JPH01173163A - Ic card system - Google Patents

Abstract

PURPOSE:To surely prevent the foul use of IC cards by writing the transaction data and a transaction end code onto an IC card at a work terminal and then clearing the transaction end code and confirming the transaction data at a personal terminal respectively. CONSTITUTION:Both personal and work terminals are used for an IC card. At a card transaction, the transaction data is written onto the IC card together with a transaction end code when no transaction end code is received from the work terminal and at the same time the propriety of the terminal is confirmed to the card. Then the card is loaded into the personal terminal and the propriety of the terminal is confirmed to the card. Thus the transaction end code is cleared and the transaction data can be confirmed. Thus it is possible to surely prevent the foul use of the IC cards and the security is improved for use of the cards.

Description

[Detailed Description of the Invention] [Technical Field of the Invention] This invention provides an I/O system for preventing unauthorized use of an IC card.
Regarding the C card system.

[Prior art and its problems] In recent years, it has become known as the cashless era, and by using a card issued by a credit card company, it has become possible to purchase products without handling cash.

By the way, plastic cards, embossed cards, magnetic striped cards, and the like are known as cards that have been used so far, but since these cards are easy to forge due to their structure, unauthorized use has become a problem.

Therefore, as a card to solve this problem, an information card, a so-called IC card, was devised that has a PIN code built into it so that the PIN code cannot be read easily from the outside. An IC card system that combines an IC card with a terminal is being put into practical use.

By the way, in such an IC card system, safety in the use of the IC card is extremely important, and therefore, the following measures are taken to prevent unauthorized use of the card.

In other words, when actually using the card to purchase a product, place the card in the terminal, enter your personal identification number rP I NJ in this state, and compare it with the rPIN"J already written on the card. If they match, the card will be allowed to be used; if they don't match, the user will be allowed to re-enter the PIN number rP I NJ a specified number of times, and if they still don't match, the card will not be used. However, even if I do this,
If your personal identification number rP I NJ is leaked to a third party for some reason, the result of card authentication cannot be guaranteed, the security of your card will be significantly compromised, and it will ultimately allow unauthorized use of your card. There was a risk that the

[Purpose of the invention]

This invention has been made in view of the above circumstances, and an object of the present invention is to provide an IC card system that can reliably prevent unauthorized use of an IC card and improve the security of card usage.

[Summary of the Invention] In the IC card system of the present invention, a personal terminal and a business terminal are used for the IC card, and there is no transaction completion code from the business terminal at the time of card transaction. When the validity is confirmed, the transaction data is written to the IC card along with the transaction code. After that, the IC card is attached to the personal terminal, and when the validity of the terminal for the IC card is confirmed, the transaction data is cleared. It is now possible to check parallel transaction data.

[Embodiments of the invention] An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 shows an IC card 1 used in the same embodiment. In the figure, 1a is the tC card main body, and this card main body 1a has the external dimensions specified by the ISO standard, has an IC circuit (described later) built inside, and is connected to the above IC circuit on one side. External connection terminal 1
It has b. Note that the IC is a magnetic stripe.

Next, FIG. 2 shows a personal terminal 2 into which such an IC card 1 is installed.

In the figure, 2a is a terminal main body, and the surface of this main body 2a has a keyboard 2b and a display section 2c. Here, the keyboard 2b has a "C" key, rACJ
key, numeric keys from "1" to "9", "・" key, "-"
key, "+" key, "x" key, "-" key, "+" key, rP I NJ key, "↑" key, "↓" key, r
It has an ENTJ key. The display section 2C also includes a character display section 2cl for 6 characters, and a number display section 2c2 for 12 digits.
have. On the other hand, on the back of the terminal body 2a,
It has guide grooves 2d along both longitudinal edges for mounting the above-mentioned IC card 1, and also has an external connection terminal 2e connected to the external connection terminal 1b of the IC card 1. Note that 2f is the lid of the battery compartment.

Next, FIG. 3 shows a business terminal 3 into which the IC card 1 is installed. In the figure, 3a is a terminal main body, and this terminal main body 3a is the above-mentioned IC.
It has a slit-shaped card mounting part 3b into which the card 1 is mounted. The terminal main body 3a has a keyboard 3c and a display section 3d on its surface. Here, the keyboard 3c includes numeric keys of "0" to "9",
It has a "*" key, a "#" key, a "cancel" key, and an "input" key. In addition, the display section 3d includes an amount display section 3dl.
and a procedure display section 3d2 for displaying operating procedures.

Next, FIG. 4 shows the circuit configuration of the IC card 1. In the figure, 11 is a system bus, and this system bus 11 includes a data ROM 12, an application R
An input controller 20 is connected via an OM 13, a system program ROM 14, a working RAM 15, a controller 16, a data memory controller 17, a comparator 18, an input buffer 19, and an output controller 22 is connected via an output buffer 21. Furthermore, a data input/output terminal Ilo is connected to the input controller 20 and the output controller 22.

