KR20020010252A - Method of Controlling a User Identificationable Card - Google Patents

Abstract

PURPOSE: A method for using a card capable of user authentication is provided to enable a user authentication operation to be carried out in a card itself, without the necessity of using a special equipment for user authentication, by making a password necessary for user authentication changed according to a regular rule. CONSTITUTION: Before a card capable of user authentication is activated, a user selects an initial password and a number change rule and stores them in a memory part(S1). If power is supplied to each component in the card as the user turns on a power supply part, a password change part in a microprocessor changes the initial password every regular period according to the selected number change rule and repeatedly stores it in the memory part(S2). Afterwards, in case that the user inputs a password through a key input part in order to use the card, a comparison control part in the microprocessor compares the inputted password with the password stored in the memory part(S3). If the two are not the same, the comparison control part confirms whether the frequency of comparison is more than twice(S4). In case that the frequency of comparison is more than twice, the comparison control part judges that the user is not a valid user and interrupts the power of the power supply part to stop the operations of all the components(S5).

Description

How to use a user identifiable card {Method of Controlling a User Identificationable Card}

The present invention relates to a method of using a user authentication capable card, and in particular, user authentication to enable user authentication processing on a master card capable of its own user interface and to change a password required for authentication of a user according to a predetermined rule. It is related to the use of a possible card.

The use of cards such as credit cards, debit cards, cash cards, pass cards, etc. is increasing in various financial-related tasks, such as magnetic stripe (MS) cards and integrated circuit (IC) cards.

First, the MS card is generally the most commonly used card, and the magnetic tape attached to the back of the card contains information about the card, and the magnetic tape contains three tracks (that is, track, track 2, and Track 3). Each track is filled with cardholder information according to the criteria set by the ISO. For credit cards, use track 2 and use the card number, expiration date, service code, PVV (PIN Verification Value), and CVV (Card. Verification Value).

Secondly, the IC card is a data storage device in the form of a card. It is mainly used in card terminals such as cash and withdrawal devices and identification devices. In the case of a cellular phone adopting GSM (Global System for Mobile) communication, The personal information, system information, and the like are stored in the card so as to be possible, and the card terminal is provided with a card reader.

For example, the IC card may include a memory card and a smart card. The memory card has only a memory for storing service information, and thus cannot communicate with the card terminal. It can only be read. However, the smart card has an IC chip embedded in a card having the same size and thickness as a conventional card, and the IC chip has a microprocessor to register, change, and delete service information. The operation of accessing the internal memory can be performed because a serial input / output unit is provided to enable communication with an external card terminal according to a recommended protocol specified by ISO or the like, and the card terminal supplies various control signals.

This IC card is a next-generation card equipped with various security devices to guarantee a high level of security because an unjust person cannot easily read the information recorded in the card. A microprocessor is built into the IC chip to store data and It is recognized as the best personal information recording medium because it can improve security by providing functions such as access control, encryption and decryption.

By the way, the conventional smart card can only be performed when the user wants to perform a function such as a credit card, debit card, cash card, pass card, etc., so that the contents of the information stored in the card can be simplified. Even if you want to check it, you must connect with the card terminal. Therefore, in an environment in which the card terminal is not accessible, the user cannot check the contents of the information stored in the card.

Thus, the card apparatus further includes a power supply unit for supplying power to the smart card itself, a key input unit for receiving a key corresponding to a user's command, and a display unit for displaying predetermined data, thereby enabling a user interface thereof. Developed.

However, when performing the authentication operation of the user of the smart card has to be connected to the corresponding card terminal must have a separate device for the user's authentication must also be provided.

In addition, even if a conventional smart card is configured to perform an operation for user authentication with its own user interface as described above (although not yet developed), if a password required for user authentication is leaked to another person, a credit card, Debit cards, cash cards, pass cards and the like can be performed a lot of problems that are likely to cause a lot of damage to the user.

In order to solve the disadvantages or problems as described above, the present invention is to enable the user authentication process in the master card capable of its own user interface and by changing the password required for the user authentication according to a certain rule, Not only can you perform user authentication on the card itself without having to provide a separate device for user authentication, and even if the password is leaked to others, the password is changed according to certain rules. Its purpose is to protect the user's authority due to incorrect numbers.

1 is a block diagram showing a user authentication capable card in accordance with an embodiment of the present invention.

2 is a flow chart illustrating a method of using a user authentication capable card in accordance with an embodiment of the present invention.

