KR20030009970A - A Smart Card - Google Patents

Abstract

PURPOSE: A smart card is provided to enable a user to input a security code in itself for controlling an effective state with hardware parts so that it can enhance a security function. CONSTITUTION: The device comprises a memory, an IC, a power supply, a key input button, an IO pin, and a switch. The IO pin outputs data, stored at the memory, to an external device or receives data from the external device. The switch switches on or off an IO pin line. The IC compares the security code, stored at the memory, with that, input by the key input button, and turns on or off the switch according to the comparison result. The device can include a power switch, a reset button, an effective state display, and an error display. If the power switch is turned on, it gets automatically turned off in a time. The reset button can change the stored security code. If the input security code is identical to the stored one, the effective state display displays a state that the IC is on, and otherwise, the error display displays a security code error.

Description

Smart Card {A Smart Card}

The present invention relates to a smart card, in particular a smart card having a hardware security function on the card itself.

Modern society is entering a credit society, and most modern people have at least one credit card. Even if you do not have a credit card, you can use access cards or transportation cards for security purposes.

In general, credit cards using magnetic tapes are the mainstream. In order to solve the problems of recent magnetic tape credit cards, such as card damage or counterfeit cards due to repeated use, limitation of stored information, security weakness, etc. Smart cards with integrated circuits are being developed.

In particular, the use of the Internet and the proliferation of electronic commerce are increasing the importance of smart card as a security device in the information communication network environment, and the demand and utilization are showing a rapid increase. For example, a bus or subway card is the smart card that comes closest to everyday life, and electronic money, wallets, telephones, loyalty cards, and telephones are used when much of the life is settled on the Internet. Its use in various fields, from cards to identification cards, is expanding.

Smart Card was first patented by Roland Moreno of Innovation S.A. in France in 1974, and the first smart card appeared in 1977 as a joint venture between BULL and Motorola.

As shown in FIG. 1, a smart card has a microprocessor and a memory, and thus can store and process information. The smart card can be defined as a plastic card that is similar in shape and size to a credit card.

Smart card can implement security services such as digital signature, entity authentication, data encryption, data access control by using encryption algorithm embedded in card. The most common specifications currently in use are 512Byte RAM, 16Kbyte ROM, 8Kbyte EEPROM, and the processors of smart cards are Intel 8051 and Motorola 6805. Most of them have symmetric key algorithms such as DES.

Although the security of smart cards is superior to that of conventional magnetic tape cards, there is a problem in that they are exposed to hacking (finding information on the card) by experts when the card is lost or stolen. . Of course, there is also a method of using a certification authority for storing the encryption key through the communication for the security of the smart card, which has a problem that the cryptographic information is exposed on the communication line and has a very uncomfortable use.

In addition, there is a method of checking the validity by inputting a password through the input button of the card reader, but this also requires that a password must be entered into the card reader each time the user uses it, and a third party sees the password entered by the user. You can't say that you have full security by the fact that you can.

Accordingly, an object of the present invention is to provide a smart card having a complete security function by installing a hardware security function in the smart card.

1 is a view showing a conventional smart card configuration,

2 is a view showing the overall configuration of the smart card of the present invention;

3 is a view showing a configuration according to an embodiment of the present invention;

4 is a view showing a configuration according to another embodiment of the present invention;

5 is a diagram illustrating an operation flow according to an embodiment of the present invention; and

6 is a diagram illustrating an operation flow according to another embodiment of the present invention.

*** Explanation of symbols for the main parts of the drawing ***

1: smart card 2: integrated circuit (IC)

3: power supply 4: I / O terminal (A)

5: open terminal (B) 6: CPU

7: RAM 8: ROM

SW1: power switch

In order to achieve the above object, the first technical solution of the present invention is a smart card capable of reading and / or writing embedded information from an external device, the memory storing the information, an integrated circuit (IC), and the integrated device. A power supply attached to the card for driving the circuit IC, a key input button disposed in the card, an I / O terminal of the integrated circuit IC for inputting and / or outputting information stored in a memory in the card from the outside, And a switch disposed inside or outside the integrated circuit (IC) to turn on / off the I / O terminal line; The integrated circuit may compare a password input through the key input button with a password previously stored in a memory, and turn on / off the switch of the I / O terminal line according to whether the password matches.

A second solution of the present invention is a smart card capable of reading and / or writing internal information externally, comprising: a memory for storing information, an integrated circuit (IC) having an operating program (COS), and the integrated device; A power supply attached to the card to drive the circuit IC, a key input button disposed in the card, and an I / O terminal of the integrated circuit IC to input and / or output information stored in a memory in the card from the outside ( A), and an open terminal (B) connected to said integrated circuit (IC); The operating program (COS) of the integrated circuit compares the password inputted through the key input button with the password stored in the memory in advance, selects the I / O terminal A if the password is matched and compares the result. If not, it characterized in that to select the open terminal (B).

It is possible to use the power semi-permanently by configuring the power source as a solar cell including a solar cell, and can be further attached to the power switch, and automatically powers the switch when a certain time elapses after the power switch is turned ON. It is convenient to use the method to turn off.

Further, a reset button for resetting a previously stored password, a valid status indicator for indicating that the I / O terminal switch is turned on by matching the password, and an error status indicator for displaying a password error due to the password mismatch. Can include,

It is more convenient to configure the key input button as a touch screen.

Hereinafter, the configuration of the present invention in detail with reference to the accompanying drawings as follows.

2 is a view showing the overall configuration of a smart card according to the present invention, the integrated circuit (IC), power, I / O input terminal, the number input buttons from 0 to 9, power switch, I / O terminal switch, IC It consists of two connected LEDs.

