JPS6356774A - Portable storage medium processor - Google Patents

Abstract

PURPOSE:To contrive to improve a security by counting the number of issued IC cards deleting the data held at a reading/writing control means when the value arrives at the value set beforehand. CONSTITUTION:A key card KC to hold common data to be written into a non- issued IC card and a fixed data card FC are used, and the common data held at these key cards KC and the fixed data cards FC are read by a reading writing control part 39. The common data are written through a data buffer into the IC card. When the number of issued (the number of processings) IC cards arrives at the specified number, the data common to the IC card, which are held at the data buffer of the above-mentioned reading writing control part 39, are erased.

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention] (Industrial Application Field) The present invention relates to a portable storage medium processing device that issues portable storage media such as IC cards.

(Conventional technology fi) Cards with magnetic stripes, so-called magnetic cards, which are generally used for identification cards, tare cards, credit cards, etc., have a small amount of stored data and are easy to read out, so they have low security. There are problems such as low

Therefore, recently, portable storage media, so-called IC cards, which have high security for reading out stored contents and have a large storage capacity, are being used. This type of IC card is usually handed over from the card manufacturer to the card issuer in an unissued state, and is issued by writing predetermined data at the card issuer, and then handed over to the user.
ing.

By the way, in the conventional IC card issuance processing method, data written on a magnetic tape or floppy disk is directly input to a card reader/writer via a host computer, as in the case of conventional magnetic card issuance.
A method was used in which the IC card was issued by writing on an unissued IC card.

However, in such conventional processing methods, there is a very large possibility that the data written on the IC card will be easily leaked to the outside, and therefore there is a drawback that security for the processing device is poor.

(Problems to be Solved by the Invention) As mentioned above, in the conventional processing method, there is a very large possibility that the data written on the portable storage medium will be easily leaked to the outside, and therefore, the security is poor. There is.

SUMMARY OF THE INVENTION Therefore, the present invention aims to eliminate the above-mentioned drawbacks and provides a portable storage medium processing device with high security that is suitable for a portable storage medium with high security.

[Structure of the Invention] (Means for Solving the Problems) A portable storage medium processing device of the present invention writes predetermined data to a portable storage medium. a data holding device holding data common to the portable storage medium to be loaded; a read/write control means for reading the data from the data holding device, temporarily holding it, and writing the held data to the portable storage medium; an input means for inputting the number of portable storage media to be processed by the device; a counting device for counting the number of portable storage media processed by the device; and a count value of the counting device is inputted by the input device. and erasing means for erasing the data held in the read/write control means when the number reaches the specified number.

(Function) Data can be read from the data storage device, the read data is retained, and the retained data is written to the portable storage medium without using the host control means, so the data can be easily transferred to the outside. No more leaking,
Security becomes extremely high. In addition, when the number of processes on the portable storage medium reaches a specified number, the data held in the read/write control means is erased, making it possible to more reliably prevent data leakage and further improve security. can.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 3 shows an example of a portable storage medium according to the present invention.
This figure shows an external view of the magnetic stripe-equipped IC card after it has been issued. That is, 1 is a card body, which is made of, for example, a rectangular thin plastic plate. A magnetic stripe 2 is provided at the end of the front surface of the card body 1 in the form of a strip in the longitudinal direction. Further, on the surface of the card body 1, embossed information 3 written in an embossing print is formed. The embossed information 3 includes identification information of the card holder, such as the card holder's name, account number, and card expiration date.

Furthermore, the surface of the card body 1 is electrically connected to an integrated circuit (IC) 4 embedded in the card body 1, and serves as an input/output terminal for electrical contact with a card reader/writer (not shown). A contact portion 5 is provided. The integrated circuit 4 includes a control section (for example, a microprocessor) 6 and a memory section (for example, an EEPROM) 7. In addition, emboss information 3 is required before issuance.
is not formed.

FIG. 2 shows an external perspective view of an IC card processing device that issues IC cards as an example of a portable storage medium processing device according to the present invention, and FIG. 1 shows a block configuration diagram thereof. That is, 11 is a host control unit, which includes a host processor 12 consisting of a control section (not shown) and a memory section containing a control program, and a hard disk drive 13 that stores a program for controlling the entire apparatus and the processing contents of the apparatus. and a floppy disk device 14 for inputting data that is part of the data to be written on the IC card and that differs from IC card to IC card, such as the name of the card holder and the account number in the case of a cash card. This is the host for the device. Similar to the floppy disk device 14, 15 is a magnetic tape unit for inputting different data for each IC card, and is connected to the host processor 12, and is used by an IC card issuer for its services, for example. It is also possible to use the magnetic tape created by the magnetic tape unit of the host computer from the list of new subscribers registered in the host computer of the system.

16 is a keyboard for performing various operations, and 17 is a CR7 display device for displaying operating procedures, status, etc., and these are connected to the host processor 12.

18 is a card reader/writer, and the host processor 12
It is possible to insert an access key card AC to activate the device. Here, as the access key card AC, for example, an IC card similar to the IC card shown in FIG. 3 is used.

However, it is assumed that the magnetic stripe 2 and the embossed information 3 are not provided.

