JPS62168291A - Discriminating medium and using method for its discriminating medium - Google Patents

Abstract

PURPOSE:To hold the secret property of a discriminating data by providing a discriminating data input means and a discriminating data deciding means on a discriminating medium. CONSTITUTION:An individual discriminating data such as a code number, etc., is stored in advance in the memory of a discriminating card 1. In case of using this discriminating card, a discriminating data is inputted to the discriminating card itself by using an input key group 5. When the discriminating data is inputted, the discriminating card 1 decides whether this discriminating data is correct or not. when it is decided that the inputted discriminating data is correct, the discriminating card generates an effective code by which a CPU 7 can use this discriminating card, the effective code is stored in the prescribed address of a RAM 9, and also, the display of 'effective' is executed on a display part for a prescribed time. When it is decided that the inputted discriminating data is not correct, a guide sentence for instructing a re-input is displayed on the display part 4, and when it reaches a prescribed number of times, the CPU 7 generates an ineffective code, and writes this ineffective code in a prescribed address of the RAM 9.

Description

DETAILED DESCRIPTION OF THE INVENTION (Field of Industrial Application) The present invention relates to an identification medium that stores confidential and personal information and is used to verify identity, confirm usage qualifications, etc., and a method of using this identification medium.

(Prior art) Conventionally, systems that require identity verification and usage qualifications, such as automatic deposit payment systems operated by banks and other financial institutions, and credit systems operated by retail stores, have generally been used as identification media. Magnetic cards are used.

However, these magnetic cards have a small storage data capacity, and a person familiar with the technology can read the owner's identification data such as a personal identification number, which poses a security problem.

Recently, as an alternative to magnetic cards, an identification medium (hereinafter referred to as an IC card) in which an integrated circuit constituting a microprocessor, a memory, etc. is embedded in a card-like base has attracted attention, and various attempts have been made to use this card. ing.

The IC card itself has a built-in microprocessor, so it has data processing and arithmetic functions, and also has a large data storage capacity of 16 bits or more.

Reading data from memory is performed under the control of the microprocessor, which makes it quite difficult to read data from outside, and the microprocessor also has security features to prevent forgery and unauthorized reading. be able to.

(Problems to be Solved by the Invention) However, even in such an IC card, it cannot be said that the confidentiality of identification data such as a password is perfect.

Most of the various IC card usage systems currently being attempted are similar to systems using conventional magnetic cards, in which identification data is first read out to an external device, and then this is used as identification data input from an external input device such as a keypad. The identification operation is performed by comparing the information with the external device.

Therefore, even if the user does not directly know how to read data, it is not impossible to read identification data by using means equivalent to this external device.

Therefore, in order to further increase the confidentiality of identification data,
As disclosed in No. 2-7646 and Japanese Unexamined Patent Publication No. 59-75380, an IC card has also been proposed in which the identification data is compared with externally inputted identification data using a microprocessor inside the card without reading the identification data out of the card. ing.

This IC card is effective against criminal acts that attempt to read identification data from the card, but even if this card is used, the identification data that the user enters with a keypad etc. will be checked against the identification data. There is a risk that the data will be known to a third party during the input operation. For example, users may line up in an automatic deposit dispensing machine at a bank, etc., but it is not very difficult for a third party behind the machine to learn the identification data while the identification data is being input into the machine.

In addition, if the card owner requests a third party to use the identification card to withdraw money or make a purchase without going in person, the cardholder must also provide the identification data, and the confidentiality of the identification data is lost. .

Therefore, an object of the present invention is to provide an identification card suitable for a card usage system capable of maintaining the confidentiality of identification data, and a method of using this card.

(Means for Solving the Problems) The present invention uses an integrated IC module consisting of a microprocessor, a memory consisting of ROM and RAM, and peripheral circuits thereof as an identification medium, and an IC module incorporating this IC module. A means for transmitting and receiving signals with an external device and an identification data input means are provided on the base, and the memory is capable of determining the validity of the input identification data, processing the determination results, and transmitting data to and from the external device. A program is prepared for executing transfer, reading and writing to and from the memory according to prescribed procedures, and by executing this program, the results of the validity determination of the identification data are stored in the microprocessor. .

The external device in which this identification medium is used is equipped with means for sending and receiving signals to and from the identification medium, means for confirming the validity of the identification medium, and means for executing predetermined processing after confirming the validity of the identification medium. are doing.

(Operation) When the holder of an identification medium uses this identification medium for transactions such as withdrawal of deposits or to access facilities, etc., the holder of the identification medium enters personal identification data such as a PIN number in advance by using the input means on the identification medium itself. Enter. The identification medium determines whether the input personal identification data is correct based on the data stored in the memory, and if correct, stores data indicating that the identification medium is valid in the memory. Thereafter, the user brings this identification medium to the external device for transaction or access and sets it.

