JP2008102861A - Ic card and program for ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card to transfer object information between information processors without considering compatibility between a plurality of information processors, and to provide a program for the IC card. <P>SOLUTION: The IC card 10 relays, transmits the object information between a first information processor 20 and a second information processor 30 and has a first communication means 12 for receiving first object information from the first information processor 20 and a second communication means 13 for transmitting second information according to the first information received by the first communication means 12 to the second information processor 30. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an IC card for managing communication of target information and an IC card program.

  Recently, services such as payment processing for product purchases and entrance / exit management for companies and the like have been realized by linking a plurality of information processing devices using a non-contact interface. IrDA, Bluetooth (trademark registration No. 4623573), etc. are used as such a non-contact local interface (for example, Patent Document 1). As the service contents increase and the information processing apparatus evolves accordingly, the types of local interfaces such as RFID (Radio Frequency Identification) and ZIGBEE (International Trademark Registration No. 770263) are also increasing.

Under these circumstances, if a system that provides the above services is constructed, the compatibility of the system is lost due to the difference in the local interface, and convenience is lost. In addition, in order to support various local interfaces, information processing is performed. This is an obstacle to the spread of services, for example, because the cost of the device is increased and the system is complicated.
JP 2000-129978 A

  An object of the present invention is to provide an IC card and an IC card program capable of communicating target information between information processing apparatuses without considering compatibility of a plurality of information processing apparatuses.

The present invention solves the above problems by the following means. For ease of understanding, the reference numerals corresponding to the embodiments of the present invention will be described in parentheses, but the present invention is not limited thereto.
The invention of claim 1 is an IC card (10) for relaying and transmitting object information between a first information processing device (20) and a second information processing device (30), wherein the first information processing device (20) is a first information processing device (30). The first communication means (12) for receiving the first target information from the information processing apparatus (20) and the second corresponding to the first target information received by the first communication means (12) An IC card (10) comprising second communication means (13) for transmitting target information to the second information processing apparatus (30).
According to a second aspect of the present invention, in the IC card (10) according to the first aspect, the first communication unit (12) and the second communication unit (13) are configured to receive the first target information. The IC card (10) is characterized in that it communicates profile information with the first information processing device (20) and the second information processing device (30).
According to a third aspect of the present invention, in the IC card (10) according to the first or second aspect, the first target information and the second target information are authentication information. (10).
According to a fourth aspect of the present invention, in the IC card (10) according to any one of the first to third aspects, the first communication means (12) and the second communication means (13) are One side receives the first target information from the first information processing device (20) via the contact terminal, or the second target is sent to the second information processing device (30). Contact communication means (12) for transmitting information, and the other is contactless and transmits the second target information to the second information processing device (30) or the first information processing. An IC card (10), which is non-contact communication means (13) for receiving the first target information from a device (20).
According to a fifth aspect of the present invention, in the IC card (10) according to any one of the first to fourth aspects, the second communication means (13) is the first communication means (12). Transmitting the second target information to the second information processing device (30) in a state where the communication session with the first information processing device (20) is continued. 10).

The invention according to claim 6 is the first communication means for receiving the first target information from the first information processing apparatus (20) and the IC card (10) received by the first communication means. The second target information corresponding to the first target information is caused to function as second communication means for transmitting to the second information processing device (30), and the IC card (10) is used for the first information processing. A program for an IC card for functioning as means for relaying and transmitting target information between a device (20) and the second information processing device (30).
According to a seventh aspect of the present invention, in the IC card program according to the sixth aspect, the first communication unit and the second communication unit are configured so that the first information is received before the first target information is received. An IC card program for communicating profile information with the processing device (20) and the second information processing device (30).
The invention of claim 8 is the IC card program according to claim 6 or claim 7, wherein one of the first communication means and the second communication means is connected to the first communication terminal via a contact terminal. Receiving the first target information from the information processing device (20), or transmitting the second target information to the second information processing device (30), the other is, Non-contact transmission of the second target information to the second information processing device (30) or reception of the first target information from the first information processing device (20) An IC card program characterized by being a communication means.
The invention of claim 9 is the IC card program according to any one of claims 6 to 8, wherein the second communication means is configured such that the first communication means is the first information processing. An IC card program for transmitting the second target information to the second information processing device (30) in a state where a communication session with the device (20) is continued.

