JP3878090B2 - IC card issuing system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an IC card issuing system.
[0002]
[Prior art]
The IC card has a large storage capacity and high security, and as a new information recording medium replacing the magnetic card, in recent years in the fields of public, finance, communication, transportation, medical, and electronic commerce on the Internet. It is becoming popular. Recently, a multi-application IC card system in which a plurality of applications are mounted on an IC card and a plurality of services can be used has appeared. In such a multi-application IC card system, it is necessary for the card issuer to issue an IC card by initially mounting an appropriate application among a large number of applications in response to requests from the card issuer, service provider, and user. There is.
In addition, multi-card compatible IC card systems that manage various IC cards having different hardware and different card management systems have also appeared.
[0003]
Conventionally, when issuing a tamper-resistant IC card, for example, an APDU (application protocol data unit) command specific to the IC card to be issued is created, and these APDU commands are generated in accordance with a sequence unique to the IC card. There was a need to send to the card. Since the format and command sequence of these APDU commands are unique to the IC card, an issue command generation program for generating an appropriate APDU command in an appropriate sequence for each IC card is required. Therefore, the present inventors have previously proposed an issue command generation system that can handle generation of various issue commands regardless of the type of IC card (Japanese Patent Application No. 2002-156862). However, in the issuance of IC cards, the usefulness of a system capable of supporting various card issuing machines, that is, supporting the file formats of various card issuing tools has been recognized.
[0004]
Conventionally, in card issuance, a card issuing machine that issues and issues a card by transmitting / receiving an APDU command to / from the card has been used. There are various types, such as those that are expected to issue a large number of cards. The card issuing machine consists of a card issuing device that actually issues the card and a card issuing terminal connected to the card issuing device, and the card issuing terminal is equipped with a card issuing tool for controlling the card issuing device. Has been. In many cases, the card issuing tool reads a file, controls the card issuing device based on the information, issues a card, and outputs the result of the card issuance to a file. However, the format of this file differs depending on the card issuing tool and is currently not uniform. Also, in many cases, the data mounted on the card contains data specific to each card, such as personal information such as card ID, card certificate, and name. The function to do is not provided in the card issuing tool. Therefore, in addition to the card issuing machine, there is a need for a card issuing management system for managing such information and generating / decoding a file used by the card issuing tool using this data. However, as described above, since the format of data read by the card issuing tool is different for each card issuing tool, in the conventional system, a card issuing management system is created for each card issuing tool, or one card is issued. In order to make the issue management system compatible with a plurality of card issuers, the card issue management system is provided with an issue command generator corresponding to each card issuer.
[0005]
FIG. 1 is a block diagram schematically showing an example of a conventional IC card issuance system as described above, where 1 is a card issuance management system for issuing / managing data necessary for issuance of an IC card, and 2 Is an issue data management unit for managing predetermined data related to the issue of an IC card, 3a, 3b,. . . 3n is an issue command generation unit for generating an issue command for issuing a card based on the predetermined data, 4a, 4b,. . . 4n is the issue command generators 3a, 3b,. . . Card issue command files, 5a, 5b,. . . 5n is a card issuing tool mounted on the card issuing terminal, 6a, 6b,. . . 6n are the card issuing tools 5a, 5b,. . . 5n, a card issuing device that actually issues cards, and each card issuing device 6a, 6b,. . . 6n and card issuing tools 5a, 5b,. . . Each card issuing terminal equipped with 5n is a card issuing machine 7a, 7b,. . . 7n.
[0006]
[Problems to be solved by the invention]
The conventional IC card issuing system requires a card issuing management system for each card issuing machine, or even if one card issuing management system supports multiple card issuing machines The issued command generator was required. For this purpose, it is necessary to create a card issuance management program according to the card issuing machine to be used, and when a new card issuing machine is to be introduced into the system, the card issuance is performed in order to correspond to the card issuing machine. It was necessary to add a new issue command generation unit to the management system, which necessitated renewal of the program, which required labor and cost.
[0007]
Furthermore, since card issuers need to be managed securely so that unauthorized card issuance is not performed by unauthorized operations, these card issuers are often networked from other systems. Managed independently. For this purpose, the file generated by the card issuance management system is transferred to the card issuing terminal using a recording medium such as an FD or a CD-ROM in an offline environment. In this case, the total size of the files exchanged between the card issuance management system and the card issuing machine often increases as the number of cards issued at a time increases. Since the upper limit of the amount is fixed, it is preferable to make the size of this file as small as possible.
[0008]
Further, it is necessary to avoid the risk that a file generated by the card issuance management system is illegally read, falsified, or the file is forged so that an illegal card is not issued. For this purpose, for example, a procedure for encrypting a file generated by the card issuing management system and transferring it to a recording medium, decrypting the file at a card issuing terminal, and then inserting it into a card issuing tool is required.
[0009]
Accordingly, an object of the present invention is to provide an IC card issuing system that can handle a plurality of card issuing machines without developing a card issuing management program for each card issuing machine in view of the problems in the conventional system as described above. There is.
