JPS6356782A - Portable storage medium processor - Google Patents

Abstract

PURPOSE:To manage the number of processings without fail by designating the number of cards to execute the issuing processing of an IC card with a key card. CONSTITUTION:An IC card issuing processing device is composed of a host control unit 11, a peripheral device composed of a printer, etc., and an issuing processing unit 27. The issuing processing unit 27 is composed of a microprocessor 28 which is connected to the host control unit 11 and controls the issuing processing unit 27, an embossing unit 33 to execute the preparing processing of the IC card, a reader/writer unit 34, etc., and a card reader/writer 40 to read the card of a key card KC to a designate the number of issuing the IC card and write the number of issuing the card into the key card KC in accordance with the issuing processing. Thus, since the number of key card designated cards is issued and processed for the number of issuing the IC card, the illegality of an operator, etc., can be prevented.

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention] (Industrial Application Field) The present invention relates to a portable storage medium processing device that issues portable storage media such as IC cards.

(Prior art) Generally, cards with magnetic stripes used for identification cards or credit cards, so-called magnetic cards, have problems such as low security because they have a small amount of stored data and are easy to read out. There is.

Therefore, recently, portable storage media, so-called IC cards, which have high security for reading out stored contents and have a large storage capacity, are being used. This type of IC card is usually handed over from the card manufacturer to the card issuer in an unissued state, and the card issuer writes predetermined data on it, issues it, and hands it to the user. .

By the way, in the conventional IC card issuance processing method, data written on a magnetic tape or floppy disk is directly input to a card reader/writer via a host computer, as in the case of conventional magnetic card issuance.
A method was used in which the IC card was issued by writing on an unissued IC card.

However, in the past, processing was left to the operator, which made it impossible to manage the number of processes, etc., and there was a risk of fraud by the operator (such as cheating on the number of processes), resulting in security problems. .

(Problems to be solved by the invention) As mentioned above, in the past, it was not possible to manage the number of processes, etc.
Therefore, there is a risk that fraud may occur, and there is a security problem.

SUMMARY OF THE INVENTION Therefore, an object of the present invention is to eliminate the above-mentioned drawbacks, and to provide a portable storage medium processing device that can prevent fraud and significantly improve security.

[Structure of the Invention] (Means for Solving the Problems) The portable storage medium processing device of the present invention is a portable storage medium processing device that processes in advance a key medium storage device that has a storage device that is a key for starting the device. The feature is that the number of storage media is stored and processing is performed for that number.

(Function) Since the number of portable storage media to be processed is specified by the key medium, the number of processing can be managed, and therefore fraud by operators etc. can be reliably prevented, and security is significantly improved.

(Example) Hereinafter, an example of the present invention will be described with reference to the oral surface.

FIG. 3 shows an example of a portable storage medium according to the present invention.
The appearance of an IC card with a magnetic stripe after being issued is shown. That is, 1 is a card body, which is made of, for example, a rectangular thin plastic plate. A magnetic stripe 2 is provided at the end of the front surface of the card body 1 in the form of a strip in the longitudinal direction. In addition, on the surface of the card body 1, embossed information 91 is written on the embossed print.
13 are formed. The embossed information 3 includes identification information of the card holder, such as the card holder's name, account number, and card expiration date.

Roughly speaking, on the surface of the card body 1, there are input/output terminals that are electrically connected to an integrated circuit (IC>4) embedded in the card body 1 and for obtaining electrical contact with a card reader/writer (not shown). The integrated circuit 4 includes a υ control section (for example, a microprocessor) 6 and a memory section (for example, an EEPROM>7). is not formed.

FIG. 2 shows an external perspective view of an IC card processing device that issues IC cards as an example of a portable storage medium processing device according to the present invention, and FIG. 1 shows a block configuration diagram thereof. That is, 11 is a host control unit, which includes a host processor 12 consisting of a control section (not shown) and a memory section containing a control program, and a hard disk device 13 that stores a program that controls the entire book II and the processing contents of this device. and a floppy disk device 14 for inputting data that is part of the data to be written on the IC card and that differs from IC card to IC card, such as the name of the card holder and the account number in the case of a cash card. This is the host for the device. Numeral 15 is a magnetic tape unit for inputting different data for each IC card, similar to the 7O disk device 14, and is connected to the host processor 12, so that it can be used, for example, by an IC card issuer for its services. V registered on the system's host computer
It is also possible to use the magnetic tape created by the magnetic tape unit of the host computer from the list of frM subscribers.

16 is a keyboard for performing operations such as ◆◆, and 17 is a CRT display device for displaying operating procedures, status, etc., and these are connected to the host processor 12. 18 is a card reader/writer, and host processor 1
2, and it is possible to insert an access key card AC to activate the device. Here, as the access key card AC, for example, an IC card similar to the IC card shown in FIG. 3 is used.

However, it is assumed that the magnetic stripe 2 and the embossed information 3 are not provided.