The present invention has the following effects.
(1) The IC card includes a first communication unit and a second communication unit, and relays transmission of target information from the first information processing apparatus to the second information processing apparatus. Transmission / reception of target information between the information processing apparatus and the second information processing apparatus can be easily performed according to a highly versatile communication rule (protocol) of the IC card. In addition, since the second target information corresponding to the first target information received by the first information processing apparatus is transmitted to the second information processing apparatus, security such as encryption of the first target information is ensured. In addition, it can be transmitted as second target information to the second information processing apparatus, and information leakage during communication can be prevented.
(2) The first communication means and the second communication means of the IC card are profile information of the first information processing apparatus and the second information processing apparatus and the IC card before receiving the first target information. Therefore, the IC card and each information processing apparatus can recognize the usage status of each other, and can smoothly transmit and receive the first and second target information performed thereafter.
(3) Since the first target information and the second target information are authentication information, highly confidential information such as personal information can be safely transmitted and received using an IC card.

(4) Since one of the first communication means and the second communication means is a contact communication means and the other is a non-contact communication means, the contact with the IC card is made according to the usage form of each information processing apparatus. Alternatively, contactless communication can be set.
(5) Since the second communication means transmits the second target information to the second information processing apparatus while the first communication means continues the communication session with the first information processing apparatus, It is not necessary to connect and disconnect the session each time transmission / reception is performed, and transmission / reception of the target information can be facilitated, and continuous target information can be processed quickly.

  An object of the present invention is to provide an IC card and an IC card program capable of communicating target information between information processing devices without considering the compatibility of a plurality of information processing devices. This is realized by providing one communication means and second communication means.

Hereinafter, the present invention will be described in more detail with reference to the drawings and the like.
FIG. 1 is a diagram showing a first embodiment of an IC card according to the present invention. FIG. 2 is a diagram showing an operation flow of the IC card.

As illustrated in FIG. 1, the IC card 10 includes a CPU 11, a contact communication unit 12, a non-contact communication unit 13, a RAM 14, a ROM 15, and an EEPROM 16. The IC card 10 is attached to the mobile terminal 20 (first information processing apparatus), and the user personal authentication data (first target information) received from the mobile terminal 20 is transferred to the reader / writer 30 (second The result data received from the reader / writer 30 is transmitted to the portable terminal 20 to manage entry / exit to an office such as a company. Here, the authentication data is the user's fingerprint shape information acquired by the mobile terminal 20 described later, and the result data is the collation result of the fingerprint data.
In the following description, transmission / reception of authentication data and result data will be mainly described. However, the IC card 10 performs not only authentication data and result data but also all communication between the portable terminal 20 and the reader / writer 30. Information such as authentication data transmission confirmation notification (command) and reception confirmation notification can also be relayed and transmitted.

The CPU 11 is a control circuit unit that performs overall control of each unit of the IC card 10.
The contact-type communication unit 12 is a communication port connected to the mobile terminal 20 through a contact terminal. In this embodiment, a protocol based on ISO (International Organization for Standardization) 7816 is used.
The non-contact type communication unit 13 is a non-contact type communication port provided with an antenna for transmission / reception, and communicates with the reader / writer 30. In this embodiment, a protocol based on ISO14443 is used.
The RAM 14 is a volatile memory used as a work area for processing of the CPU 11.
The ROM 15 is a read-only nonvolatile memory in which basic software such as an OS (operating system) of the IC card 10 is installed. In this embodiment, not only the OS but also a management program (IC card program) for managing transmission / reception of authentication data and result data is installed, and the authentication data input from the contact communication unit 12 is encrypted. An encryption application is also installed.
The EEPROM 16 is a rewritable nonvolatile memory.

