JP4192864B2 - IC card, user authentication method and program thereof, mobile phone with IC card, mobile phone system with IC card - Google Patents

Description

  The present invention relates to a service system using a non-contact type IC card such as prepaid electronic money, transportation electronic tickets, commuter passes, concert and sports electronic tickets, signless credit cards, and a user authentication method thereof, in particular. The present invention relates to an IC card and a user authentication method and program thereof, a mobile phone with an IC card, and a mobile phone system with an IC card.

  An IC card is generally a card type of a commuter pass size and has a large storage capacity, so that various information can be stored. IC cards are roughly classified into a contact type that makes contact with a device that reads stored contents and a non-contact type that does not make contact, and can be classified into a type having a built-in CPU and a type not having a built-in, like a computer. JR West's ICOCA, JR East's Suica, and debit cards used for payment are also IC cards.

Conventionally, a non-contact type IC card has an advantage that processing can be performed by simply holding it over, but there is also a drawback that since it does not have a user interface and user authentication cannot be performed, it can be used by anyone. On the other hand, for user authentication when using a mobile phone, a method such as inputting a password into the mobile phone or reading a fingerprint is performed.
JP 2001-22836 A JP 2001-92786 A JP 2003-196666 A JP-A-10-124604

  By the way, when a non-contact type IC card is mounted on a mobile phone, the non-contact type IC card has a user interface, and user authentication is possible. However, in order to perform user authentication, it takes time and effort to turn on the mobile phone and input the password or read the fingerprint. The advantage of the non-contact type IC card that can be performed is lost.

  In view of the above problems, the present invention compares the usage conditions registered in advance by the user with the usage information of the card in the non-contact type IC card, and determines whether or not the contents match. By judging the success or failure of authentication, when a user uses an IC card, a complicated input operation such as inputting a password, personal information, or fingerprint using a user interface is unnecessary, and An object is to provide an IC card excellent in convenience and safety, a user authentication method and program thereof, a mobile phone with an IC card, and a mobile phone system with an IC card, which can prevent use by a third party. And

In order to achieve the above object, the present invention provides, as a first aspect, valuable information used in an electronic transaction with an external device, a use history indicating the history of the electronic transaction, and a mobile phone. The conditions for allowing use of the IC card, which are input from the specified usage condition input unit , are stored as geographical and temporal factors, transaction content factors relating to transaction details , and usage conditions defined as history factors relating to the usage history. A first storage unit that generates the history information and stores the history information in the first storage unit, and a first user authentication unit that performs user authentication using the use conditions and the use history A first data transmission / reception unit that transmits and receives information by contactless communication with the external device, and is an IC card built in the mobile phone, wherein the usage history is: Every time the valuable information stored in the first storage means the electronic transaction is updated by established, the history is updated and stored by the management unit, the first user authentication section, of the external Geographical / temporal situation in which the electronic condition is read from the external counter device by reading out the usage conditions and the usage history stored in the first storage means during the electronic transaction with the counter device and receives the usage information indicating the transaction details, the usage information is a geographical and temporal conditions and transaction contents shown with the use history, the said geographic defined on the read usage condition from the first storage means · by judged whether each adapted time factor and the transaction contents factors and the history factor, to provide a non-contact type IC card, characterized in that to determine the success or failure of the user authentication Than is.

In the first aspect of the present invention, it is preferable that the geographical and temporal factors indicate a place and a time zone in which use of the IC card is permitted .

In the first aspect of the present invention, the usage information, geographically and that the electronic transaction is performed and the device information of the installation location or the like of an external counter device, by the utilization time of time during IC card use preferably shows temporal shape situation.

In the first aspect of the present invention, and receives the usage information in the first data transmitting and receiving unit, it is preferable to pass in the first user authentication unit the usage information received.

In order to achieve the above object, the present invention includes, as a second aspect , the use condition input unit and the non-contact type IC card according to any one of the configurations of the first aspect of the present invention. A mobile phone with a non-contact type IC card is provided .

