JPH03202998A - Card verification system - Google Patents

Abstract

PURPOSE:To discriminate the truth of an issued card with high accuracy and high reliability by issuing the card while recording two verification codes, sepa rately comparing and collating those verification codes. CONSTITUTION:A card processor 1 is equipped with a memory part 30 composed of first and second memory areas 30A and 30B, further, a control part 50, which can independently store the specified code from a card inserting port 3 to the first memory area 30A by a register card 100, and a registration part 40. In such a case, the specified code is stored to the first memory area 30A in the card processor 1 by using the register card 100 and a system user stores a check code to the second memory area 30B. When a card 10 is received by the card processor 1, the card is processed while comparing the date read from the first and second recording areas of the card 10 with the data of the first and second memory areas. Thus, the system user can exactly discriminate the truth of the issued and utilized card.

Description

[Detailed Description of the Invention] Purpose of the Invention: (Industrial Field of Application) The present invention is directed to issuing a card that can only be used in a specific system by attaching an authentication coat for determining authenticity. The present invention relates to a card authentication system that determines the authenticity of a card based on an authentication code and allows efficient authentication code setting between a card user and a manufacturer.

<Prior art> In a card processing device in a conventional card processing system used in cafeterias, amusement parks, etc., the R in the built-in storage section is
By storing a predetermined code in OM etc. in advance, q
It is designed so that it can be used like an issued card only at a constant circumferential speed.

Such a card is inserted into a card processing device, and an authentication code is used to determine whether or not the card is a legitimate card for the intended use, and necessary processing is performed on the legitimate card. Therefore, manufacturers of card processing devices prepare in advance ROMs that store specific codes for each purpose, carefully distinguish between ROMs that store specific codes and codes for desired uses, and incorporate them into card processing devices before shipping. This allows us to ship card processing devices for different uses.

However, with the recent improvement in the processing power of card processing systems, the authentication codes used to determine the authenticity of cards have also become more complex.Furthermore, the manufacturer must determine the final specific code and assign it to the card processing device. Instead, users are increasingly provided with card processing devices that have a specific code determined by an intermediary, for example, when a system vendor purchases a card processing device and develops its own card processing system. There is. In such cases, the manufacturer should discuss and consider the final determination of the specific code and programming of the card processing system in advance with the system vendor, etc., and store the determined specific code in the ROM before shipping the card processing device. I have to.

(Problem to be Solved by the Invention) In the case of a card authentication method in a card processing system as described above, by incorporating a ROM storing a specific code and distinguishing it according to the purpose or user, it is possible to differentiate the card processing device according to the purpose or user. Therefore, managing and loading ROMs for each application or user has become a very complicated and troublesome problem at the manufacturer.

Furthermore, if a manufacturer wants to match specific codes and card processing system programming to the needs of system vendors, they must discuss and carefully consider the details of specifications, standards, etc., and the final specific code will be determined. The disadvantage is that it takes too much time and effort to complete the process.

The present invention has been made in view of the above circumstances, and an object of the present invention is to simplify the shipping work at the card processing device manufacturer, and to enable the manufacturer to easily set a specific code by using a predetermined registration card. The object of the present invention is to provide a card authentication system in which a system user can determine the authenticity of a card by comparing and verifying authentication codes (including specific codes) of issued and used cards.

Structure of the Invention; (Means for Solving the Problems) The present invention is a card processing device that registers an authentication code and issues a card, and that has a built-in storage unit that stores the same authentication code as the issued card. The present invention relates to a card authentication system that reads the authentication code of a card and determines the authenticity of the card based on a comparison of each authentication code. A magnetic data recording area is formed on the card by a first recording area which cannot be registered by the system user himself and a second recording area where the system user can register a user check code, and the specific code is registered. y; This is achieved by configuring the card authentication system to compare and process the data read from the first and second storage areas with the data in the first and second storage areas when the card is accepted by the card. .

(Function) The present invention relates to an authentication system for a card having a magnetic data recording area. , a second storage area in which the system user can register a user check code; It is divided into two storage areas.

