JP2006350938A - Expiration date management system, center device, and terminal unit - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow extension of expiration date stored in an IC card. <P>SOLUTION: A terminal unit 2 reads expiration date information stored in the IC card 1, determines whether the expiration date has passed, and requests a second center device 8 to renew the expiration date of the card if the expiration date has passed. The second center device specifies the expiration date to be renewed based on tables 5A, 5B for managing the IC card and the classification of expiration date recorded in the IC card, in relation to each other for every bank, and a table 7A for managing expiration date for every bank, specifies the expiration date to be renewed, creates a reply message comprising a command carried out in the IC card to renew the expiration date, and authentication data required in carrying out the command, and transmits the message to the terminal unit 2. The reply message is transmitted to the IC card 1 from the terminal unit 2 to renew the expiration date of the IC card 1. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an expiration date management system, and more specifically to a system for extending the expiration date of an IC cash card issued by a business operator such as a financial institution.

  2. Description of the Related Art Conventionally, portable recording media that record various information about customers when providing various services to customers have been used. Nowadays, as such a recording medium, an IC card having a storage function and an arithmetic function is widely used instead of a conventional magnetic card.

For example, each financial institution issues an IC card (IC cash card) having a cash card function to a customer and uses it for various financial transactions and management-related business. FIG. 8 shows an outline of a financial transaction system using an IC card. This system includes an IC card 1, a financial institution ATM (automatic cash dispenser) or member store terminal (hereinafter referred to as “terminal device”) 2 that reads and writes the IC card 1, a terminal device 2 and a communication line. A financial institution center (host computer) 3 that can be connected via the terminal, exchanges various commands between the IC card 1 and the terminal device 2, and performs general transactions between the terminal device 2 and the financial institution center 3. While performing the necessary processing, various management tasks are performed between the IC card 1 and the terminal device 2.
As used herein, “financial transactions” include, for example, domestic cash card business (payment, withdrawal, balance inquiry, transfer, PIN change), domestic online debit business (payment of goods purchase price), domestic offline debit business ( For example, there are value charge, value purchase, value balance inquiry, password change in so-called electronic money, credit card business, loan card business, etc., which are called “general transactions” (see FIG. 9). “Management tasks” include IC card data setting and change (“PUT DATA”, “UPDATE RECORD”), IC card usage block and release (“APPLICATION BLOCK”, “APPLICATION UNBLOCK”), Online PIN change / unblock release (PIN CHANGE / UNBLOCK) and other IC card issuance functions ("ACTIVE FILE", "CHANGE REFERENCE DATA", "WRITE RECORD", "MANAGE DF STATUS") And the terminal device 2.

Financial transactions using IC cards have been standardized so far in the “Zenkyo Kyo IC Card Standard Specification” (hereinafter simply referred to as “standard specification”) (Non-patent Document 1). This standard specification assumes a system comprising an IC card 1, a terminal device 2, and a center 3 as shown in FIG. 8, and its business specifications and technical specifications, that is, functions of the IC card for realizing the business and It defines essential data and data flow. According to this, various processes are performed between the IC card 1 and the terminal device 2 by transmitting and receiving various “commands” shown in FIG. 10, while all general transactions are classified according to the contents of transmitted data. However, processing is performed according to the processing flow shown in FIG. According to FIG. 11, first, the IC card 1 responds to a series of commands (“SELECT FILE”, “GET PROCESSING OPTION”, “READ RECORD”) from the terminal device 2 to the IC card 1. After performing the “pre-processing”, the terminal device 2 prompts the user of the IC card 1 to enter a PIN, and after performing authentication based on the entered PIN, the terminal device 2 and the center 3 of the financial institution Communication is performed between them, and various transactions are executed.
Although the IC card issuance, suspension, and other management tasks are generally processed in accordance with the processing procedure shown in FIG. 12, only the IC card function (command) shown in FIG. It is only defined and no specific processing procedure has been established.

  By the way, with the adoption of an IC card as a cash card, in the conventional magnetic card, only information about a membership number (customer number) can be stored in the cash card, whereas in the case of an IC cash card, Various other information can be stored in the cash card. As a result, in today's financial transaction system, as shown in FIG. 13, each of the IC card, terminal device, and center holds a plurality of data relating to various expiration dates related to keys required for authentication. A higher security level is realized by defining these in the specification and referring to them when conducting transactions.

