM), control elements (CPU) for reading and writing data to these memories, and programs for operating the CPU An IC card having an IC chip having a ROM storing the above and having a means for selectively inputting / outputting data to / from the outside is used in various industries.
In general, this type of IC card inputs and outputs data to and from an external device (IC card reader / writer) using commands and responses.

  By the way, in such an IC card, a PIN as a unique personal authentication information, a PIN tri-counter indicating the number of times the PIN can be verified, and a set value of the PIN tri-counter are stored in the nonvolatile memory. The PIN try limit value shown is stored (for example, refer to Patent Document 1).

  When the cardholder changes the PIN in the IC card, the IC card is set in the terminal device for PIN rewriting, and then the new PIN is entered to determine the new PIN entered for the IC card. The command format is transmitted together with the PIN rewrite command. When receiving the PIN rewrite command from the terminal device, the IC card rewrites the target PIN, which is uniquely determined based on the current file selection state and the command parameter, based on the parameter received by the command.

  Thereafter, the card owner indicates that he / she is a valid owner of the IC card by inputting a new PIN to the terminal device. That is, the terminal device transmits the input PIN to the IC card together with the verification command. When the IC card receives the verification command, the terminal device performs verification processing between the rewritten PIN and the received PIN. As a result, if both PINs match, it is determined that the verification is successful (the owner of the IC card is a valid owner), the PIN trie counter is set to the PIN trie limit value, and the status word indicating the success of the verification is Return to device.

On the other hand, if both PINs do not match (when the verification does not match), it is determined that verification has failed (the IC card owner is not a valid owner), the PIN tri-counter is subtracted (or added), and verification is performed. Return failure status word to terminal. When the value of the PIN tri-counter exceeds a predetermined value, the target PIN is locked, and thereafter, it is impossible to collate unless the target PIN is unlocked.
Japanese Patent No. 2555096

However, the cardholder may enter a PIN that is different from the intended value when entering a new PIN. In this case, if the cardholder inputs the PIN after rewriting, it is determined that the verification has failed, the cardholder is not recognized as a valid owner of the IC card, and the card may not be usable.
As described above, once the PIN is rewritten, it is impossible to collate with the old PIN, and it is essential to collate with the new PIN. As a result, when the card holder is rewritten with a PIN that is not intended by mistake, the verification cannot be performed correctly.

  Therefore, the present invention provides a portable electronic device that enables verification with old personal authentication information for a certain period even when the owner rewrites the personal authentication information to an unintended value due to an input error or the like. The purpose is to do.

  The portable electronic device of the present invention has a memory and a control element for reading and / or writing data to / from the memory, executes processing corresponding to a command input from the outside, and sends the result to the outside A first personal authentication information storage means for outputting and storing unique personal authentication information in advance, and when personal authentication information for verification is input together with a personal authentication information verification command from the outside Whether the owner of the portable electronic device is a legitimate owner by collating the personal authentication information with the personal authentication information stored in the first personal authentication information storage means In the portable electronic device for determining whether or not the second personal authentication information storage means for storing the personal authentication information before rewriting, and the first count for counting the number of successful verifications by the new personal authentication information And when a new personal authentication information is input together with a personal authentication information rewriting command from the outside, the personal authentication information stored in the first personal authentication information storage means is used as the second personal authentication information. Personal authentication information rewriting means for storing the input new personal authentication information in the first personal authentication information storage means and storing the inputted new personal authentication information in the first personal authentication information rewriting means. When the information rewriting process is completed, when the personal authentication information for verification is input together with the initializing means for initializing the first counter means and the information verification command for personal authentication from the outside, the personal authentication information And first personal authentication information stored in the first personal authentication information storage means to determine whether or not a predetermined relationship is established between the two personal authentication information If a predetermined relationship is established between the personal authentication information and the result of determination by the first determination means, the first counter means is incremented and the owner of the portable electronic device is valid. When a predetermined relationship is not established between the first control means for outputting a response to the outside to the outside and information for personal authentication as a result of the determination by the first determination means, Second determination means for determining whether or not the value of the first counter means is a first predetermined value, and the result of determination by the second determination means is that the value of the first counter means is If the predetermined value is not 1, the verification personal authentication information input from the outside is checked against the personal authentication information stored in the second personal authentication information storage means, and both personal authentication information Whether a predetermined relationship is established between If a predetermined relationship is established between both personal authentication information as a result of the determination by the third determining means and the third determining means, the owner of the portable electronic device is a legitimate owner A second control means for outputting a response to the outside, and a result of determination by the second determination means, if the value of the first counter means is a first predetermined value, or the third As a result of the determination by the determination means, if the predetermined relationship is not established between the two personal authentication information, a response indicating that the owner of the portable electronic device is not a valid owner is output to the outside. Control means.