In order to achieve the above object, as a third aspect, the present invention is input from valuable information used in an electronic transaction with an external device and a use condition input unit provided in a mobile phone. A first storage means for storing conditions for permitting use of the IC card defined as transaction content factors relating to geographical and temporal factors and transaction details; and user authentication using the use conditions A non-contact IC card including a first user authentication unit that performs communication and a first data transmission / reception unit that transmits and receives information by non-contact communication between the external device and an individual such as a password or a fingerprint A mobile phone comprising: a personal information input unit that inputs information; a third storage unit that stores the personal information; and a second user authentication unit that performs user authentication using the personal information. ,in front The first user authentication unit reads out the use conditions stored in the first storage means during the electronic transaction with the external device, and the geographical / time when the electronic transaction is performed. situations and receives the usage information indicating the transaction details from the outside of the opposite device, the geographic showing the use condition of geographical and temporal conditions and transaction content the usage information indicates is read from the first storage unit The success or failure of the user authentication is determined by determining whether or not the time factor and the transaction content factor are satisfied, and the second user authentication unit determines whether the personal information is received by the personal information input unit. If entered, the personal information and the personal information stored in the third storage means in advance before user authentication are collated, and whether or not the contents match, the user authentication is performed. to determine the success or failure, power During transactions, the second when the authentication operation by is not performed user authentication unit, the non-contact type IC card and performs Ruyu chromatography The authentication by the first user authentication unit A mobile phone with a phone is provided.

In the third aspect of the present invention, it is preferable that the use condition can be input by the use condition input unit only when user authentication by the second user authentication unit is approved.

In order to achieve the above object, the present invention provides, as a fourth aspect, an installation place of the mobile phone with a non-contact IC card according to the second or third aspect of the present invention and the external counter device. second storage means, before valuable information processing unit for inputting cut information, usage information reading unit for reading the usage information from the valuable information processor for storing the device information indicating the like, and the usage information the there is provided a non-contact type portable telephone system with IC card and the opposite device, characterized in that it consists of the second data transmitting and receiving unit comprises a to be transmitted to the first data transceiver.

In order to achieve the above object, the present invention provides, as a fifth aspect, valuable information used in an electronic transaction with an external device, a use history indicating the history of the electronic transaction, and a mobile phone. The usage conditions defined in the usage condition input unit provided in the above are defined as conditions for permitting the use of the IC card as geographical and temporal factors, transaction content factors relating to transaction details, and history factors relating to the usage history , and A first storage unit that stores the history information, a history management unit that generates the history information and stores the history information in the first storage unit, and a first user authentication that performs user authentication using the usage condition and the usage history And a first data transmission / reception unit that transmits and receives information by non-contact communication between the data transmission / reception unit of the external device, and is incorporated in the mobile phone. A user authentication method of the card, the first memory means, a step of storing the use condition and the use history, the history management unit, the valuable information stored in the first storage unit each but to be updated, the step of updating and storing the utilization history, the first user authentication unit, the usage rule reading step of reading the said use condition and the usage history is memorize in the first storage means And a usage information acquisition step for acquiring usage information indicating a geographical / temporal situation in which an electronic transaction is performed and transaction contents, transmitted from the external device, the first user authentication unit; first user authentication unit, each of the geographical and temporal situation wherein the use information indicates and transaction contents and the use history, the geographic and temporal factors and the transaction contents factors and the history said use condition is shown Depending on whether or not to meet this connection, there is provided a user authentication method of contactless IC card, characterized in that it comprises a user authentication step of judging the success of user authentication, the.

