JP2000011080A - Card system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To permit only a right card user to use a card and to obtain a highly reliable system by permitting only the right card user to use the card till the arrival of the card from a card manager and changing a security code at the time of using it. SOLUTION: A temporary password code is decided (S1). The temporary password code is registered in the computer of the card manager or the like (S2). Only the registered ID code is recorded in the card (S3). The card where the ID code is recorded is transmitted to the card user (S4). The card is inserted to a terminal (S5) and the ID code is transmitted from the card to the card manager (S6). The temporary password code is inputted to the terminal (S7), the ID code is collated with the temporary password. At the time of coincidence (S8), the temporary password code is cancelled (S9). The card user inputs a permanent password (S10) and the password code is registered (S11).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card system, and more particularly to a card system used when a credit card or a bank card is used.

[0002]

2. Description of the Related Art Conventionally, IC cards and magnetic recording cards have been used as credit cards and cash cards. When you apply for the issuance of these cards to a credit card handling company or a bank, the cards are mailed to each individual after confirmation and registration of the individual.
In this card, a password determined between the card manager and the card user is recorded. When the card user uses the card, the card user inserts the card into the terminal and inputs a personal identification number. If you enter a PIN, the entered PIN will be compared with the PIN recorded on the card, and if they match,
Subsequent operations can continue.

[0003]

However, the card mailed from the card manager already has a password or the like recorded thereon and is ready for use.
Therefore, stealing the card and deciphering the password,
For example, if a forged card in which the same personal identification number as that of the card is recorded is produced, there is a possibility that the card may be used by a person other than a valid card user.

As the personal identification number of the card, the date of birth of the card user and the telephone number are often used, and are easily known to others. Further, in the case of a magnetic recording card or the like, the password can be read relatively easily. Therefore, a forged card can be made relatively easily, and there is a problem in terms of security.

[0005] Therefore, a main object of the present invention is to provide a card system in which only a legitimate card user can start using the card and, even after starting to use the card, can keep the security of the card. To provide.

[0006]

According to the present invention, a card manager and a card user determine a temporary password, and the card manager issues a card on which a confirmation code is recorded to the card user. Reading the confirmation code from the card when the card user starts using the card, inputting the temporary PIN code by the card user, and allowing the card administrator to enter the confirmation code and the temporary PIN code. Collating, and deleting the temporary security code in response to the confirmation code and the temporary security code being confirmed,
Registering a personal identification code that is permanently used by the card user in place of the temporary personal identification code only with the card administrator. Such a card system may further include a step of registering a security code in the card manager and the card when registering a password to be used permanently. Further, it is desirable that the security code be changed each time the card is used. Also, the time when the card is used can be used as the security code.

When a card is issued, a temporary password is managed by the card manager and the card user until the card reaches a valid user, and when the valid user starts using the card. , Will be changed to a permanently used PIN code. When the card is actually used, a permanent password must be used, so that the security until the card is delivered to an authorized user can be enhanced. In addition, neither the temporary code nor the permanent code is recorded on the card, and is managed by the card administrator and the card user. Therefore, there is no danger of reading these codes from the card. Confirmation of the card is performed by the confirmation code recorded on the card, and by verifying the confirmed card with the password entered by the valid user, it is determined that the valid card is used by the valid user. It is confirmed. Further, a security code can be used in addition to the confirmation code, and by comparing the confirmation code, the security code, and the personal identification code, it can be more securely confirmed whether or not a valid card is used. Further, by changing the security code every time the card is used, the security of the card can be improved as compared with the case where a fixed security code is used. As such a security code, for example, a time when the card is used can be recorded.

The above objects, other objects, features and advantages of the present invention will become more apparent from the following detailed description of embodiments with reference to the drawings.

[0009]

FIG. 1 is a flowchart showing an example of a card system according to the present invention, and FIG. 2 is an illustrative view showing a relationship between a card manager, a terminal and a card user.
The card system 10 is used between a card manager 12 such as a bank managing a cash card and a credit card handling company managing a credit card, and a card user 14 who actually uses the card. First,
When the card user 14 requests the card manager 12 to issue a card, in step S1, the card manager 12
A temporary password code “1234” is determined between the user and the card user. Note that the password “1234” is an example, and may be another number, a number other than four digits, or a character such as an alphabet or a mixture of a number and a character. Good. The determined temporary password “1234” is registered in the computer of the card manager 12 or the like in step S2. At this time, a confirmation code (ID code) unique to the card is registered in the computer of the card manager 12 at the same time as the registration of the temporary password “1234”.

In step S3, only the ID code registered by the card manager 12 is recorded on the card. As the card, for example, an IC card or a magnetic recording type card can be used. At this time, the temporary password “1234” is not recorded on the card. Then, in step S4, the card on which the ID code is recorded is sent to the card user by mail or the like.

[0011] The card user 14 receiving the card,
In step S5, in order to make the card usable, for example, an automatic cash withdrawal depositing device (A
The card is inserted into a terminal 16 such as TM). In step S6, the terminal 16 reads the ID code from the card and sends the ID code to the card manager 12. Then, in step S7, the card user 14 inputs the temporary security code “1234” to the terminal 16, and the temporary security code is sent to the card manager 12.

In step S8, the card manager 12 collates the transmitted ID code and personal identification code with the registered ID code and personal identification code. These IDs
If the code and PIN do not match those registered, the system is terminated and the card cannot be used. If the ID code and the password match the registered ones, in the next step S9, the card administrator 1
The temporary password “1234” is deleted from the second computer.