  The portable electronic device of the present invention includes a memory and a control element that reads and / or writes data in the memory, executes a process corresponding to a command input from the outside, and outputs the result. The first personal authentication information storage means for outputting the personal authentication information and storing the personal authentication information in advance is stored, and personal verification information is input from the outside together with the personal verification information verification command. Then, by collating the personal authentication information with the personal authentication information stored in the first personal authentication information storage means, the owner of the portable electronic device is a legitimate owner. In the portable electronic device that determines whether or not, the second personal authentication information storage means for storing the personal authentication information before rewriting and the second counter for counting the number of successful verifications by the old personal authentication information When the new personal authentication information is input together with the personal authentication information rewrite command from the external device means, the personal authentication information stored in the first personal authentication information storage means is converted into the second personal authentication information. Personal authentication information rewriting means for storing the inputted new personal authentication information in the first personal authentication information storage means, and personal authentication by the personal authentication information rewriting means. When the information rewriting process is completed, when the personal authentication information for verification is input together with the initializing means for initializing the second counter means and the information verification command for personal authentication from the outside, the personal authentication A first information for collating the personal authentication information stored in the first personal authentication information storage means and determining whether or not a predetermined relationship is established between the two personal authentication information; When a predetermined relationship is established between the personal identification information and the personal identification information as a result of the determination by the determination means and the first determination means, an external response is sent to the effect that the owner of the portable electronic device is a valid owner. As a result of determination by the first control means that outputs to the first determination means, if the predetermined relationship between the personal authentication information is not established, the value of the second counter means is determined in advance. A second determination means for determining whether or not the second predetermined value is the result, and if the value of the second counter means is not the second predetermined value as a result of the determination by the second determination means, Whether the entered personal authentication information and the personal authentication information stored in the second personal authentication information storage means are collated, and whether a predetermined relationship is established between the two personal authentication information A third determination means for determining whether or not the third determination means As a result of the determination, if a predetermined relationship is established between the two personal authentication information, the second counter means is incremented, and a response that the owner of the portable electronic device is a valid owner is sent. As a result of the determination by the second control means for outputting to the outside and the second determination means, the value of the second counter means is a second predetermined value, or the determination by the third determination means As a result, when a predetermined relationship is not established between the two personal authentication information, the portable electronic device has a third control means for outputting a response to the outside that the owner of the portable electronic device is not a valid owner. is doing.

  According to the present invention, two means for storing personal authentication information are provided so that the old personal authentication information and the new personal authentication information can be stored, and when the personal authentication information rewrite command is received, the old personal authentication information is stored. Store new personal authentication information without erasing information. Thereafter, when the information verification command for personal authentication is received, if it matches either the old personal authentication information or the new personal authentication information, it is determined that the verification is successful. At this time, if the verification is successful with the new personal authentication information, the number of successful verifications with the new personal authentication information is counted. If the verification is successful with the new personal authentication information a certain number of times, the old personal authentication information is not used. Enables verification only with new personal authentication information. Thereby, even if the owner accidentally changes to personal authentication information, the verification can be performed correctly.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 shows a configuration example of an IC card system that handles an IC card as a portable electronic device according to the present embodiment. In this IC card system, an IC card 10 can be connected to a terminal device 12 such as a personal computer via a card reader / writer 11, and a keyboard 13, a CRT display unit 13, and a printer 15 are connected to the terminal device 12. Composed.