19 is a printer that creates a shipping port for shipping the issued IC card to its holder, and 20 is a printer that sends the card holder's temporary PIN (which can be changed by the card holder) to the card holder. is a printer that creates an issuance notice 21 for separate notification, and these printers are connected to the host processor 12. The issuance notice 21 created by the printer 20 is structured as shown in FIG. 5, for example. That is, an envelope-shaped issuance notice 1121 is formed on two stacked sheets of paper 22 with a peripheral edge (hatched area 23) glued in advance, and can be cut at a perforation 24 provided on the peripheral edge. There is. and,
Address/name 25, temporary password 26, etc. are printed on this issuance notification 21. In this case, the area where the address/name 25 is printed will also be colored on the first sheet on the front, and the area where the temporary PIN number 26 will be printed will be colored only on the front (inside) of the second sheet on the back, and the area where the temporary PIN number 26 will be printed will be colored only on the front (inside) of the second sheet. is designed not to develop color. This results in
The temporary PIN number is written so that only the cardholder can know it.

27 is an issuance processing unit that processes the IC card to be issued, and is connected to the host processor 12. The issue processing unit 27 is configured as follows. That is, 28 is a microprocessor, and host processor 1
IC card issuance control according to commands from 2, that is, control to write magnetic data on the magnetic stripe 2 of the IC card, control to form embossed information 3 on the IC card, and control to write data to the memory section 7 of the card. control, etc. 29 is a keyboard, and 30 is a display device, which are connected to the microprocessor 28. The keyboard 29 is used for inputting a PIN number and for book issuance processing unit 27.
Used as input for test operation, reset in case of trouble, etc. The display 30 displays the status of the main issue processing unit 27, the results of test operations, and the like. 3
1 is a hopper for storing unissued IC cards; 32 is an encoding unit for writing magnetic data; 33 is an embossing unit for forming and recording embossed information; and 34 is a reader/writer for reading and writing data to the IC card. A unit 35 is a destruction unit for destroying (for example, punching a hole) a defective IC card, and 36 is a sorting section for separating the IC cards, which are controlled by the microprocessor 28. 37 is a stacker for storing defective IC cards, and 38 is a stacker for storing issued IC cards. Reference numeral 39 denotes a read/write controller having a data buffer for holding data and an arithmetic function, and is connected to the microprocessor 28 and the reader/writer unit 34. 40 is a card reader/writer for reading and writing data to the key card KC; 41 is a card reader/writer for reading and writing data to the fixed data card; these are read/write control units; It is connected to 39.

That is, unissued IC cards are stacked and stored in a hopper 31, and are taken out one by one in response to a signal from the microprocessor 28. The IC card taken out from the hopper 31 is sent to an encoding section 32 where magnetic data is written.

After a detector (not shown) detects that the IC card has arrived at the encoder 32, the microprocessor 28 writes magnetic data on the magnetic stripe 2 using a write/read head (magnetic head) (not shown). After writing is completed, the microprocessor 28 reads the written data, checks whether the written data is correctly written, and then transfers the IC card to the embossing unit 33.
send to If the written data is incorrect, the magnetic data is written again and then checked.

If writing still cannot be done correctly, pass through the embossing unit 33 and then write to the reader/writer unit 3.
4, and is sent to a destruction unit 35, where a hole 8 is made in the magnetic stripe 2, for example, as shown in FIG. This makes it impossible to use the IC card, and also makes it possible to visually determine that it is a defective IC card. Further, if the emboss information 3 has been formed, a hole 9 is also made in the emboss information 3 portion as shown in FIG. 4, for example. Regarding electrical recording, it is possible to write a void command in the memory section 7 to prevent the IC card from being used by the III IE section 6 of the IC card, so it is not necessarily necessary to destroy the IC card by drilling holes or the like. . This not only makes it impossible to use this IC card at a terminal where it can be used, but also makes it possible to determine that this IC card cannot be used without using a device. Drilling holes for the magnetic stripe 2 and embossed information 3, memory section 7
A void instruction is written in the following format.

The first is when the magnetic stripe 2 is defective, the writing to the magnetic stripe 2 is completed normally but there is an error in the middle of forming the embossed information 3, and the second is when the embossed information 3 is formed normally. and cases where embossed information 3 is formed normally but not normally (for example, when the last - number of the account number is embossed with an incorrect number).
This is a case where writing to the memory section 7 is impossible. Third, although the magnetic stripe 2 and emboss information 3 are normal, a part of the memory section 7 is defective, so it is not a normal IC card, but the terminal that can use this IC card is partially used. If possible.

In the first case, a hole 8 is made in the magnetic stripe 2 by the destruction unit 35, and a hole 8 is made in the magnetic stripe 2 by the reader/writer unit 34.
A void command is written in the memory section 7. Although the emboss information 3 is not formed at all, since it is incomplete, it can be determined by looking at it, and therefore there is no need to make holes with the destruction unit 35.

In the second case, since the magnetic stripe 2 is written normally and the embossed information 3 is formed normally, each part of the magnetic stripe 2 and embossed information 3 is punched by the destruction unit 35. Let's do it. Since it is not possible to write into the memory section 7, there is no need to write a void instruction using the reader/writer unit 34 (rather, it is impossible to write the void instruction itself).

In the third case, each part of the magnetic stripe 2 and embossed information 3 is punched by the destruction unit 35, and a void command is written in the memory section 7 by the reader/writer unit 34.

After the above-mentioned unusable processing is performed on the defective IC cards, they are sorted by the sorting section 36 and are stacked in the reject stacker 37.