19 is a printer that creates a shipping base for shipping the issued IC card to its holder, and 20 is a printer that sends the ID number of the card holder (which can be changed by the card holder) to the IC card holder. These printers are connected to the host processor 12 and are connected to the host processor 12. The issuance notice 21 created by the printer 20 is structured as shown in FIG. 5, for example. That is, an envelope-shaped issuance notice 1121 is formed on two stacked sheets of paper 22 with the peripheral edge (diagonal 1 part 23) glued in advance, and can be cut at the perforations 24 provided on the peripheral edge. ing. and,
Address/name 25, nap certificate number 26, etc. are printed on this issuance notification 21. In this case, the part where the address/name 25 is printed will also be colored on the first front page, and the part where the nap ID number 26 will be printed will be colored only on the front (inside) of the second back page, and the first page will be colored. The eyes are not colored. This results in
The nap card number is written so that only the card holder can know it.

27 is an issuance processing unit that processes the IC card to be issued, and is connected to the host processor 12. The issue processing unit 27 is configured as follows. That is, 28 is a microprocessor, and host processor 1
2, the issuance control of the IC card, that is, the control of writing magnetic data on the magnetic stripe 2 of the IC card, the control of forming embossed information 3 on the IC card, and the control of writing data in the memory section 7 of the IC card. 29 is a keyboard, 30 is a display for controlling writing, etc.
These are connected to a microprocessor 28. The keyboard 29 is used for inputting a password, testing the book issuing processing unit 27, resetting in case of trouble, and the like. The display device 30 is the main issue processing unit 2
7, the results of test operations, etc. are displayed.

Unissued IC cards are stacked and stored in a hopper 31, and are taken out one by one in response to a signal from the microprocessor 28. The IC card taken out from the hopper 31 is sent to an encoder section 32 in which magnetic data is written.
sent to. After the microprocessor 28 detects that the IC card has arrived at the encoding unit 32 by a detector (not shown), the microprocessor 28 detects that the IC card has arrived at the encoder 32 by sending a write/read head (!
Magnetic data is written on the magnetic stripe 2 using an i-type head. After the writing is completed, the microprocessor 28 reads the written data, checks whether the written data is correctly written, and then sends the IC card to the embossing unit 33.

If the written data is incorrect, the magnetic data is written again and then checked. If the writing still cannot be done correctly, the data passes through the embossing unit 33, further passes through the reader/writer unit 34, and is sent to the destruction unit 35, where, for example, as shown in FIG. open it. This results in
To make an IC card unusable and to visually determine that it is a defective IC card. Further, if the emboss information 3 has been formed, a hole 9 is also made in the emboss information 3 portion as shown in FIG. 4, for example. Regarding electrical recording, it is possible to write a void command in the memory section 7 so that the IC card cannot be used by the control section 6 of the IC card, so it is not necessarily necessary to destroy the IC card by drilling a hole or the like. This not only makes it impossible to use this IC card in a terminal device that can use it, but also makes it possible to determine that this IC card cannot be used with any device. Punching holes in the stripe 2 and emboss information 3 portions and writing a void command into the memory section 7 are performed in the following manner.

The first is when the magnetic stripe 2 is defective, and the second is when the μ emboss information 3 is successfully formed. and cases where embossed information 3 is formed normally but not normally (for example, when the last digit of the account number is embossed with an incorrect number).
This is a case where writing to the memory section 7 is impossible. Third, although the magnetic stripe 2 and emboss information 3 are normal, a part of the memory section 7 is defective, so it is not a normal IC card, but the terminal that can use this IC card is partially used. If possible.

In the first case, a hole 8 is made in the magnetic stripe 2 by the destruction unit 35, and a hole 8 is made in the magnetic stripe 2 by the reader/writer unit 34.
A void command is written in the memory section 7. Although the emboss information 3 is not formed at all, since it is incomplete, it can be determined by looking at it, and therefore there is no need to make holes with the destruction unit 35.

In the second case, since the magnetic stripe 2 is written normally and the embossed information 3 is formed normally, each part of the magnetic stripe 2I3 and the embossed information 3 is punched by the destruction unit 35. Let's do it. Memory section 7
Since it is not possible to polish the data, there is no need to write a void instruction in the reader/writer unit 34 (rather, it is impossible to write the void instruction itself).

In the third case, each part of the magnetic stripe 2 and embossed information 3 is punched by the destruction unit 35, and a void command is written in the memory section 7 by the reader/writer unit 34.

After the above-mentioned unusable processing is performed on the defective IC cards, they are sorted by the sorting section 36 and are stacked in the reject stacker 37.

The IC card on which magnetic data has been normally written and sent to the embossing unit 33 has embossed information 3 formed thereon. Here, we generally use character types (
Although raised characters are formed on the upper side by pressing (convex and concave), raised characters may also be formed by pasting characters. When forming emboss information 3 by pressing a character mold, the position of the press mold for each character is checked, and the microprocessor 28 checks whether or not the emboss is done correctly. Immediately after this happens, embossing is stopped and the above-mentioned unusable process is performed. Of course, the data to be embossed is processed by the microprocessor 28! ilJ is controlled.

