JP2000076134A - Method for identifying user relating state of operation mistake counter - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for identifying and displaying the state of an operation mistake counter before the input of a password. SOLUTION: In this method, the state of the operation mistake counter is checked before each input of a new password. For respective scanned states, a certain defined state is allocated. The state is visually or audibly signaled to a user by a chip card application before the input of the password. For visual display, the one in the form of a traffic signal is desirable, and in that case, green, yellow and red are allocated to the defined states of the operation mistake counter. For the use of a password protected object and (or) application, the state of a protective device to the password is clearly reported by a clearly displayed display. Especially, after a card is lost and then is found again later, the user recognizes who tries to input the password. Before the last chance of inputting a correct password, the user is clearly warned and then, the input device is carefully checked again before the input.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION The present invention discloses a system and a method for unambiguously identifying identification features, in particular the status of a chip card misoperation counter when entering a password.

[0002]

2. Description of the Related Art In highly secure data storage devices such as chip cards, applications and data are protected by a password (PIN = personal identification number). The use of passwords allows authorized persons to use certain applications or access protected data. The user enters P at the card terminal
After inputting the IN, the display immediately indicates whether the PIN was correct. In this process, the chip card receives a PIN, typically four digits, from its terminal with a "PIN Verification" command and compares the PIN with the PIN stored in the EPROM. If the externally transferred PIN matches the stored PIN, the state machine on the tip guard is acted upon and the terminal is notified with a positive result of the comparison match. Thus, the PIN misoperation counter is similarly assigned its initial value (eg, 3 or 0). If the transferred PIN does not match the PIN stored on the chip card, the malfunction counter is decremented. When the counter reaches zero, the card is blocked for any other PIN verification.

[0003] If a chip card is lost and subsequently found again, its owner cannot check if anyone has attempted to use the card with an incorrect PIN.

[0004] The state of the chip card is only signaled as an error message after the entry of the PIN. The chip card holder is not alerted before the last entry attempt. If the uppercase / lowercase shift key on the keyboard is accidentally pressed, the use of a case-sensitive password may be prone to non-random input errors.

[0005]

SUMMARY OF THE INVENTION It is therefore an object of the present invention to provide a system and method which avoids the above disadvantages in the state of the art.

[0006]

This object is met by the features of claim 1 in the claims. Further advantageous embodiments of the invention are given in the dependent claims.

[0007]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The user of a password protected object and / or application is clearly informed of the status of the protection device for the password by a clearly displayed display. In particular, after the card is lost and then found again, the user can know if anyone else has attempted to enter a password. Prior to the last chance to enter the correct password, the user is clearly warned and carefully re-enters the input device before entry (eg, that the shift key is set correctly, or biometric).
tric) that the input device is connected correctly)
You can check.

When a chip card is issued, the user is forced to change the default password set when the card was manufactured. If this prompt does not appear the first time the card is used, the user knows that someone has changed the password before and probably used the protected object.

According to the present invention, before a password is input,
The status of the erroneous operation counter is displayed to the user of the chip card. This is preferentially done by the graphical user interface of the application. The graphical user interface may, for example, display the following states to the user in graphical form: State 1: The card is new and issued with a predefined password. Alternatively, the password has been reset by a security officer and must be replaced by the user's own personal password. State 2: The password was entered correctly during the last scan. State 3: The password was incorrectly entered during the last scan. At least two more attempts are possible to enter the correct password. State 4: The password was incorrectly entered during the last scan. At least one more attempt is possible to enter the correct password. State 5: The card has been blocked and can be reset by the user or by security personnel using a special reset password.

[0010] These states can be realized by various graphical displays.

A preferred implementation is a graphical display of a traffic signal. In that case, the above five states are assigned the following graphical displays.

1. Flashing Green Light (State 1)-Special Password Mode For example, the card is new or the password has been reset by security personnel. The user is prompted to enter a password or change the default password. If the password is entered incorrectly, a graphical display of state 3 or 4 is set. For example, it is possible to make at least two more attempts or even just one more attempt to enter the correct password.

2. Green light (state 2) The misoperation counter is zero. The user still has a total number of pre-assigned attempts to enter the correct password. The misoperation counter can also be set according to security requirements. The number of failed attempts allowed is typically three. This applies to EC cards and electronic wallets. Other cards with a low risk of unauthorized access allow 5 or even 10 attempts.

3. Yellow light (state 3) Although this misoperation counter has registered at least one failed attempt, the user still has two more attempts.

4. Blinking yellow light (state 4) The misoperation counter has registered several failed attempts, and only one more attempt is possible. The flashing yellow light signals that the user must take great care when entering the password. This applies in particular to case-sensitive passwords.