The IC card on which magnetic data has been normally written and sent to the embossing unit 33 has embossed information 3 formed thereon. Here, we generally use the character type 〈
Although raised characters are formed on the upper side by pressing (convex and concave), raised characters may also be formed by pasting characters. When forming emboss information 3 by pressing a character mold, the position of the press mold for each character is checked, and the microprocessor 28 checks whether or not the emboss is done correctly. Immediately after this happens, embossing is stopped and the above-mentioned unusable process is performed. Of course, the data to be embossed is controlled by the microprocessor 28.

When the embossed information 3 is normally formed, the IC card is sent to the reader/writer unit 34, and the contact portion 5 of the IC card is placed at the contact position of the reader/writer unit 34.
came and was stopped. After that, the reader/writer unit 34
The microprocessor 28 controls the contact portion (not shown) of the IC card so that it comes into contact with the contact portion 5 of the IC card.

When the microprocessor 28 inputs a signal to the read/write control section 39 indicating that the contact of the contact section 5 has been completed, the read/write control section 39 supplies power to the control section 6 and the memory section 7 via the contact section 5. and sends a start signal (command).

After receiving a reply signal (response) from the IC card control unit 6, the read/write control unit 39 reads the key card KC inserted into the card reader/writer 40 and the fixed data inserted into the card reader/writer 41. The data from the card FC is written into the memory section 7 of the IC card and checked. Here, when the read/write control unit 39 confirms that the data has been written normally,
In response to the signal from the read/write controller 39, the microprocessor 28 controls the reader/writer unit 34 to separate the contact section (not shown) from the contact section 5 of the IC card. Thereafter, under the control of the microprocessor 28 , it passes through the breaking unit 35 and becomes the dividing section 36 .
IC cards on which all writing has been normally completed are stacked in the stacker 38. Here is the key card K
For example, an IC card similar to the IC card shown in FIG. 3 is used as the C and fixed data card FC. However, it is assumed that the magnetic stripe 2 and the embossed information 3 are not provided.

The three writings of magnetic data, embossed information, and electronic recording are carried out at the electronic recording unit, i.e., the reader/writer unit 34, at the end.

This is so that since the embossed information is written using a press, the integrated circuit 4, contact portion 5, etc. can be recorded on an undamaged IC card during this operation, that is, the product can be checked.

In addition, in FIG. 2, 42 is the I in the stacker 37°38.
This is an exit door for taking out the C card.

FIG. 6 shows the contents of the memory section 50 of the access key card AC. 51 is a control program area where a control program is stored, 52 is a terminal access code area where a terminal access code is stored, 53 is a card access code area where a card access code is stored, and 54 is a pin number stored therein. PIN code area, 55
56 is a user name area for storing the user's name (code); 56 is a void area for storing void commands;
57 is an error count area for counting errors, and 58 is an issuance record area for recording issuance.

FIG. 7 shows the contents of the memory section 60 of the key card KC. 61 is a III control program area that stores a control program, 62 is an issue code area that stores an issue code, 63 is a terminal access code area that stores a terminal access code, and 64 is a card access code that is stored. card access code area, 65
6 is a password area where the password is stored, 66 is the user name area where the user name (code) is stored, and 6 is the user name area where the user name (code) is stored.
7G is the issue name board PIN number area that stores the issue name board PIN number, 68 is the issuer record area that stores the issuer record, 69 is the void area for storing void commands, and 70 is the error count. An error count area 71 is used to record the issuance.

Figure 8 shows the memory section 80 of the fixed data card FC.
It shows the contents. 81 is a control program area for storing a control program, 82 is an issue code area for storing an issue code, 83 is a terminal access code area for storing a terminal access code, and 84 is for storing a card access code. 85 is the card access code area where the password is stored, and 85 is the password area where the password is stored.
86 is a user name area for storing the user's name (code), 87 is a void area for storing void commands, 88 is an error count area for counting errors, and 89 is the number of issued sheets (number of sheets processed). 90 is a data area that stores common data for IC cards to be written in the IC card.

The number of IC cards to be issued is, for example, the number of IC cards to be issued at this time, which is memorized by the administrator (specialized person).

FIG. 9 shows the contents of the memory section 7 of the IC card after it is issued. 91 is the basic f14I! which stores the basic control program. l program area; 92 is a manufacturer record area that stores manufacturer records; 93 is a publisher record area that stores issuer records; 94 is an issue record area for recording issues; 95 is an application program an application program area that stores
96 is a carrying person record area for carrying out carrying person records, 9
7 is an empty area.

Next, the operation of the above configuration will be explained with reference to the flowchart shown in FIG.

First, when the power of this device is turned on, the host processor 2 performs initial settings, and if there are no problems, the message "Insert the access key card" will be displayed on the display [17] (Sl). Then, the operator inserts the access key card AC into the card reader/writer 8 (S2).Then, the access key card AC is supplied with power and activated.
A check is made between the access key card AC and the host processor 12 to determine whether the inserted access key card AC is compatible with this device (83.84). This compatibility verification is performed, for example, in the following manner.