In order to achieve the above object, as a sixth aspect, the present invention is input from valuable information used in an electronic transaction with an external device and a use condition input unit provided in a mobile phone. , the user conditions by using a first storage means for storing the use condition that is defined as a transaction contents factors on the geographical and temporal factors and transaction contents, and the utilization conditions of use of the IC card is permitted a first user authentication unit for authentication has a first data transmitting and receiving unit for transmitting and receiving information by non-contact communication with the data transceiver unit included in the external counter device, a password or a fingerprint or the like Built in a cellular phone comprising a personal information input unit for inputting personal information, a third storage means for storing the personal information, and a second user authentication unit for performing user authentication using the personal information. Non-contact A user authentication method for a tactile IC card, wherein when the personal information is not input via the personal information input unit, the first storage means stores the usage conditions. And the first user authentication unit reads the use condition stored in the use condition storage step, and the first user authentication unit is transmitted from the external device, And a usage information acquisition step of acquiring usage information indicating the geographical and temporal situation and transaction content in which the electronic transaction is carried out, and the first user authentication unit displays the geographical and temporal information indicated by the usage information each situation and transaction contents, depending on whether or not to conform to the geographical and temporal factors and the transaction contents cause said use condition is shown, performs a user authentication process of determining the success or failure of the user authentication, the When the personal information is input via the personal information input unit, the second user authentication unit includes the personal information and the personal information stored in the third storage unit in advance before user authentication. The non-contact type IC card user authentication method is characterized by performing a step of determining success or failure of user authentication based on whether or not their contents match.

In a sixth aspect of the present invention, only when the user authentication by the second user authentication section was observed, further it is good preferable to have a process that allows inputs the use condition by the use condition input unit .

In the fifth and sixth aspects of the present invention, it is preferable that the geographical and temporal factors indicate a place and a time zone in which use of the IC card is permitted .

In the fifth, the sixth aspect of the present invention, the use information, the electronic transaction is performed and the apparatus information indicating the installation location or the like of an external counter device, by the utilization time when the IC card utilized preferably shows geographical and temporal shape situation.

The fifth, the sixth aspect, transmits the pre-Symbol use information from the external facing device to the first data transmitting and receiving unit provided in the IC card, said first data transceiver of the present invention but the use information the transmitted, and pull pass score in the first user authentication unit is preferred.

In order to achieve the above object, the present invention provides, as a seventh aspect, a user authentication program for causing a computer to execute the user authentication method for a contactless IC card according to the fifth or sixth aspect of the present invention. To do.

  According to the present invention, in a non-contact type IC card, the use condition registered in advance by the user is compared with the use information of the card, and the success or failure of the user authentication is determined based on whether or not the contents match. This eliminates the need for complicated input operations such as password, personal information, or fingerprint input using the user interface when the user uses an IC card, and prevents the use of third parties other than the user. It becomes possible to do.

  In the non-contact type IC card, the best mode for carrying out the present invention is to use a first storage means for storing a use condition input from a use condition input unit provided in a mobile phone, and to use the use condition. And a first user authentication unit that performs user authentication, reads the use condition stored in the first storage unit, and acquires the use information transmitted from the external device Then, the read use condition and the obtained use information are collated, and whether or not the user authentication is successful is determined based on whether or not the contents match, thereby forming a non-contact type IC card.

(First embodiment)
Preferred embodiments of the present invention will be described below in detail with reference to the accompanying drawings. The embodiments described below are preferable specific examples of the present invention, and thus various technically preferable limitations are given. However, the scope of the present invention is particularly limited in the following description. Unless otherwise described, the present invention is not limited to these embodiments.

  First, a schematic configuration of the mobile phone system with a contactless IC card according to the present embodiment will be described with reference to FIG. FIG. 1 is a configuration block diagram of a mobile phone system with a non-contact type IC card according to the present embodiment. As shown in FIG. 1, a mobile phone system 100 with a contactless IC card according to this embodiment includes a mobile phone 1 and a counter device 3. The mobile phone 1 includes a use condition input unit 11 and an IC card 2.

The IC card 2 includes a user authentication unit 21, a data transmission / reception unit 22 that transmits / receives data to / from the opposite device 3, and a tamper resistant memory 23. Opposing device 3, valuable information processing unit 31 for processing valuable information such as point information and electronic ticket Puribeido, storage memory 32 which equipment information is stored, and valuable information after the valuable information processing unit 31, IC A usage information reading unit 33 that reads out the device information from the storage memory 32 and a data transmission / reception unit 34 that transmits / receives data to / from the IC card 2 are provided.