5. Red light (state 5) The misoperation counter indicates the maximum number of failed attempts. The card is blocked and the misoperation counter can only be reset by a reset password. The password entry may be replaced by a fingerprint biometric entry. The fingerprint generates a unique key, which is compared to the key stored on the chip card. If no key or any unique key can be generated, the misoperation counter is incremented. This also applies if an incorrect key is generated.

A further mode of the graphical display of states 1 to 5 may be a display with a different background color in the graphical user interface for password entry depending on the state of the misoperation counter. This may be based on different colors of the traffic light system. Each defined state of the misoperation counter is
It may be displayed graphically by any graphic symbol. The key aspects to be considered in this case are:
It is how easy the symbol is for the user to remember. Therefore, embodiments of the present invention should be referred to merely as preferred embodiments.

A further embodiment of the present invention involves an audible indication of defined states 1-5. Here, each state of the malfunction counter is assigned a specific tone or tone sequence (buzzer or beep) or a short melody. A buzzer means that the card is blocked for use. The beep signals state 3 and the alarm tone signals state 4. This embodiment of the invention is particularly suitable for color blind users. The combination of the visual and audible indications of the status of the misoperation counter may represent a further embodiment of the present invention.

All embodiments of the present invention provide a visual and / or / and / or error counter only to authorized users.
They must have in common the requirement that auditory state information can be uniquely interpreted. The chip card manufacturer or issuer will have to issue a simple guide with each chip card indicating which graphical and / or audible indication is assigned to which state of the misoperation counter. Unauthorized users cannot derive benefits from status information. Further variations are possible involving graphical and audible state information being defined by the user himself. In that case, each application program would have to have the capability to allow the user to select and display status information. This is, for example, the menu
It could be realized by a guided user interface.

However, all embodiments of the present invention are in state 1
In, the password change function is always and immediately invoked to allow the default password to be changed to a single password known only to the user. After entering the new password, the misoperation counter is reset to state 2, for example. As long as no password is entered, that state, eg, state 3 or 4, is retained.

The defined state of the misoperation counter is preferably signaled by the programming interface of the application.

The present invention is not limited to chip card systems only. The invention can be used in any system where access to data or applications is controlled by a misoperation counter.

In summary, the following matters are disclosed regarding the configuration of the present invention.

(1) A misoperation counter is installed on the intelligent data carrier to prohibit access to the intelligent data carrier when the number of failed attempts at input of the identification feature exceeds a defined number. A method of identifying the state of the misoperation counter, wherein (a) scanning the current state of the misoperation counter, and (b) remaining available failed attempts to enter the identification feature. Assigning a defined state to the state scanned in step (a); and (c) assigning visual and / or auditory information to the state of the misoperation counter defined in step (b). Assigning; and (d) the visual and / or audible information prior to inputting the identifying feature. Method comprising the steps of displaying, the. (2) The method according to (1), wherein the intelligent data carrier is a chip card. (3) The method according to the above (1), wherein the status of the erroneous operation counter confirmed in the step (a) includes information on a failed trial already performed and remaining available trials. (4) Each scanned state of the erroneous operation counter is assigned a defined state, each scanned state is assigned a newly defined state, or a plurality of scanned states are the same defined state. The method according to the above (1), wherein (5) The method according to (1), wherein the defined state defines a user-related state of the malfunction counter. (6) The method according to (1), wherein the identification feature is a password or a biometric input. (7) The method according to (1), wherein each defined state is assigned a unique visual and / or audible information signal. (8) The scanned state of the misoperation counter is a defined state as follows: State 1: The card is new, issued with a predefined password, and replaced by the user with a new password. Or the password has been reset by a security officer and should be replaced by the user's own personal password. State 2: The password was entered correctly during the last scan 3: The password was incorrectly entered during the last scan. At least two more attempts are possible to enter the correct password. State 4: The password was incorrectly entered during the last scan. One more to enter the correct password
State 5: The method according to (1), characterized in that the card can only be reset by a user or security officer by means of a special reset password, with only five attempts possible. (9) The method according to (4), wherein the password change function is automatically called in the state 1, and the state 2 is assigned when a new password is input. (10) The method according to (8), wherein each of the states 1 to 5 is assigned a unique graphical display or an audible signal. (11) Each of the states 1 to 5 is assigned a handwritten display or a text display.
The method described in. (12) The method according to any one of (1) to (11) above, wherein the display of the visual information is integrated into a graphical user interface for input of identification features. Method according to (8), characterized in that the states 1 to 5 are realized with a graphical display of a traffic signal by means of a color signal, i.e. flashing green, green, flashing yellow, yellow and red. 14) Said state 1 is assigned the blinking green light in the display of the graphical traffic light and said state 2
Is assigned a green light, the state 3 is assigned a blinking yellow light, the state 4 is assigned a yellow light, and the state 5 is assigned a red light. ). (15) The state 1 is assigned a flashing green light shown as a background color in the graphical user interface for input of identification features, the state 2 is assigned a green light, Method according to (8), wherein 3 is assigned a yellow light, said state 4 is assigned a blinking yellow light and said state 5 is assigned a red light. (16) The states 1 to 5 of each chip card application are signaled via a programming interface, and the visual information is displayed by the chip card application according to the step (d). The method according to 8). (17) The method according to (1), wherein the user can self-select the defined state by a menu-guided user interface. (18) The data processing program, comprising a storage device for storing a data processing program component for performing the process steps according to (1 to 17) above, wherein the data processing program is a chip card to be inserted into a chip card reader. (19) A data processing program stored in a storage device of a data processing system and including a data processing program component for performing the process steps according to (1 to 17) above. In the product, the data processing program is a data processing program product executed on the data processing device (20) The data according to (19), wherein the data processing program is a chip card application. Processing program products.

