JP5026249B2 - IC card issuing system and IC card issuing method - Google Patents

Description

  The present invention relates to an IC card issuing system and an IC card issuing method including an issuing terminal capable of performing IC card locking and a management server capable of communicating with a user terminal.

  When a service provider provides a service to a user, the service provider issues an IC card (including a SIM card) to the user, and the service provider provides the service only to the user who has the IC card. There is. In this case, when a service provider provides a service to a new user, an IC card must be issued.

  IC card issuance can be divided into a primary issuance process and a secondary issuance process. In the primary issue, application file creation, common data writing, and the like are performed. In the secondary issue, IC card personalization (such as updating the IC card data to a value corresponding to the user or writing a value corresponding to the user to the IC card) is performed. Here, the primary issuance is usually carried out by the card vendor. However, when the card vendor requests the primary issuance and the secondary issuance, it provides the card vendor with the user information required for the IC card personalization. It will be necessary, and it takes time for primary issue and secondary issue. Therefore, in many cases, the secondary issue is performed by a service provider using an issue terminal placed in an IC card issue center or a store in a city (for example, a supermarket or a convenience store).

Patent Document 1 discloses a technique related to secondary issue of an IC card. Non-Patent Document 1 discloses a technology related to prevention of unauthorized use after the start of use of an IC card.
JP 2001-266076 A http://www.nttdocomo.co.jp/service/anshin/lock/index.html

  In such a conventional technology, if the IC card is stolen during the transportation of the IC card from the service provider to the user in the primary issue or secondary issue process of the IC card, it was stolen by a third party. The IC card may be used, which is not preferable from the viewpoint of security.

  The present invention has been made to solve the above-described problems, and an object thereof is to provide an IC card issuing system and an IC card issuing method capable of preventing damage due to theft of an IC card.

In order to achieve this object, in the present invention, in the IC card issuing system comprising an issuing terminal capable of locking the IC card and a management server capable of communicating with the user terminal, the issuing terminal is And a card ID transmitting means for transmitting a card ID, which is information for identifying the IC card, to the management server, the management server including a queue information storage unit for storing queue information including the card ID; When the card ID is transmitted from the user terminal, an unlock execution determination unit that determines whether or not the queue information that has not been unlocked including the card ID exists, and the unlock release execution determination unit includes: When the IC card is determined to exist, the IC card is connected to the IC card based on the queue information corresponding to the card ID transmitted from the user terminal. Unlocking execution means for unlocking via the user terminal, a personalization information storage unit for storing personalization information which is information necessary for executing secondary issue of the IC card, and When it is determined that there is an unlock execution determination means, the IC card is secondarily issued via the user terminal based on the personalization information corresponding to the card ID transmitted from the user terminal. Secondary issuance executing means , wherein the IC card lock is a lock of an area on the IC card .

In an IC card issuance method in an IC card issuance system comprising an issuance terminal capable of locking an IC card and a management server capable of communicating with a user terminal, the issuance terminal is connected to the management server. A card ID transmitting step for transmitting a card ID as information for identifying the IC card, a queue information storing step for storing the queue information in which the management server includes the card ID, and the management server including the user When the card ID is transmitted from the terminal, an unlock execution determination step for determining whether or not the queue information including the card ID that has not been unlocked exists, and the management server performs the lock release execution determination. When it is determined that it exists in the step, the above-mentioned corresponding to the card ID transmitted from the user terminal An unlock execution step for unlocking the IC card via the user terminal based on the queue information, and information necessary for the management server to execute the secondary issue of the IC card. Based on the personalization information corresponding to the card ID transmitted from the user terminal when it is determined to exist in the personalization information storage step for storing the personalization information and the unlocking execution determination step. A secondary issue execution step of executing secondary issue of the IC card via the user terminal, and the lock of the IC card is a lock of an area on the IC card. .

  In the present invention, since the IC card is unlocked when the user inserts the IC card into the user terminal, damage due to the theft of the IC card can be prevented.

  In addition, when the IC card is locked to an area on the IC card, when it is not necessary to lock / unlock the entire IC card, the management server executes the lock / unlock of the area on the IC card. It becomes possible to do.