When the embossed information 3 is normally formed, the IC card is sent to the reader/writer unit 34, and the contact portion 5 of the IC card is placed at the contact position of the reader/writer unit 34.
came and was stopped. After that, the reader/writer unit 34
The microprocessor 28 controls the contact portion (not shown) of the IC card so that it comes into contact with the contact portion 5 of the IC card.

When the microprocessor 28 inputs a signal to the read/write control section 39 indicating that the contact of the contact section 5 is completed, the read/write control section 39 supplies power to the control section 6 and the memory section 7 via the contact section 5. supply and send a start signal (command).

Read/Write III 111 part 39 is the IC card t
After receiving a reply signal (response) from ill old part 6,
Read and write ll1M! Data from the key card KC inserted into the card reader/writer 40 connected to the first part 39 and the fixed data card FC inserted into the card reader/writer 41 are stored in the memory part 7 of the IC card.
Write and check. Here, when the read/write controller 39 confirms that the data has been written normally, upon receiving a signal from the read/write controller 39,
The microprocessor 28 is the contact part 5 of the IC card.
The reader/writer unit 34 is moved 11112 so that the contact portion (not shown) is separated from the contact portion (not shown). Thereafter, under the control of the microprocessor 28, the cards pass through the destruction unit 35 and are sorted by the sorting section 36; the IC cards on which all writing has been normally completed are stacked in the stacker 38. Here, key card KC and fixed data card FC
4. For example, an IC card similar to the IC card shown in FIG. 3 is used.

However, it is assumed that the magnetic stripe 2 and the embossed information 3 are not provided.

The electronic recording unit, that is, the reader/writer unit 34 is the last place to write the magnetic data, embossed information, and electronic recording.

This is so that since the embossed information is written using a press, the integrated circuit 4, contact portion 5, etc. can be recorded on an undamaged IC card during this operation, that is, the product can be checked.

In addition, in FIG. 2, 42 is the I in the stacker 37°38.
This is an exit door for taking out the C card.

FIG. 6 shows the contents of the memory section 50 of the access key card AC. 51 is a control program area, 52 is a terminal access code area, 53 is a card access code area, 54 is a pin number area, 55 is a user name (code) area, 56 is a void area, 57 is an error count area, and 58 is an issue area. This is the recording area.

FIG. 7 shows the contents of the memory section 60 of the key card KC. 61 is a control program area, 62 is an issue code area, 63 is a terminal access code area, 64 is a card access code area, 65 is a pin number area, 66
is the user name (code) area, 67 is the issue front board PIN number area, 68 is the issuer record area, 69 is the void area, 7o is the error count area, 71 is the number of issues area, 72 is the issue count area, 73 is the issue area A defective count area, 74 a cumulative issue area, and 75 an issue record area.

Figure 8 shows the memory section 80 of the fixed data card FC.
It shows the contents. 81 is a control program area;
2 is an issue code area, 83 is a terminal access code area, 84 is a card access code area, 85 is a pin number area, 86 is a user name (code) area, 87 is a void area, 88 is an error count area, and 89 is data area.

FIG. 9 shows the contents of the memory section 7 of the IC card after it is issued. 91 is a basic i control program area, 92 is a manufacturer record area, 93 is an issuer record area, 94 is an issue record area, 95 is an application program area, 96 is a carrier record area, and 97 is an empty area.

Next, the operation of the above configuration will be explained with reference to the flowchart shown in FIG.

First, when this IN is powered on, the host processor 1
Step 2 performs initial settings, and if there are no problems, displays a message "Insert the access key card" on the display device 17 (Sl). Here, the operator inserts the access key card AC into the card reader/writer 18 (S2). Then, the access key card AC is supplied with power and activated, and a check is made between the access key card AC and the host processor 12 to see if the inserted access key card AC is compatible with this device. be done (83.34). This compatibility verification is performed, for example, in the following manner.

That is, a terminal access code is stored in the terminal access code area 52 of the memory section 50 of the access key card AC, and by requesting this terminal access code from the host processor 12 and returning it to the host processor 12, the host It is compared with a code registered in the processor 12. Next, the host processor 12 sends the card access code to the access key card AC, and the access key card A is checked against the card access code in the card access code area 53 of the memory section 50.
Do this in C. By any method, it is verified that the host processor 12 and the access key card AC can access each other. If the host processor 12 and the access key card AC cannot be matched here, the access key card AC is connected to the card reader.
It is ejected from the writer 18 (85), and the entire process ends.

Note that since the access key card AC was different, if another access key card AC is used, the process will start from the first step.