Explanation of symbols on the main parts of the drawings

10: key input unit 20: memory unit

30: power supply 40: microprocessor

41: password change unit 42: comparison control unit

50: input / output unit 60: display unit

According to an aspect of the present invention, there is provided a method of using a user authentication capable card, the method including: storing an initial password and a number change rule by a user request in a memory in the user authentication capable card; Changing the initial password according to the number change rule and restoring it in the memory by powering the card itself; Receiving a password through a key input unit and comparing the passwords with each other by reading the passwords re-stored in the memory; And if the input password and the read password coincide with each other, granting a user right to perform a function of a credit card, a debit card, a cash card, or a pass card. Here, the number change rule counts the number of times of operation each time the user operates the card to increase or decrease the specific digit of the initial password by a certain number, or to timing the date so that the specific digit of the date and the It is characterized by matching a specific digit of the initial password.

Alternatively, in the method of using a user authentication capable card according to an embodiment of the present invention, when a user authentication capable card is used as a cash or debit card, a user authentication capable card authorized by a user is inserted into a cash input / output device. Characterized in that it further comprises the process of performing a bank transaction without a user authentication procedure.

In addition, alternatively, in the method of using a user-authenticable card according to an embodiment of the present invention, a user-authenticable card authorized by a user is inserted into a card terminal having a cash charging function, and the corresponding card is managed through a management server of the card terminal. It is characterized in that it further comprises the step of charging the amount or payment of the stored amount within. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

As shown in FIG. 1, a user authentication capable card according to an embodiment of the present invention includes a key input unit 10, a memory unit 20, a power supply unit 30, a microprocessor 40, and an input / output unit. 50 and the display part 60 are comprised.

The key input unit 10 includes a plurality of input keys for inputting various data and a user's command, and decodes an input for an arbitrary key and transmits it to the microprocessor 40, in particular, a password input by a user. Decodes and delivers it to the microprocessor 40.

The memory unit 20 includes a program memory for performing an operation under the control of the microprocessor 40 and storing a program for controlling the overall operation of the smart card, and a data memory for storing service information and temporary information. In particular, the changed password is stored under the control of the microprocessor 40.

The power supply unit 30 supplies power required for the smart card, so that the microprocessor 40 can perform a minimum operation by supplying its own power even when not connected to the card terminal. Here, when connected to the card terminal is controlled to use the power applied through the input and output unit 50 without using the corresponding power, it is possible to charge the power supplied from the card terminal and to ensure the mobility of the card Thin solar cells are also possible.

The microprocessor 40 not only processes data input from the key input unit 10, but also reads service information of the memory unit 20 and transmits the service information to the card terminal through the input / output unit 50 and from the card terminal. The received service information is stored in the memory unit 20. In particular, the password is changed and stored in the memory unit 20 according to a predetermined rule, and the password entered from the key input unit 10 and the corresponding memory unit ( 20. The user password is obtained by comparing the password read from (20).

The microprocessor 40 further includes a password change unit 41 and a comparison control unit 42. The password change unit 41 includes a counter or a timer, and a predetermined counting number or schedule is provided. Each time period (for example, minutes, hours, days, months), the password stored in the memory unit 20 for user authentication is changed according to a predetermined rule and stored again in the memory unit 20. 42 receives a password from the key input unit 10, reads the password stored in the memory unit 20, compares the input password with the read password, and grants the user's authority. After deciding whether to do so, you can perform functions such as credit cards, debit cards, cash cards, and pass cards. Here, the predetermined rule is a rule that the user already knows. For example, the last digit of the 4 digit or 6 digit password is changed to match the last digit of the current date.

The input / output unit 50 interfaces the serial data between the microprocessor 40 and the card terminal in an asynchronous manner.

The display unit 60 may be configured as an LCD, and outputs and displays data under the control of the microprocessor 40. In particular, the display unit 60 displays time, counting count, and password input.

A method of using a user authentication capable card according to an embodiment of the present invention will be described with reference to the flowchart of FIG. 2 as follows.

Before the device on the card is activated, the user can select the initial password required for the proper user authentication and the number change rule to constantly change the initial password before the device in the card is activated. After the user knows well and selects the desired one, the selected initial password and the number change rule are stored in the memory unit 20 (step S1).

Then, when the power supply unit 30 is turned on to supply power to each component block in the card itself to start the device in the card, the password change unit in the microprocessor 40 having a counter or a timer ( 41) changes the initial password stored in the memory unit 20 at predetermined counting times or for a predetermined period (for example, minutes, hours, days, months) to the memory unit 20 by changing the initial password. Resave it (step S2).