  FIG. 2 shows the configuration of the IC card 10, and the electrical connection between the control element (for example, CPU) 101 as the control unit, the data memory 102, the working memory 103, the program memory 104, and the card reader / writer 12. It is comprised by the contact part 105 for obtaining a contact. Of these, the portion within the broken line (the control element 101, the data memory 102, the working memory 103, and the program memory 104) is composed of one (or a plurality) of IC chips. Are integrated into an IC module and embedded in the IC card body.

The data memory 102 is used for storing various types of data, and is composed of, for example, a nonvolatile memory such as an EEPROM that can be rewritten.
The working memory 103 is a working memory for temporarily storing processing data when the control element 101 performs processing, and is configured by, for example, a RAM.
The program memory 104 is composed of, for example, a non-volatile memory that cannot be rewritten, such as a mask ROM, and stores a control program for the control element 101, an application program, and the like.

  FIG. 3 shows a storage area for PIN-related data set in the data memory 102, for example. In FIG. 3, a PIN (personal authentication information) storage area 31 is an area for storing a PIN for verification when a PIN verification command is received, an old PIN storage area 32 is an area for storing a PIN before rewriting, and a counter storage area 33 is an area for storing a new PIN verification counter (first counter means) for counting the number of successful verifications with a new PIN after PIN rewriting, and the counter storage area 34 is the number of successful verifications with an old PIN after PIN rewriting. Is an area for storing an old PIN verification counter (second counter means). The PIN is composed of n bytes of data and length data.

Next, a first processing example for the PIN rewrite command in such a configuration will be described with reference to the flowchart shown in FIG.
When a PIN rewrite command is received from the terminal device 12 via the card reader / writer 11 (step S1), the control element 101 performs parameter check of the received PIN rewrite command, status check of the target PIN, etc. (step S2). ), It is checked whether or not the PIN can be rewritten (step S3). As a result of this check, if the rewrite is impossible, the control element 101 sends an error status word indicating it to the terminal device 12 (step S4), and does not rewrite the PIN.

  If the result of the check in step S3 is a rewritable state, the control element 101 stores the current PIN, that is, the PIN in the PIN storage area 31 in the old PIN storage area 32 (step S5). Next, the control element 101 stores the new PIN received together with the PIN rewrite command in the PIN storage area 31 (step S6). Here, the processing of steps S5 and S6 corresponds to the information rewriting means for personal authentication in claim 1 of the present invention.

  Next, the control element 101 initializes a new PIN verification counter in the counter storage area 33 (step S7). The new PIN verification counter may be a subtraction counter or an addition counter, but will be described here as a subtraction counter. For example, if the old PIN is invalidated after three verifications with a new PIN, a value of “03” is set in the new PIN verification counter. Here, the process of step S7 corresponds to the initialization means in claim 1 of the present invention.

  Next, the control element 101 sends a status word indicating that the PIN rewriting process has been normally completed to the terminal device 12 (step S8), and ends the process for the PIN rewriting command.

Next, a first processing example for the PIN verification command will be described with reference to the flowchart shown in FIG.
When the PIN verification command is received from the terminal device 12 via the card reader / writer 11 (step S11), the control element 101 obtains the verification PIN received together with the PIN verification command and the PIN in the PIN storage area 31. Collation is performed (step S12), and it is determined whether or not a predetermined relationship is established between both PINs, and in this example, whether or not both PINs match (step S13). Here, the processing of steps S12 and S13 corresponds to the first determination means in claim 1 of the present invention.

