JP2000148928A - Program management system for ic card and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily give the same function of the existing card to a new card when the IC card used until now is renewed. SOLUTION: A management server 1 manages programs that are substantially the same as programs stored in IC cards which are respectively owned by many users in a database 11. Many IC card reader-writers 5 are connected to the server 1 through a network 3, and a user obtains a new IC card 13 in which a program is not inputted yet, sets it in the reader-writer 5, inputs self- user number and password and sends it to the server 1 when an IC card that is used until now is updated to the new IC card. The server 1 reads a user program corresponding to the user number and the password from the database 11 and transmits it to the reader-writer 5. The reader-writer 5 installs the program onto the new IC card 13.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for managing a program stored in an IC card, and in particular, when a user replaces his or her own IC card with a new one, the same as the IC card used so far. New I function
The present invention relates to an IC card program management system suitable for use in a C card.

[0002]

2. Description of the Related Art A conventional system using an IC card includes:
It is a single-purpose use type. For example, an IC card used in a health management system provided in town A is issued by the company, and can be used only in the system in town A. That is, it is an l card 1 application. However, with the increase in the capacity of IC cards, multipurpose IC cards
We are moving to multiple applications per card. For example, an application program of a book lending system of a library in town B and an application program having a cash card function of bank C are stored in one IC card, and can be used in both systems.

By the way, since an IC card is hardware and naturally deteriorates after a lapse of the use life, the expiration date is set in the IC card like the current card expiration date of the cash card, and the expiration date is passed. The system disables the card and gives the user a new IC
You will be asked to go through the process of having your card replaced. Further, the IC card may be damaged or lost. That is, the IC card has to be replaced sooner or later.

[0004]

However, in the case of a multipurpose IC card, when a user replaces his or her own IC card with a new one, the IC card having the same function, that is, the same application program as the IC card used so far. It is very difficult to do. The reason is as follows.

[0005] Each application program stored in the multipurpose IC card is expected to be created and operated by a different company or organization. Also, I
It is expected that the system to be used differs for each C card owner, that is, for each user, and that the application programs stored for each IC card differ. Therefore, in order to provide the same function as the existing IC card to the new IC card, the user needs to store information in the existing IC card, for example, which version of which application program of which company is included. It is necessary to know exactly. Further, for each of the plurality of companies that provided those applications, the user must request reloading of the application to a new IC card. This is an enormous work load for the user, which may make the use value of the multipurpose IC card negative.

Therefore, an object of the present invention is to provide an IC card having the same function (same application program) as an IC card used so far when a user replaces his IC card with a new one. It is an object of the present invention to provide a system that can perform

[0007]

A program management system for an IC card according to the present invention relates to a program which is substantially the same as a program stored in an IC card possessed by each of a large number of users. When a user manages a program management server and updates an IC card held by each user to a new IC card, the user can set the new IC card and communicate with the management server. And a connected IC card read / write device. The IC card read / write device transmits the unique information of the user who has set the new card to the program management server. The program management server receives the unique information and transmits a program associated with the unique information to the IC card reader / writer. IC
The card read / write device receives the program sent from the program management server and installs the program on the new IC card. Thus, a new IC card can be given the same function as an IC card that has been held.

[0008] The program management server of the present invention is typically implemented by a computer, and a computer program therefor can be installed or loaded on the computer through various media such as a disk storage, a semiconductor memory, and a communication network. it can.

[0009]

FIG. 1 shows the overall configuration of an embodiment of the present invention.

[0010] Application program management server (hereinafter referred to as "management server") 1, various IC card read / write devices used by the user (for example, ATM, cash dispenser, personal computer, etc.)
And a server or a host (for example, a bank gateway, etc.) of a system such as a company or an organization (hereinafter, referred to as a “supplier”) that provides an application program of an IC card or a service using the application. The host 7 is connected so as to be able to communicate with each other through the communication network 3.

The management server 1 manages application programs stored in a large number of IC cards 13 owned by a large number of users.
When the card is acquired, the new IC card has a function of installing the same function (same application program) as the IC card used by the user until now. The management server 1 includes a user management database 9 in which personal information such as the name and ID number of each user and user information such as the ID number and expiration date of the IC card 13 owned by the user are stored. A program management database 11 in which information for specifying an application program stored in the IC card 11 and program information such as the application program itself provided from the supplier host 7 are registered.
And

The operation will be described below.

It is assumed that the IC card 13 used by the user has expired, has been damaged, broken down, or has been lost. First, the user notifies the IC card issuer of that fact. Here, the IC card issuer is a person who has the authority to issue an IC card as hardware, and is, for example, a third organization authorized by all suppliers and managing the management server 1. It doesn't have to be. When the expiration date of the IC card 13 has expired, the user does not need to report the expiration date because the IC card issuer also manages the expiration date in the user management database 9 or the like.