  First, the outline of the IC card issuing system according to the present invention will be described with reference to FIG. As shown in the figure, this IC card issuing system includes an issuing terminal 101, a user terminal 102, a management server 103, a communication network 104, and a communication network 105. The issuing terminal 101 and the management server 103 are connected by a communication network 104. The user terminal 102 and the management server 103 are connected by a communication network 105.

  The issuing terminal 101 is a device that issues an IC card, which is a tamper-resistant device.

  The user terminal 102 is, for example, a personal computer (PC), and includes a CPU, ROM, RAM, hard disk, display, keyboard, mouse, and the like. In particular, a browser program is stored in the hard disk. Furthermore, a mobile terminal, a mobile phone with an Internet connection function, a PDA, and the like are included.

  The management server 103 is a server computer, for example, and includes a CPU, ROM, RAM, hard disk, display, keyboard, mouse, and the like. It also performs the main operation of the IC card issuing system. However, it is not necessary to be physically single, and a configuration of processing in a distributed manner may be adopted. The communication network 104 and the communication network 105 are communication networks such as the Internet, a public network, a mobile communication network, and a dedicated line.

  The issuing terminal 101 is a terminal that executes primary issue of an IC card. The user terminal 102 is a terminal that transmits a card ID to the management server 103, and is managed by a user who applies for issuance of an IC card. The management server 103 is a server that performs IC card unlocking and secondary issuance based on the card ID received from the user terminal 102, and is managed by the person who performs the IC card secondary issuance. Here, the secondary issue is writing personalization information including a card ID, a name, a user ID indicating user identification information, and the like on the IC card.

  The communication network 104 is used by the issuing terminal 101 to transmit a card ID indicating IC card identification information to the management server 103. The communication network 105 is for the user terminal 102 to transmit a card ID to the management server 103.

  Next, an outline of processing in the IC card issuing system according to the present invention will be described with reference to FIG.

  First, a user who wishes to issue an IC card applies for issuing an IC card by inputting necessary information (address, name, age, occupation, etc.) on the website or application form. Here, information input to the website or application form by the user is stored in the management server 103. A service provider that has received an application for issuing an IC card from a user requests the card vendor to issue a primary IC card. The card vendor who has received the request for the primary issue of the IC card performs application file creation, application installation, common data writing, etc. on the IC card by the issue terminal 101, locks the IC card, and gives the user the primary Send the issued IC card. Here, the card vendor sends the IC card issued primarily to the user. However, the present invention is not limited to this, and the IC card issued primarily may be sent to the user via the service provider.

  The issuing terminal 101 transmits the card ID of the IC card issued primarily to the management server 103. The user who has received the IC card issued primarily from the card vendor inserts the IC card into the IC card insertion slot of the user terminal 102. When the IC card is inserted into the IC card insertion slot of the user terminal 102, the card ID automatically read by the user terminal 102 is transmitted to the management server 103.

  When the management server 103 that has received the card ID from the user terminal 102 has queue information that has not been unlocked including the card ID on the management server 103, the card ID is received via the user terminal 102. A secure channel (encrypted communication channel) using a card key is established for the IC card, and unlocking and secondary issuance are executed. On the other hand, if there is no unreleased queue information including the card ID on the management server 103, the lock release and the secondary issue are not executed for the IC card of the card ID.

  Next, the configuration of the management server will be described with reference to FIG. As shown in the figure, the management server 103 includes a control unit 201 composed of a CPU 202, a ROM 203, and a RAM 204, an input device 205, an output device 206, an input / output control circuit 207, and a management server storage unit 208. These components are connected to each other by a system bus.

  The control unit 201 executes various arithmetic processes for realizing the management server 103. The CPU 202 is a central processing unit, and executes transfer and arithmetic processing based on a main program stored in the ROM 203, a program developed in the RAM 204, temporarily stored data, and the like.

  The input device 205 is a data input device such as a keyboard and a mouse. Data can be input to the management server storage unit 208 by the input device 205. The output device 206 is a display device such as an LCD or CRT, or a printer. The input / output control circuit 207 performs control for executing data input / output with an external device.

  The management server storage unit 208 is a storage unit that stores data, and includes a memory, a hard disk, and the like. The management server storage unit 208 includes at least a queue information DB 209 (Database: database, queue information storage unit 209), a personalization information DB 210 (personalization information storage unit), and a card information DB 211.