That is, a terminal access code is stored in the terminal access code area 52 of the memory section 50 of the access key card AC, and by requesting this terminal access code from the host processor 12 and sending it back to the host processor 12, 1. It is compared with a code registered in the host processor 12. Next, the host processor 12 sends the card access code to the access key card AC, and the card access code in the card access code area 53 of the memory section 50 is checked by the access key card reader. By any method, it is verified that the host processor 12 and the access key card AC can access each other. If the host processor 12 and the access key card AC cannot be matched here, the access key card AC is ejected from the card reader/writer 18 (S5) and the entire process ends.

Note that since the access key card AC was different, if another access key card AC is used, the process will start from the first step.

In step S4, if the host processor 12 and the access key card AC are matched, the host processor 12 reads out all the data in the memory section 50 of the access key card AC and temporarily holds it.
7 displays a message "Please enter your password" (S7). Here, the operator uses keyboard 1
6 inputs a PIN number (88), this input PIN number is sent to the host processor 12, and the host processor 12 that receives it reads it from the access key card AC and stores it in the PIN area 54 held. Verification with the password is performed (S9). If the passwords do not match here, the value in the error count area 57 read from the access key card AC and held is checked (S10). For example, when the number of mismatches reaches three, if the access key card AC is controlled to be unusable, it is checked whether the number of mismatches (errors) is three. Here, if the number of mismatches has not reached three, the value in the error count area 57 of the memory section 50 of the access key card AC is counted up by one (S11), and the display device 17
The message "Password code not verified, please enter the code again" is displayed, but the first game returns to step S7. Then you will have to enter your PIN again. On the other hand, if the number of mismatches has reached 3, the host processor 12 clears the temporarily held data of the access key card AC (512) and sends a void command to the void area 56 of the memory section 50 of the access key card AC. Writing (S13), and subsequent use of the access key card AC is disabled. This method is carried out, for example, by issuing an unusable code instead of the terminal access code when verifying the host processor 12 and the access key card AC. In this way, when the access key card AC is voided, the contents of the user name area 55 of the memory section 5o of the access key card AC are read out by the printer 19, and the user name, unverified comments, date, etc. are read out by the printer 19. is printed (S14), and the entire process ends after this printing is completed. The access key card AC is ejected from the card reader/writer 18 after the user's name is read before the above printing.

If the passwords match in step S9, the host processor 12 causes the display device 1'17 to display a message "insert key card" (315).
. Here, insert the key card KC into the card reader/writer 40.
(316). Then, the key card KO and the read/write control unit 39 are connected to the host processor 1 described above.
2 and access key card AC are verified to be able to access each other (
817, 518). If the key card KC and the read/write controller 39 cannot be matched here, the key card KO is ejected from the card reader/writer 40 (819). If there is a new keycard KO, i.e. if a different keycard KC is inserted by mistake,
You can insert another correct keycard KO (S
20). If there is no other key card KC, keyboard 1
Press the end key at 6 (821>).

Then, the read/write 1IIJI 11 section 39 clears the contents of the data buffer (822), and after the contents of the user name area 55 of the memory section 50 of the access key card AC is read out, the access key card AC clears the contents of the data buffer 822). (S23). At the same time, the printer 19 prints the user name read from the user name area 55 along with the date (S24).
, the entire process ends after this printing is completed.

In step 818, if the key card KO is matched with the read/write controller 39, the read/write controller 39 reads out all the data in the memory section 60 of the key card KC and temporarily holds it in the data buffer (825). In addition, by receiving a signal from the three read/write control units via the microprocessor 28 indicating that the verification has been completed, the host processor 12 causes the display device 17 to display a message "Enter your password" ( S26).

Here, enter your password using the keyboard 29.
827). If the password is entered by the administrator rather than by the operator using the access key card AC, the security of the IC card issuance operation will be enhanced. Also, inputting the PIN number is done on the keyboard 1.
Since the process is performed using the keyboard 29 provided in the issuance processing unit 27 instead of using the computer 6, security is enhanced as there is no wiring to the outside to prevent ms from being lost in the middle.

The PIN entered on the keyboard 29 is sent from the microprocessor 28 to the read/write controller 39, and upon receiving it, the read/write controller 39 reads it from the key card KC and stores it in the data buffer, which is the PIN area 65. The password is verified against the password (328). This verification result is sent from the read/write control unit 39 to the host processor 12 via the microprocessor 28.

Therefore, the display of the matching result (match, mismatch) can be confirmed on the display device 117, but the matching result is also displayed on the display 30 of the issuing processing unit 27, and the PIN number of the key card KC is input in the issuing processing unit 27. It is easy to operate for those who use it.

If the PIN numbers do not match in step 828, the read/write control unit 39 reads out the value from the key card KC and checks the value in the error count area 70 held in the data buffer (829>. For example, the number of mismatches is 3). In this case, if it is controlled that the key card KC cannot be used, the number of discrepancies (number of errors) will be 3.
Check to see if it is turned on. Here, if the number of mismatches has not reached 3, the value in the error count area 70 of the memory section 60 of the key card KO is counted up by one (830), and the display W117 displays "Password mismatch. The message "Enter your PIN again" is displayed, but the operation returns to step 326. Then you will have to enter your PIN again. On the other hand, if the number of mismatches has reached 3, the read/write control unit 3
9 clears the contents of the data buffer (831) and writes a void command to the void area 69 of the memory section 60 of the key card KC (S32), making it impossible to use the key card KC from then on.