Then, when the card is inserted, the authentication code stored in the first storage area and the second storage area is compared with the authentication code read from the card to determine the authenticity of the card. In this way, the first storage area of the storage unit is used by the manufacturer to store a specific code for identifying the shipping destination.For example, the contents of this specific code may be registered for customer registration before the card processing device is shipped. I'm trying to remember the cards. A second storage area is also used for storing user check codes on the customer side, allowing the user to store any user check codes along with other data after the card processing device has been shipped.

(Example) The card authentication system of the present invention will be described in detail with reference to Examples below.

FIG. 1 is a block diagram showing the basic configuration of the card authentication system of the present invention, which includes a card processing device 1 for magnetically writing information to a card 10 or reading and processing recorded information; The card processing device 1 includes a host CPLI 2 (which is a host device for the card processing device 1, such as a personal computer) that issues necessary commands to the card processing device 1.

The card processing device 1 includes a writing/reading section (head section) 50 for writing information on the card 10 or reading recorded information, and at least a first storage area 30A for storing an authentication code as necessary. and second storage area 3
0B, and further includes a control unit 50 and a registration unit 40 that can independently store a specific code in the first storage area 30A using the registration card 100 from the card insertion slot 3. have. Control unit 5
0 is the registration card 10 from the card insertion slot 3 in the registration mode.
Only when 0 is inserted, the specific code read by the writing/reading section 60 is stored in the first storage area 30A of the storage section 30 via the registration section 40. Further, when the card 10 is inserted, this control section 50 processes the information read by the writing/reading section 60 and transmits it to the calculation section 20 via the control section 50, and also stores the information in the first memory of the storage section 30. The specific code and user check code stored in area 30A and second storage area 30B are transmitted to calculation unit 20. The card processing device 1 is capable of inserting a registration card 100 for storing a specific code, and is adapted to process a card 10 provided with a magnetic recording band that can be written or read magnetically. .

It also has a calculation unit 20 connected to the control unit 50 and a determination unit 70 that determines the authentication coat.
When the information regarding the card IO is transmitted from the writing/reading section 60, it performs an operation 1A of the information, transmits the information after the operation to the control section 50, and extracts the authentication code included in the information. and transmits it to the determination unit 70. Then, the determination unit 70 uses the authentication code stored in the first storage area 30A and the second storage area 30B of the storage unit 30 and the authentication code recorded on the card 10 (both are a specific code and/or a user check code). The authenticity of the card 10 is determined by comparing and checking the codes (codes). The discrimination section 70 transmits a discrimination signal to the control section 50 via the calculation section 20, so that, for example, if the card is determined to be a counterfeit card, writing and reading operations in the writing and reading section 60 are prohibited and the card is removed. In the case of a genuine card, the card is returned or taken in. In the case of a genuine card, the required processing is performed on the card as it is taken in, and then it is returned.

The card authentication system with such a configuration can issue the card 10 by recording the authentication code, and also accepts the issued card 10 and stores the O certificate code recorded on the card 10 and the storage unit 30. The authentication code stored in the card 10 is compared and checked to determine whether the card 10 is genuine or not, and processing such as purchasing necessary products is performed.

Here, the specific code is stored in the first storage area 3OA of the card processing device 1 in advance independently by the manufacturer using the registered car F100.

Figure 2 shows the appearance of the card processing device 1 and how to set the specific code.
The registration mode is set using the dip switch 4 as shown in FIG. 2, and then the registration card 100 whose back side is shown in FIG. The registration card 100 is provided with a magnetic stripe 01, and a predetermined specific coat is recorded in advance on the magnetic stripe 101 by the manufacturer. By turning on the power switch 5, the WB card 100 is taken into the card processing device 1, and the magnetic stripe +01
The specific code is read and stored in the first storage area 30A of the storage section 30. However, in reality, an incorrect specific code may be stored in the first storage area 30A, so the manufacturer has created a special clear card to erase the specific code stored in the first storage area 30^. We are prepared. Usually, this specific code is stored by the manufacturer when the card processing device 1 is manufactured and shipped to a user of a specific system, and is used to identify the card processing device for each system user. After registering the specific code, operate the dip switch 4 to return to the normal mode.