  As shown in FIG. 3, the queue information DB 209 includes queue information including a card ID indicating IC card identification information, a lock status indicating whether the IC card is unlocked, and secondary issue processing contents. Stored. Here, the queue information DB 209 is searched based on the card ID. The contents of the secondary issue process in the queue information DB 209 may be empty (NULL) depending on the card ID. In this case, the secondary issue process is not executed for the IC card.

  Here, for example, when a card vendor sends an IC card issued primarily to a user, the card ID, lock status (unlocked), secondary issue processing content, etc. are registered. For example, when it is determined that the IC card has been stolen, if queue information corresponding to the card ID is registered in the queue information DB 209, it is deleted. The data stored in the queue information DB 209 is used when performing IC card unlocking and secondary issuance.

  The personalization information DB 210 stores personalization information including a card ID, a name, a user ID indicating user identification information, and the like. Here, the personalization information DB 210 is searched based on the card ID, and it is not always necessary to store only one personalization information for one card ID, but a plurality of personalization information for one card ID. May be stored.

  In addition, information input to the website or application form by the user at the time of application for issuing an IC card is stored as personalization information in the personalization information DB 210 (personalization information storage unit). The data stored in the personalization information DB 210 is used when the secondary issue of the IC card is executed.

  The card information DB 211 stores card information including a card ID, a card key, and the like. Here, the card key is a key for performing encryption processing such as RSA or Triple DES. Further, this card key is written into the IC card by the primary issue of the IC card. Therefore, when the primary issuer generates the card key itself, it is necessary to notify the service provider (secondary issuer) that manages the management server 103 of the card key together with the card ID. However, this is not necessary when the service provider (secondary issuer) generates a card key and provides it to the primary issuer.

  Subsequently, the IC card issuing system according to the present invention will be described with reference to FIG. As shown in the figure, the issuing terminal 101 includes a card issuing unit 401, a lock executing unit 402, and a card ID transmitting unit 403. The user terminal 102 includes a card monitoring unit 404, a card ID reading unit 405, and a card ID transmission unit 406. In addition, the management server 103 includes a management server storage unit 208, a lock release execution determination unit 407, a lock release execution unit 408, and a secondary issue execution unit 409.

Card issuing means 401 issues an IC card primarily. The lock execution unit 402 executes lock on the area on the IC card. The card ID transmission means 403 transmits the card ID of the IC card that is primarily issued to the management server 103.

  The card monitoring unit 404 monitors the IC card insertion slot of the user terminal 102. Further, when an IC card is inserted into the IC card insertion slot of the user terminal 102, the card ID reading unit 405 is notified of that fact. The card ID reading unit 405 reads the card ID from the IC card inserted into the IC card insertion slot of the user terminal 102.

  The card ID transmission unit 406 transmits a card ID to the management server 103. Here, the timing at which the card ID transmission means 406 transmits the card ID to the management server 103 is not limited to when the IC card is inserted into the IC card insertion slot of the user terminal 102, but the user It may be when a specific operation is performed on the terminal 102. When the management server 103 receives a card ID from the user terminal 102, the lock release execution determination unit 407 determines whether queue information including the card ID that has not been unlocked exists in the queue information DB 209 of the management server storage unit 208. Judge whether or not. In other words, the lock release execution determination unit 407 searches the queue information DB 209 of the management server storage unit 208 based on the card ID received by the management server 103 from the user terminal 102, and releases the lock including the card ID. It is determined whether or not there is queue information that has not been processed. Further, it is confirmed whether or not the card key of the queue information including the card ID is correctly registered.

When the lock release execution means 408 determines that the lock release execution determination means 407 exists, the lock release execution means 408 executes the lock release for the area on the IC card. The lock release execution means 408 holds and manages the lock release command.

  When the secondary issue execution unit 409 determines that the lock release execution determination unit 407 exists, the secondary issue execution unit 409 executes the secondary issue of the IC card. That is, the secondary issue execution means 409 stores the secondary issue processing contents of the queue information from the queue information DB 209 of the management server storage unit 208 based on the card ID received from the user terminal 102 by the management server 103. The personalization information is searched from the personalization information DB 210 of the unit 208, and the secondary issue of the IC card with the card ID is executed based on the secondary issue command, the secondary issue processing content of the queue information, and the personalization information. To do. The secondary issue execution unit 409 holds and manages secondary issue commands.