For example, the password change unit 41 counts the number of operations each time a user operates the card. At this time, the counted operation number is displayed on the display unit 60 or displayed for security maintenance. The number of digits of the initial password may be increased or decreased by a certain number depending on the number of operations, and stored in the memory unit 20 again. That is, in the case of a four-digit password whose initial password is '1230', if the number of current operations is '2', the fourth digit of the initial password is changed to '2' and stored again as '1232'. If the current number of operations is '3', the fourth digit of the initial password is changed to '3' and stored again as '1233'. Also, in case of four-digit password whose initial password is '1023', if the number of current operations is '1', the second digit of the initial password is changed to '9' and resaved as '1923'. If the current number of operations is '2', the second digit of the initial password is changed to '8' and stored again as '1823'.

In another example, the password change unit 41 displays a date (for example, minutes, hours, days, months) on the display unit 60 and displays the last digit of the displayed date by specifying the initial password. The memory unit 20 restores the data to match the number of digits. In other words, if the current password is '9:30' in the case of a four-digit password whose initial password is '1230', the fourth digit of the initial password is changed to '9' and reset to '1239'. If the current time is '10: 00, 'change the 4th digit of the initial password to' 0 'and resave it as' 1230'.If the current time is '11: 00,' Change the fourth digit of the password to '1' and resave it as '1231'. Also, for a four-digit password with the initial password '1023', if the current date is 'September 1', change the second digit of the initial password to '1' and reset it to '1123'. If the current date is 'September 12', the second digit of the initial password is changed to '2' and resaved as '1223'.

Accordingly, when the user inputs a password through the key input unit 10 to turn on the card and use the card, the comparison control unit 42 in the microprocessor 40 receives the password from the key input unit 10. The received password is read out and stored in the memory unit 20, and the inputted password and the read password are compared with each other (step S3).

At this time, if the input password and the read password do not coincide with each other in the third step S3, the number of comparisons is counted to determine whether or not a predetermined number of comparisons (for example, two times) is performed (step S4). After determining that the user is not a legitimate user, the power supply of the power supply unit 30 is cut off so that the card cannot be used (step S5).

On the other hand, if the password inputted and the read password coincide with each other in the third step (S3), after performing the authorization of the user to perform a function such as credit card, debit card, cash card, pass card, etc. (Step S6).

In this case, when using as a credit card, by swiping the user authentication capable card authorized by the user to the card terminal, the card company can obtain the approval of use of the card company and perform transactions with the merchant of the card. have.

In addition, when using as a cash card, a user authentication capable card authorized by a user may be inserted into a cash input / output device to retrieve a balance immediately without a user's authentication procedure and perform a bank transaction.

In addition, a user authentication-enabled card authorized by a user may be inserted into a card terminal having a cash charging function, and a necessary amount of money may be transferred from the user's own bank account through the management server of the card terminal and recorded on the card. Therefore, the amount recorded on the card may be used for cash. For example, a store that is provided with a card terminal receives an object or service, and inserts a user-authenticable card authorized by the user directly into the card terminal to pay for the provided object or service. Therefore, the amount paid by the user through the card can be automatically transferred to the account of the store through the management server. In addition, the amount can be charged to the card through a card terminal having a cash charging function can also be used as a transportation card.

As described above, according to the present invention, it is possible to perform a user authentication process in a master card capable of its own user interface, and to provide a separate device for authenticating a user by changing a password required for the user authentication according to a predetermined rule. Not only can the user perform user authentication on the card itself, but even if the password is leaked to others, the password will be changed according to certain rules. Can give

Claims (4)

Storing an initial password and a number change rule according to a user's request in a memory in a user authentication capable card; Changing the initial password according to the number change rule and restoring it in the memory by powering the card itself; Receiving a password through a key input unit and comparing the passwords with each other by reading the passwords re-stored in the memory; And if the input password and the read password coincide with each other, granting a user right to perform a function of a credit card, a debit card, a cash card, or a pass card. How to use the card. The method of claim 1, The number change rule counts the number of times of operation each time the user operates the card to increase or decrease the specific number of the initial password by a certain number, or to timing the date so that the specific digits of the date and the initial secret are counted. A method of using a user authentication card capable of matching a specific number of digits in a number. The method of claim 1, When the user authentication possible card is used as a cash or debit card, the method further comprises the step of performing a bank transaction without a user authentication procedure by inserting a user authentication capable card authorized by the user into a cash input and output device; To use a user authentication capable card. The method of claim 1, And inserting a user authentication capable card authorized by the user into a card terminal having a cash recharging function to charge an amount in the card or to pay the stored amount through the management server of the card terminal. To use a user authentication capable card.