Next, the operation of the mobile phone system with a non-contact type IC card of this embodiment will be described below with reference to the accompanying drawings. First, as shown in FIG. 1, the user of the IC card 2 mounted on the mobile phone 1 makes the use of the IC card 2 to the use condition input unit 11 of the mobile phone 1 in advance by key operation of the mobile phone 1. Enter the terms of use. Since the input of the use condition is a key for user authentication, it is assumed that the user condition can be input after authentication by password authentication or the like so that only the user himself can write. Use conditions, the use of the location of the IC card 2, the available time zone, and, using the contents or Ranaru.

  For example, when the IC card 2 is used as electronic money in a convenience store or the like, the store information of the convenience store as a use place, the time zone in which the store is frequently used as the available time zone, the upper limit of the purchase price as the usage content, Purchased varieties are registered as usage conditions. In addition, when the IC card 2 is used as a prepaid ticket for transportation, the name of the station to be used as a use place, the time zone in which the station is frequently used as a usable time zone, and the entry / exit distinction as the usage content are used. Registered as a condition.

Next, an operation in a scene where the IC card 2 actually mounted on the mobile phone 1 is used will be described below. First, the valuable information processing unit 31 of the counter device 3 prepares usage information when the IC card 2 is used. For example, when the IC card 2 is used as electronic money in a convenience store or the like, the opposite device 3 is a POS cash register, and purchase information, purchase price, etc. are included in the usage information, and the IC card 2 is used for transportation. when used as the Prevailing Ido ticket, the opposing device 3 is an automatic ticket gate, admission for, including Murrell, such as for the contestants is to use information.

Therefore, when holding the IC card 2 mounted in the mobile phone 1 to the opposing device 3, it transmits and receives data with the data transceiver 22 of Lud over data transmission and reception unit 34 and the IC card 2 Yusuke the opposing device 3 Done. The operation of the entire mobile phone system with a non-contact type IC card according to this embodiment will be described below while showing the sequence with reference to FIG.

  First, the usage information includes the device information of the installation location of the opposing device 3 read from the storage memory 32 of the opposing device 3, the usage time at the time of use and the usage read from the valuable information processing unit 32 of the opposing device 3. Content. Then, the usage information reading unit 33 of the opposite device 3 reads out the usage information from the storage memory 32 and the valuable information processing unit 31 and delivers it to the data transmitting / receiving unit 34. Then, the usage information is transmitted from the data transmitting / receiving unit 34 to the data transmitting / receiving unit 22 of the IC card 2 (step 101).

Next, the data transmitting / receiving unit 22 of the IC card 2 that has received the usage information passes the usage information to the user authentication unit 21. Then, the user authentication unit 21 that has received the usage information compares the usage conditions stored in the tamper resistant memory 23 with the usage information sent from the data transmitting / receiving unit 22, and their contents match. In this case, the user authentication is successful for the data transmitting / receiving unit 22 and the use of valuable information stored in the tamper resistant memory 23 of the IC card 2 is permitted.

Next, the data transmission / reception unit 22 of the IC card 2 makes the data transmission / reception unit 34 of the opposite device 3 use the IC card 2 when the availability information of the valuable information and the content of the determination result are available. And valuable information stored in the tamper resistant memory 23 (step 102). Here, valuable information is information such as the balance of electronic money and prepaid tickets, the remaining frequency, and entry and exit records for prepaid tickets. And transmitted to the data transmitting / receiving unit 34 of the opposite apparatus 3.

  The data transmitting / receiving unit 34 of the opposite device 3 looks at the result of determining whether or not the valuable information can be used, and if it cannot be used, determines that an appropriate user does not have a valid IC card 2 and stops the subsequent processing. . Further, if the determination result of whether or not the valuable information can be used is available, the data transmission / reception unit 34 of the opposite device 3 hands over the valuable information transmitted from the data transmission / reception unit 22 of the IC card 2 to the valuable information processing unit 31.