  Next, the processing in the IC card issuing system according to the present invention, that is, the IC card issuing method according to the present invention will be described with reference to FIGS.

  First, information applied to the website or application form by the user at the time of application for issuing an IC card is stored as personalization information in the personalization information DB 210 of the management server 103 (personalization information storage step). .

First, the card issuing means 401 of the issuing terminal 101 primarily issues an IC card (S501). Next, the lock execution means 402 of the issuing terminal 101 executes lock on the area on the IC card (S502). Here, the IC card on which the primary issue and lock have been executed is sent to the user by the lock of the IC card.

  Next, the card ID transmission means 403 of the issuing terminal 101 transmits the card ID of the IC card that has been primarily issued to the management server 103. (S503, card ID transmission step). The queue information including the card ID transmitted to the management server 103 is stored in the queue information DB 209 of the management server 103 (queue information storage step).

  Next, when the IC card is inserted into the IC card insertion slot of the user terminal 102 by the user who sent the IC card (S504), the card monitoring means 404 and the card ID reading means 405 of the user terminal 102 The card ID is read from the IC card inserted into the IC card insertion slot of the user terminal 102 (S505).

  Next, the card ID transmission means 406 of the user terminal 102 transmits the read card ID to the management server 103 (S506). Here, the timing at which the card ID transmission means 406 of the user terminal 102 transmits the card ID to the management server 103 is not limited to when the IC card is inserted into the IC card insertion slot of the user terminal 102. It may be when the user performs a specific operation on the user terminal 102. Next, the lock release execution determination unit 407 of the management server 103 searches the queue information from the queue information DB 209 of the management server storage unit 208 based on the card ID received by the management server 103 from the user terminal 102, and the card. It is determined whether or not there is unreleased queue information including an ID (S507, S508, lock release execution determination step). Further, it is confirmed whether or not the card key of the queue information including the card ID is correctly registered.

Next, when the lock release execution means 408 of the management server 103 determines that the lock release execution determination means 407 exists, the lock release execution means 408 executes the lock release for the area on the IC card (S509, lock release execution step). That is, when the lock release execution means 408 of the management server 103 determines that the lock release execution determination means 407 exists, the lock release execution means 408 determines the queue of the management server storage unit 208 based on the card ID received from the user terminal 102 by the management server 103. The queue information is searched from the information DB 209, and the lock release is executed for the IC card of the card ID based on the lock release command of the queue information (S509, lock release execution step).

  Next, when the secondary issue execution means 409 of the management server 103 determines that the lock release execution determination means 407 exists, the secondary issue execution means 409 executes the secondary issue of the IC card (S510, secondary issue execution step). That is, the secondary issue execution means 409 stores the secondary issue processing contents of the queue information from the queue information DB 209 of the management server storage unit 208 based on the card ID received from the user terminal 102 by the management server 103. The personalization information is searched from the personalization information DB 210 of the unit 208, and the secondary issue of the IC card with the card ID is executed based on the secondary issue command, the secondary issue processing content of the queue information, and the personalization information. (S510, secondary issue execution step).

  Through such a series of processes, the primary issue and secondary issue of the IC card are completed, and the user who has received the primary issue and the secondary issue of the IC card uses the IC card to receive services from the service provider. Can receive.

  In the above-described IC card issuing system and IC card issuing method, when the user inserts the IC card into the user terminal 102, the IC card is unlocked, thereby preventing damage caused by theft during IC card transportation or the like. In addition, since it is confirmed whether or not the card key is correctly registered in the management server 103, the IC card management work (secondary channel using the card key) (Equipped with application, data update, card lock, etc.) executed after establishing (encryption communication path) can be performed smoothly. Further, the user can receive the secondary issue of the IC card simply by inserting the IC card into the IC card insertion slot of the user terminal 102. In addition, since the information entered on the website or application form by the user is registered as personalization information in the management server 103, the management server 103 can operate as an IC even if the operator of the management server 103 does not enter the personalization information. It becomes possible to execute the secondary issue of the card.

Further, since performing a lock unlocking region on the IC card, if you do not need the locking unlocking of the entire IC card, the management server 103 executes a lock unlocking region on the IC card Is possible.