The portable terminal 20 is a portable fingerprint authentication device that includes a CPU 21, a fingerprint detection unit 22, a contact communication unit 23, an operation unit 24, and a display unit 25.
The CPU 21 is a control circuit unit that performs overall control of each unit of the mobile terminal 20.
The fingerprint detection unit 22 is a sensor that detects the shape of the user's fingerprint and outputs it as authentication data.
The contact-type communication unit 23 is a communication port connected to the contact-type communication unit 12 of the IC card 10 through a contact terminal, and transmits authentication data output from the fingerprint detection unit 22 to the IC card 10. Further, the result data transmitted from the reader / writer 30 can be received via the IC card 10 and displayed on the display unit 25. In this embodiment, a protocol conforming to ISO7816 is used.
The operation unit 24 includes a plurality of operation buttons, and operates operations such as fingerprint detection of the mobile terminal 20 and transmission of authentication data.
The display unit 25 is a display that displays the operation status of the mobile terminal 20, the received result data, and the like.

The reader / writer 30 includes a non-contact communication unit 31 and a server communication unit 32, receives authentication data transmitted from the IC card 10, and transmits result data that is a verification result of the authentication data to the IC card 10. It is a device to do.
The non-contact type communication unit 31 is a non-contact type communication port provided with an antenna for transmission / reception, and communicates with the non-contact type communication unit 13 of the IC card 10. In this embodiment, a protocol conforming to ISO14443 is used.
The server communication unit 32 is a communication circuit that communicates with the external server 40 via a network line.
In the external server 40, fingerprint data of a person who is permitted to enter and leave the office is registered in advance, authentication data transmitted from the server communication unit 32 of the reader / writer 30, and fingerprint data registered in advance. To determine whether entry or exit is possible. The determined authentication result is transmitted as result data to the server communication unit 32 of the reader / writer 30. The external server 40 has a decryption application that decrypts the encrypted authentication data.

Next, the operation of the IC card 10 that relays between the portable terminal 20 and the reader / writer 30 will be described.
When the user with the portable terminal 20 approaches the entrance of the office, the portable terminal 20 and the reader / writer 30 have profile information including authentication information for the IC card 10 as shown in FIG. To establish a communication session (S101, S102). Here, the profile information is information indicating whether there is authentication data that requires encryption, identification information of the portable terminal 20 or the reader / writer 30, the portable terminal 20, the reader / writer 30, and the IC card. Information on the form of data to be transmitted / received to / from 10, a scenario for issuing a command for relay processing (sequence to be relayed), information on a time limit of data to be transmitted / received, and the like.

  When the communication session is established, the IC card 10 receives a notification confirming the presence / absence of verification of authentication data from the reader / writer 30 (S103), and receives a notification of verification request of authentication data from the portable terminal 20 (S103). S104), a notification of verification request for authentication data is transmitted to the reader / writer 30 (S105), and a notification of confirmation that the notification of verification request has been transmitted to the reader / writer 30 is returned to the portable terminal 20 (S106). Then, the IC card 10 receives a notification requesting authentication data from the reader / writer 30 (S107).

After completing the communication of the profile information with the IC card 10 (S102), the portable terminal 20 detects the shape of the user's fingerprint with the fingerprint detection unit 22 (authentication information detection). When the confirmation notification of the verification request for verification of authentication data (S106) is received, authentication data (first target information) is generated from the detected fingerprint shape (authentication data generation) and output to the contact communication unit 23.
The IC card 10 receives the authentication data from the contact communication unit 23 of the portable terminal 20 by the contact communication unit 12 of the IC card 10 (S108), and is an encryption application installed in the ROM 15 of the IC card 10. The authentication data is encrypted (encryption of the authentication data) and transmitted to the reader / writer 30 (S109).

