DE10000996A1 - Method and electronic device for controlling access rights includes an electronic unit storing an access entitlement code to be used to make a unit completely operable and a corresponding non-contact chip card. - Google Patents

Abstract

A non-contact chip card (2) includes an individual switch (13) for entering rhythmic or Morse-like codes. The code entered is compared with a reference code stored in the chip card. If both agree, a chip card access rights circuit is activated to carry out a transaction or an exchange of the chip card's sensitive data with a reader-recorder unit (3).

Description

FIELD OF THE INVENTION

The present invention relates to a control method for access authorization for an electronic unit and on an electronic unit in which an access authorization code must be entered before the electronic unit is complete is operational, and in particular to a tax procedure for Access authorization for a contactless chip card and for one contactless chip card.

PRINCIPLES OF THE INVENTION

In electronic devices, such as smart cards, Pager or identification devices must have a small keyboard a personal identification number (PIN) be entered before the electronic unit is complete is ready for operation. Portable electronic units and their Keyboards for entering the personal identification number getting smaller so that it becomes difficult to manually enter the PIN to enter the keyboard. Therefore include very small ones electronic devices such as known contactless ones Chip cards, no PIN control means. Examples of use contactless chip cards are operational automation, physical entry to a building, payment for a Transport system, identification or the transfer of a digital signature.  

Especially with regard to non-protected contactless There are chip cards for electronic payment or identification however there is a possible risk of abuse. Is accordingly the user acceptance of contactless chip cards is still low, although in contrast to credit cards or cash payments contactless smart cards for paying for services very much are convenient because the user of a contactless smart card for Pay or debit the electronic credit that is in the chip card (direct debit card) is saved, only one read / open drawing device must happen if he has a Service.

The block diagram in Fig. 1 shows schematically the structure of a known contactless chip card of the type according to the present invention. A contactless chip card system 1 comprises a contactless chip card 2 (hereinafter simply referred to as chip card or card) and a read / record unit 3 .

The known chip card 2 comprises an antenna 12 for receiving / transmitting data from and to the reading / recording unit 3 with the aid of electromagnetic waves, which is indicated by the reference symbol "C", a receiving circuit 10 for demodulating one of the antennas 12 received signal and an I / O control circuit 9 for serial / parallel conversion of the receive and transmit signals.

In order to carry out read / record operations on data, such as receiving and sending data and also various data processing operations, the chip card 2 comprises a central processing unit (CPU) 7 , a read-only memory (ROM) 6 for storing a control program or the like for operating the central processing unit 7 As will be described later, a random access memory (RAM) 5 for storing volatile data, such as the result of data processing, and a bus 8 (data and control bus) for connecting the central processing unit 7 , read-only memory 6 , random access memory Access 5 and I / O input circuit 9 .

An oscillator (not shown) generates an internal clock for the chip card 2 and a battery (not shown) supplies current. The line labeled "T" is a trigger signal line for switching the chip card 2 from its idle state to the operating state in that a trigger signal is provided by the receiving circuit 10 directly to the central unit 7 .

The reading / recording unit 3 basically has a similar structure to the chip card 2 . In general, a reader / recorder comprises an antenna 39 for sending data from and to the chip card 2 by means of electromagnetic waves indicated by "C", a receiving circuit 37 for demodulating a signal received by the antenna 39 Transmission circuit 38 for modulating a signal to be transmitted via antenna 39 and an I / O control circuit 36 for effecting serial / parallel conversion of the received signal and the signal to be transmitted.

Like the contactless chip card 2 , the read / record unit 3 generally comprises a central processing unit 33 for performing read / record operations on data, such as receiving and sending data, as well as various data processing operations, a read-only memory 32 for storing a control program or Similar to operate the central processing unit 33 , a random access memory 34 for temporary storage of data and, in addition to the known chip card 2, an electrically erasable programmable read-only memory (EEPROM) 31 for temporary non-volatile storage of processing results, and a bus 35 (data and control bus) for connecting the CPU 33 , the read-only memory 32 , the random access memory 34 , the I / O control circuit 36, and the electrically erasable programmable read-only memory 31 . Like the chip card 2, the read / record unit 3 comprises a power supply and a clock generator (not shown).