Here, the data ROM 12 stores all operating conditions of the card itself, and these operating conditions are outputted as answer Φ2 reset data according to a predetermined format when the internal initialization of the card itself is completed. It has become. Application ROM
13 stores card type data indicating what kind of card this card is, and after setting initial parameters based on the above answer-to-reset data, predetermined data is stored when exchanging attributes with terminal 2 or 3. format and send it.

The system program ROM 14 includes various system programs as well as a code signal indicating whether or not the signal transmitted and supplied from the terminal 2 or 3 side is correct.

The working RAM 15 stores various processing data within the card. The controller 16 outputs operation commands to each circuit according to the data reception signal transmitted and supplied via the input buffer 19 and the operation state. The data memory controller 17 controls reading and writing of data to and from the data memory 23 in response to commands from the controller 16. Here, the data memory 23 has a transaction code writing area 231, a personal identification number "PIN", rPANJ used for terminal authentication, etc.
I remember rEPANJ. The comparator 18 compares the data provided via the input buffer 19 with the data memory 23.
The comparison result is provided to the controller 16.

Note that such an IC card 1 must be connected to terminal 2 or 3.
While the device is attached to the device, a reset signal Reset and a system clock c1ock are supplied, and
Ground line QNDSVcc power supply and vpp power supply are connected. Here, the vCC power supply is a power supply for driving the system, and the vpp power supply is a power supply for writing to the data memory 23. On the other hand, a system operation signal based on the system clock is supplied to each circuit via the frequency divider 24.

Next, FIG. 5 shows the circuit configuration of terminals 2 and 3. In the figure, 31 is a system bus, and this system bus 31 includes a working RAM 32, a system program ROM 33, a terminal attribute ROM 34,
Initial parameter RAM 35, main controller 36, decryptor 37, comparator 38, display drive controller 39, key controller 40, input buffer 4
1 is connected to an input controller 42, and an output buffer 43 is connected to an output controller 44. Also,
A data input/output terminal Ilo is connected to the input controller 42 and the output controller 44.

Here, the working RAM 32 stores internally processed data. The system program ROM 33 includes various system programs as well as a makeshift code for matching with the IC card 1. The terminal attribute ROM 34 stores different terminal attribute codes depending on its purpose, and also stores card type codes.

In the initial parameter RAM 35, answer-to-reset data from the IC card 1 is stored in bulk. A timer 45 is connected to this initial parameter RAM 35. This timer 45 counts the response waiting time from the time when, for example, a makeshift signal or other command signal is transmitted to the card 1 side, based on the answer/two reset data stored in the initial parameter RAM 35. If there is no response from the card 1 within this waiting time, the main controller 36 is prompted to resend a makeshift signal or other command signal, or to be prompted to send a command to disconnect from the IC card 1. ing. The main controller 36 gives control commands to each circuit according to system operation commands. Code decipherer 37
is used to decode encrypted data transmitted and supplied from the IC card 1, and here it is a PAN for terminal authentication.

Of the EPINs, the encrypted EPIN is decrypted. Comparison 1 part 38 is PAN for terminal authentication
and the EPIN decrypted by the decryptor 37, and the comparison result is provided to the main controller 36. The display drive controller 39 controls the display on the display section 2C or 3d. key controller 4
0 gives a sampling signal to the keyboard 2b or 3C to detect the key input signal.

Note that the vpp power supply section 46 supplies power for writing to the data memory 23 of the IC card 1 via the Vpl) terminal. The oscillator 47 supplies a system clock to the frequency divider 24 of the IC card 1 via the c 1 oak terminal. The Vcc power supply section 48 supplies system driving power to the IC card 1 via the VCC terminal.

Next, the operation of the embodiment configured as described above will be explained.

It is assumed that a cardholder carries an IC card 1 attached to a personal terminal 2.

When a card transaction is performed from this state, the card holder, that is, the customer, pulls out the IC card 1 from the terminal 2 and hands it to the clerk in step A1. IC card 1
The clerk who received the item 5 attaches it to the business terminal 3 in step A2.

Next, proceed to step A3, and terminal 3 connects the IC.
It is determined whether a transaction completed code is written on card 1. Here, if it is determined as YES, invalidation processing (NOP
). On the other hand, if the determination is No, the process proceeds to step A4.

In step A4, the terminal 3 reads PAN and EPAN from the data memory 23 of the IC card 1,
This is written into the working RAM 32. Then, in step A5, EPAN is decrypted by the decryptor 37, and the process proceeds to step A6.

In step A6, E
The PAN and the PAN written in the working RAM 32 are provided to the comparing section 38 and compared.

Here, if the two do not match, invalidation processing (NOP
) to be done. On the other hand, if the two match, the process proceeds to step A7 and the transaction amount is input using the keyboard 3C. Then, this input amount is displayed on the amount display section 3dl of the display section 3d. In FIG. 3, the amount of r1234J yen is displayed.

In this state, the IC card 1 is handed to the card owner with it attached to the terminal 3. Next, the process advances to step A8. In this step 88, the display contents of the amount display section 3dl are confirmed. In this case, the procedure display section 3d2 displays a message "Please enter your PIN." which prompts you to enter your PIN. After confirming this, use the keyboard 3c to input your personal identification number PIN. In this case, the PIN is read from the data memory 23 of the IC card 1, once written into the working RAM 32, and then sent to the comparison section 18. And step AI
PIN number PI entered from keyboard 3C at O
N checks are performed.