The IC card issuer who knows the above is
An IC card 13 that stores only basic functions such as S and an authentication program and information unique to the card such as an IC card ID number and expiration date is stored to the user.
Here, the delivery method may be a conventional method such as mailing, or may be transferred to a company that has installed the IC card read / write device 5 (for example, at a store such as a bank or a convenience store or at a card store). Hand to the user from a machine such as an automatic issuing machine). Since the new IC card 13 has not yet stored application programs, user information, and the like, it cannot be used in any system yet. The issued IC card ID number and expiration date of the new IC card are registered in the user management database 9 in the user area.

Next, the user operates the new IC card 1
3 is inserted into the IC card read / write device 5, and a button such as new issue is selected from the menu buttons on the device 5 and pressed. At this time, the user inputs his / her name, user ID number, and other information for identifying himself / herself, and also inputs information indicating that he / she is an authorized user, such as a password. The IC card read / write device 5 transmits the information input by the user to the management server 1. The management server 1 checks the user information in the user management database 9 against the user input information, and if a match is obtained, confirms that the user is an authorized user who needs to exchange an IC card.

Next, the management server 1 sends user information (authentication information such as a name, a user ID number, and a password) to be written to the new IC card 13 from the user management database 9 to the IC card reading / writing device 5. IC
The card read / write device 5 writes the received user information into the IC card 13.

Next, the management server 1 searches the program management database 11 for all of the application program (s) stored in the old IC card used by the user until now, and then searches for the IC program. It is sent to the card reading / writing device 5. IC card read / write device 5
Writes the received application program 5 on the IC card. Thereby, the new IC card 13
Has substantially the same function as the old IC card used so far.

When a user newly installs or upgrades an application program of a certain supplier on the IC card 13, the user may operate the IC card read / write device 5 at the store of the supplier (or its agent). New installation and version upgrade can be performed on-line from the supplier host 7 or the management server 1. In this case, the information of the newly installed or upgraded program is provided to the management server 1 at any time online from the supplier host 7 or offline from the supplier (or its agent). The management server 1 updates the program information of the user in the program management database 11 based on the information of the new installation or the upgrade. Therefore, the management server 1 always holds the latest state of the IC card 13 held by all users.

It is desirable that data, commands, and the like communicated on the network 3 or between the IC card read / write device 5 and the IC card 13 are encrypted for security. When performing this encryption, as a matter of course, the network communication program of the management server 1 and the IC card read / write device 5, the IC card access unit of the IC card writing device 5 and the IC card 13 are encrypted. And decoding processing components.

The configuration and operation of each part of the system will be described in more detail below.

FIG. 2 shows the configuration of the IC card read / write device 5.

The IC card read / write device 5 has a display unit 2 for displaying menu buttons and messages to the user.
1. a main processing unit 23 for executing a corresponding process in response to a user's operation of a menu button; a reading unit 25 and a writing unit 27 for reading and writing data from and to the IC card 13 under the control of the main processing unit 23;
It has a transmitting unit 29 and a receiving unit 31 for transmitting and receiving data to and from the management server 1 and the supplier host 7 via the network 3 under the control of the main processing unit 23.

FIG. 3 shows the configuration of the management server 1.

The management server 1 has a display unit 41 for providing a graphical user interface to the operator, and a main process for executing a corresponding process in response to an instruction from the operator or a request from the IC card read / write device 5 or the like. Unit 43, the user management database 9 and the program management database 1 under the control of the main processing unit 43
1 for transmitting and receiving data to and from the IC card read / write device 5 and the supplier host 7 via the network 3 under the control of the main processing unit 43. Part 4
9 and a receiving unit 51.

FIG. 4 shows a configuration of a program in the IC card 13.

The usable IC card 13 has an OS 61, an authentication program 63, and common information (IC card ID number, expiration date, user number, etc.) in its built-in memory (mask ROM, programmable ROM, nonvolatile RAM, etc.).
Password, number of issuances, user name, etc.) 65, stored application type (identification) information 67, and one or more application programs 69A, 69B,.
Is stored. Here, the OS card 61, the authentication program 63, and the IC card ID number and the expiration date in the common information 65 are already installed when the IC card 13 is first issued. In particular, since the IC card ID number and the expiration date are information unique to the card and are not changed, they are written in the mask ROM. Of course, the OS 61 and the authentication program 63 can also be stored in the mask ROM if there is no need to respond to version upgrades. Since the other information is written after the card is issued, it is stored in a writable nonvolatile medium such as a programmable ROM or a nonvolatile RAM.

FIG. 5 shows data items of the user management database 9 managed by the management server 1.