  As a result of the determination in steps S12 and S13, if both PINs match, the control element 101 checks the value of the new PIN verification counter in the counter storage area 33, and if other than “0”, the control PIN of the new PIN verification counter. The value is set to “−1” (step S14). Next, the control element 101 determines that the matching is successful, and sends a status word indicating that the matching is successful (a response indicating that the cardholder is a valid owner) to the terminal device 12 (step S15), and the PIN matching is performed. Terminates processing for the command. Here, the processing of steps S14 and S15 corresponds to the first control means in claim 1 of the present invention.

  If the result of determination in steps S12 and S13 is that the PINs do not match, the control element 101 checks the value of the new PIN verification counter in the counter storage area 33 (step S16). It is determined that there is a mismatch, and a status word indicating a verification failure (response that the cardholder is not a valid owner) is sent to the terminal device 12 (step S17), and the process for the PIN verification command is terminated. Here, the processing in step S16 corresponds to the second determination means in claim 1 of the present invention.

  If the value of the new PIN verification counter is not “0” as a result of the check in step S16, the control element 101 compares the verification PIN received together with the PIN verification command with the old PIN in the old PIN storage area 32. (Step S18), it is determined whether or not a predetermined relationship is established between both PINs, and in this example, whether or not both PINs match (Step S19). Here, the processing of steps S18 and S19 corresponds to the third determination means in claim 1 of the present invention.

  If the two PINs match as a result of the determination in steps S18 and S19, the control element 101 determines that the matching is successful, and sends a status word indicating successful matching to the terminal device 12 (step S15). The process ends. Here, the process of step S15 corresponds to the second control means in claim 1 of the present invention.

  If the two PINs do not match as a result of the determination in steps S18 and S19, the control element 101 determines that the verification does not match and sends a status word indicating a verification failure to the terminal device 12 (step S17). Terminates processing for the command. Here, the processing of step S17 corresponds to the third control means in claim 1 of the present invention.

  As described above, according to the first processing example, the old PIN is stored, and the old PIN can be collated until the new PIN is collated by the number of times of the new PIN collation counter. As a result, even if the cardholder accidentally sets a PIN that was not intended, the verification can be performed correctly. In addition, if the new PIN is successfully verified a certain number of times, the old PIN is invalidated, so security is maintained.

Next, a second processing example for the PIN rewrite command will be described with reference to the flowchart shown in FIG.
When the PIN rewrite command is received from the terminal device 12 via the card reader / writer 11 (step S21), the control element 101 performs parameter check of the received PIN rewrite command, status check of the target PIN, etc. (step S22). ), It is checked whether or not PIN rewriting is possible (step S23). If the result of this check is that rewriting is not possible, the control element 101 sends an error status word indicating it to the terminal device 12 (step S24) and does not rewrite the PIN.

  If the result of the check in step S23 is a rewritable state, the control element 101 stores the current PIN, that is, the PIN in the PIN storage area 31 in the old PIN storage area 32 (step S25). Next, the control element 101 stores the new PIN received together with the PIN rewrite command in the PIN storage area 31 (step S26). Here, the processing in steps S25 and S26 corresponds to the personal authentication information rewriting means in claim 2 of the present invention.

  Next, the control element 101 initializes the old PIN verification counter in the counter storage area 34 (step S27). The old PIN verification counter may be a subtraction counter or an addition counter, but will be described here as a subtraction counter. For example, in the case of collation with the old PIN, if the old PIN is invalidated after collation three times after PIN rewriting, a value of “03” is set in the old PIN collation counter. Here, the processing of step S27 corresponds to the initialization means in claim 2 of the present invention.

  Next, the control element 101 sends a status word indicating that the PIN rewriting process has been normally completed to the terminal device 12 (step S28), and ends the process for the PIN rewriting command.

Next, a second processing example for the PIN verification command will be described with reference to the flowchart shown in FIG.
When the PIN verification command is received from the terminal device 12 via the card reader / writer 11 (step S31), the control element 101 obtains the verification PIN received together with the PIN verification command and the PIN in the PIN storage area 31. Collation is performed (step S32), and it is determined whether or not a predetermined relationship is established between both PINs, and in this example, whether or not both PINs match (step S33). Here, the processing of steps S32 and S33 corresponds to the first determination means in claim 2 of the present invention.