The external device sends an interim signal to the identification medium to confirm its validity, and in response, the identification medium sends a signal indicating validity/invalidity.

If the identification medium is valid, the external device executes the predetermined process,
If it is invalid, a message indicating that this process is not possible is output.

As a result, the personal identification data will not appear anywhere other than the identification medium, and its confidentiality can be sufficiently maintained, and the personal identification data can be entered at any place and time.

(Embodiment) FIG. 2 shows the front side of an identification card which is an embodiment of the present invention.

The identification card 1 has an IC module 2 embedded in a part of a card-like base made of plastic or the like. This I
The C monoyl 2 has contact terminals 3 for making an electrical connection between the electronic circuit therein and the outside.

The identification card 1 also includes a display section 4 composed of a liquid crystal display device or the like, a group of input keys 5 used for inputting numbers and commands, and a plurality of solar cells for supplying power to electronic circuits in the identification card 1. It has a photovoltaic cell section 6 formed by connecting in series.

The electronic circuit in the identification card 1 is, for example, a CPU (central
Zorose, 17 ng unit) 7, ROM (lead
Only memory) 8 and RAM (random access memory) 9 and other memories, display circuit 10, key manual control circuit 11, interface circuit 12, and buses that interconnect these, etc., are integrated into LSI. It can be connected to the card processing device 13 via the contact terminal 3.

The identification card 1 has a power supply section 20 comprising the photovoltaic cell section 6 and a battery 21 to supply power to these electronic circuits.
It is equipped with

When the identification card 1 is set in the card processing device 13,
The contact mechanism 14 of the card processing device 13 operates manually or automatically, bringing its contact terminal 15 into contact with the contact terminal 3 of the identification card 1, electrically connecting the card processing device 13 and the electronic circuit in the identification card 1. . Card processing device 1
In addition to the contact mechanism 14 and contact terminals 15, 3 includes a CPU 15, a ROM 16, a RAM 17, an interface circuit I8 with the identification card 1, and an interface circuit 19 with a communication control device for transmitting and receiving data with the outside. etc.

Next, the operation of this identification card 1 will be explained.

The operation of the identification card 1 is performed by the CP[J 7 executing a program stored in the ROM 8.

FIG. 1 shows the flow of the operation of the identification card 1 when the identification card 1 is used to verify the identity of the user or to check the user's qualifications.

When the identification card 1 is used for such purposes, identification data such as a password is first input into the identification card 1 using the input key group 5. For this identification data entry,
If the identification card 1 is multi-functional and the input key group 5 is used for inputting data other than identification data, a specific key such as a code may be used to indicate that identification data is being input before inputting the identification data. The key 5a is pressed, and then the number key corresponding to the identification data is pressed.

When identification data is input, the identification card 1 determines whether this identification data is correct. This determination method is the simplest method, in which the identification card 1 stores correct identification data in its memory in advance, and compares this with the input identification data to check whether the two match. Alternatively, as a more complicated method, the CP of identification card 1
A method may also be used in which U 7 performs calculations on the input identification data according to a predetermined algorithm and checks whether the value becomes a specific value.

When determining that the input identification data is correct, the CPU 7 of the identification card 1 generates a valid code that enables the use of this identification card, stores this valid code in a predetermined address of the RAM 9, and displays the display circuit 10. The display data of "valid" is transferred to the display section 4 to display "valid". Note that this display does not necessarily have to be performed, and may be made to disappear after being displayed for a certain period of time.

- If the re-entered identification data is determined to be incorrect,
The identification card l uses the CPU 7 to determine whether the input of identification data has reached N times, and if not, transfers the display data of the guidance wording instructing the re-input of the identification data to the display circuit 10, and displays it on the display section. 4 will be displayed as a guidance message to prompt you to enter the identification data again. The owner of the identification car 11 then inputs the identification data again. The subsequent operations are repeated in the same manner as above.

The identification data is continuously re-inputted several times, and when the number of times reaches N, the CPU 7 of the identification card 1 generates an invalidation code and writes this invalidation code to a predetermined address in the RAM 9. Then, the display data "invalid" is transferred to the display circuit 10, and the display section 4 displays "invalid". From now on, no matter how many times the input key group 5 is pressed, the input data will not be regarded as identification data and will be ignored, and the identification card 1 will no longer function as an identification medium. In order to make such an identification card 1 valid again, it must be brought to the issuing institution of the identification card 1, and the invalidation code must be removed by an identification card restoration processing device operated only by a specific authorized person. must be erased.