  Note that the expiration date data may not be changed for some reason. In FIG. 13, the former is called “expiration date data not converted to data” and the latter is “data converted”. Is called "expiration date data". For example, the “CA public key index” that is one of the expiration date data that has not been converted into data is a key (although the expiration date is not explicitly set as data for the CA public key and private key) It is updated from the viewpoint of improving security, such as vulnerabilities. Similarly, the “IC card individual key” is updated from the viewpoint of improving security such as the vulnerability of the key (although the expiry date is not explicitly set as data for the IC card individual key). is there. The “issuer AP data” is data representing the generation of the IC card individual key.

Zenginkyo IC cash card standard specifications (first edition: revised edition), National Bank Association, April 2003

However, according to the standard specification described above, the expiration date data exists in the IC cash card, and if any of these expiration dates has expired, an X mark in FIG. As shown, it is determined that the terminal device or the center is an abnormal process, and the transaction using the IC card becomes impossible. In such a case, the user must bring the IC card to the counter of the financial institution that issued the IC card, or suspend the use of the IC card by the financial institution and proceed with the new issuance procedure. In both cases, it takes time, and if it is newly issued, it costs more to use a new IC card.
Accordingly, an object of the present invention is to provide a system that can solve the above-described problems associated with the expiration of an expiration date and extend the expiration date stored in an IC card.

  In order to solve such a problem, the present invention provides an IC card storing at least information related to an expiration date, a terminal device capable of reading data stored in the IC card, and the terminal device via a communication line. In an expiration date management system provided with a connectable center device, the terminal device expires based on information on the expiration date read from the IC card and reading means for reading data stored in the IC card. A determination means for determining whether or not the validity period has expired, an update request means for transmitting an update request for requesting an update of the validity period to the center device that manages the validity period when it is determined that the validity period has expired, A reply message to the update request received from the center device is transmitted to the IC card, and the expiration date stored in the IC card is transmitted. The center device, in response to the update request, at least information regarding the updated expiration date, a command executed in the IC card to update the expiration date, and when executing this command An answer message including necessary authentication data is transmitted to the terminal device, and the IC card performs authentication based on the authentication data included in the answer message transmitted from the terminal device, and updates information on the expiration date. is there.

  In this case, the center apparatus associates and manages the issued IC card and the type of expiration date recorded on the IC card for each business operator (bank), and the first management means (tables 5A and 5B); Second management means (table 7A) for managing the expiration date for each business operator, receiving means for receiving an update request for requesting an update of the expiration date from the terminal device, and an expiration date to be updated based on the update request A specifying unit for specifying, a message generating unit for generating a reply message based on the expiration date specified by the specifying unit, and a transmitting unit for transmitting a reply message to the update request to the terminal device.

  The present invention also provides a first management means for managing the issued IC card and the type of expiration date recorded on the IC card in association with each operator, and a first managing means for managing the expiration date for each operator. Two managing means; a receiving means for receiving an update request for requesting an update of an expiration date from a terminal device connectable via a communication line; a specifying means for specifying an expiration date to be updated based on the update request; Message creation means for creating an answer message comprising at least information relating to the validity period specified by the identification means, a command executed in the IC card to update the validity period, and authentication data necessary for executing this command, and update A center device having a transmission means for transmitting a reply message to the request to the terminal device is provided.

  The present invention also includes a reading unit that reads data stored in an IC card, a determination unit that determines whether or not the expiration date has expired, based on at least the information related to the expiration date read from the IC card, When it is determined that the expiration date has expired, an update request means for transmitting an update request for requesting the update of the expiration date to the center device that manages the expiration date, and an answer message for the update request received from the center device are sent to the IC A terminal device having transmission means for transmitting to the card and updating information relating to the expiration date stored in the IC card, and the reply message includes at least a command to be executed in the IC card and when executing the command And necessary authentication data.

  According to the present invention, since the expiration date stored in the IC card can be updated, even if the expiration date has passed, the user brings the IC card into the window of the financial institution that issued the IC card. It is no longer necessary to stop using the IC card on the financial institution side and take steps for new issuance. In addition, since the IC card that has been used so far can be used as it is, it is possible to avoid the situation where two IC cards coexist temporarily due to the new issuance of the IC card, and the IC The cost of the card itself can be saved. Further, when the expiration date stored in the IC card is rewritten, the security authentication procedure in the terminal device is omitted by transmitting a message in which the command, update data, and authentication data are integrated from the host computer to the IC card. Therefore, since it is not necessary to install a security algorithm in a terminal device such as an ATM, it is possible to prevent the security logic from leaking even if the terminal device is stolen.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an expiration date management system according to the present invention. As shown in FIG. 1, this system includes an IC card 1 that is a cash card, a terminal device 2 such as a financial institution ATM that reads and writes the IC card 1, and a financial system connected to the terminal device 2 via a communication line. It comprises a first center device 3 of an institution and a second center device 8 connected to the terminal device 2 via a communication line and capable of updating information such as the expiration date of the IC card 1.