When the reader / writer 30 receives the encrypted authentication data (second target information) by the non-contact communication unit 31, the reader / writer 30 outputs the authentication data (second target information) to the server communication unit 32. Output to the server 40. The external server 40 decrypts the encryption of the authentication data received from the reader / writer 30 with a decryption application, and collates the user's fingerprint data registered in advance with the authentication data (authentication processing). When there is fingerprint data that matches the authentication data, the external server 40 reads the result data that the room can be entered, and when there is no fingerprint data that matches the authentication data, the external server 40 reads the result data that the room cannot be entered. Input to the writer 30. Since the authentication data is encrypted until it is transmitted from the IC card 10 and input to the external server 40, the content of the authentication data is grasped even if it is illegally read by a third party. Is prevented.

  When the result data is input from the external server 40 to the reader / writer 30, the IC card 10 receives the result data from the reader / writer 30 (S110) and transmits it to the portable terminal 20 (S111). Finally, a notification of confirmation that the result data has been transmitted to the portable terminal 20 is transmitted to the reader / writer 30 (S112). When receiving the result data, the portable terminal 20 displays the contents of the result data on the display unit 25 and informs the user of the collation result.

From the above, the IC card of Example 1 has the following effects.
(1) Since the IC card 10 includes the contact-type communication unit 12 and the non-contact-type communication unit 13 and relays the transmission of authentication data from the portable terminal 20 to the reader / writer 30, the portable terminal 20 and the reader Transmission / reception of authentication data to / from the writer 30 can be easily performed according to highly versatile communication rules (ISO 7816 and ISO 14443) of the IC card 10. Further, since the encrypted authentication data corresponding to the authentication data received by the portable terminal 20 is transmitted to the reader / writer 30, the authentication data can be transmitted to the reader / writer 30 with security added, and communication Information leakage at the time can be prevented.
Furthermore, in the conventional entrance / exit management mode where a fingerprint detector is provided at the entrance of the office, it is necessary to perform authentication one by one in front of the fingerprint detector when there are many people entering the room. However, in this application, within the area where the non-contact communication unit 31 of the reader / writer 30 can communicate, the user has detected the fingerprint using the personal portable terminal 20 owned by the user, and finished generating the authentication data. Since the authentication processing can be performed sequentially from the person in charge, the waiting time for the authentication processing can be reduced as compared with the conventional case.

(2) The contact-type communication unit 12 and the non-contact-type communication unit 13 of the IC card 10 communicate profile information between the portable terminal 20 and the reader / writer 30 and the IC card 10 before receiving the authentication data. The IC card 10, the portable terminal 20, and the reader / writer 30 can recognize each other's usage status, and can facilitate the transmission and reception of authentication data performed thereafter.
(3) The non-contact type communication unit 13 transmits the encrypted authentication data to the reader / writer 30 in a state where the contact type communication unit 12 continues the communication session with the portable terminal 20, so that each time transmission / reception is performed There is no need to connect and disconnect a session, and authentication data can be transmitted and received smoothly. Thereby, continuous authentication data can be processed quickly.

FIG. 3 is a diagram showing a second embodiment of the IC card according to the present invention. In the description of the second embodiment, the same functions as those of the first embodiment described above are denoted by the same reference numerals or unified reference numerals at the end, and repeated descriptions and drawings are appropriately omitted.
The difference between the IC card 10-2 of the second embodiment and the IC card 10 of the first embodiment is that in the IC card 10-2 of the second embodiment, as shown in FIG. The management program provided in the ROM 15 of the first embodiment is not installed.
The communication management unit 17 manages data received from the mobile terminal 20 and the reader / writer 30, activates an encryption application as necessary, performs encryption processing on the data, and the like. And a control circuit that transmits to the reader / writer 30 and cooperates with the CPU 11.