  Next, the valuable information processing unit 31 that has received the valuable information performs processing according to the service on the valuable information, creates write information for updating the valuable information on the IC card 2, and creates the created valuable information. The update write information is delivered to the data transmitter / receiver 34. For example, when the IC card 2 is used as electronic money in a convenience store or the like, a settlement process is performed by the valuable information processing unit 31, and the new balance after the processing is used as the write information for updating the valuable information. To be handed over. In the case of prepaid ticket entry processing, the new balance and the entry record from which the initial deduction amount has been subtracted are delivered to the data transmitting / receiving unit 34 as valuable information update write information.

  Next, the data transmission / reception unit 34 of the opposite device 3 sends the above-described valuable information update write information and valuable information update write request information received from the valuable information processing unit 31 to the data transmission / reception unit 22 of the IC card 2. Transmit (step 103). The data transmitting / receiving unit 22 of the IC card 2 that has received the write information for updating the valuable information and the write request information for updating the valuable information writes the write information for updating the valuable information into the tamper-resistant memory 23, and then the data of the opposite device 3. Write completion information of the valuable information update write information is transmitted to the transmission / reception unit 34 (step 104).

  As described above, according to the mobile phone system with the contactless IC card of the present embodiment, the usage information of the IC card 2 read by the usage information reading unit 33 of the opposite device 3 and the user in advance, The user condition is compared with the use condition input from the use condition input unit 11 of the mobile phone 1 and whether or not the contents of the use information and the use condition are matched is authenticated.

  That is, according to the present embodiment, the usage information reflecting the behavior of the user who uses the IC card 2 becomes an input operation of a user authentication key, and only for user authentication such as password input and fingerprint input. The effect that the operation | movement performed to can be abbreviate | omitted can be acquired. Further, the use condition is information input by the user himself / herself and is secret information that a third party cannot know. Therefore, since it is possible to obtain an effect that only the user can use the IC card 2 meeting the above usage conditions, a secure mobile phone system with a contactless IC card can be realized. .

(Second Embodiment)
A non-contact type IC card mobile phone system according to this embodiment will be described below with reference to the accompanying drawings. FIG. 3 is a configuration block diagram of the mobile phone system with a contactless IC card according to the present embodiment. As shown in FIG. 3, the configuration of the mobile phone system with a contactless IC card according to the present embodiment is different from that of the mobile phone system with a contactless IC card according to the first embodiment shown in FIG. A history management unit 24 is added to the card 2.

  Next, the operation of the mobile phone system with a non-contact type IC card according to the present embodiment will be described with respect to the differences from the operation of the mobile phone system with a non-contact type IC card in the first embodiment. In addition, since the common part has already been demonstrated, description is abbreviate | omitted. As shown in FIG. 3, when the data transmitting / receiving unit 22 of the IC card 2 mounted on the mobile phone 1 performs writing for updating valuable information in the mobile phone system with a contactless IC card of this embodiment, the history The management unit 24 writes the usage history in the tamper resistant memory 23. Further, the user authentication unit 21 reads the use condition and the use history from the tamper resistant memory 23 and compares the use information sent from the opposite device 3 to determine whether or not the user authentication is successful.

As described above, according to the present embodiment, it is possible to set more detailed usage conditions by setting usage conditions including the usage history. For example, at least one of the daily usage count and the upper limit of the usage amount can be set. In addition, when there is an entry history of a certain railway company but there is no entry history, it is possible to set a usage condition that electronic money can be used only at a store in the station of the railway company.

(Third embodiment)
A non-contact type IC card mobile phone system according to this embodiment will be described below with reference to the accompanying drawings. FIG. 4 is a block diagram showing the configuration of the mobile phone system with a contactless IC card according to this embodiment. As shown in FIG. 4, the configuration of the mobile phone system with a contactless IC card according to the present embodiment is different from the configuration of the mobile phone system with a contactless IC card according to the first embodiment shown in FIG. Personal information input unit 12 for inputting personal information such as passwords and fingerprints, personal information input from personal information input unit 12, and personal information recorded in memory 14 A user authentication unit 13 that performs user authentication by collating information is added.