  If the two PINs match as a result of the determination in steps S32 and S33, the control element 101 determines that the matching is successful, sends a status word indicating successful matching to the terminal device 12 (step S34), and responds to the PIN matching command. The process ends. Here, the process of step S34 corresponds to the first control means in claim 2 of the present invention.

  As a result of the determination in steps S32 and S33, if both the PINs do not match, the control element 101 checks the value of the old PIN verification counter in the counter storage area 34 (step S35). If it is determined that there is a mismatch, a status word indicating a verification failure is sent to the terminal device 12 (step S36), and the process for the PIN verification command is terminated. Here, the process of step S35 corresponds to the second determination means in claim 2 of the present invention.

  If the value of the old PIN verification counter is not “0” as a result of the check in step S35, the control element 101 compares the verification PIN received together with the PIN verification command with the old PIN in the old PIN storage area 32. (Step S37), it is determined whether or not a predetermined relationship is established between both PINs, and in this example, whether or not both PINs match (Step S38). Here, the processing of steps S37 and S38 corresponds to the third determination means in claim 2 of the present invention.

  As a result of the determination in steps S37 and S38, when both the PINs match, the control element 101 checks the value of the old PIN collation counter in the counter storage area 34. The value is set to “−1” (step S39). Next, the control element 101 determines that matching is successful, sends a status word indicating successful matching to the terminal device 12 (step S34), and ends the processing for the PIN matching command. Here, the processing of steps S34 and S39 corresponds to the second control means in claim 2 of the present invention.

  If the two PINs do not match as a result of the determination in steps S37 and S38, the control element 101 determines that the verification does not match, and sends a status word indicating a verification failure to the terminal device 12 (step S36). Terminates processing for the command. Here, the process of step S36 corresponds to the third control means in claim 2 of the present invention.

  As described above, according to the second processing example, the old PIN is stored, and the old PIN can be verified until the old PIN is verified by the number of times of the old PIN verification counter. As a result, even if the cardholder accidentally sets a PIN that was not intended, the verification can be performed correctly. In addition, when the old PIN is successfully verified a certain number of times, the old PIN is invalidated, so security is maintained.

Next, a third processing example for the PIN rewrite command will be described with reference to the flowchart shown in FIG.
When the PIN rewrite command is received from the terminal device 12 via the card reader / writer 11 (step S41), the control element 101 performs parameter check of the received PIN rewrite command, status check of the target PIN, etc. (step S42). ), It is checked whether or not PIN rewriting is possible (step S43). As a result of this check, if the state is incapable of rewriting, the control element 101 sends an error status word indicating it to the terminal device 12 (step S44) and does not rewrite the PIN.

  As a result of the check in step S43, if the state is rewritable, the control element 101 stores the current PIN, that is, the PIN in the PIN storage area 31, in the old PIN storage area 32 (step S45). Next, the control element 101 stores the new PIN received together with the PIN rewrite command in the PIN storage area 31 (step S46). Here, the processing of steps S45 and S46 corresponds to the personal authentication information rewriting means in claim 3 of the present invention.

  Next, the control element 101 initializes a new PIN verification counter in the counter storage area 33 (step S47). The new PIN verification counter may be a subtraction counter or an addition counter, but will be described here as a subtraction counter. For example, if the old PIN is invalidated after three verifications with a new PIN, a value of “03” is set in the new PIN verification counter.

  Next, the control element 101 initializes the old PIN verification counter in the counter storage area 34 (step S48). The old PIN verification counter may be a subtraction counter or an addition counter, but will be described here as a subtraction counter. For example, in the case of collation with the old PIN, if the old PIN is invalidated after collation three times after PIN rewriting, a value of “03” is set in the old PIN collation counter. Here, the processing of steps S47 and S48 corresponds to the initialization means in claim 3 of the present invention.