In the following it is assumed that the contactless chip card 2 and the read / record unit 3 are both powered by their respective battery or other power supply (not shown) and that a clock signal acts. When the noncontact IC card 2 is approximately enters the transmission area around the reader / recorder unit 3, the contactless IC card 2 via an electromagnetic signal from the reader / On drawing unit 3 is activated, and the receiving circuit 10 of the contactless IC card 2 generates a trigger signal , which acts on the central processing unit 7 via the trigger signal line "T", whereby it puts the chip card out of its idle state into its operating state. Depending on the following transmission signal "C", the credit stored in the contactless chip card (direct debit card) is debited for a service, the contactless chip card 2 transmitting an identification code, an access code, a digital signature or the like.

Since such data transmission takes place without first any access authorization control of the user of the contactless chip card, there is a need for the willingness to use contactless smart cards enlarge.  

SUMMARY OF THE INVENTION

The present invention relates to a control method for access authorization for one electronic unit and one electronic unit into which an input unit of the entered an access authorization code in the electronic unit before the electronic unit is complete is operational, and in particular to a tax process for the access authorization for a contactless chip card and on a contactless smart card that it owns the smart card owner allowed to control whether data exchange between his Chip card and a read / record unit should take place or not. Furthermore, the invention relates to the Control whether the chip card (or one on the chip card relevant bank account) is debited, an identification code, a digital signature transfers and refers to that Control the transmission of other sensitive data. To the Controlling data exchange includes the contactless chip card according to the invention an access authorization circuit, the must be activated by the owner of the chip card by a rhythmic code is entered by hand, which is indicated by a Comparator of the chip card is compared with a reference code. Only if the code entered matches the reference code is a data exchange of sensitive data between the Chip card and a read / record unit activated. Otherwise the chip card will not transmit sensitive data. The rhythmic code, a personal identification sequence (PIS), can the rhythm of a part of a song be a morse-like Code or other knocking code, etc.

In one embodiment of the invention, the Morse-like code that is entered via the input unit a personal identification number (PIN) of the  Owner of the chip card. For example, a PIN 1231 for the chip card through the input unit according to the invention Operation SHORT PAUSE SHORT SHORT PAUSE SHORT SHORT SHORT PAUSE SHORT input unit. In one embodiment The invention can use this type of access authorization instead of Enter a PIN code using a PIN input unit and / or instead of entering a further personal identification sequence (PIS) via the input unit.

Preferably, the electronic unit gives the owner of the Unit an acoustic or visible indication to to indicate that his PIS has been accepted as correct and that the electronic unit, such as a contactless one Smart card, is now fully operational.

In one embodiment of the invention, the Access authorization circuit a data exchange for loading the chip card, sending an identification code, sending one digital signature, an access code or the like from the chip card to the read / record unit, which of the Chip card depends in detail.

In a further embodiment of the invention, the Access authorization circuit to perform a Data exchange only within a specified period of time after its activation, by entering the correct PIS was followed.

The input unit for entering the rhythmic code or A sensor or an electrical switch can switch on something similar or be in the chip card by the owner of the Chip card (by hand) is activated. Accordingly, the Owners of the smart card easily transfer from  sensitive data between his chip card and a read / open control the drawing unit because the owner Activating the switch or sensor actively exchanges data recognized as justified.

The sensor can consist of a sensor which is an electrical one Signal generated by the temperature of the sensor from which to pressure or the like depends on the sensor.

If a quartz crystal is used as an input unit, change its vibration frequency when it touches with a finger is what through a suitable electronic circuit in a contactless chip card is analyzed according to the invention.

In a further embodiment of the invention, a Piezo resistor pressure sensor used its electrical Resistance changes when pressed with your finger.

A capacitor that changes its electrical capacity when touched with a finger can also be used. To increase sensitivity, the capacitor can be part of a resonant circuit that is dependent on the Temperature of the capacitor changes its frequency.

If necessary to analyze the sensor signal, a analog signal generated by the sensor by an in the Chip card embedded analog-to-digital converter in a digital Signal converted. To compare the converted digital Signal from the sensor with a predetermined electrical signal or code, the chip card according to the invention comprises a Comparator. In one embodiment of the invention, the Comparison carried out by a central unit of the chip card.  

All electronic components of the chip card are preferably possibly with the exception of the antenna, in a single chip integrated, which includes the input unit that is on top of it is attached, and embedded in a way in the chip card is that the input unit from the surface of the smart card can be activated by the owner of the card.

In a further embodiment of the invention, the Input unit from an electrical switch, and one Trigger signal to move the card from its idle state to its The central unit of the Chip card transmitted when the input unit by hand a rhythmic code that has been activated with a Match reference code that is stored in the chip card. If necessary, the chip card can also have a timer circuit include to exchange data between the smart card and a reading / recording unit within a predetermined Time to activate after the switch or a sensor, as already mentioned, correct by the owner of the card has been operated. In one embodiment, the switch or sensor additionally operated by the owner of the card while a transaction or the like is taking place, so that the card is kept operational and the completion of the Transaction is allowed.