In step S4, if the host processor 12 and the access key card AC are matched, the host processor 12 displays the message "Enter your password" on the display device 17.
A message is displayed (S6). Here, the operator inputs the password using the keyboard 16 (
S7). This entered PIN number is sent to the access key card AC by the host processor 12, and is sent to the control section (not shown) of the access key card AC and the control program area 51 of the memory section 50 within the access key card AC. Verification with the password in the password area 54 is performed by the υJt[l program (S8
). If the passwords do not match here, the error count area 57 of the memory section 50 is checked (S9). For example, if the number of discrepancies reaches 3,
If the access key card AC cannot be used, tiIJ
Il] If controlled by the control program in the program area 51, check whether the number of mismatches (number of errors) is three. Here, if the number of mismatches has not reached 3, error count area 5
The value in 7 is counted up by one (S1op, the message "PIN code not verified, please enter the password again" is displayed on the display device 17, but the operation returns to step S6. On the other hand, if the number of mismatches has reached 3, a void command is written in the void area 56 of the memory section 50 (8
11) The access key card AC cannot be used thereafter. This method is carried out, for example, by issuing an unusable code instead of the terminal access code when verifying the host processor 12 and the access key card AC. In this manner, when the access key card AC is voided, the contents of the user name area 55 of the memory section 50 are read out, and the user name, unverified comments, date, etc. are printed by the printer 19 (S12 ), the entire process ends after this printing is completed. The access key card AC is ejected from the card reader/writer 18 after the user's name is read before the above printing.

If the passwords match in step S8, the host processor 12 causes the display bag 17 to display a message "insert key card" (813). Here, the key card KO is inserted into the card reader/writer 40 (814). Then, the key card KO and the read/write control unit 39 perform verification in the same manner as the above-described verification that the host processor 12 and the access key card AC can access each other (S1
5.516). If the key card KC and the reading capture control unit 39 cannot be matched here, the key card KC is ejected from the card reader/writer 40 (
817). If there is a new keycard KC, i.e. if a different keycard KC has been inserted a long time ago, the correct other keycard KC can be inserted (S1
8). If there is no other key card KC, keyboard 16
Press the end key (819). Then, after the contents of the user name area 55 of the memory section 50 of the access key card AC are read out, the access key card AC is ejected from the card reader/writer 18 (S20). At the same time, the printer 19 prints the user's name area 5.
The user name read from 5 is printed along with the date (S
21), the entire process ends after this printing is completed.

In step 816, when the key card KC and the read/write I control unit 39 are matched, the host processor 12 receives a signal to that effect from the read/write control unit 39 via the microprocessor 28, and the host processor 12 A message ``Enter your PIN number'' is displayed (822). Here, keyboard 29
Enter the password using (823). If the password is entered by the administrator rather than by the operator using the access key card AC, the security of the IC card issuance operation will be enhanced. Also,
Since the password is entered using two keyboards provided in the issuance processing unit 27 instead of using the keyboard 16, security is enhanced as there is no wiring to the outside to prevent eavesdropping during the process. ing.

The password entered on the keyboard 29 is sent to the key card KC via the reading/writing control section 39 by the mail processor 2B, and is transferred to the 1ilJw section (not shown) of the keycard KO inside the keycard KC. The control program in the control program area 61 of the memory section 6o is compared with the password in the password area 65 (S24). This verification result is the key card KC
The data is sent from the host processor 12 to the read/write controller 39, and then to the host processor 12 via the microprocessor 28. Therefore, the display of the matching result (-・match, mismatch) can be confirmed on the display [17, but the issuance processing unit 27
The verification result is also displayed on the display 30, making the operation easy for the person who inputs the password of the key card KC in the issuance processing unit 27.

If the PIN numbers do not match in step S24, the error count area 70 of the memory unit 60 is checked (825>. For example, if the number of mismatches reaches 3, the control block will be displayed if the key card KO cannot be used. till II by the control program in the program area 61.
If it is set to O, it is checked whether the number of mismatches (number of errors) is three. . Here, if the number of mismatches has not reached 3, the error count area 70
The value within is incremented by one (S26), and the message ``PIN code not verified, please enter the PIN again'' is displayed on the display W117, but the operation returns to step 822. Then you will have to enter your PIN again. On the other hand, if the number of mismatches reaches three, a void instruction is written to the void area 69 of the memory unit 60 (
327), the key card KC can no longer be used.

This method is carried out, for example, by issuing an unusable code instead of the terminal access code when verifying the read/write control section 3'9 and the key card KC.

In this way, if the key card KC is voided,
The contents of the user name area 55 of the memory section 50 of the access key card AC and the memory section 60 of the key card KC
After the contents of the user name area 66 are read out, the access key card AC is read out by the card reader/writer 18.
Then, the key card KC is ejected from the card reader/writer 40. At the same time, the user name read from the user name area 55 and the user name read from the user name area 66 by the printer 19,
C828 where mismatched comments and dates are printed
). After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

If the passwords match in step 824, the host processor 12 causes the display device 17 to display a message "insert fixed data card" (829). Here, Fixed Data Card FC
is inserted into the card reader/writer 41 (830). Then, the fixed data card FC and the read/write controller 39 perform verification in the same manner as the above-described verification that the read/write controller 39 and the key card KC can access each other (831). ,832)
. If the fixed data card FC and the reading/writing control section 39 cannot be matched here, the fixed data card FC is ejected from the card reader/writer 41 <333). If there is a new fixed data card FC, ie a different fixed data card FC has been inserted by mistake, another correct fixed data card FC can be inserted (334). If there is no other fixed data card FC, press the end key on the keyboard 16 <835)
. Then, after the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 66 of the memory section 60 of the key card KC are read, the access key card AC is transferred to the card reader/writer. 18, the key cards KC are each ejected from the card reader/writer 40 (S36). At the same time, the printer 19 prints the user name read from the user name area 55, the user name read from the user name area 66, comments, date, etc. (S37>. After such processing, The operation of this device has ended, and if it is to be operated again, it must be started from the beginning.