Here, if the PIN is verified, the lamp on the procedure display section 3d2 indicating that the PIN number has been confirmed is lit, that is, "Confirmed." is displayed in step All. In this case, if the PIN verification fails, "Please enter again" is displayed on the procedure display section 3d2.

In this state, the customer returns the IC card 1 to the clerk with the IC card 1 attached to the terminal 3. Then, in step A12, when the clerk confirms that the PIN confirmation lamp is lit,
Proceed to step A13.

In step A13, the transaction related to the transaction written in the terminal 3 is read out and written in the IC card 1. Subsequently, in step A14, the transaction code is stored in the area 23 of the data memory 23 of the IC card 1.
Write to 1.

In this state, the process proceeds to step A15, where the IC card 1 is removed from the terminal 3 and placed in an imprinter (not shown) to create a sales slip.

Then, the IC card 1 is given to the customer along with the slip.

The customer who received the IC card 1 then attaches the IC card 1 to the personal terminal 2. In this case, the IC card 1 is attached by sliding it along the guide groove 2d of the terminal 2. In this state, the external connection terminal 1b of the IC card 1 is electrically connected to the external connection terminal 2el:MS.

Next, the process advances to step A17. In this step A17, the data memory 2 of the IC card 1 is
PAN and EPAN are read from 3 and written into the working RAM 32. Then, in step A18, the EPAN is decrypted by the decryptor 37, and the process proceeds to step A19.

In step A19, the EPAN decrypted by the decryptor 37 and the PAN written in the working RAM 32 are provided to the comparator 38 and compared.

Here, if the two do not match, invalidation processing (NOP
) to be done. On the other hand, if the two match, the transaction code written in the data memory 23 of the IC card 1 is cleared in step A20, and then the process proceeds to step A21.

In step A21, the personal identification number PIN is input from the keyboard 2b of the terminal 2, and in step A22, the personal identification number PIN is verified.

Here, if the PIN is verified, the transaction data written in the IC card 1 is read out in step A23 and displayed on the display i2c, and the process ends. On the other hand, if the PIN verification fails, invalidation processing (NOP
).

Therefore, in this way, the system is configured by integrating the personal terminal and the business terminal for the IC card, so even if the IC card falls into the hands of another person and the PIN number is found out, there is no need to worry. The use of IC cards can also be prevented in advance, and unauthorized use of IC cards can be reliably prevented. Moreover, while the transaction code written with the transaction data remains inside the card, the
Since the use of C-cards is now refused, subsequent IC cards will not be accepted unless the personal terminal is legitimate.
Since the card cannot be used at all, unauthorized use of the IC card can be prevented and the safety of card usage can be dramatically improved.

It should be noted that the present invention is not limited to the above-mentioned embodiments, but can be implemented with appropriate modifications without changing the gist.

[Effects of the Invention] According to this invention, a personal terminal and a business terminal are used for an IC card, and when a card transaction is made, there is no transaction code from the business terminal, and the validity of the terminal for the IC card is verified. Once confirmed, the transaction data is written to the IC card along with the completed transaction code, and when the IC card is attached to a personal terminal and the validity of the terminal for the IC card is confirmed, the completed transaction code is cleared and the transaction data is written. Since the information can be confirmed, unauthorized use of the IC card can be reliably prevented and the safety of card usage can be increased.

[Brief explanation of the drawing]

Fig. 1 is a front view showing an IC card used in an embodiment of the present invention, Fig. 2 (a), (b), and (c) show a personal terminal used in the same embodiment, and (a) is a front view. figure,(
b) is a side view, (c) is a back view, Fig. 3 is a perspective view showing the commercial terminal used in the same embodiment, and Fig. 4 is an IC
FIG. 5 is a block diagram showing the circuit structure of the card, FIG. 5 is a block diagram showing the circuit structure of the personal terminal and the business terminal, and FIG. 6 is a flow chart for explaining the operation of the same embodiment. 1...IC card, 1b...external connection terminal, 2...
・Personal terminal, 2b...Keyboard, 2C...
・Display section, 2e...External connection terminal, 3...Business terminal, 3b...IC card mounting section, 3C...Keyboard, 3d...Display section, 15...Working R
AM, 16... Controller, 18... Comparison section, 2
3...Data memory, 32...Working RAM,
36... Main controller, 37... Code decoder, 38... Comparison unit. Applicant Casio Computer Co., Ltd. Figure 1 3dl Figure 3

Claims (1)

[Claims] When a personal terminal and a business terminal are used for an IC card, and the business terminal does not provide a transaction code for a card transaction, and the validity of the terminal for the IC card is confirmed, the transaction data is sent together with the transaction code. The transaction data is written on the IC card, and when the IC card is attached to a personal terminal and the validity of the terminal for the IC card is confirmed, the transaction completed code is cleared, making it possible to confirm the transaction data. IC card system.