Next, with reference to FIGS. 3(^), (8), and (C), the card IO used by the card authentication system company of the present invention will be explained. , 343 (A) shows the front side of the card 10, and displays the card name as "P card", the amount of money on the card 10 at the time of card issue, and the card 10.
The date and time of issue of 0 and the number are displayed. FIG. 3(B) shows the back side of the card 10, and a magnetic data recording area 11F12 is provided, which is composed of a first recording area E1 and a second recording area E2 for recording information for each card purpose. here,
In the card authentication system of the present invention, the same specific code as that stored in the first storage area 30^ is recorded in the first recording area E1, and the same code as the specific code stored in the second storage area 30B is recorded in the second recording area E2. The user check code issued is now recorded.

The specific code of the first recording area is the host (:PI3
It is impossible to rewrite by the command from the second
The user check code of recording area E2 is host CPU2
It can be rewritten using commands from .

In addition, if the reading and writing function for the magnetic data recording band 12 of the card IO is 21 (+ bytes), the information rewriting function is only 182 bytes for the second recording area E2,
The remaining 22 bytes may be separated from the non-rewritable first recording area El. Further, for example, the first recording area E1 of 22 bytes is further divided into an authentication code area EIC of <15 bytes and a security code area EIS of 7 bytes, as shown in FIG. 3(C).

In this way, by separately storing the user check code prepared by the system user in the second storage area 30B, it is possible to issue a card 0 using the card authentication system afterwards. However, at this time, the code contents of the first storage area 30A and the second storage area 30B are the first recording area E1 and the second recording area f! of the magnetic data recording band 12, respectively. It will be recorded on iE2.

In addition, in the card authentication system of the present invention, a card is issued by recording a specific code and a user check code, and the authentication code is read from the issued card, and the authentication code stored in the card processing device 1 is connected to the authentication code stored in the card processing device 1. Although the card is configured to be able to determine the authenticity of the card by comparison and verification, even if the user check code is not used by the customer, comparison and verification can be performed based only on the specific code.

Next, the operation of the card authentication system of the present invention will be explained in relation to commands from the host CPU 2 to the card processing device 1. However, it is assumed that the specific code has already been stored in the first storage area 30^ in the card processing device 1 by the registered card 100.

First, the customer enters the user check code in the second storage area 30.
To explain the case where it is not stored in B, by transmitting the write command (including the user check code) a from the host CPt12 as shown in FIG. Copy the user check code from inside to an output buffer (not shown), then read the specific code I from the first storage area 30^ and copy it to the output buffer, and then read the specific code I from the first storage area 30^ and copy it to the output buffer.
The specific code ■ is written in the first recording area El of No. 12, and the user check code II is written in the second recording area E2.

In this way, the first recording area E1 of the magnetic data recording band 12
The specific code I and the user check code II are recorded in the second recording area E2, and the card 10 is issued.

FIG. 5 shows that the card 10 thus issued is used to read the specific code I' from the inserted card 10, and
The case is shown in which the specific code (2) is read out from the first storage area 30A and the specific codes (2) and 1' are compared and verified to determine the authenticity of the card 10. In other words, host CPII2
By transmitting a read command from the card processing device 1, the card processing device 1 reads the specific code I written in the magnetic data recording IF 12, and also reads the specific code I from the first storage area 30^ for comparison and verification. , If the result of comparison and verification is a mismatch, it is treated as a card error.

In this way, the basic process in the card authentication system of the present invention is to determine when the specific code ■ is recorded in the first recording area E1 of the card IO, and the customer side stores the user check code in the second storage area 30B. Even if there is no card, the authenticity can be determined using the card IO. That is, the specific code I is stored in the first storage area 30^ by the registered card 100 by the manufacturer, and the specific code I is stored in the first storage area 30^ by the registered card 100. and Io are important.

Next, a case will be described in which the customer stores the user check code I+ in the second storage area 30B. First, a method for storing the user check code II will be described based on FIG. 6. In this case, by transmitting the storage command C from the host CPU 2, data including the user check code II is transmitted, and the card processing device 1 extracts the user check code 1i from the data and stores it in the second storage area 30B.
to be memorized.

As a result, a card having the user check code 11 in addition to the specific code I will be issued.