In a further embodiment of the invention is the switch or sensors in or near an access authorization area the chip card arranged. Such one Access area can be an opening or notch in the Smart card, an irregular edge of the card, or any suitable part of the chip card, which it the owner of the Card allowed to sense the area without the chip card to have to look at.  

In one embodiment of the invention, a capacitor forms with two or more separate electrodes an input unit, the near or within the access authorization area is arranged. If the capacitor is part of an oscillating circuit is that changes its frequency when a finger touches the capacitor touched, the owner of the Card easily through a detection circuit of the chip in the Card can be determined.

It goes without saying that the access authorization with a rhythmic code or other PIS code not on one contactless chip card is limited, but for any other electronic device may be suitable, such as one Pager, an identification unit such as one Java ring, or a mobile phone. There to one Access permission with a rhythmic code only one only key is needed is the tax procedure for the access authorization according to the invention in particular for small (portable) units suitable. Nonetheless, can Access authorization by entering a rhythmic code too be used for larger units, such as mobile phones, which include a (small) keyboard because the rhythmic code in the input unit can be input even if it is is dark and the keyboard cannot be used.

BRIEF DESCRIPTION OF THE DRAWINGS

For a better understanding of the present invention and for Further of its details and merits will now be referred to the following detailed description taken in conjunction can be seen with the accompanying drawings, in which the same numbers and letters same or similar Show components and in which:  

Fig. 1 shows the structure of a known contactless smart card system to which the present invention can be applied;

Fig. 2 is a contactless IC card system according to a first embodiment of the invention;

Fig. 3 is a contactless IC card system according to a second embodiment of the invention;

FIG. 4 shows a first embodiment of an input unit of the embodiment of the contactless chip card system shown in FIG. 3; and

FIG. 5 shows a second embodiment of an input unit of the embodiment of the contactless chip card system shown in FIG. 3.

The structure of the contactless chip card system in FIG. 2 according to the invention is basically identical to that shown in FIG. 1, except that the contactless chip card 2 comprises a switch 13 . Instead of connecting the receiving circuit 10 directly to the central unit 7 via a trigger signal line T, as shown in FIG. 1, an input of switch 13 is connected to the receiving circuit 10 of the contactless chip card 2 via the trigger signal line T. An output of switch 13 of contactless chip card 2 is connected to central unit 7 via a second trigger signal line T '. As already described in connection with FIG. 1, the contactless chip card 2 receives a trigger signal from the reading / recording unit 3 via the trigger signal line T in order to put the chip card out of its idle state into its operational state. In contrast to the prior art, as shown in Fig. 1, the trigger signal must pass through the switch 13 so that it is able to reach the central unit 7 and the chip card in Fig. 2 from its idle state to its To put operating status. In order to enable a user of the chip card 2 to control whether his chip card 2 can be loaded by the reading / recording unit 3 or treated in a similar manner, the owner must manually enter a rhythmic code or another PIS code into an input unit (not shown) ) that matches a reference code stored in non-volatile memory, such as an electrically erasable programmable read only memory (not shown) or in read only memory 6 . A comparator (not shown) compares the entered rhythmic code with the reference code and activates an activation circuit (not shown) if both match. The activation circuit actuates switch 13 , the trigger signal is transmitted via trigger signal lines T, T 'to the central unit 7 , and the contactless chip card 2 can read / record 3 sensitive data such as a debit signal, the number of a bank account, an identification code , exchange a digital signature or similar that is necessary for electronic payment or identification.

The embodiment of the contactless chip card system shown in FIG. 3 differs from the known contactless chip card system shown in FIG. 1 in that the contactless chip card 2 in FIG. 3 comprises a sensor 14 . The sensor 14 is connected to the connection bus 8 and must be operated with a rhythm which corresponds to the reference code which is stored in the chip card before a data exchange of sensitive data can take place. In order to actuate the input unit (not shown) from FIG. 2 or from the sensor 14 of the contactless chip card 2 in FIG. 3, a finger of the owner of the chip card 2 must be on the input unit (not shown) of the contactless chip card 2 in FIG. 2 or be placed on the sensor 14 of the contactless chip card 2 in Fig. 3 before an exchange of sensitive data with the reading / recording unit 3 can take place. In order to analyze whether the sensor 14 is manually operated by the owner of the chip card 2 in FIG. 3, the central unit 7 regularly determines the state of the sensor 14 . When an electrical parameter of the sensor, such as its electrical resistance, changes due to the touch of the sensor 14 , the digital signal of an analog-to-digital converter (not shown) changes, and the change via the bus 8 to the central unit 7 transmitted digital signal is analyzed by the central unit.