[0010]
Another object of the present invention is to provide an IC card issuance system that can prevent issuance of unauthorized cards.
[0011]
[Means for Solving the Problems]
The present invention is an IC card issuing system comprising a card issuing management system for managing and issuing data necessary for issuing an IC card, and a card issuing machine for transmitting an APDU to the card and issuing the card.
The card issuance management system includes IC card issuance data management means for managing IC card issuance data that is data necessary for issuance of an IC card and includes data specific to each IC card, and the IC card issuance data management IC card issuance data obtained from the means, and an IC card issuance data file, and a file in which a model of an APDU executed at the time of card issuance is described in the order of command execution, and a part of the file is stored in the IC card issuance data An issuance template generation means for generating an issuance template file including a reserved word indicating replacement with the issuance data of the file;
The card issuing machine decodes a reserved word included in the issuing template file generated by the issuing template generating means, acquires the issuing data designated by the reserved word from the issuing data file, and Issuance template decoding means for generating an issuance command sequence file for each IC card by replacing the reserved word of the issuance template file and the card issuance card mounted on the card issuance machine. A format conversion unit for an issuing machine that converts the file into a format that can be read by a tool; and an IC card issuance control unit that reads the file converted by the conversion unit and controls the card issuing device to issue a card. It is characterized by.
[0014]
DETAILED DESCRIPTION OF THE INVENTION
In order to describe the present invention in more detail, it will be described with reference to the accompanying drawings.
[0015]
FIG. 2 is a schematic diagram showing the overall configuration of the IC card issuing system according to the present invention. Here, 10 is a card issuance management system for issuing / managing data necessary for issuing IC cards,
The card issuance management system 10 includes an issuance data management unit 11 that manages data necessary for card issuance, and an issuance template generation unit 12 that generates an issuance data file and an issuance template file 13. Yes. The issuance data file is obtained by describing the issuance data to be embedded in the card issuance command, which is different for each card, from the issuance data management unit 11, and the issuance template file is necessary for card issuance. Issuance command sequence including a reserved word indicating replacement with issuance data. In other words, this issuance template file describes the APDU model to be executed at the time of card issuance in the order of command execution. In the case of issuing a card using a file, the file is used for interpreting a card issue APDU reserved word, obtaining data described in the issue data file, and creating an APDU. It should be noted that the specification of the issuing command sequence necessary for card issuance with reserved words is described in detail in Japanese Patent Application No. 2002-156962 related to the applicant's application. Although a description is omitted, FIG. 5 shows a sample of the template file for issue, FIG. 6 shows a sample of the data file for issue, and FIG. 5 shows the data of the data file for issue in Example 1 in FIG. FIG. 7 shows an APDU sequence obtained by substituting a file containing reserved words.
[0016]
14a, 14b,. . . 14n is a card issuing tool mounted on the card issuing terminal, and 15a, 15b,. . . 15n is a card issuing device which is controlled by each card issuing tool and actually issues a card. Each card issuing device 15a, 15b,. . . 15n and each card issuing tool 14a, 14b,. . . 14n are installed on the card issuing terminals 16a, 16b,. . . 16n is configured.
[0017]
Furthermore, according to the present invention, the issuance data and the issuance template file 13 are stored in the respective card issuance tools 14a, 14b,. . . 14n dependent files 18a, 18b,. . . Issue command conversion applications 17a, 17b,. . . 17n is mounted on the card issuing terminal.
[0018]
Each card issuing machine 16a, 16b,. . . 16n are card issuing tools 14a, 14b,. . . 14n, issue command conversion applications 17a, 17b,. . . 17n converted files 18a, 18b,. . . 18n is read and the card issuing devices 15a, 15b,. . . The card issuance is performed at 15n, and the issue command conversion applications 17a, 17b,. . . An issue result file is generated at 17n, and this issue result file is decoded by the issue template generation unit 12 in the card issue management system 10 and registered in the issue data management unit 11.
[0019]
Each card issuing machine 16a, 16b,. . . Further, 16n needs to be managed safely so that an unauthorized card issuance is not performed by an unauthorized operation. For this purpose, an issuance data file generated by the issuance template generation unit 12 of the card issuance management system 10 And the issuing template file 13 are stored in the card issuing machines 16a, 16b,. . . 16n. At this time, the card issuing management system 10 and the card issuing machines 16a, 16b,. . . The total size of files exchanged with 16n increases as the number of cards issued at a time increases, and the information recording capacity of the recording medium is determined. Therefore, it is preferable to make this size as small as possible. In order to prevent unauthorized cards from being issued, it is necessary to avoid the risk that the file 13 generated by the card issuance management system 10 is illegally read, altered, or forged. In the present invention, the file 13 generated by the issuance template generation unit 12 in the card issuance management system 10 is encrypted and then transferred to the recording medium, and the card issuance terminal 14a, 14b,. . . 14n is adopted.
[0020]
Therefore, in the present invention, the issuance template generation unit 12 and each issuance command conversion application 17 are configured as shown in FIGS. 3 and 4, respectively.