FIG. 7 shows how the authentication code is registered and the card 10 is issued, in which the specific code I is read out from the first storage area 30A, and the user check code I'l is read out from the second storage area 30B. An example is shown in which data is written in the first recording area El and the second recording area E2 of the magnetic data recording %F12, respectively, and the card 10 is issued. In other words,
Transmit the write data by transmitting a write command (including the user check code) d from the host CPU 2,
The card processing device 1 is the first card processing device 1 of the magnetic storage band 12 of the card 10.
A specific code (2) and a user check code 11 are written in the recording area E1 and the second recording area E2, respectively. Also, at this time, the user check code before writing included in the write data is compared with the user check code I+ from the second storage area 30B, and if they do not match, a command error is determined. That is, regarding the user check code 1■, the one in the transmission state before writing to the card is compared with the one stored in the second storage area 30B, and only when they match, the user check code I+ is recorded. card 1
0 is issued.

Then, using the card 10 thus issued, FIG. 8 reads the specific code ■' and the user check code II' from the inserted card IO, and reads '!'! f,
This figure shows how the specific code (2) is read out from the first storage area 30^ and the user check code (II) is read out from the second storage area 30B, and each coat is compared and verified. That is, by transmitting the reading command e from the host CPU 2, the card processing device 1 reads the specific code I' and the user check code TI from the card 10, reads the specific code (2) from the first storage area 30^, and reads the second Memory area 3
Read user check code 11 from 0B, specify code I and ■' and user check code I! and ■bi
The authenticity of the card 10 is determined by comparing and verifying the card 10. If any of the authentication codes does not match as a result of comparison, it is determined that the card is in error.

Furthermore, FIG. 9 shows how the customer cancels the user check code TI in the second storage area 30B when rewriting the user check code. In this case, host CP
A release command f is transmitted from U2, and as a result, the car 1 embedded device 1 erases the user check code I+ stored in the second storage area 30B.

Incidentally, the host CP for the card processing device 1 as described above
Communication commands on the U2 side are not carried out by a card authentication system for each purpose, but by configuring the operation mote unit 6 as shown in FIG. 10 and selectively giving desired commands, the same card authentication system It may also be possible to do so at any time.

Effects of the invention: As described above, according to the card authentication system of the present invention, 2
By recording two authentication codes and issuing cards, and comparing and collating those authentication codes separately, the authenticity of the issued cards can be determined with high accuracy and reliability. In addition, card processing devices are equipped with a registration section and a storage section that allow the authentication code to be stored in the registered card before shipping, so manufacturers may have to ship card processing devices for different applications or customers at the same time. can also be easily identified by using a registration card. Furthermore, since the customer side can store another authentication code after shipping, for example, the customer can use this card processing device to create a highly versatile card.

An authentication system can be configured. Furthermore, since the card authentication system of the present invention uses a fixed specific code and a variable user check code, the application is not limited, and for example, it can be applied to a card authentication system configured for a specific purpose. It has extremely high utility value as it can be used for other purposes by changing the user check code.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing the basic configuration of the card authentication system of the present invention, FIG. 2 is a diagram shown to explain how to use a registered card in a card processing device, and FIGS. 3 (A) and (B) are A front view and a back view showing an example of a card to be read or issued, FIG. 4(C) is a diagram showing the configuration of the 's1 recording area, and FIGS. FIG. 10, which is a diagram for explaining functions by case, is a diagram showing an example of an operation mode section. 1... Card processing device, 2... Host CPt1,
DESCRIPTION OF SYMBOLS 10... Card, 20... Arithmetic unit, 30... Storage unit, 40... Registration unit, 50... Control unit, 60...
Writing and reading section, 70... Discrimination section, 100... Registration card. (A) (B) Kaya I times l tc l5 (C) 3rd Kan revolution 4th times

Claims (1)

[Claims] 1. A first recording area in which the system user cannot register a specific code that identifies the system user who uses the card processing device; and a second recording area in which the system user can register a user check code. a magnetic data recording area is formed on the card, the specific code is stored in a first storage area of the storage means in the card processing device using the registered card, and the system user stores the user check code in the storage means. and when the card processing device accepts the card, compares the data read from the first and second storage areas with the data in the first and second storage areas. A card authentication system characterized in that the card authentication system processes