  Next, the control element 101 sends a status word indicating that the PIN rewriting process has been normally completed to the terminal device 12 (step S49), and ends the process for the PIN rewriting command.

Next, a third processing example for the PIN verification command will be described with reference to the flowchart shown in FIG.
When the PIN verification command is received from the terminal device 12 via the card reader / writer 11 (step S51), the control element 101 obtains the verification PIN received together with the PIN verification command and the PIN in the PIN storage area 31. Collation is performed (step S52), and it is determined whether or not a predetermined relationship is established between both PINs, and in this example, whether or not both PINs match (step S53). Here, the processing of steps S52 and S53 corresponds to the first determination means in claim 3 of the present invention.

  As a result of the determination in steps S52 and S53, when both the PINs match, the control element 101 checks the value of the new PIN verification counter in the counter storage area 33. The value is set to “−1” (step S54). Next, the control element 101 determines that matching is successful, sends a status word indicating successful matching to the terminal device 12 (step S55), and ends the processing for the PIN matching command. Here, the processing of steps S54 and S55 corresponds to the first control means in claim 3 of the present invention.

  As a result of the determination in steps S52 and S53, if both PINs do not match, the control element 101 checks the value of the new PIN verification counter in the counter storage area 33 (step S56). It is determined that there is a mismatch, and a status word indicating a verification failure is sent to the terminal device 12 (step S57), and the process for the PIN verification command is terminated. Here, the processing in step S56 corresponds to the second determination means in claim 3 of the present invention.

  If the value of the new PIN verification counter is not “0” as a result of the check in step S56, the control element 101 checks the value of the old PIN verification counter in the counter storage area 34 (step S58). Is judged to be unmatched, a status word indicating unsuccessful matching is sent to the terminal device 12 (step S57), and the process for the PIN matching command is terminated. Here, the process of step S58 corresponds to the third determination means in claim 3 of the present invention.

  If the value of the old PIN verification counter is not “0” as a result of the check in step S58, the control element 101 compares the verification PIN received together with the PIN verification command with the old PIN in the old PIN storage area 32. (Step S59), it is determined whether or not a predetermined relationship is established between both PINs, and in this example, whether or not both PINs match (Step S60). Here, the processing of steps S59 and S60 corresponds to the fourth determination means in claim 3 of the present invention.

  As a result of the determination in steps S59 and S60, if both PINs match, the control element 101 checks the value of the old PIN verification counter in the counter storage area 34, and if other than “0”, the control PIN of the old PIN verification counter. The value is set to “−1” (step S61). Next, the control element 101 determines that matching is successful, sends a status word indicating successful matching to the terminal device 12 (step S55), and ends the processing for the PIN matching command. Here, the processing of steps S61 and S55 corresponds to the second control means in claim 3 of the present invention.

  If the two PINs do not match as a result of the determination in steps S59 and S60, the control element 101 determines that the verification does not match and sends a status word indicating a verification failure to the terminal device 12 (step S57). Terminates processing for the command. Here, the process of step S57 corresponds to the third control means in claim 3 of the present invention.

  As described above, according to the third processing example, it is possible to limit the number of verifications of the old PIN after PIN rewriting, and to enable verification in the old PIN while maintaining the validity of the PIN rewriting command. .

1 is a block diagram schematically showing a configuration of an IC card system that handles an IC card according to an embodiment of the present invention. 1 is a block diagram schematically showing the configuration of an IC card. The figure which shows the storage area of the PIN relevant data set in a data memory. The flowchart explaining the 1st process example with respect to PIN rewriting command. The flowchart explaining the 1st process example with respect to a PIN collation command. The flowchart explaining the 2nd process example with respect to PIN rewriting command. The flowchart explaining the 2nd process example with respect to a PIN collation command. The flowchart explaining the 3rd processing example with respect to PIN rewriting command. The flowchart explaining the 3rd process example with respect to a PIN collation command.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... IC card (portable electronic device), 11 ... Card reader / writer (external device), 12 ... Terminal device (external device), 13 ... Keyboard, 14 ... CRT display part, 15 ... Printer, 101 ... Control element ( Control means), 102 ... data memory (memory, storage means), 103 ... working memory, 104 ... program memory, 105 ... contact section, 31 ... PIN storage area, 32 ... old PIN storage area, 33, 34 ... counter storage area .