This method is carried out, for example, by issuing an unusable code instead of the terminal access code when checking the read/write control section 39 and the key card KC. In this way, when the key card KC is voided, the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 66 of the memory section 60 of the key card J<C are After each is read,
The access key card AC is ejected from the card reader/writer 18, and the key card KC is ejected from the card reader/writer 40. At the same time, the printer 19 prints the user name thus read out from the user name area 55, the user name read out from the user name area 66, unverified comments, and the date (S33).
. After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

If the passwords match in step 828, the host processor 12 causes the display 17 to display a message "Insert fixed data card" (834). Here, Fixed Data Card FC
is inserted into the card reader/writer 41 (835). Then, the fixed data card FC and the reading/writing control section 39 perform verification in the same manner as the above-mentioned verification that the reading/writing control section 39 and the key card KC can access each other ( 836, 837)
. If the fixed data card FC and the reading/writing control unit 39 cannot be matched here, the fixed data card FC is ejected from the card reader/writer 41 (838). If there is a new fixed data card FC, ie, if a different fixed data card FC was inserted some time ago, then another correct fixed data card FC can be inserted (839). If there is no other fixed data card FC, press the end key on the keyboard 16 (840)
. Then, the read/write control section 39 clears the contents of the data buffer (841) and clears the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 66 of the memory section 60 of the key card KO. After each content is read out, access key card AC
is ejected from the card reader/writer 18, and the key card KO is ejected from the card reader/writer 40 (84).
2). At the same time, the printer 19 prints the user name read from the user name area 55, the user name read from the user name area 66, the comment, the date, etc. (843). After such processing,
The operation of this device has ended, and if it is to be operated again, it must be started from the beginning.

In step S37, the fixed data card F
If C is matched with the reading/writing control section 39, the reading/writing control section 39 reads the fixed data card FC.
All the data in the memory section 80 is read out and temporarily stored in the data buffer (844), and then the fixed data card FC and the key card KC are compared (S45).
546), this verification is performed by comparing, for example, the issue code in the issue code area 62 read from the key card KC and held in the data buffer, and the fixed data card F.
This is done by comparing the issued code read from C and held in the data buffer with the issued code in the issued code area 82. Both the key card KC and the fixed data card FC are used as bare cards, and therefore it is necessary to perform the above verification. Fixed data card FC has different issuers but is used in the same way (for example, if OO Bank and XX Bank cooperate and can be used with each other, it will be the same application), key card KC and fixed data card FC It is effective to separate the data card FC and the data card FC. In this case, issue code area 8 of memory section 80 of fixed data card FC
By creating multiple issue codes in 2, it becomes possible to deal with key cards KC from different issuers. Of course, key card K
By storing all the data of the fixed data card FC (data to be written to the issued IC card) in O, it is also possible to start the device with only the key card KC. In this case, initial settings can be made using the keyboard 29 of the issue processing unit 27.

In step 846, if the key card KC and the fixed data card FC cannot be matched, the process proceeds to step 538 where the fixed data card FC is ejected, and the above-mentioned fixed data card FC and reading/writing control section 39 are connected to each other. The same processing as when no match is made is performed.

In step 346, if the key card KC and fixed data card FC are matched, a signal to that effect is sent from the read/write control unit 39 to the microprocessor 2.
8, the host processor 12 causes the display device 17 to display a message "Enter your password" (S47). Here, key card K
The password is input using the keyboard 29 in the same manner as inputting the password in step C (848). This is also a key card KC
If the administrator, rather than the operator using the access key card AC, enters the password, the security of the IC card issuing operation will be enhanced.

[!] entered on the keyboard 29 The iiE number is sent from the microprocessor 28 to the read/write control section 39, and upon receiving it, the read/write control section 39 reads out the PIN number from the fixed data card FC and stores it in the data buffer, which is the PIN code in the PIN area 85. Verification with the number is performed (849). This verification result is read/write IIJ
The data is sent from the m section 39 to the host processor 12 via the microprocessor 28. Therefore, the display of the verification result (match, mismatch) can be confirmed on the display @17, but the verification result is also displayed on the display 3o of the issuance processing unit 27, and the issuance processing unit 27 confirms the fixed data card FC password. It is easy to operate for the person who is inputting the number.

If the passwords do not match in step 849, the read/write controller 39 checks the value in the error count area 88 read from the fixed data card FC and held in the data buffer (850). For example, if the number of discrepancies reaches 3, if the fixed data card FC is controlled to be unusable,
Check whether the number of mismatches (number of errors) is three. Here, if the number of mismatches has not reached three times, the memory section 80 of the fixed data card FC
The value in the error count area 88 is incremented by one (851), and the message "PIN code mismatch, please enter the password again" is displayed on the display device 17, but the operation continues at step S47. Return to So again,
You will have to enter your PIN number. On the other hand, the number of discrepancies is 3
If the reading/writing control unit 39 has reached the data buffer? 852), and writes a void command in the void area 87 of the memory section 80 of the fixed data card FC (S53), so that the fixed data card FC cannot be used thereafter. This method is performed by, for example, outputting an unusable code instead of the terminal access code when comparing the read/write control unit 39 with the fixed data card FC. In this way, when the fixed data card FC is voided, the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 86 of the memory section 80 of the fixed data card FC After the contents are read, the access key card AC is ejected from the card reader/writer 18 and the fixed data card FC is ejected from the card reader/writer 41. At the same time, the printer 19 prints the user name read from the user name area 55, the user name read from the user name area 86, unverified comments, the date, etc. (S54).