Next, in step S 10, the card user 14 inputs a password “5678” to be used permanently, and this password is sent to the card manager 12.
Of course, the permanent password may be a number other than four digits, or may be a letter or a mixture of numbers and letters. When the permanent security code is sent to the card manager 12, the security code "5678" is registered in the card manager 12's computer or the like in step S11. Further, in step S12, the card manager 12 registers the security code in a computer or the like, and the same security code is recorded on the card. As the security code, for example, the time at that time is used. For example, if an operation for starting use of a card is performed at 3:27 pm, "1" is used as the security code.
527 "is recorded.

[0014] Through these steps, the card is ready for use. At this time, the card administrator 12 registers the card ID code, permanent password and security code, and the card records the ID code and security code.

As described above, the temporary password is used until the card is delivered from the card manager 12 to the card user 14, and the temporary password is managed by the card manager 12 and the card user 14. Only
Not recorded on the card. Therefore, even if the card is stolen during mailing, the card is not in a usable state, and it is impossible to read the personal identification code from the card. Therefore, until the card reaches the legitimate card user 14 from the card manager 12, the security of the card can be ensured.

In order to use the ready-to-use card, the card is inserted into the terminal 16 in step S20 as shown in FIGS. When the card is inserted into the terminal 16, the ID code and the security code are read from the card and sent to the card manager 12 in step S21. Next, in step 22, the card user 14 enters the permanent password code "567".
8 "is input to the terminal 16, and the personal identification code is sent from the terminal 16 to the card manager 12.

In step S23, the card manager 12 checks the transmitted ID code, security code and permanent password with the registered ID code, security code and permanent password. If the ID code, the security code, and the password do not match, the system ends, and no further processing is performed. Then, if the ID code, the security code, and the password code match, in step S24, the subsequent procedure is continued. As an example of the procedure, for example, in the case of using a cash card, at a bank ATM,
It can receive and deposit cash. Also,
If a credit card is used, it is possible to make a payment for shopping.

When the procedure is completed, in step S25, the card manager 12 registers a new security code, and the security code is recorded on the card. At this time, the old security code is deleted. As the new security code, for example, the time when the card is used is used. For example, if the card is used at 9:17 am, the security code “0917” is recorded. Therefore, it is registered with the card manager 12,
In addition, the security code recorded on the card is different before and after using the card.

As described above, in this card system, I
In addition to the D code and the security code, a security code is used, and the security code is changed each time the card is used. Therefore, even if the security code at a certain point is known to others, the security code after using the card has been changed, so that the security of the card can be improved. In addition, a password used permanently is registered only by the card manager 12,
Since it is not recorded on the card, it is impossible to read the personal identification code from the card. As described above, the security of the card can be ensured by using the ID code, the security code, and the security code and not recording the security code on the card.

It is needless to say that not only a numeral but also a character or a mixture of a numeral and a character can be used as the ID code. As the security code, not only the time when the card is used, but also an arbitrary code can be used. For example, each time the card is used, a random number may be generated, and one number selected from the random numbers may be used as the security code. Further, in the case where a time, a random number, or the like is used, more secure measures can be taken by a method such as encrypting the number.

[0021]

According to the present invention, when a new card is issued, the card cannot be used until the card reaches a valid card user from the card manager.
Only a legitimate card user can make the card usable. Therefore, security during mailing of the card can be improved. Also, even when using a card, the security code cannot be read from the card,
Moreover, since the security code is changed when the card is used, the security can be improved. Therefore, in the card system of the present invention, only a valid card user can use the card, and a highly reliable system can be provided.

[Brief description of the drawings]

FIG. 1 is a flowchart showing one example of a card system of the present invention.

FIG. 2 is an illustrative view showing a relationship between a card manager, a card user, and a terminal in the card system shown in FIG. 1;

FIG. 3 is a flowchart when a card is used by using the card system of the present invention.

4 is an illustrative view showing a relationship between a card manager, a card user, and a terminal in the card system shown in FIG. 3;

[Explanation of symbols]

 10 Card System 12 Card Administrator 14 Card User 16 Terminal

Continued on the front page F term (reference) 3E044 AA09 BA04 BA05 CA05 CA06 DA06 DC05 DC06 DD01 5B049 AA05 BB46 CC39 EE23 FF08 5B055 HA02 JJ00 JJ03 KK01 KK05 5B085 AE02 AE12 AE15 5D044 AB01 BC01 CC08 DE39 DE49

Claims (4)

[Claims] A step in which a card administrator and a card user determine a temporary password; a step in which the card administrator issues a card in which a confirmation code is recorded to the card user; Reading the confirmation code from the card at the start of using the card; inputting the temporary PIN code by the card user; and collating the confirmation code with the temporary PIN code by the card manager. Erasing the temporary security code in response to the confirmation code and the temporary security code being confirmed, and permanently using the temporary security code instead of the temporary security code by the card user. A card system including a step of registering a personal identification code to be performed only with the card administrator. 2. The method according to claim 1, further comprising the step of registering a security code in the card manager and the card when registering the security code to be used permanently.
The card system according to 1. 3. The card system according to claim 2, wherein the security code is changed each time the card is used. 4. The card system according to claim 2, wherein a time when the card is used is used as the security code.