Furthermore, if a different number or the like is entered by mistake during the input of identification data, the clear key 5b can be pressed. When the clear key 5b is pressed, the CPU 7 of the identification card 1 erases all the data input so far and returns to the initial state of identification data input.

Although the identification data is made up of a combination of numbers in this embodiment, it may of course be characters, symbols, etc., and the number of digits may be fixed or variable. If the number of digits can be set arbitrarily by the owner, in order to know when the input of identification data is finished, for example, press the code key 5c after inputting the last digit.
Alternatively, the input may be terminated by detecting that no data has been input for a predetermined period of time after consecutive data inputs.

Identification card 1 in which the identification data has been entered as described above, and it has been determined to be correct and can be used effectively.
is set in a card processing device 13 installed in an automatic teller machine at a bank or the like, or a POS (point of sales system) at a retail store or the like.

The operation of the card processing device 13 will be explained according to the flowchart in FIG.
The contact mechanism 14 brings the contact terminals 15 into contact with the contact terminals 3 of the identification card 1 by setting the identification card 1 at a predetermined position and closing the lid or by detecting that the identification card 1 is set.

The card processing device 13 operates as the CPU 15 executes a program stored in the ROM 16.

When the operation is started, the card processing device 13 sends a read mode signal to the identification card 1 via the interface circuit 18, and sets the identification card 1 to the read mode. Next, the card processing device 13 sends out a valid code reading signal to determine whether the identification card 1 is valid or invalid. This reading signal may be a simple signal, but in order to ensure greater safety, a code consisting of multiple bits is encrypted, and the identification card 1 that receives this code decodes it using the CPU 7 to ensure that it is a correct and valid code. The valid code may be accessed after determining whether the signal is a read signal or not.

When the identification card 1 receives a valid code reading signal,
The CPU 7 accesses the valid/invalid code address in the RAM Q and reads the stored contents of that address. This stored content is sent to the card processing device 13 via the interface circuit 12.

The card processing device a13 uses the CPU 15 to store the above information (c).
Accordingly, the validity/invalidity of the identification card l is determined. If it is invalid, a signal is sent to the host device via the interface circuit 19 to notify it of the invalidity. When the host device receives the invalidation signal, it displays that the identification card 1 cannot be used. If valid, identification card 1
for example, to transfer personal data such as account number, name, address, etc. Identification card 1 is now in ROM
8 and the personal data stored in RAM 9 are sent to card processing device 13.

Once the card processing device 13 receives the personal data, it stores it in the RAM 17, edits it into a predetermined format, and transmits it to the host device. The host device further sends this data to the central data processing center via the communication line,
Inquire about whether transactions are possible or not, whether systems can be used, etc.

When a series of processes is performed and it is necessary to update the data stored in the identification card 1, the card processing device 13 sends a write mode signal to the identification card 1, and then sends out updated data. Upon receiving the write mode signal, the identification card I receives the update data transferred from the card processing device 13.
Write to the specified address of AM 9.

When the card processing device 13 completes all processing operations for the identification card 1, it sends a processing completion signal to the identification card 1. As a result, the identification card 1 erases the valid code stored at a predetermined address in the RAM 9 and returns to its initial state. Therefore, the identification card J will no longer be usable unless correct identification data is input again. That is, the identification card 1 can be used only once after inputting the identification data. This makes it impossible for a person who is not the legal holder of the card to repeatedly misuse a valid identification card.

One possible method of protecting the identification card from unauthorized use is to set the validity period of the identification card. This is to delete the valid code after a certain period of time has elapsed after correct identification data was input and became valid.

Timekeeping is performed by sequentially counting clock signals used to operate electronic circuits such as the CPU 7 of the identification card 1, and storing the counted value in a designated address of the RAM 9. Each time a clock signal is generated, this counted value is changed to a predetermined value. CPU has reached 7
This can be done by determining the However, this method has a high risk of unauthorized use because the identification card can be used any number of times within the predetermined period of time.

In this embodiment, the identification card transmits a signal indicating invalidity or personal data to the card processing apparatus in response to a valid code reading signal from the card processing apparatus, but the identification card simply transmits a valid/invalid signal. If the data is valid after the transfer, the personal data may be transferred in response to a personal data request signal from the card processing device, or the card processing device may suddenly issue a personal data request signal and the identification medium When received, it refers to the specified address in RAM 9 and determines whether it is valid or invalid based on the stored contents, and if it is valid, it directly transfers the personal data, and if it is invalid, it returns a signal indicating invalidity or indicates no response. You may also do so.

Next, an example of application of such an identification card to a cash payment transaction will be described.