 ──────────────────────────────────────────────────の Continued on the front page (72) Inventor Michael Kaiser Staucher, Holzgerlingen, Germany 3

Claims (20)

[Claims] An error counter is installed on an intelligent data carrier, and when the number of failed attempts at inputting an identification feature exceeds a defined number.
A method for identifying the state of the erroneous operation counter in the case where access to the intelligent data carrier is prohibited; (a) scanning the current state of the erroneous operation counter; and (b) inputting the identification feature. Assigning a defined state regarding the remaining available failed attempts to the state scanned in step (a); and (c) assigning visual and / or audible information to said step (b). A) assigning to the state of the mismanagement counter defined in (d); and (d) displaying the visual and / or audible information prior to the input of the identifying feature. 2. The method according to claim 1, wherein said intelligent data carrier is a chip card. 3. The method of claim 1, wherein the status of the misoperation counter ascertained in step (a) includes information regarding failed attempts already made and remaining available attempts. 4. Each of the scanned states of the malfunction counter is assigned a defined state, each scanned state is assigned a newly defined state, or a plurality of scanned states are defined the same. The method of claim 1, wherein the state is assigned. 5. The method of claim 1, wherein the defined state defines a user-related state of the misoperation counter. 6. The method according to claim 1, wherein the identification feature is a password or a biometric input. 7. The method of claim 1, wherein each defined state is assigned a unique visual and / or audible information signal. 8. The scanned state of the misoperation counter is defined as follows: State 1: The card is new and issued with a predefined password, and a new password is issued by the user. Or the password has been reset by a security officer and should be replaced by the user's own personal password. State 2: The password was entered correctly during the last scan State 3: The password was incorrectly entered during the last scan. At least two more attempts are possible to enter the correct password. State 4: The password was incorrectly entered during the last scan. One more to enter the correct password
The method according to claim 1, characterized in that only five attempts are possible. State 5: The card can be taken off and can only be reset by a user or security officer with a special reset password. 9. The method of claim 4, wherein a password change function is automatically invoked in state 1 and state 2 is assigned when a new password is entered. 10. The method of claim 8, wherein each of said states 1-5 is assigned a unique graphical display or audible signal. 11. The method of claim 8, wherein each of said states 1-5 is assigned a handwritten or textual display. 12. The method according to claim 1, wherein the display of the visual information is integrated into a graphical user interface for inputting identification features.
The method described in one. 13. The state according to claim 8, wherein the states 1 to 5 are realized by a graphical display of a traffic signal by a color signal, that is, a blinking green, green, blinking yellow, yellow, and red. the method of. 14. The state 1 is assigned a blinking green light in a graphical traffic light display, the state 2 is assigned a green light, the state 3 is assigned a blinking yellow light, and the state 14. The method of claim 13, wherein 4 is assigned a yellow light and said state 5 is assigned a red light. 15. The state 1 is assigned a flashing green light shown as a background color in the graphical user interface for input of identification features, the state 2 is assigned a green light, 9. The method of claim 8, wherein state 3 is assigned a yellow light, state 4 is assigned a blinking yellow light, and state 5 is assigned a red light. 16. The state 1 to 5 of each chip card application is signaled via a programming interface, said visual information being displayed by said chip card application according to said step (d). The method according to claim 8. 17. The user can define a defined state in a menu
The method of claim 1, wherein the method can be self-selected by a guided user interface. 18. A data processing program for implementing a process step according to claim 1 to a chip card for insertion into a chip card reader.
A chip card including a storage device for storing components, wherein the data processing program is executed on the chip card. 19. A data processing program product stored in a storage device of a data processing system and including a data processing program component for performing process steps according to claims 1 to 17, wherein the data processing program comprises the data processing program. A data processing program product that runs on a processing device. 20. The data processing program according to claim 1, wherein said data processing program is a chip card application.
10. The data processing program product according to 9.