Next, the operation of the mobile phone system with a non-contact type IC card according to this embodiment will be described with respect to the difference from the operation of the mobile phone system with a non-contact type IC card in the first embodiment. In addition, since the common part has already demonstrated, description is abbreviate | omitted.
As shown in FIG. 4, in the mobile phone system with a contactless IC card according to the present embodiment, before the IC card 2 mounted on the mobile phone 1 is held over the opposite device 3, a password or Enter the user's personal information such as fingerprints. The user authentication unit 13 of the mobile phone 1 collates the personal information input from the personal information input unit 12 with the personal information registered in the memory 14 in advance, performs user authentication of the user, and uses the authentication result. Passability information is delivered to the user authentication unit 21 of the IC card 2.

  When the user authentication result received from the user authentication unit 13 of the mobile phone 1 is usable, the user authentication unit 21 of the IC card 2 stores the usage information transmitted from the opposite device 3 and the tamper resistant memory 23. It is determined that the usage can be performed without comparing the set usage conditions, and the user authentication result is delivered to the data transmission unit 22 of the IC card 2.

  As described above, according to this embodiment, user authentication using personal information such as a user's password and fingerprint is added to the first embodiment described above, so that it is registered in the use condition. Even when the IC card 2 is to be used in a non-use scene, the IC card 2 can be used.

Next, for comparison with the first to third embodiments described above, a service system using a general IC card and a mobile phone will be described below with reference to the accompanying drawings.
First, a service system using a general IC card will be described with reference to FIG. FIG. 5 is a configuration block diagram of a service system using a general IC card 2. Since the service system using the IC card 2 does not have a user interface, the service is provided without performing user authentication of the user.

  As shown in FIG. 5, when the IC card 2 is held over the opposite device 3, communication is performed between the data transmission / reception unit 22 of the IC card 2 and the data transmission / reception unit 34 of the opposite device 3. Is read from the tamper resistant memory 23 by the data transmitting / receiving unit 22 and sent to the counter device 3. In the counter device 3, the valuable information processing unit 31 processes the valuable information sent in response to the service, and if necessary, sends a request for rewriting the valuable information to the IC card 2, such as updating the remaining frequency, as data transmission / reception. This is performed on the IC card 2 through the unit 34.

  In the IC card 2, the data transmitting / receiving unit 22 rewrites valuable information in the tamper resistant memory 23 when receiving a rewrite request from the opposite device 3. As described above, in the use operation of the IC card 2 in the service system using the IC card 2, user authentication of the user holding the IC card 2 is not performed.

  Next, before making a call to a general mobile phone or using a mobile phone function such as browsing an address book or a schedule book, a personal identification number, password, etc. for user authentication of the user Various mechanisms have been implemented for entering. Further, there is a mobile phone that incorporates a fingerprint reader and performs user authentication using fingerprints.

  A user authentication mechanism in a general mobile phone will be described with reference to FIG. FIG. 6 is a configuration block diagram of a general mobile phone 1. As shown in FIG. 6, the personal input unit 12 inputs a personal identification number and a password, or when a fingerprint reader is used as the personal information input unit 12, the fingerprint is input. In the user authentication unit 13, the personal information registered in advance in the memory 14 and the personal information input from the personal information input unit 12 are collated to determine whether the mobile phone function unit 15 can be used. The mobile phone function unit 15 provides a function to the user only when the result of availability determination is obtained from the user authentication unit 13 and the result of availability is obtained.