In step 832, the fixed data card F
If C is matched with the read/write control unit 39, then the fixed data card FC is compared with the key card KC (S38°539). This verification is performed, for example, in the memory ff180 of the fixed data card FC.
The issuance code in the issuance code area 82 of the memory section 60 is read out by the read/write control section 39, and sent to the key card KC, which is then compared with the issuance code in the issuance code area 62 of the memory section 60 within the key card KO. It will be done. Both the key card KC and the fixed data card FC are used as bare cards, and therefore it is necessary to perform the above verification. Fixed data card FC is issued by different issuers but used in the same way (for example, if ooi bank and XX bank are affiliated and can be used with each other, it will be the same application), key card KC and Fixed data card FC
It is effective to separate the In this case, by creating a plurality of issue codes in the issue code area 82 of the memory section 80 of the fixed data card FC, it becomes possible to deal with key cards KC from different issuers. Of course, by storing all the data of the fixed data card FC (data to be written to the issued IC card) in the key card KC, it is also possible to start the present device with only the key card KC. In this case, initial settings can be made using the keyboard 29 of the issue processing unit 27.

In step 839, if the key card KC and the fixed data card FC cannot be matched, the process proceeds to step 833 where the fixed data card FC is ejected, and the above-mentioned fixed data card FC and reading/writing control unit 39 are connected to each other. The same processing as when no match is made is performed.

In step 839, if the key card KC and fixed data card FC are matched, a signal to that effect is sent from the read/write control unit 39 to the microprocessor 2.
8, the host processor 12 causes the display device 17 to display a message "Enter your password" (840). Here, key card K
The password is input using the keyboard 29 in the same manner as inputting the password in step C (841). This is also a key card KC
If the administrator, rather than the operator using the access key card AC, inputs the PIN number, the security of the IC card issuance process will be improved.

The password entered on the keyboard 29 is sent to the fixed data card FC by the microprocessor 28 via the read/write section 39, and is sent to the fixed data card FC control section (not shown) inside the fixed data card FC. The control program in the control program area 81 of the memory section 80 compares the password with the password in the password area 85 (
S42). This verification result is sent from the fixed data card FC to the read/write control section 39 and further sent to the host processor 12 via the microprocessor 28. Therefore, although the display of the matching result (match, mismatch) can be confirmed on the display device 17, the issue processing unit 2
The verification result is also displayed on the display 30 of No. 7, making the operation easy for the person who inputs the password of the fixed data card FC in the issuance processing unit 27.

If the passwords do not match in step 842, the error count area 88 of the memory section 80 is checked (343). For example, if the number of mismatches becomes three, it is determined that the fixed data card FC cannot be used.If the control program in the control program area 81 controls the number of mismatches (the number of errors), it is determined that the fixed data card FC cannot be used. Check whether Here, if the number of mismatches has not reached 3, the error count area 8
The value in 8 is incremented by one (S44), and a message is displayed on the display device 117 saying, ``Password number mismatch, please enter password again!'', but the operation continues at step 840. return. Then you will have to enter your PIN again. On the other hand, if the number of mismatches has reached three, a void command is written in the void area 87 of the memory section 80 (S45), and the fixed data card FC cannot be used thereafter. This method is performed by, for example, outputting an unusable code instead of the terminal access code when checking the read/write IJILD section 39 and the fixed data card FC. In this way, fixed data card FC
If the access key card AC is voided, the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 86 of the memory section 80 of the fixed data card FC are read, and then the access key is voided. The card AC is ejected from the card reader/writer 18 and the fixed data card FC is ejected from the card reader/writer 41. At the same time, the printer 19 prints the user name read from the user name area 55, the user name read from the user name area 86, unverified comments, 1 marks, etc. (846)
. After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

If the passwords match in step 842, the host processor 12 causes the display R17 to display a message "Enter data" (847). Here, a floppy disk (or magnetic tape), which is a file of different data for each IC card to be written to the IC card to be issued, is stored in the floppy disk device 14.
Alternatively, set it on the magnetic tape unit 15 (S4
8) Next, an unissued IC card is set in the hopper 31 of the issuing processing unit 27 (S49). Next, by pressing the start key on the keyboard 16 (S50), the startup of this device is completed.