  The second center device 8 is composed of IS-H modules 4 and 6 and a bank master DB 5 and update data DB 7 connected to the IS-H modules 4 and 6, respectively. 2A and IS-T module 2B. The existing terminal function unit 2A communicates with the first center device 3 to realize an existing automatic cash deposit / payment function. The IS-T module 2B receives an update request for information such as the expiration date of the IC card 1 from the existing terminal function unit 2A, makes an update request to the second center device 8, and the second center device 8 The result of the update request sent back from is received and sent to the IC card 1 to update information such as the expiration date of the IC card 1.

  Here, the bank number is stored in the IC card 1, and as the information that can be updated, the above-mentioned expiration date information such as “AP (application) expiration date”, “AP expiration date”, etc. And information such as “issuer AP data” are stored.

FIG. 2 is a diagram showing the stored contents of the table provided in the bank master DB 5 and the table provided in the update data DB 7.
In the table 5A of the bank master DB 5, as shown in FIG. 2 (a), the IP corresponding to each bank number for identifying each bank such as XX bank and XX bank stored in each IC card is shown. Communication information such as an address and a port number and an update matrix number (update matrix No) are stored in pairs. Further, as shown in FIG. 2B, the table 5B of the bank master DB 5 has the above-mentioned “AP expiration date”, “AP” stored in the IC card 1 corresponding to each update matrix number. An update target item (update target type item) for distinguishing update target data such as “expiration date start date” and “issuer AP data” is stored. In the table 5B, the value “1” represents the target item, and the value “0” represents the non-target item. Further, the table 7A of the update data DB 7 stores data corresponding to each bank number for each update target item.

Next, the operation of the present system configured as described above will be described with reference to FIGS.
When the IC card 1 is inserted into the terminal device 2 by the user (step S11 in FIG. 3), “SELECT FILE” (step S12), “GET PROCESSING OPTION” from the existing terminal function unit 2A to the IC card 1 (Step S13), each command of “READ RECORD” (Step S14) is transmitted, the bank specific data (bank number) stored in the IC card 1 is read and acquired, and the command is stored in the IC card 1. Data corresponding to update target items such as “AP expiration date”, “AP expiration start date”, and “issuer AP data” are read and acquired as old data. Thereafter, when the user operates the personal identification number, the existing terminal function unit 2A transmits a “1st GENERATE AC” command to the IC card 1 (step S15), causing the IC card 1 to generate encrypted data, This encrypted data is received as “SM generation data”. When it is determined that at least the “AP expiration date” indicating the expiration date of the IC card 1 included in the acquired old data has passed the current date, the existing terminal function unit 2A determines that the IC card 1 In order to update the expiration date of the data to the new time limit, the received “SM generation data” and “bank number” are transmitted to the IS-T module 2B, and the old data acquired from the IC card 1 is updated. The target item is added and transmitted to the IS-T module 2B (step S16).

  Here, as shown in FIG. 4, the IS-T module 2 </ b> B includes a reception function unit 21 and a message generation / transmission function unit 22. In the reception function unit 21, the “SM” transmitted from the existing terminal function unit 2 </ b> A. The “data for generation”, “bank number”, and “old data (old data to which items to be updated are added)” are received (step S17 in FIG. 3). Then, the message generation / transmission function unit 22 adds a common header to these received data (step S18), and includes the “common header”, “SM generation data”, “bank number”, and “old data”. Data is transmitted to the IS-H module 4 (step S19).

  As shown in FIG. 5, the IS-H module 4 includes a reception function unit 41, a basic information acquisition unit 42, and a data transmission / reception function unit 43. In the reception function unit 41, “ Data consisting of “common header”, “SM generation data”, “bank number” and “old data” is received (step S20 in FIG. 3). The basic information acquisition unit 42 acquires “SM generation data”, “bank number”, and “old data” as basic information from the data received by the reception function unit 41 (step S21). Then, the table 5A of the bank master DB 5 is searched based on the acquired “bank number”, an update matrix number matching the bank number is selected, and further, based on the selected update matrix number. Whether the update target item on the IC card 1 side added to the “old data” matches the update target item (item corresponding to the value “1”) in the table 5B by searching the table 5B of the bank master DB 5 Judge whether or not.