A user who wants to withdraw cash first enters a PIN number into his or her identification card. This PIN number is input not to the automatic teller machine but to the identification card 1 as described above, and can be done at any place and time. Once the correct password has been entered and the identification card has been validated, the identification card is brought to the automatic teller machine and set in the card processing section, after which the requested payment amount and denomination are entered using the key part of the operating system. Since the identification card itself determines whether or not the user has valid transaction qualifications when inputting the PIN number, automatic teller machines do not require inputting the PIN number as in the current operation.

The automatic teller machine determines whether the set identification card is valid, and if so, reads the user's account number from the identification card 1-1-! 17. An inquiry is made to the bank's central data processing system as to whether the payment is possible or not, along with the total amount requested. The center data processing system refers to the customer data file based on the account number, etc., confirms the balance, and returns a response indicating whether payment is possible or not to the automatic teller machine along with new balance data.

When the automatic teller machine receives a response indicating that payment is possible, it counts and discharges the requested amount of cash and sends new balance data to the identification card, causing the identification card itself to update the balance. At this time, the automatic teller machine also transfers other transaction record data such as the payment amount and date, and the identification card stores these in RAM etc. so that past transaction records can be viewed later like a passbook. You may also do so.

When the cash payment transaction operation is completed, the automatic teller machine finally instructs to delete the validity of the identification card, thereby causing the identification card to delete the validity code in the specified address. The I identification card is then returned to the user.

In addition, in such an application of the identification card, it may be possible to input not only the personal identification number but also the requested payment amount into the identification card. In this case, if the identification card 1 determines that the PIN number is correct after entering the PIN number, it will display a message prompting the user to input the requested payment amount, and once the requested payment amount has been entered, it will memorize and retain this in the RAM, etc., and automatically make a cash payment. The ROM contains a program configured to read the amount data from the RAM or the like and transfer it to the automatic teller machine when a request to transfer the payment amount is received from the automatic teller machine.

Although the embodiments and application examples have been described above, the present invention is not limited to these, and various modifications can be made without departing from the gist thereof. For example, the identification medium may be not only card-shaped but also stick-shaped, and can be used not only for automatic teller machines and POS, but also for valid qualifications for entering and exiting certain facilities and using goods. It can also be applied to presence/absence inspections. Furthermore, signals can be exchanged between the identification medium and its processing device not only via contacts but also optically.

(Effects of the Invention) According to the present invention, identification data such as a password is input into the identification medium itself, and whether or not the input identification data is correct is also determined within the identification medium. Therefore, the identification data does not appear in any external device other than the identification medium, and its confidentiality is effectively maintained at a sufficiently high level.

Further, the present invention provides that the identification data can be input using an identification medium,
Moreover, if the identification data is correct, the information indicating it is stored and retained, so you can enter the identification data at any location and entrust other people with withdrawals, shopping, etc. without informing others of the identification data. In addition, since it is no longer necessary to input identification data into a card usage system such as an automatic teller machine, there is no risk that the identification data will be known to others during the input operation.

Furthermore, from the card usage system side, there is no need for an input means for identification data and a process for determining the validity of the input identification data, which has the effect of reducing the load on the system. If the card usage system is a frequently used system such as an automatic teller machine, eliminating the need to enter identification data or determine the authenticity of the identification data improves system processing efficiency and facilitates user operations. This has the effect of reducing the waiting time of users.

[Brief explanation of drawings]

FIG. 1 is a flow chart showing an example of the operation of the identification medium of the present invention, FIG. 2 is a plan view showing an example of the external appearance of the identification medium of the present invention, and FIG. 3 is a diagram showing the internal configuration of an embodiment of the present invention. The block diagram, FIG. 4, is a flowchart showing the operation of the card processing device in one embodiment of the present invention. l...Identification medium, 4...Display section, 5...Input key group. Patent Applicant Oki Electric Industry Co., Ltd., Book, Invention d Collection 11 Card Measurement Method 4170-Figure 1 2 ICE'-! Implementation of the present invention and ``10 key lives'' Figure 2

Claims (2)

[Claims] (1) In an identification medium incorporating an IC module consisting of a microprocessor, memory, and peripheral circuitry, an input means for inputting personal identification data, a means for determining the validity of the input personal identification data, and a result of said determination. An identification medium characterized by comprising means for storing or erasing information. (2) Personal identification data is input using an input means provided on the identification medium itself, the identification medium determines the validity of the input personal identification data and stores the determination result, and the external device inputs the above-mentioned information into the identification medium. A timing signal for confirming the determination result is provided, the identification medium returns a signal indicating the determination result in response to the timing signal, and the external device starts a predetermined processing operation based on the signal. How to use identification media.