After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

If the passwords match in step 849, the host processor 12 causes the display device 17 to display a message "Enter data" (855). Here, a floppy disk (or magnetic tape), which is a file of different data for each IC card to be inserted into the IC card to be issued, is set in the floppy disk device 14 (or magnetic tape unit 15) (856).
). Next, an unissued IC card is set in the hopper 31 of the issuing processing unit 27 (S57). Next, by pressing the start key on the keyboard 16 (8
58), the startup of this device is completed.

When the startup is completed, the host processor 12 reads out the IC card issue data from the floppy disk drive 14 and sends it to the microprocessor 28. Then, the microprocessor 28 takes out one IC card from the hopper 31 <859>. When the removed IC card comes to the encoding unit 32, the microprocessor 28 writes the data sent from the host processor 12 onto the magnetic stripe 2 of the IC card (S60). After writing is completed,
The microprocessor 28 reads the written data and checks whether the written data has been written correctly by comparing it with the data stored in the microprocessor 28 and sent from the host processor 12 ( 861).

If the writing is incomplete in this check, the microprocessor 28 writes the data again (S62). Then, the check is performed again (863), and if the writing is still incomplete, the IC card is sent to the destruction unit 35 as a defective IC card, and the magnetic stripe 2 has a hole 8.
is opened (864) and stacked on the reject stacker 37 by the sorting section 36 (S65). The record is then stored on the hard disk drive by the host processor 12.
It is recorded in ef13. When a defective IC card is accumulated in the reject stacker 37, the microprocessor 28 returns to step 859 and transfers the next IC card from the hopper 31.
You will have to take out your card.

If the writing is normal in the check in step S61 or 363, the IC card on which the magnetic data has been written is sent to the embossing unit 33, and embossed information 3 is formed by the microprocessor 28 (S66).

Since the embossing is performed by pressing one character at a time, the microprocessor 28 performs the embossing while checking the pressed character position one by one (867).

Therefore, when one character is erroneously embossed during embossing, the embossing is stopped and the IC card is sent to the destruction unit 35 as defective (868). The embossed information is usually at least the number (account number in banks) and name of the person carrying the IC card, so if it forms one line of either of these, or both, it is impossible to use it fraudulently. Destroy the embossed information 3 part.

Here, in order to emboss the wearer's number first, a hole 9 is made in the part corresponding to the number using the destruction unit 35.

In this case, the microprocessor 28 judges the progress of embossing formation (the microprocessor 28 checks the point at which the embossing is interrupted) (569), and the microprocessor 28 determines whether to make holes only in the magnetic stripe 2 (370) or
Holes are punched in both the embossed information 3 and the embossed information 3 (S71), and the process then proceeds to step S65 where they are stacked on the reject stacker 37.

When the embossed information 3 is accurately formed, the IC card is sent to the reader/writer unit 34, and the contact part 5 comes to the contact position of the reader/writer unit 34 and is stopped. Then, the microprocessor 28 controls the contact part (not shown) of the reader/writer unit 34 to come into contact with the contact part 5 of the IC card, and then reads and sends a signal indicating that the contact part has been brought into contact to the write control part 39. send. Read/write control section 3 that receives this signal
One is to supply an N source to the control unit 6 and memory unit 7 of the IC card, and to exchange initial signals (the basic control program in the basic control program area 91 of the memory unit 7 is
This is written when the card is returned, so initial signals can be sent and received). When the initial signal exchange is completed, the key card KC and the issued I
Verification with the C card is performed (872, 373).

This verification method is performed, for example, by verifying the issuer's temporary PIN number. It is considered that when an unissued IC card is handed over from a manufacturer to an issuer, a password is set for the exchange between the manufacturer and the issuer to prevent unauthorized use by a third party. In addition, since this [18 identification number is required only when the IC card is delivered, the issuer's temporary PIN is used as a separate PIN after issuance. Verification using the issuer's temporary PIN is performed in the following manner. First, the read/write control unit 39 reads out the key card KO, holds it in a data buffer, and sends the issuer temporary PIN number in the issuer temporary PIN area 67 to the control unit 6 of the IC card to be issued. The control unit 6 controls the issuer record area 93 (
The issuer's temporary PIN written by the manufacturer in the area for writing data such as the issuer's name and issuer code is read out and compared with the issuer's temporary PIN sent from the read/write control section 39. If the issuer's temporary PIN does not match after this verification, the writing of the magnetic data and the formation of the embossed information have been completed, so the IC card is sent to the destruction unit 35 (874), and the magnetic stripe 2 and embossed information are sent to the destruction unit 35 (874). A hole is punched in the information 3 portion (875), and the process then proceeds to step 865 where it is accumulated in the reject stacker 37.

If the issuer temporary PIN numbers match in step 873, the read/write control unit 39 reads the fixed data in the issuer record area 93 and application program area 95 of the memory unit 7, and the fixed data for each issued IC card in the carrier record area 96. (876). This rice filling is performed as follows. First, Fixed Data Card FC
The fixed data in the data area 9o, which is read from the data buffer and held in the data buffer, is written into the memory section 7. The contents of the fixed data include the application program written in the application program area 95, the area classification of the issue record area 94 and the carrier record area 96, and the like. When writing of this fixed data is completed, the contents of the issuer recording area 68 read from the key card KC and held in the data buffer are written into the issuer recording area 93 of the memory section 7. After writing these data,
The read/write control section 39 writes variable data for the wearer sent from the host processor 12 via the microprocessor 28 into the wearer recording area 96 of the memory section 7 .