The power source may be a lithium ion secondary battery or a solar cell, but it is more preferable to use a solar cell because the card is very thin and its use period is long, and a power switch is installed between the ICs. The configuration of the solar cell is already well known technology, and a detailed description thereof will be omitted.

The two LEDs are indicators of the status of the card, and function to indicate the availability of the card or to indicate an error in the password input. Of course, it is also possible to use not only LED but also LED or EL display device.

As shown in FIG. 1, an I / O terminal exists in a conventional smart card. As shown in FIG. 1, a terminal C1 for supplying a voltage in the card, a reset terminal C2 for initializing the card, and a terminal for transmitting a clock pulse in the card ( C3), ground terminal (Vpp: C5), and spare terminal (not used: C7, C8) may exist. As a selective low, it is also possible to omit the terminal C1 for supplying the voltage when there is sufficient power in the card.

In the present invention, the switch is provided between the I / O terminal line and the IC, which can be included in the IC design itself and can be installed externally.

3 shows an internal structure of an integrated circuit according to the present invention, and includes a microprocessor and a memory (RAM, ROM, EPROM) having a plurality of terminals (other terminals except for I / O terminal A are omitted). As described above, a switch is provided in the I / O terminal line. This I / O terminal switch is preferably made of, for example, an electronically controlled switching element such as a transistor.

4 shows a configuration according to another embodiment of the present invention. In general, an IC includes a control panel (COB), a CPU, and a memory (RAM, ROM, EPROM). The control panel usually has eight terminals, one of which includes an I / O input / output terminal (A) and an unused open terminal (B).

In FIG. 4, instead of using an I / O terminal switch as shown in FIG. 3, a method of selecting an I / O terminal according to an algorithm installed in the IC is used. This has the advantage of not installing a separate switch. In general, the IC includes an operating program such as a Windows series of PCs called COS, and can be installed as desired.

Referring to Figures 3 and 5 will be described the operation method of the first embodiment of the present invention.

First, when the user turns on the power switch of the smart card, a voltage is supplied from the power supply to the IC card to operate the IC. Next, when a password is input through the key input button, it is compared with the password already stored in the ROM in the card to determine whether it matches. As a result of comparison, for example, a current is applied to the base terminal of the transistor to conduct the transistor to turn on the I / O terminal switch.

At the same time, current is applied to the LED to indicate the available state of the card. The user can insert a card into the card reader to receive normal card authentication.

If the passwords do not match, a current is applied to the LED indicating the password error to induce re-entry.

As shown in Fig. 2, the card may include a password reset button for changing the password at any time, and a confirmation button for confirming the completion of the password input.

Referring to Figure 4 and 6 will be described the operation method of the second embodiment of the present invention.

When the user turns on the smart card's power switch, the IC is supplied with voltage from the power supply to the IC card. Next, when a password is input through the key input button, it is compared with the password already stored in the ROM in the card to determine whether it matches. As a result of the comparison, for example, the I / O terminal A is selected, and at the same time, a current is applied to the LED indicating that the card can be used and displayed.

If the password does not match, select the open terminal (B) not used, and apply a current to the LED indicating the password error to induce re-entry.

As described above, according to the present invention, it is possible to provide a perfect security function by controlling the valid state of the card by a user inputting a password in the card itself.

Although the present invention has been described in detail as the embodiments described above, it will be apparent to those skilled in the art that various modifications and variations are possible within the spirit of the present invention, and such modifications and variations belong to the appended claims.

Claims (9)

In the smart card that can read and / or write the built-in information from the outside, Memory for storing information, Integrated circuit (IC), A power source attached to the card for driving the integrated circuit (IC), A key press button disposed in the card, I / O terminals of the integrated circuit (IC) for inputting and / or outputting information stored in a memory in the card from the outside, and A switch disposed inside or outside the integrated circuit (IC) to turn on / off the I / O terminal line; The integrated circuit compares the password inputted through the key input button with the password previously stored in the memory, and turns on / off the switch of the I / O terminal line according to whether the password matches. Smart card with function. In the smart card that can read and / or write the built-in information from the outside, Memory for storing information, Integrated circuit (IC) with operating program (COS), A power source attached to the card for driving the integrated circuit (IC), A key press button disposed in the card, I / O terminal A of the integrated circuit IC for inputting and / or outputting information stored in a memory in the card from the outside, and An open terminal (B) connected to said integrated circuit (IC); The operating program (COS) of the integrated circuit compares the password inputted through the key input button with the password stored in the memory in advance, and if the password is matched, selects the I / O terminal A and does not match. Smart card with a hardware security, characterized in that selecting the open terminal (B). The method according to claim 1 or 2, Smart card having a hardware security function, characterized in that the power source is composed of a solar cell including a solar cell. The method according to claim 1 or 2, Smart card having a hardware security function further comprising a power switch. The method of claim 4, wherein A smart card having a hardware security function, characterized in that the power is automatically turned off when a predetermined time elapses after the power switch is turned ON. The method according to claim 1 or 2, A smart card with hardware security further comprising a reset button for resetting a previously stored password. The method according to claim 1 or 2, Smart card having a hardware security function further comprises a valid status indicator for indicating that the I / O terminal switch is turned on by matching the password. The method according to claim 1 or 2, Smart card having a hardware security function further comprises an error status indicator for displaying a password error because the password mismatch. The method according to claim 1 or 2, Smart card having a hardware security function, characterized in that the key input button is configured as a touch screen.