The read/write control section 39 reads the contents of the issued number area 71 (the number of issued sheets written in advance by the administrator and is to be issued this time) and the issued count area 72 of the memory section 60 of the key card KC, and stores both contents. Compare,
When the contents of the issue number area 71 are larger than the contents of the issue count area 72, a signal indicating that there is an issue number is sent to the host processor 12 via the microprocessor 28.

As a result, the host processor 12 reads the IC card issue data from the floppy disk device 14 and sends it to the microprocessor 28.

Then, the microprocessor 28 outputs the I from the hopper 31.
Take out one C card (851). When the removed IC card comes to the encoder 32, the microprocessor 2
8 writes the data sent from the host processor 12 onto the magnetic stripe 2 of the IC card (S52). After writing is completed, the microprocessor 28 reads the written data and compares it with the data stored in the microprocessor 28 and sent from the host processor 12.
It is checked whether the written data is correctly written (853). If the writing is incomplete in this check, the microprocessor 28 writes the data again (S54). Then, check again (S5
5) If the writing is still incomplete, the IC card is sent to the destruction unit 35 as a defective IC card, a hole 8 is punched in the magnetic stripe 2 (856), and the IC card is sent to the destruction unit 35.
are accumulated in the reject stacker 37 (S57
). Then, the record is recorded in the hard disk drive@13 by the host processor 12. When the defective IC cards are accumulated in the reject stacker 37, the microprocessor 28 returns to step 851 and returns to the hopper 3.
The next IC card will be taken out from 1.

If the loading is normal in the check at step 853 or 855, the IC card on which the magnetic data has been written is sent to the embossing unit 33, and embossed information 3 is formed by the microprocessor 28 (858).
. Since embossing is performed by pressing one character at a time, the microprocessor 28 performs embossing while checking the pressed character position one character at a time (859
).

Therefore, when one character is erroneously embossed during embossing, the embossing is stopped and the IC card is sent to the destruction unit 35 as defective (S60). The embossed information is usually at least the number (account number in banks) and name of the person carrying the IC card, so if it forms one line of either of these, or both, it is impossible to use it fraudulently. Destroy the embossed information 3 part. Here, in order to form the emboss of the carrier's number first,
A hole 9 is made in the part numbered by the destruction unit 35. In this case, the progress of embossing formation is determined (the microprocessor 28 checks the point at which the embossing is interrupted) L(
861), the microprocessor 28 has a magnetic stripe 2
A hole is punched only in the portion (862) or a hole is punched in both the magnetic stripe 2 and the embossed information 3 (363), and then the process proceeds to step 857, where the sheets are stacked on the reject stacker 37.

When the embossed information 3 is accurately formed, the IC card is sent to the reader/writer unit 34, and the contact part 5 comes to the contact position of the reader/writer unit 34 and is stopped. Then, the microprocessor 28 controls the contact section (not shown) of the reader/writer unit 34 to come into contact with the contact section 5 of the IC card, and then sends a signal indicating that the contact section has been brought into contact to the read/write control section 39. . Reading 1-inclusive control unit 3 that receives this signal
9 supplies power to the 111110 section 6F3 of the IC card and the memory section 7, and performs initial signal exchange. (Therefore, it is possible to send and receive initial signals). When the initial signal exchange is completed, the key card KO is compared with the issued IC card via the reading/writing control unit 39 (864.8
65).

This verification method is performed, for example, by verifying the issuer's temporary PIN number. It is considered that when an unissued IC card is handed over to an issuer by the manufacturer, a password is set for the transfer between the manufacturer and the issuer to prevent unauthorized use by a third party. Furthermore, since this PIN is required only when the IC card is delivered, the issuer's temporary PIN is used as a separate PIN after the IC card is issued. Verification using the issuer's temporary PIN is performed in the following manner. First, the read/write control unit 39 reads out the issuer temporary PIN number in the issuer temporary PIN area 67 of the memory unit 60 of the key card KC, and sends it to the control unit 6 of the IC card to be issued. The control unit 6 reads the temporary issuer PIN written by the manufacturer in the issuer recording area 93 (area where data such as issuer name and issuer code are written) of the memory unit 7, and reads the issuer temporary PIN number from the read/write control unit 39. Check it against the issuer's temporary PIN number sent from. If the issuer's temporary PIN does not match after this verification, the IC card is sent to the destruction unit 35 (866
), holes are punched in the magnetic stripe 2 and embossed information 3 (S67), and the process then proceeds to step 857, where they are stacked on the reject stacker 37.

If the issuer temporary PIN numbers match in step 865, the fixed data in the issuer record area 93 and the application program area 95 of the memory section 7 and the variable data (the carrier's (name, account number, etc.) (86
8). This writing is performed as follows. First, fixed data is read from the data area 89 of the memory section 80 of the fixed data card FC and written into the memory section 7. The contents of the fixed data include the application program written in the application program area 95,
These include area divisions of the issue record area 94 and the bearer record area 96. When writing of this fixed data is completed, the contents of the issuer record pre-allo 8 of the memory section 60 of the key card KO are read out and the contents of the issuer record area 9 of the memory section 7 are read out.
Go to 3. Reading of data from the fixed data card FC and key card KO and writing of data to the memory P87 are all performed by the read/write controller 39. After writing these data,
The read/write control section 39 writes variable data for the wearer sent from the host processor 12 via the microprocessor 28 into the wearer recording area 96 of the memory section 7 .