1 is a configuration block diagram of a mobile phone system with a contactless IC card in a first embodiment to which the present invention is applied. FIG. It is a sequence diagram for demonstrating operation | movement of the whole mobile telephone system with a non-contact-type IC card in 1st Embodiment to which this invention is applied. It is a block diagram of the configuration of the mobile phone system with a non-contact type IC card in the second embodiment. It is a block diagram of the configuration of a mobile phone system with a non-contact type IC card in the third embodiment. It is a block diagram of a service system using a general IC card. It is a configuration block diagram of a general mobile phone.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Mobile phone 2 IC card 3 Opposite device 11 Usage condition input part 12 Personal condition input part 13 User authentication part 14 Memory 15 Mobile phone function part 21 User authentication part 22 Data transmission / reception part 23 Tamper-resistant memory 24 History management part 31 Valuable information processing Unit 32 Storage memory 33 Usage information reading unit 34 Data transmission / reception unit 100 Mobile phone system with contactless IC card

Claims (15)

Input from valuable information used in electronic transactions with an external device, usage history indicating the history of the electronic transaction, and a usage condition input unit provided in the mobile phone, allowing use of the IC card A first storage means for storing a usage condition defined as a historical / temporal factor and a transaction content factor relating to a transaction content and a history factor relating to the usage history ;
A history management unit that generates the history information and stores the history information in the first storage unit;
A first user authentication unit that performs user authentication using the use condition and the use history;
A first data transmission / reception unit that transmits and receives information by contactless communication with the external device;
An IC card built in the mobile phone,
The usage history, every time the valuable information stored in the first storage means the electronic transaction is updated by established, is updated and stored by the history management unit,
The first user authentication unit reads the usage conditions and the usage history stored in the first storage unit during an electronic transaction with the external opposing device, and reads the usage conditions and the usage history from the external opposing device. receiving the usage information indicating the geographical and temporal conditions and transaction contents electronic transaction is performed, and the usage history and geographical and temporal conditions and transaction content the usage information indicates that said first storing means by judged whether conform to each of the geographical and temporal factors and the transaction contents factors and said history factors defined in the usage rule read from, and characterized by determining the success or failure of the user authentication Non-contact IC card. 2. The contactless IC card according to claim 1, wherein the geographical and temporal factors indicate a place and a time zone in which the use of the IC card is permitted . The usage information, billing, characterized in that indicating the device information of the installation location or the like of the external facing devices, the geographical and temporal shape situation that the electronic transaction is implemented by a usage time of time during IC card use Item 3. A contactless IC card according to item 1 or 2.   4. The contactless device according to claim 1, wherein the usage information is received by the first data transmission / reception unit, and the received usage information is delivered to the first user authentication unit. 5. IC card. The use condition input unit;
The non-contact type IC card according to any one of claims 1 to 4,
A mobile phone with a contactless IC card, characterized by comprising: The valuable information used in electronic transactions with external devices and the conditions for permitting the use of IC cards input from the usage condition input unit provided on the mobile phone are geographical and temporal factors and transactions. Between the first storage means for storing the use conditions defined as transaction content factors related to the contents, the first user authentication unit for performing user authentication using the use conditions, and the external counter device A first data transmitting / receiving unit that transmits and receives information by non-contact communication; and a non-contact IC card comprising:
A personal information input section for entering personal information such as passwords and fingerprints;
Third storage means for storing the personal information;
A second user authentication unit that performs user authentication using the personal information, and the mobile phone comprising:
The first user authentication unit reads out the use conditions stored in the first storage unit when performing an electronic transaction with the external device, and the geographical / time when the electronic transaction is performed. situations and receives the usage information indicating the transaction details from the outside of the opposite device, the geographic showing the use condition of geographical and temporal conditions and transaction content the usage information indicates is read from the first storage unit ・ Determine success or failure of user authentication by determining whether or not the time factor and the transaction content factor are matched.
When the personal information is input by the personal information input unit, the second user authentication unit includes the personal information and personal information stored in the third storage unit in advance before user authentication. And the success or failure of user authentication is judged by whether or not those contents match.
When the electronic trading, the non-contact type IC, which comprises carrying out the when the second authentication operation by the user authentication unit is not performed, the Ruyu chromatography The authentication by the first user authentication unit Mobile phone with card.   7. The mobile phone with a non-contact type IC card according to claim 6, wherein the use condition can be input by the use condition input unit only when user authentication by the second user authentication unit is permitted. . A mobile phone with a non-contact type IC card according to any one of claims 5 to 7,