  In the above-described embodiment, the secondary issue execution unit 409 of the management server 103 has a secondary issue command. However, the present invention is not limited to this, and the secondary issue execution unit 409 of the management server 103 has an unlock command. And commands other than secondary issue commands may be included. The commands used here are, for example, commands for executing application personalization (data registration / update), new application registration / personalization, other application registration, and application personalization already installed when an IC card is issued. It is.

  In this case, even when the management server 103 needs to execute a command other than the lock release or secondary issue command, the command registered in the management server 103 in advance can be executed on the IC card.

  In the above-described embodiment, the queue information is stored in the queue information DB 209 of the management server storage unit 208 and the personalization information is stored in the personalization information DB 210 of the management server storage unit 208. The queue information and personalization information may be stored in the queue information DB 209 of the management server storage unit 208.

  In this case, the management server storage unit 208 does not need to have the personalization information DB 210.

  In the embodiment described above, the IC card issuing system includes the communication network 104. However, the present invention is not limited thereto, and the IC card issuing system may not include the communication network 104.

  In this case, the issuing terminal 101 and the management server 103 can exchange information not offline but offline.

  Further, the management server 103 may be provided with queue information deletion means for deleting the queue information stored in the queue information DB 209 of the management server storage unit 208 based on the card ID.

  In this case, it is possible not to execute unlocking for an IC card that does not need to be unlocked.

  Further, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the scope of the present invention.

  That is, in the above-described embodiment, the configuration of one issuing terminal 101, one user terminal 102, and one management server 103 has been described. However, one or more issuing terminals, one or more user terminals are described. The present invention can be applied to the configuration of the management server.

1 is a schematic diagram of an IC card issuing system according to the present invention. It is a block diagram of a management server. It is a figure which shows an example of data of cue information DB, personalization information DB, and card information DB. 1 is a configuration diagram of an IC card issuing system according to the present invention. It is a flowchart which shows the process in the IC card issue system which concerns on this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 ... Issuing terminal 102 ... User terminal 103 ... Management server 104 ... Communication network 105 ... Communication network 209 ... Queue information DB
210 ... Personalization information DB
407 ... Unlock execution determination means 408 ... Unlock execution means 409 ... Secondary issue execution means

Claims (2)

In an IC card issuing system comprising an issuing terminal capable of locking an IC card and a management server capable of communicating with a user terminal,
The issuing terminal
A card ID transmitting means for transmitting a card ID, which is information for identifying the IC card, to the management server;
The management server
A queue information storage unit for storing queue information including the card ID;
When the card ID is transmitted from the user terminal, an unlock execution determining means for determining whether or not the queue information including the card ID that has not been unlocked exists;
When it is determined that the unlock execution determination means exists, the IC card is unlocked via the user terminal based on the queue information corresponding to the card ID transmitted from the user terminal. Unlocking execution means to be executed;
A personalization information storage unit for storing personalization information which is information necessary for executing the secondary issue of the IC card;
When it is determined that the unlocking execution determining means exists, the IC card is secondarily issued via the user terminal based on the personalization information corresponding to the card ID transmitted from the user terminal. A secondary issue execution means for executing ,
The IC card issuing system , wherein the lock of the IC card is a lock of an area on the IC card. In an IC card issuance method in an IC card issuance system comprising an issuance terminal capable of executing an IC card lock and a management server capable of communicating with a user terminal,
A card ID transmission step in which the issuing terminal transmits a card ID, which is information for identifying the IC card, to the management server;
A queue information storage step in which the management server stores queue information including the card ID;
An unlock execution determination step for determining whether or not there is the queue information that has not been unlocked including the card ID when the management server transmits the card ID from the user terminal;
When the management server determines that it exists in the unlock execution determination step, the user terminal is connected to the IC card based on the queue information corresponding to the card ID transmitted from the user terminal. An unlocking execution step for performing unlocking via
A personalization information storage step for storing personalization information, which is information necessary for the management server to execute secondary issue of the IC card;
When it is determined in the unlocking execution determining step, the IC card is issued secondarily through the user terminal based on the personalization information corresponding to the card ID transmitted from the user terminal. A secondary issue execution step to execute ,
The IC card issuing method, wherein the lock of the IC card is a lock of an area on the IC card.

Images