  As described above, since the IC card 10-2 according to the second embodiment includes the communication management unit 17, it is not necessary to provide a management program in the ROM 15, and the storage capacity of the ROM 15 can be saved. The load on the CPU 11 due to the activation can be eliminated.

(Modification)
As described above, various modifications and changes can be made without being limited to the embodiments described above, and those inventions are also within an equivalent range.
(1) In each embodiment, the mobile terminal 20 is a terminal for fingerprint authentication, but a mobile phone connected with an IC card may be provided with an authentication function. Moreover, although the example which recognizes the shape of a fingerprint was given as an authentication method, methods, such as obtaining authentication from a face photograph, can also be used. For example, when the above-described mobile phone is used instead of the mobile terminal 20, it is possible to take a photograph of the user's face using the camera provided in the mobile phone and use it for authentication. (2) In each embodiment, the IC card 10 relays communication such as authentication data of the portable terminal 20 and the reader / writer 30, but communication of three or more information processing apparatuses may be linked.
(3) In each embodiment, the established session is an application session that stipulates from the selection of an application to the end of use in the connection between the IC card 10, the portable terminal 20, and the reader / writer 30, and the application session is continued. Data and commands were sent and received, but the card session that stipulates the power supply from the IC card 10 to the power-off and the command session that stipulates the command issue from the IC card 10 to the response reception is continued. You may go.

It is a figure which shows Example 1 of the IC card by this invention. It is a figure which shows the operation | movement flow of the IC card by this invention. It is a figure which shows Example 2 of the IC card by this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 IC card 12 Contact-type communication part 13 Non-contact-type communication part 20 Portable terminal 30 Reader / writer

Claims (9)

An IC card that relays and transmits target information between a first information processing apparatus and a second information processing apparatus,
First communication means for receiving first target information from the first information processing apparatus;
Second communication means for transmitting second target information corresponding to the first target information received by the first communication means to the second information processing apparatus;
IC card equipped with. In the IC card according to claim 1,
The first communication means and the second communication means communicate profile information with the first information processing apparatus and the second information processing apparatus before receiving the first target information;
IC card characterized by In the IC card according to claim 1 or 2,
The first target information and the second target information are authentication information;
IC card characterized by In the IC card according to any one of claims 1 to 3,
The first communication means and the second communication means are:
One of the contact communication means for receiving the first target information from the first information processing apparatus or transmitting the second target information to the second information processing apparatus via a contact terminal And
The other is contactless communication means for transmitting the second target information to the second information processing apparatus or receiving the first target information from the first information processing apparatus. There is,
IC card characterized by In the IC card according to any one of claims 1 to 4,
The second communication means transmits the second target information to the second information processing apparatus in a state where the first communication means continues a communication session with the first information processing apparatus. thing,
IC card characterized by A first communication means for causing the IC card to receive the first target information from the first information processing apparatus;
The second target information corresponding to the first target information received by the first communication unit is caused to function as a second communication unit that causes the second information processing apparatus to transmit the second target information,
An IC card program for causing the IC card to function as a means for relaying and transmitting target information between the first information processing apparatus and the second information processing apparatus. In the IC card program according to claim 6,
The first communication means and the second communication means communicate profile information with the first information processing apparatus and the second information processing apparatus before receiving the first target information;
An IC card program characterized by the above. In the IC card program according to claim 6 or 7,
The first communication means and the second communication means are:
One of the contact communication means for receiving the first target information from the first information processing apparatus or transmitting the second target information to the second information processing apparatus via a contact terminal And
The other is contactless communication means for transmitting the second target information to the second information processing apparatus or receiving the first target information from the first information processing apparatus. There is,
An IC card program characterized by the above. The IC card program according to any one of claims 6 to 8, wherein
The second communication means transmits the second target information to the second information processing apparatus in a state where the first communication means continues a communication session with the first information processing apparatus. thing,
An IC card program characterized by the above.

Images