Use information read out the second memory means for storing device information indicating the installation location or the like of the external counter device, valuable information processor for inputting a pre-cut information, the usage information from the valuable information processor a reading unit, and the opposing device having a second data transceiver, for transmitting the usage information to the first data transmitting and receiving unit,
A mobile phone system with a non-contact type IC card, comprising: Input from valuable information used in electronic transactions with an external device, usage history indicating the history of the electronic transaction, and a usage condition input unit provided in the mobile phone, allowing use of the IC card A first storage means for storing a usage condition defined as a historical / time factor and a transaction content factor relating to transaction content and a history factor relating to the usage history ;
A history management unit that generates the history information and stores the history information in the first storage unit;
A first user authentication unit that performs user authentication using the use condition and the use history;
A first data transmission / reception unit that transmits / receives information to / from a data transmission / reception unit provided in an external device by a non-contact type IC card user authentication method built in the mobile phone There,
The first storage means storing the usage conditions and the usage history;
A step wherein the history management unit, the valuable information stored in the first storage means each time it is updated, to update and store the use history,
Wherein the first user authentication unit, the usage rule reading step of reading the said use condition and the use history is memorize the first storage means,
A usage information acquisition step in which the first user authentication unit acquires usage information indicating a geographical / temporal situation in which an electronic transaction is performed and transaction content, transmitted from the external device,
The first user authentication unit includes a geographical / temporal situation and transaction content indicated by the usage information, and a usage history corresponding to the geographical / temporal factor and the transaction content factor indicated by the usage condition , and And a user authentication step of determining whether or not the user authentication is successful depending on whether or not the history factor is met . A user authentication method for a non-contact type IC card, comprising: The valuable information used in electronic transactions with external devices and the conditions for permitting the use of IC cards input from the usage condition input unit provided on the mobile phone are geographical and temporal factors and transactions. first storage means and the first user authentication unit that performs user authentication by using the usage condition, data transmission and reception with an external facing device which stores a usage rule which is defined as the transaction contents factors related content parts has a first data transmitting and receiving unit for transmitting and receiving information by non-contact communication with a personal information input unit for inputting personal information such as a password or a fingerprint, a third for storing the personal information A non-contact type IC card user authentication method built in a mobile phone comprising: a storage means; and a second user authentication unit that performs user authentication using the personal information ,
When the personal information is not input via the personal information input unit,
A use condition storage step in which the first storage means stores the use conditions;
A usage condition reading step in which the first user authentication unit reads the usage conditions stored in the usage condition storage step;
The first user authentication unit performs a usage information acquisition step of acquiring usage information indicating a geographical / temporal situation in which an electronic transaction is performed and a transaction content, transmitted from the external device,
Whether the first user authentication unit matches each of the geographical / temporal situation and transaction content indicated by the usage information with the geographical / time factor and transaction content factor indicated by the usage conditions. And performing a user authentication step of determining success or failure of user authentication,
When the personal information is input via the personal information input unit, the second user authentication unit stores the personal information and personal information stored in advance in the third storage unit before user authentication. A user authentication method for a non-contact type IC card, wherein a step of determining success or failure of user authentication based on whether or not their contents match is performed.   The contactless IC according to claim 10, further comprising a step of allowing the use condition input unit to input the use condition only when user authentication by the second user authentication unit is approved. Card user authentication method. 12. The contactless IC card user authentication method according to claim 9, wherein the geographical / temporal factor indicates a place and a time zone in which use of the IC card is permitted. . The usage information, billing, characterized in that indicating the device information indicating the installation location or the like of the external facing devices, the geographical and temporal shape situation that the electronic transaction is implemented by a usage time when the IC card utilized Item 13. The user authentication method for a non-contact type IC card according to any one of Items 9 to 12. The usage information is transmitted from the external device to the first data transmission / reception unit provided in the IC card,
The contactless IC card according to any one of claims 9 to 13, wherein the first data transmitting / receiving unit delivers the transmitted usage information to the first user authenticating unit. User authentication method.   A user authentication program that causes a computer to execute the user authentication method for a non-contact type IC card according to any one of claims 9 to 14.

Images