In this way, when data writing to the memory section 7 is completed,
The read/write control unit 39 reads the written data and writes it to the fixed data card FC.

The entered data in the memory unit 7 is checked by comparing it with the data from the key card KO and the host processor 12 (S69). As a result of this check, if the writing is defective, the data is written to the memory section 7 again (870). However, if there is a write failure again (871) and the application is possible to some extent, although not completely (S72), void data is written to the issue recording area 94 of the memory unit 7 so that it cannot be used (874). If it is not possible to write void data, it is sent as a defective IC card to the destruction unit 35, where holes are punched in the magnetic stripe 2 and embossed information 3 parts (873, 875), and then the process proceeds to step 857 where it is rejected. They are accumulated in a stacker 37. Of course, when a defective IC card is stacked in the reject stacker 37, it is checked and sent to the read/write control section 39 via the microprocessor 28, so that the contents of the defect count area 73 of the memory section 60 of the key card KC are checked. is uploaded and recorded. This includes the encoding section 32 and embossing unit 3.
Similarly, if it becomes defective in 3, reject stacker 3
7 is recorded when a defective IC card is accumulated. Of course, the data is also recorded on the hard disk device 13 of the host processor 12.

If the writing is normal in the check in step 869 or 871, the reading/writing control unit 39 calculates the temporary carrier PIN number using random numbers (876), and records the calculated temporary carrier PIN number in the memory unit 7. Write to area 96 (877).

Next, the read/write control section 39 reads the cumulative issuance value from the cumulative issuance area 74 of the memory section 60 of the key card KC, adds 1 to the cumulative issuance value, and stores it in the issuance record area 94 of the memory section 7 as the issuance number. Write (878). At the same time, the user's name (or code) is read from the access key card AC, key card KC, and fixed data card FC and written into the issuance recording area 94 of the memory section 7. Once this is done, read write I
III [1 part 39 is the basic 11JI'll of the memory part 7
Write non-rewritable hold data in the program area 91 (S79), and write the password that is the temporary PIN of the bearer! It is not possible to rewrite anything other than what is written when the iI1 or the carrier receives the service. Then, this IC card becomes issued and is sent to the stacker 38 to be accumulated (882). Further, the read/write control section 39 increments each content of the issuance count area 72 and the issuance cumulative area 74 of the memory section 60 of the key card KC by 1 (S80). After writing the hold data in step 879, the host processor 12 uses the printer 19 to send the IC card! (All this data can be created from data recorded on the floppy disk of the floppy disk device 14 or the magnetic tape of the magnetic tape unit 15), and the temporary PIN of the carrier calculated above is printed by the printer 2o. A notification 21 is created (881). When the temporary PIN number of the bearer is printed by the printer 20, it is read and written 91111 Copy 3
9 will be erased, making the temporary PIN extremely highly secure.

When the read/write control section 39 counts up the issuance count area 72 of the memory section 60 of the key card KC, it compares the number with the content of the issued number area 71 to determine whether the number of issued cards has reached the planned number. It is checked whether or not (S83). As a result of this check, if the planned number of cards has not been reached, a signal to that effect is sent to the host processor 12, so after receiving the data from the host processor 12, the microprocessor 28 takes out one IC card from the hopper 31 ( 851).

As a result of the check in step 883, if the scheduled number of copies has been reached (if the content of the issue count area 72 after counting up is the same as the content of the issue number area 71), the issue ends. Of course, even if there is data to be issued to the host processor 12 side, the issuance ends.

Note that before writing the hold data in step 379, the serial number @ written in the manufacturer record area 92 of the memory unit 7 is added to the manufacturing record for each IC card manufactured by the manufacturer. By reading out the number stored with the key card KC and writing it in the issuance record area 75 of the memory section 60 of the key card KC as the serial number of the issued IC card, it is possible to check the IC card including the manufacturing number, which is effective for management. .

When the issuance is completed in this way, the read/write control section 39 writes the contents of the issuance count area 72 and defective count area 73 of the memory section 60 of the key card KO to the issuance record area 75 together with the date (884), and then 72 and the contents of defective count area 73 are cleared respectively. Since the content of the cumulative issue area 74 is the total number of issues issued so far, it remains unchanged and becomes the final issue number. When this writing is completed, the host processor 12 causes the display device 17 to display a message "Press the end key" (885). Here, press the end key on the keyboard 16 (8
86). Thereby, the host processor 12 prints the issuance record stored in the hard disk device 113 using the printer 19 (887). This issuance record is
For example, as shown in FIG. 11, the serial number read from the IC cards issued in the order of issue number, the name and address of the bearer input by the floppy disk device 14 (or magnetic tape unit 15), etc. are printed. . In addition, by opening the outlet door 42 of the issue processing unit 27, the reject stacker 37 and the stacker 3 can be removed.
The defective IC card and the issued IC card are taken out from 8 (888). In addition, since defective IC cards have holes punched at least in the magnetic stripe 2 or in both the magnetic stripe 2 and embossed information 3, they can be easily distinguished from issued IC cards. There is.