In this way, when data writing to the memory section 7 is completed,
The read/write control unit 39 reads the written data and compares it with the data from the fixed data card FC and key card KO held in the data buffer and the data from the host processor 12, thereby updating the data in the memory unit 7. Check the written data (877). As a result of this check, if the writing is defective, the data is written to the memory section 7 again (878). Still, there is a write failure again (879
), if the application is possible to some extent, although not completely (880), void data is written in the issue recording area 94 of the memory unit 7 so that it cannot be used (882). If the IC card is void and cannot be written to, it is sent as a defective IC card to the destruction unit 35, where a hole is punched in the magnetic stripe 2J5 and embossed information 3 (881, 883), and then the process proceeds to step 865. It is accumulated in a reject stacker 37. When a defective IC card is stacked on the reject stacker 37, it is checked by the microprocessor 28 and sent from the microprocessor 28 to the host processor 12.
The number of defective sheets is recorded in the hard disk drive 13.

If the writing is normal in the check in step 877 or 879, the read/write III controller 39 calculates a temporary carrier PIN number using random numbers (884), and transfers the calculated temporary carrier PIN number to the carrier in the memory unit 7. Recording area 9
6 (885). Next, read/write control unit 39
The names of each user of the access key card AC, key card KO, and fixed data card FC held in the data buffer are stored in the issuance record area 94 of the memory section 7.
(886). When this is completed, the read/write control section 39 writes unrewritable hold data into the basic control program area 91 of the memory section 7 (887
), it is not possible to change anything other than the temporary PIN of the bearer or the part that the bearer writes in when receiving the service. Then, this IC card becomes issued and is sent to the stacker 38 to be accumulated (888). At the same time, the host processor 12 uses the printer 19 to
The C card shipping note (all this data can be created from the data recorded on the floppy disk 14 or the magnetic tape of the magnetic tape unit 15) is printed, and the printer 20 prints out the carrier's temporary information calculated above. An issuance notification 21 with a password printed thereon is created (389). When the temporary PIN number of the bearer is printed by the printer 20, the storage in the read/write control unit 39 is erased, thereby making the temporary PIN number extremely secure.

The read/write control unit 39 controls the I/O that has been issued to the stacker 38
When the C cards are accumulated, the number of issued cards is counted up (590), and by comparing the count value with the number of issued cards in the issued number area 89 read from the fixed data card FC held in the data buffer. ,
It is checked whether the number of issued sheets has reached the planned number (891). As a result of this check, if the planned number of cards has not been reached, a signal to that effect is sent to the host processor 12, so after receiving the data from the host processor 12, the microprocessor 28 takes out one IC card from the hopper 31 ( 859'). As a result of the check in step 891, if the scheduled number of sheets has been reached (if the number of sheets to be issued after counting up and the number of sheets to be issued in the number of issued sheets area 89 are the same), the issuance ends. Of course,
Issuance ends even if there is data to be issued to the host processor 12 side.

In addition, before writing the hold data in step S87, the serial number written in the manufacturer record area 92 of the memory section 7 (a serial number is attached to each IC card manufactured by the manufacturer and By reading out the stored number) and writing it in the issuance record area 71 of the memory section 60 of the key card KC as the serial number of the issued IC card, it is possible to check the IC card including the manufacturing number, which is effective for management.

When the issuance is completed in this way, the reading accident control unit 39 stores the counted number of issued cards in the memory unit 6 of the key card KC.
Write in the issue record area 71 of 0 along with the date (892
). When this writing is completed, the host processor 12 causes the display device 17 to display a message "Press the end key" (893).
The end key is pressed (894). This results in
The host processor 12 prints the issuance record stored in the hard disk drive w13 using the printer 19 (S95). For example, as shown in FIG. 11, this issuance record includes the serial number read out from the IC cards issued in the order of the issuance number, the name and address of the bearer inputted using the floppy disk unit w14 (or magnetic tape unit 15). etc. will be printed. Also, by opening the ejection door 42 of the issuance processing unit 27, the defective IC card and the issued IC card are taken out from the reject stacker 37 and the stacker 38, respectively.
). In addition, a defective IC card must have at least the magnetic stripe 2 or the magnetic stripe 2 and the embossed information 3.
There are holes in both parts of the issued I.
It can be easily distinguished from the C card.

Thereafter, when the end key is pressed again on the keyboard 16 (897), the host processor 12 writes the issuance date and issuance record area 58 of the access key card AC in the same way as the issuance record was written to the key card KC. Write the number of cards, key card code, fixed data card code, etc. (398). This records what kind of issue was issued, when and how many copies were issued. Next, the read/write control unit 39 clears the contents of the data buffer (S99). Then, the access key card AC, key card KC, and fixed data card FC are each ejected (8100), and all operations of this device are completed.