  If the update target item on the IC card 1 side matches the update target item in the table 5B, the data transmission / reception function unit 43 converts the old data including the update target item from the IC card 1 side to “update target specifying item”. The data is transmitted to the IS-H module 6 together with “SM generation data” and “bank number” (steps S22 and S23).

  As shown in FIG. 6, the IS-H module 6 includes a reception function unit 61, an old data check unit 62, an update target data identification unit 63, an IC card IF generation unit 64, and a message creation / transmission function unit 65. The reception function unit 61 receives data including “update target specific item data”, “SM generation data”, and “bank number” from the IS-H module 4 (step S24 in FIG. 3). Then, the old data check unit 62 searches the table 7A of the update data DB 7, and the data corresponding to the “bank number” and “update target specific item data” received from the IS-H module 4 is stored in the table 7A. It is checked whether it is stored (step S25). Here, when the old data check unit 62 detects that the “bank number” and “update target specific item data” received from the IS-H module 4 are stored in the table 7A. The update target data specifying unit 63 acquires the latest data corresponding to the update target specifying item stored in the table 7A as update data (step S26). That is, as shown in FIG. 2C, “0001” is stored as the bank number and “2005050510 (May 10, 2005)” is stored as the AP expiration date in the table 7A, and the same information as these stored information Is stored in the IC card 1, the update target data specifying unit 63 stores the latest AP expiration date “2010510 (May 2010) stored corresponding to the bank number“ 0001 ”in the table 7A. 10th) "is specified and acquired as update data.

  When the update data acquired by the update target data specifying unit 63 is input, the IC card IF generation unit 64 converts the update data into a data array conforming to the IC card IF (interface) (that is, the update data on the IC card side). Is generated as a data array added to the update data) (step S27).

  Here, the message creation / transmission function unit 65 has a management processing (Secure Messaging) function, and based on the received “SM generation data”, authentication data (== MAC). Then, the generated authentication data is added to the data array conforming to the IC card IF generated by the IC card IF generating unit 64 (that is, data composed of commands and update data), and the process proceeds to step S46 in FIG. An answer message as shown is transmitted to the IS-H module 4 (steps S28 and S29 in FIG. 3). As shown in step S29 of FIG. 3, this reply message is a data group in which a command and authentication data are added for each update data.

  As shown in FIG. 5, the IS-H module 4 includes a data transmission / reception function unit 43 and a telegram generation / transmission function unit 44, and the data transmission / reception function unit 43 receives an answer message (each update from the IS-H module 6 A data group to which a command and authentication data are added for each data) is received (step S30 in FIG. 3). The message generation / transmission function unit 44 generates a message with a “common header” added to the reply message received by the data transmission / reception function unit 43 (step S31), and transmits it to the IS-T module 2B (steps S33, S34). ).

  As shown in FIG. 4, the IS-T module 2 </ b> B has a message reception function unit 23 and an IC card IF function unit 24, and the data reception function unit 23 transmits a data group (answer) The message having the “common header” added to the message is received, and the “common header” added to the message is removed (step S35 in FIG. 3). The IC card IF function unit 24 separates the data group received by the message reception function unit 23 and from which the “common header” is removed according to the IC card IF (interface) (step S36). That is, when the IC card IF function unit 24 inputs a data group to which a command and authentication data are added for each update data, the IC card IF function unit 24 separates each update data as data composed of one update data, command, and authentication data. Then, the separated data (answer message) is sequentially transmitted to the IC card 1 (steps S37 and S38).

  When receiving the reply message, the IC card 1 verifies whether the authentication data included in the reply message is correct as shown in FIG. 7 (step S47 in FIG. 7). That is, the IC card 1 compares the authentication data included in the reply message with the data that is the basis of the generation of the encrypted data (that is, the SM generation data) transmitted by itself. Verify correctness of received authentication data. When it is verified that the reception authentication data is correct, the command included in the response message is executed, and data such as “AP expiration date” stored in the response message is included in the response message. A process of rewriting the update data is performed (step S48 in FIG. 7). Thereafter, the IC card 1 transmits an OK signal indicating that the data has been updated to the IS-T module 2B (step S49 in FIG. 7).