Thereafter, when the end key is pressed again on the keyboard 16 (889), the host processor 12 writes the issuance date and issuance record area 58 of the access key card AC in the same way as the issuance record was written to the key card KC. The number of sheets, number of defective sheets, key card code, fixed data card code, etc. are written (S90). This records what kind of issue was issued, when and how many copies were issued.

Then, the access key card AC, key card KC, and fixed data card FC are ejected (
S91), all operations of this device end.

The IC card processing device described above stores in advance the number of IC cards to be issued in the memory unit 60 of the key card KC which is the key to start the device, and issues only the number of IC cards to be issued. . As a result, the number of IC cards to be issued can be specified using the key card KC, so the number of IC cards to be issued (the number of cards to be processed), etc. can be managed, and fraud by operators and the like can therefore be reliably prevented, and security is significantly improved.

Note that the present invention is not limited to the above-mentioned embodiments, and various modifications can be made. For example, instead of the key card KO and its card reader/writer 40, a data holding device equipped with a control section and a memory section that can store information that identifies the user and perform internal verification may be used, and the read/write control section 39 may be used. It is conceivable to connect them with detachable contacts.

Similarly, the fixed data card FC and its card reader/writer 41 are also data storage devices equipped with a control unit and a memory unit that can store information that identifies the user and perform internal verification. Part 3
It is conceivable to connect it to 9 through a detachable contact. In addition, key card KO and fixed data card F
Although a PIN number was used as information to identify the user of C,
For example, it is also possible to store the user's physical characteristics such as fingerprints or signatures and use them for verification. In that case, the keyboard 29 of the issuing processing unit 27 needs to be provided with means for inputting fingerprints, signatures, etc.

Further, in the embodiment, an IC card is issued by writing predetermined data to an unissued IC card.
Although we have explained the case where it is applied to a C card processing device,
The present invention is not limited to this, but can be similarly applied to an IC card processing device that writes initialization data to an IC card, for example, at the stage of manufacturing the IC card.

Further, in the above embodiments, the portable storage medium is an IC card with a magnetic stripe, but the same applies to an IC card without a magnetic stripe or an optical memory card called a laser memory card. can.

[Effects of the invention] As detailed above, according to the present invention, fraud can be prevented;
A portable storage medium processing device with significantly improved security can be provided.

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention. Fig. 1 is a block diagram of an IC card processing device, and Fig. 2 is a block diagram of an IC card processing device.
Fig. 3 is a perspective view of the appearance of the IC card after it has been issued; Fig. 4 is a perspective view of the defective IC card; Fig. 5 is a perspective view of the issuance of the cardholder's nap card number. Figure 6 shows the contents of the memory section of the access key card; Figure 7 shows the contents of the memory section of the key card; Figure 8 shows the contents of the memory section of the fixed data card. FIG. 9 is a diagram showing the contents of the memory section of the IC card after it is issued, FIG. 10 is a flowchart explaining the operation, and FIG. 11 is a diagram showing an example of printing of the issuance record. 6... IC card control unit, 7... IC card memory unit, 11... host control unit, 12... host] processor, 18... card reader/writer,
27... Issue processing unit, 28... Microprocessor, 34... Reader/writer unit, 39...
Reading internal bar, 40.41...Card reader/
Writer, 60...Key card memory section, 80...
Fixed data card memory section, KC...Key card, FC...Fixed data card. Applicant's representative Patent attorney Takehiko Suzue Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 11 Figure 9 Figure 10 Figure 10 (d) Procedural amendment Commissioner of the Japan Patent Office Black 1) Mr. Yu Akira 1. Indication of the case Japanese Patent Application No. 1989-199910 2. Name of the invention Portable storage medium processing device 3. Person making the amendment Relationship to the case Patent applicant (307) Toshiba Corporation 4, Agent Chiyoda-ku, Tokyo Kasumigaseki 3-7-2 USE Building 7,
In the 7th line of page 7 and the 1st line of page 15 of the amendment contents statement ms, the words ``shall not be provided.'' will be corrected to ``may not be provided.''

Claims (3)

[Claims] (1) A portable storage medium processing device that writes predetermined data to a portable storage medium; a write processing means that writes predetermined data to the portable storage medium; and this write processing. control means for controlling the control means; a key medium having a storage means serving as a key for activating the control means; the number of portable storage media to be processed being stored in advance in the storage means of the key medium; A portable storage medium processing device characterized in that it performs processing by that number. (2) The portable storage medium processing device according to claim 1, wherein the portable storage medium is an IC card. (3) The portable storage medium processing device according to claim 1, wherein an IC card is used as the key medium.