In a preferred embodiment of the chip card 2 in FIG. 3, the central unit 7 compares the digital representation of the signal transmitted via the bus 8 to the central unit 7 with a predetermined digital reference value using a comparator (not shown) of the central unit 7 . The comparison reference value, in order to recognize whether the sensor 14 is activated, is stored in an electrically erasable programmable read-only memory (not shown), which is also implemented in the chip card 2 shown in FIG. 3. If the sensor signal 14 is regarded as a sensor signal of an activated sensor, the central unit, the comparator (not shown) and / or a threshold circuit (not shown), which are implemented in the chip card 2 shown in FIG. 3 or in the central unit 7 , cause the central unit 7 to make a comparison of the entered rhythmic or pulse code with the stored reference code and deactivate a locking means (not shown) or an access authorization circuit (not shown) if the entered code with that stored in the chip card 2 in FIG. 3 Code coincides, which then activates the exchange of sensitive data between the contactless chip card 2 and the reading / recording unit 3 .

It goes without saying that any suitable sensor or switch can be used if its output signal can be analyzed by the central unit 7 or another means of the chip card 2 , such as a comparator or a threshold circuit.

The sensor 14 in the preferred embodiment of the chip card 2 in Fig. 3 consists of a capacitor of an oscillating circuit (not shown) with sufficient sensitivity, on which a finger is placed by the owner of the chip card 2 to enter the PIS and then a data exchange between the chip card and a read / record unit.

In the embodiment shown in FIG. 3, the chip card 2 comprises only a single chip in which the random access memory 5 , the read-only memory 6 , the central unit 7 , the sensor 14 or the resonant circuit (not shown) with its corresponding capacitor (not shown), the I / O control circuit 9 , the receiving circuit 10 , the transmitting circuit 11 , the bus 8 and the trigger signal line T are realized. In the embodiment shown in FIG. 3, the antenna 12 is separated from the single chip and arranged on or within the chip card 2 , but is connected to the chip via signal lines which are shown in FIG. 3.

The capacitor (not shown) to input a PIS can  through two or more (separate) contact points Contact field are formed, which are known on a chip Contact smart cards are arranged, the electrical contacts include to read / record unit communicate. If the known contact field for touching Contact chip cards as a capacitor for the contactless chip card according to the invention can be used with a chip card a means of data exchange authorization, which from Smart card users remain activated during the transaction to enable the transaction to be carried out, and an input unit for entering a personal Identification sequence (PIS), e.g. B. a rhythmic or a Morse code, in the form of a single embedded in a card Chips are realized that are only a single means for Identification purposes (the contact areas of the known Contact field) and after that transactions etc. be permitted by the input unit during a Transaction is actuated. In addition, through this Measures according to the invention a chip card are realized, which includes only a single chip that uses the card for contactless operation as for operation under Use of the electrical contact points in one contact-based chip card system.

The embodiment of the invention shown in FIG. 4 differs from the embodiment shown in FIG. 3 in that the contactless chip card 2 comprises a separate capacitor 15 , which changes its capacitance when it is touched with a finger. Furthermore, the capacitor 15 forms part of an oscillating circuit 19 which changes its frequency when a finger touches the capacitor 15 . In addition, in contrast to the embodiment shown in FIG. 3, the resonant circuit 19 is connected directly to the central unit 7 instead of, as shown in FIG. 3, via a connection via the bus 8 .

In addition, the contactless chip card shown in FIG. 4 differs from the chip card 2 shown in FIG. 3 in that it comprises an opening 18 near a corner of the chip card. Two physically separate electrodes 16 and 17 are arranged around the opening 18 , and each of the electrodes is connected to the resonant circuit 19 via a wiring level. Through the opening 18 , the owner of the chip card 2 shown in Fig. 4 can easily feel with his fingers the location of the access area formed by the opening 18 and adjacent electrodes 16 and 17 even when it is dark or when Owner of the chip card 2 wants to grant access authorization for a data exchange, even though the chip card 2 from FIG. 4 is in his pocket.

FIG. 5 shows a further embodiment, which differs from the embodiment shown in FIG. 4 in that the access authorization area is formed by a notch 23 on a corner of the contactless chip card 2 . Two separate electrodes 21 and 22 of the capacitor 20 are arranged in the vicinity of the notch 23 .