Claims (3)

It has a memory and a control element that reads and / or writes data from / to this memory, executes processing corresponding to an externally input command, outputs the result to the outside, A first personal authentication information storage means for storing the authentication information, and when the personal authentication information for verification is input from the outside together with the information verification command for personal authentication, the personal authentication information and the first In the portable electronic device that determines whether or not the owner of the portable electronic device is a legitimate owner by collating it with the personal authentication information stored in one personal authentication information storage means ,
Second personal authentication information storage means for storing personal authentication information before rewriting;
First counter means for counting the number of successful verifications using new personal authentication information;
When new personal authentication information is input together with a personal authentication information rewrite command from the outside, the personal authentication information stored in the first personal authentication information storage means is converted into the second personal authentication information storage means. The personal authentication information rewriting means for storing the input new personal authentication information in the first personal authentication information storage means,
When the personal authentication information rewriting process is completed by the personal authentication information rewriting means, an initialization means for initializing the first counter means;
When personal verification information is input together with a personal authentication information verification command from the outside, the personal authentication information is verified against the personal authentication information stored in the first personal authentication information storage means. First determining means for determining whether or not a predetermined relationship is established between the two personal authentication information;
As a result of the determination by the first determination means, if a predetermined relationship is established between the two personal authentication information, the first counter means is incremented and the owner of the portable electronic device is a valid owner First control means for outputting a response to the outside to the outside,
As a result of the determination by the first determination means, if a predetermined relationship is not established between the two personal authentication information, it is determined whether or not the value of the first counter means is a predetermined first predetermined value. A second determination means for determining;
As a result of the determination by the second determination means, if the value of the first counter means is not the first predetermined value, the personal authentication information for verification and the second personal authentication information input from the outside Third determination means for collating the information for personal authentication stored in the storage means and determining whether or not a predetermined relationship is established between the information for personal authentication;
As a result of the determination by the third determination means, when a predetermined relationship is established between the two personal authentication information, a response indicating that the owner of the portable electronic device is a valid owner is output to the outside. Two control means;
As a result of determination by the second determination means, when the value of the first counter means is a first predetermined value, or as a result of determination by the third determination means, a predetermined value is set between both personal authentication information. If the relationship is not established, third control means for outputting a response to the outside that the owner of the portable electronic device is not a valid owner;
A portable electronic device comprising: It has a memory and a control element that reads and / or writes data from / to this memory, executes processing corresponding to an externally input command, outputs the result to the outside, A first personal authentication information storage means for storing the authentication information, and when the personal authentication information for verification is input from the outside together with the information verification command for personal authentication, the personal authentication information and the first In the portable electronic device that determines whether or not the owner of the portable electronic device is a legitimate owner by collating it with the personal authentication information stored in one personal authentication information storage means ,
Second personal authentication information storage means for storing personal authentication information before rewriting;
A second counter means for counting the number of successful verifications based on the old personal authentication information;
When new personal authentication information is input together with a personal authentication information rewrite command from the outside, the personal authentication information stored in the first personal authentication information storage means is converted into the second personal authentication information storage means. The personal authentication information rewriting means for storing the input new personal authentication information in the first personal authentication information storage means,
When the rewriting process of the personal authentication information by the personal authentication information rewriting means is completed, an initialization means for initializing the second counter means;
When personal verification information is input together with a personal authentication information verification command from the outside, the personal authentication information is verified against the personal authentication information stored in the first personal authentication information storage means. First determining means for determining whether or not a predetermined relationship is established between the two personal authentication information;
As a result of the determination by the first determination means, when a predetermined relationship is established between the two personal authentication information, a response indicating that the owner of the portable electronic device is a valid owner is output to the outside. 1 control means;