[0021]
FIG. 3 is a diagram showing the configuration of the issuance template generation unit 12 that forms part of the card issuance management system 10 of FIG. Issuing template generation means for acquiring and generating an issuance data file and an issuance template file 13. 21 is generated by the issuance command conversion application 17 based on the card issuance result performed by the card issuance device 15. The issuance result file decrypting means for deciphering the issuance result file, which will be described later, and registering the issuance result in the issuance data management unit 11 in the card issuance management system 10, and 22 represents the issuance data file and the issuance template file 13. Common issue result file encrypted and output by the card issuing tool 14 It is a file encryption and decryption means for decrypting.
[0022]
FIG. 4 is a diagram showing the configuration of the issue command conversion application 17. Reference numeral 23 denotes an issue template file based on the issue data file and issue template file 13 from the issue template generation unit 12. Issuing template decoding means for generating an issuing command for each card by interpreting a reserved word and embedding corresponding data in the issuing data file, and 25a, 25b,. . . Converts the issuance command sequence created by the issuance template deciphering means 23 into a format depending on the card issuance tool 14, and also deciphers the issuance result file output by the card issuance tool 14 and converts it into an internal intermediate format. Issuing machine format conversion means 24 is an issuance result for creating a common issuance result file to be passed to the issuance template generation unit 12 in the card issuance management system 10 from the internal intermediate format converted by the issuing machine format conversion means 25 The file generation means 26 is a common issue result obtained by decrypting the issue data file and issue template file encrypted by the file encryption / decryption means 22 of the issue template generation unit 12 and output by the card issuing tool 14. File encryption / decryption means to encrypt files That.
[0023]
【The invention's effect】
According to the present invention, it is not necessary to develop a card issuance management program for each card issuing machine, and only an issuance command conversion application needs to be developed. This development scale is smaller than the development of a conventional card issuance management program. That's it. Also, when dealing with a plurality of card issuing machines, it is not necessary to develop a program specialized for the combination, and an issuing command conversion application corresponding to each card issuing machine need only be installed in the card issuing terminal. Furthermore, even if a card issuing machine is newly added, the card issuing management program need not be renewed, and an issuing command conversion application may be added.
[0024]
Furthermore, according to the present invention, the issuance template file and the issuance data file generated by the card issuance management system are output in an encrypted state, and the issuance command conversion application reads the issuance template file and decrypts it internally. By performing conversion after that, it is possible to prevent unauthorized card issuance. Similarly, the card issuance result file returned from the card issuance tool is also encrypted by the issuance command conversion application, and issuance management system Can be safely transferred to the issuance management system by decrypting with, so that files can be safely exchanged between the card issuance management system and the card issuing terminal without using separate encryption / decryption means. Can do. In many cases, the issue template file and the issue data file are compressed more than the file for the card issue tool, so that the file size exchanged between the systems becomes smaller.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram showing an example of a conventional card issuing system.
FIG. 2 is a schematic configuration diagram showing a card issuing system according to the present invention.
FIG. 3 is a configuration diagram illustrating an example of an issue template generation unit.
FIG. 4 is a configuration diagram illustrating an example of an issued command conversion application.
FIG. 5 is a diagram showing a sample template file for issue.
FIG. 6 is a diagram showing a sample data file for issue.
FIG. 7 is a diagram illustrating an example of a generated APDU sequence.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 Card issue management system 11 Issue data management part 12 Issue template production | generation part 13 Issue template 14 Card issue tool 15 Card issue apparatus 16 Card issue machine 17 Issue command conversion application 18 File for card issue tool 20 Issue template generation part 21 Issue Result file decryption means 22 File encryption / decryption means 23 Issuance template decryption means 24 Issuance result file generation means 25 Issuing machine format conversion means 26 File encryption / decryption means

Claims (1)

An IC card issuing system comprising a card issuing management system for managing and issuing data necessary for issuing an IC card, and a card issuing machine for transmitting an APDU to the card and issuing the card,
The card issue management system includes:
IC card issuance data management means for managing IC card issuance data which is data necessary for issuance of an IC card and includes data specific to each IC card;
An IC card issuance data is obtained from the IC card issuance data management means, and an IC card issuance data file, and a file in which a model of APDU executed at the time of card issuance is described in the order of command execution, Issuing template generating means for generating an issuing template file including a reserved word indicating that the IC card issuing data file is to be replaced with issuing data;
The card issuing machine is
The reserved word included in the issuing template file generated by the issuing template generating means is decoded, the issuing data specified by the reserved word is obtained from the issuing data file, the issuing data and the issuing template file Issuing template decoding means for generating an issuing command sequence file for each IC card by replacing the reserved word of
An issuing machine format conversion means for converting the issuing command sequence file into a format that can be read by a card issuing tool installed in the card issuing machine;
IC card issue control means for reading the file converted by the conversion means and controlling the card issuing device to issue a card ;
An IC card issuing system characterized by comprising:

Images