In a further embodiment, the input unit of each of the contactless chip cards 2 , which are shown in FIGS. 2, 3, 4 and 5, is also a means for access authorization for the data exchange, with which the authorization for a transaction is granted after by the user the correct rhythm, morse-like or other correct PIS code has been entered on the card. Therefore, a digital representation of a PIS code is stored in the electrically erasable programmable read-only memory (not shown) of the chip cards 2 shown in FIGS. 2, 3, 4 and 5, which is generated by a comparator (not shown) of the card or is compared by the central unit 7 of the chip card 2 with a rhythmic or morse-like actuation of the sensor or switch. If the result of the comparison shows that the entered PIS code matches the code stored in the electrically erasable programmable read-only memory (not shown) or the like, a timer (not shown) in the chip card is activated in order to make the chip card fully operational . In addition, the chip cards 2 in FIGS. 3 to 5 can comprise a second timer (not shown), which permits data exchange of the chip card with a reading / recording unit 3 within a second period after the chip card is fully operational. Otherwise, instead of a second timer, it can be provided that the user must keep the input unit pressed (keep the touch or keep pressed) during a transaction or other exchange of sensitive data that is to take place. This two-stage process enables only the owner of the chip card to put his chip card into operation, and he has complete control over the exchange of sensitive data from his chip card with a read / record unit, since he also has to actuate the input unit before any communication of sensitive data such as a transaction, identification, digital signature, or the like.

Claims (15)

Control method for access authorization for an electronic unit ( 2 ), which comprises a comparator ( 7 ), an electronic memory which stores a reference code, an input unit ( 14 ; 15 ; 20 ) for manually entering an access authorization code and an access authorization circuit ( 7 ) , wherein the comparator ( 7 ) compares an entered access authorization code with the reference code and the access authorization circuit ( 7 ) is either activated or blocked depending on the result of the comparison, which comprises the following steps:

• - Rhythmically entering the access authorization code in the input unit ( 14 ; 15 ; 20 ); and
• - Comparing the rhythmically entered access authorization code by the comparator ( 7 ) with the reference code.

2. The method according to claim 1, wherein the electronic unit ( 2 ) is a unit for carrying out a data exchange. 3. The method of claim 1, wherein the Access authorization code is a code similar to Morse code. 4. The method of claim 1, wherein the Access authorization code is a rhythmic code. 5. The method of claim 3, wherein the morse-like code the  Morse code of a PIN (personal identification number) corresponds. 6. The method according to claim 1, wherein the electronic unit is a chip card and the input unit ( 14 ; 15 ; 20 ) is embedded in the chip card ( 2 ). 7. Electronic unit ( 2 ) comprising a first comparator, an electronic memory storing a reference code, an input unit ( 14 ; 15 ; 20 ) for manually entering an access authorization code and an access authorization circuit, the comparator having an input access authorization code with the reference code compares and the access authorization circuit is either activated or blocked depending on the result of the comparison, wherein

• - The access authorization code is a rhythmic code which is input into the input unit ( 14 ; 15 ; 20 ); and
• - The comparator compares the rhythmic code with the reference code.

8. The unit of claim 7, wherein the input unit ( 14 ; 15 ; 20 ) is a capacitor that changes its electrical capacitance when a finger comes into contact with the capacitor. 9. Unit according to claim 7, wherein the unit ( 2 ) comprises a second comparator ( 7 ) which compares the digital representation of an electrical parameter of the input unit ( 14 ; 15 ; 20 ) with a reference value stored in the unit. 10. Unit according to claim 7, wherein a single integrated circuit is embedded in the unit, the input unit ( 14 ; 15 ; 20 ), a central processing unit ( 7 ), a read-only memory ( 6 ), a random access memory ( 5 ) and comprises a connecting bus ( 8 ). 11. The unit of claim 7, wherein the unit ( 2 ) comprises an access authorization area. 12. Unit according to claim 11, wherein the access authorization area consists of a notch ( 23 ), in the vicinity of which the input unit ( 20 ) is arranged. 13. The unit of claim 11, wherein the input unit is a capacitor ( 15 ; 20 ) with two or more separate electrodes ( 16 , 17 ; 21 , 22 ) which are arranged near the access authorization area. 14. Unit according to claim 7, wherein the unit consists of a chip card ( 2 ). 15. Unit according to claim 14, wherein the chip card consists of a contactless chip card ( 2 ).