As a result of the determination by the first determination means, if a predetermined relationship is not established between the two personal authentication information, it is determined whether or not the value of the second counter means is a predetermined second predetermined value. A second determination means for determining;
As a result of the determination by the second determination means, if the value of the second counter means is not the second predetermined value, the personal authentication information for verification input from the outside and the second personal authentication information Third determination means for collating the information for personal authentication stored in the storage means and determining whether or not a predetermined relationship is established between the information for personal authentication;
As a result of the determination by the third determination means, when a predetermined relationship is established between the two personal authentication information, the second counter means is incremented and the owner of the portable electronic device is a valid owner Second control means for outputting a response to the outside to the outside,
As a result of the determination by the second determination means, when the value of the second counter means is a second predetermined value, or as a result of the determination by the third determination means, a predetermined value is set between both personal authentication information. If the relationship is not established, third control means for outputting a response to the outside that the owner of the portable electronic device is not a valid owner;
A portable electronic device comprising: It has a memory and a control element that reads and / or writes data from / to this memory, executes processing corresponding to an externally input command, outputs the result to the outside, A first personal authentication information storage means for storing the authentication information, and when the personal authentication information for verification is input from the outside together with the information verification command for personal authentication, the personal authentication information and the first In the portable electronic device that determines whether or not the owner of the portable electronic device is a legitimate owner by collating it with the personal authentication information stored in one personal authentication information storage means ,
Second personal authentication information storage means for storing personal authentication information before rewriting;
First counter means for counting the number of successful verifications using new personal authentication information;
A second counter means for counting the number of successful verifications based on the old personal authentication information;
When new personal authentication information is input together with a personal authentication information rewrite command from the outside, the personal authentication information stored in the first personal authentication information storage means is converted into the second personal authentication information storage means. And the personal authentication information rewriting means for storing the inputted new personal authentication information in the first personal authentication information storage means,
When the personal authentication information rewriting process is completed by the personal authentication information rewriting means, initialization means for initializing the first counter means and the second counter means,
When personal verification information is input together with a personal authentication information verification command from the outside, the personal authentication information is verified against the personal authentication information stored in the first personal authentication information storage means. First determining means for determining whether or not a predetermined relationship is established between the two personal authentication information;
As a result of the determination by the first determination means, if a predetermined relationship is established between the two personal authentication information, the first counter means is incremented and the owner of the portable electronic device is a valid owner First control means for outputting a response to the outside to the outside,
As a result of the determination by the first determination means, if a predetermined relationship is not established between the two personal authentication information, it is determined whether or not the value of the first counter means is a predetermined first predetermined value. A second determination means for determining;
As a result of the determination by the second determination means, if the value of the first counter means is not the first predetermined value, it is determined whether or not the value of the second counter means is a predetermined second predetermined value. Third determining means for determining;
As a result of the determination by the third determination means, if the value of the second counter means is not the second predetermined value, the personal authentication information and the second personal authentication information input from the outside A fourth determination unit that collates the personal authentication information stored in the storage unit and determines whether or not a predetermined relationship is established between the two personal authentication information;
As a result of the determination by the fourth determination means, when a predetermined relationship is established between the two personal authentication information, the second counter means is incremented, and the owner of the portable electronic device is a valid owner Second control means for outputting a response to the outside to the outside,
As a result of the determination by the second determination means, when the value of the first counter means is a first predetermined value, or as a result of the determination by the third determination means, the value of the second counter means Is the second predetermined value, or if the predetermined relationship is not established between the two personal authentication information as a result of the determination by the fourth determination means, the owner of the portable electronic device is valid A third control means for outputting a response indicating that the owner is not a proper owner to the outside;
A portable electronic device comprising:

Images