The IC card processing device described above uses a key card KC and a fixed data card FC that hold data common to IC cards to be written to unissued IC cards, and uses the key card KC and fixed data card FC to The data common to the held IC cards is read by the read/write controller 39 and temporarily held in a built-in data buffer, and then the data held in the data buffer is written to the IC card by the read/write controller 39. Reading data from the key card KC and fixed data card FC, retaining the read data, and writing the retained data to the IC card are performed by the read/write controller 39 (and microprocessor 28) as described above. It is something. As a result, key card KC and fixed data card F
Reading data from the IC card, retaining the read data, and writing the retained data to the IC card can be performed without going through the host processor 12.
Data written on the card will not be easily leaked to the outside, and security will be extremely high. In addition, when the number of IC cards issued (number of processes processed) is far from the specified number, data common to IC cards held in the data buffer of the read/write section 39 is erased, making it more reliable to prevent data leakage. This can be prevented and security can be further improved.

In addition, in the above embodiment, the fixed data card FC
Although the number of issued sheets (number of processed sheets) is input using the above, the input is not limited thereto, and may be inputted using a key card KC, or may be inputted using the keyboard 29 of the issuing processing unit 27.

Further, the present invention is not limited to the above embodiments, and various modifications are possible. For example, instead of the key card KO and its card reader variator 40, a data holding device equipped with a control section and a memory section that can store information that identifies the user and perform internal verification may be used, and the read/write control section 39 and It is conceivable to connect them with removable contacts.

Similarly, the fixed data card FC and its card reader/writer 41 are also made into data holding devices equipped with a control section and a memory section that can store information that identifies the user and perform internal verification. What is the input control section 39?
It is conceivable to connect with removable contacts. In addition, although a PIN number was used to identify the user of the key card KC and fixed data card FC, it is also possible to memorize the user's physical characteristics such as fingerprints or signature, and use that information for verification. be. In that case, the keyboard 29 of the issuing processing unit 27 needs to be provided with means for inputting fingerprints, signatures, etc.

Further, in the embodiment, an IC card is issued by writing predetermined data to an unissued IC card.
Although we have explained the case where it is applied to a C card processing device,
The present invention is not limited to this, but can be similarly applied to an IC card processing device that writes initialization data to an IC card, for example, at the stage of manufacturing the IC card.

Further, in the above embodiments, the portable storage medium is an IC card with a magnetic stripe, but the same applies to an IC card without a magnetic stripe or an optical memory card called a laser memory card. can.

[Effects of the Invention] As detailed above, according to the present invention, it is possible to provide a portable storage medium processing device with high security that is suitable for a portable storage medium with high security.

[Brief explanation of the drawing]

The figures are for explaining one practical example of the present invention. Fig. 1 is a block diagram of an IC card processing device, and Fig. 2 is a block diagram of an IC card processing device.
Figure 3 is an external perspective view of the card processing device, Figure 3 is an external perspective view of the IC card after it has been issued, Figure 4 is an external perspective view of a defective IC card, and Figure 5 is the printing of a notice of issuance of the temporary PIN number of the bearer. Figure 6 shows the contents of the memory part of the access key card, Figure 7 shows the contents of the memory part of the key card, and Figure 8 shows the contents of the memory part of the fixed data card. FIG. 9 is a diagram showing the contents of the memory section of the IC card after it is issued, FIG. 10 is a flowchart explaining the operation, and FIG. 11 is a diagram showing an example of printing of the issuance record. 6...IC card control unit, 7...I
C card memory section, 11... host control unit, 12... host pro, 8. Tsusa, 27
...Issuance processing unit t-, 28...-79
Input processor, 34...reader/writer unit, 39...read/write control section, 40.4
1...Card reader/writer, 60...
・Key card memory section, 80...Fixed data card memory section, KC...Key card, FC...Fixed data card. Applicant's representative Patent attorney Takehiko Suzue Figure 3 Figure 4 Figure 5 Figure 8 Figure 11 Figure 9 Procedural amendment 62.1.12 Showa year Month Date Commissioner of the Patent Office Black 1) Akio Tono 1, Case Indication of Japanese Patent Application No. 61-199922 2, Name of the invention Portable storage medium processing device 3, Relationship with the amended case Patent applicant (307) Toshiba Corporation (and 1 other person) 4. Agent Tokyo tJBE Building 7, 3-7-2 Kasumigaseki, Chiyoda-ku
, page 8, line 13, and page 17, line 6 to line 7 of Statement of Contents of Amendment III, respectively, replace the phrase ``shall not be provided.'' with ``it may not be provided.'' ” he corrected.

Claims (5)

[Claims] (1) A portable storage medium processing device that writes predetermined data to a portable storage medium; a data holding device that holds data common to portable storage media to be written to the portable storage medium; a read/write control means for reading the data from the data holding device, temporarily holding it, and writing the held data onto a portable storage medium; an input means for inputting the number of portable storage media to be processed by the device; a counting means for counting the number of portable storage media processed by the apparatus; when the count value of the counting means reaches the number input by the input means, the data held in the read/write control means is 1. A portable storage medium processing device comprising: erasing means for erasing data. (2) The portable storage medium processing device according to claim 1, wherein the input means is the data holding device. (3) The portable storage medium processing device according to claim 1, wherein the counting means and the erasing means are the read/write control means. (4) The portable storage medium processing device according to claim 1, wherein the portable storage medium is an IC card. (5) The portable storage medium processing device according to claim 1, wherein an IC card is used as the data holding device.