In this way, the expiration date stored in the IC card 1 can be updated. For this reason, even if the expiration date has passed, the user can bring the IC card into the window of the financial institution that issued the IC card 1 or stop using the IC card 1 on the financial institution side. There is no need to go through the issuing procedure.
If it is not verified that the received authentication data is correct data, the IC card 1 transmits an NG signal to the IS-T module 2B (step S49 in FIG. 7).

It is a figure which shows the outline | summary of the expiration date management system which concerns on this invention. It is a figure which shows the memory | storage condition of the data in bank master DB and update data DB provided in the said system. It is a sequence diagram which shows the whole operation | movement of the said system. It is a figure which shows the function structure of the IS-T module which comprises this system. It is a figure which shows the function structure of the 1st IS-H module (IS-H module 4) which comprises this system. It is a figure which shows the function structure of the 2nd IS-H module (IS-H module 6) which comprises this system. It is a sequence diagram which shows the production | generation operation | movement of the authentication data by a 2nd IS-H module, and the verification operation | movement of the authentication data by an IC card. It is a figure which shows the outline | summary of the financial transaction system using an IC card. It is a figure explaining the general transaction in the financial transaction system using an IC card. It is a figure explaining the various commands transmitted / received between an IC card and a terminal device. It is a sequence diagram explaining the process between IC card regarding a general transaction, a terminal device, and a center. It is a sequence diagram which shows an example of the process sequence between the IC card regarding a management system work, and a terminal device. It is a figure explaining the data regarding an expiration date. It is a figure explaining the abnormal process when the expiration date in an IC card has expired.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... Terminal device, 2A ... Existing terminal function part, 2B ... IS-T module, 4, 6 ... IS-H module, 5 ... Bank master DB, 7 ... Update data DB, 5A, 5B, 7A ... Table, 8 ... Second center device, 21, 41, 61 ... Reception function unit, 22, 44, 65 ... Message generation / transmission function unit, 23 ... Message reception function unit, 24 ... IC card IF function unit, 42 ... basic information acquisition unit, 43 ... data transmission / reception function unit, 62 ... old data check unit, 63 ... update target data specifying unit, 64 ... IC card IF generation unit.

Claims (4)

An expiration date management system comprising an IC card storing at least information related to an expiration date, a terminal device capable of reading data stored in the IC card, and a center device connectable to the terminal device via a communication line In
The terminal device
Reading means for reading data stored in the IC card;
Determination means for determining whether or not the expiration date has expired based on the information on the expiration date read from the IC card;
An update request means for transmitting an update request for requesting an update of the expiration date to a center device that manages the expiration date when it is determined that the expiration date has expired;
Transmission means for transmitting a reply message to the update request received from the center apparatus to the IC card, and updating information on the expiration date stored in the IC card,
The center device is
In response to the update request, the terminal receives the reply message including at least information related to the updated expiration date, a command executed in the IC card to update the expiration date, and authentication data necessary for executing the command To the device,
The IC card is
An expiration date management system, wherein authentication is performed based on the authentication data included in the answer message transmitted from the terminal device, and information on the expiration date is updated. In the expiration date management system according to claim 1,
The center device is
A first management means for managing the issued IC card and the type of expiration date recorded on the IC card in association with each operator;
A second management means for managing the expiration date for each business operator;
Receiving means for receiving an update request for requesting an update of an expiration date from the terminal device;
A specifying means for specifying an expiration date to be updated based on the update request;
Message creating means for creating the reply message based on the expiration date identified by the identifying means;
Transmitting means for transmitting the reply message to the update request to the terminal device. A first management means for managing the issued IC card and the type of expiration date recorded on the IC card in association with each operator;
A second management means for managing the expiration date for each business operator;
Receiving means for receiving an update request for requesting an update of an expiration date from a terminal device connectable via a communication line;
A specifying means for specifying an expiration date to be updated based on the update request;
Message creation means for creating a reply message comprising at least information relating to the expiration date specified by the specifying means, a command executed in the IC card to update the expiration date, and authentication data required for executing the command When,
A center device comprising: a transmission unit that transmits the reply message to the update request to the terminal device. Reading means for reading data stored in the IC card;
Determination means for determining whether or not the expiration date has expired based on at least the information on the expiration date read from the IC card;
An update request means for transmitting an update request for requesting an update of the expiration date to a center device that manages the expiration date when it is determined that the expiration date has expired;
Transmission means for transmitting a reply message to the update request received from the center apparatus to the IC card, and updating information on the expiration date stored in the IC card,
The response message includes at least a command executed in the IC card and authentication data necessary for executing the command.

Images