The user management database 9 stores, for each user, a user ID number, an IC card ID number, an expiration date of the IC card, the number of issuances, an issuance permission flag when an IC card is newly issued, a password, a user name, and a date of birth. , Addresses, use flags of various applications, and the like. Here, the permission flag for new IC card issuance indicates that a new IC card may be issued to the user. For example, the application after the new IC card is issued to the user may be installed. This flag is set during a period in which the event can be performed. If this flag is not set, the management server 1 does not install the application. The use flags of various applications are set when the user uses the applications, and the management server 1 installs only the applications for which the flags are set.

FIG. 6 shows data items of the program management database 11 managed by the management server 1.

The program management database 11 stores, for each application, a service status flag of the application and an entity of the application program. Here, the service status flag is set when a service using the application is being executed, and is set when the service is stopped. The management server 1 does not install an application for which this flag is set.

FIG. 7 shows a main process 23 of the IC card read / write device 5 when an application is installed.
The flow of is shown.

When detecting the insertion of the IC card 13 (step S1), the IC card read / write device 5 reads the common information 65 (see FIG. 4) from the IC card 13 (S1).
2) Check whether the expiration date is before expiration and whether the card ID number is correct (S3). If the check is not passed, a predetermined error process is performed. If the check passes, the user inputs information for user identification such as a user ID number and authentication information such as powered (S4), and transmits the user input information, the IC card ID number, and the expiration date to the management server 1. (S5).

Next, a message indicating whether or not the IC card exchange process (application installation) has been permitted is received from the management server 1 (S6). In the case of permission, the user ID number, the common information 65 in the common information 65 shown in FIG.
Information that was not installed when the card was issued, such as the password, the number of times of issuance, and the user name, is also received from the management server 1 at the same time. It is determined whether the message is permitted or not (S7). If the message is not permitted, predetermined error processing is performed.

On the other hand, in the case of permission, the received user I
IC for D number, password, number of issues, user name, etc.
Writing to the card 13 (S8). Then, IC card 1
3, the type information 67 of the stored application shown in FIG. 4 is read (S9), and the type information and the application download request command are transmitted to the management server 1 (S10). In the case of a new IC card,
The stored application type information 67 indicates “no application”, and the management server 1
Can be confirmed as a new IC card.

Next, the entity of the application program to be stored sent from the management server 1 is received (S
11), the received application program is
The data is written on the C card 13 and the type information of the written application program is also written on the IC card (S12). When all of the downloaded application programs have been written to the IC card 13, the IC
The card read / write device 5 ends the main processing, and returns the IC card 13 to the user.

FIG. 8 shows a flow of the main processing unit 43 of the management server 1 at the time of application installation.

First, the management server 1 transmits the user ID transmitted from the IC card read / write device 5 in step S5 of FIG.
The D number, password, expiration date, card ID number, and the like are received (S21). Next, using the received user ID number as a search key, the user information such as the user's password, user ID number, number of times of issue, and user name is read from the user management database 9 (S22). The password is compared with the received password (S22). As a result, if they do not match, an error is notified to the IC card read / write device 5 (S24).

On the other hand, if the passwords match, the card ID number and expiration date received from the user are written in the record of the user in the user management database 9 (S25).
User ID number, password, number of issues,
The user name and the like are transmitted to the IC card reading / writing device 5 together with a message indicating that the card exchange is permitted (S26).

Next, the process waits for a response from the IC card read / write device 5 (S27), and receives the download request command and the stored application type information transmitted from the IC card read / write device 5 in step S10 of FIG. (S28). Next, from the application use flag in the user management database 9, the application program used by the user until now is detected (S29), and this is compared with the application type information received in step S28, and the difference is determined. As an application not yet stored in the user's IC card 13 (S30). In the case of a new IC card, since the type information of the application indicates "none", all of the applications read from the application use flag are applications that have not been stored yet.

Next, for the application which has not been stored yet, it is checked from the service status flag in the program management database 11 whether or not "in service" (S31), and only the application program in service is managed. The data is read from the database 11 (S32) and transmitted to the IC card read / write device 33 (S33).

As described above, the user's new IC card is provided with the same function as the IC card used so far.

In the above embodiment, even for a multipurpose IC card, the contact point for the user is integrated into the IC card issuer, which is convenient for the user. In addition, the application provider automatically updates the program in the IC card owned by the user only by storing the application program in the program management database, thereby reducing maintenance and operation costs. Further, since the management server can centrally grasp which user uses which application program, that is, which system (service), the customer needs can be easily known.

For a card issuer, when issuing an IC card to a user, it is not necessary to store user information and a program in the IC card and then issue it. In other words, the user simply gives (sells) the card to the user at the location where the IC card reading / writing device is located or at an agency such as a convenience store, and then the user downloads his / her own program to substantially restore the original IC card. can do. For the user, for example, there is no need to wait for the reissued IC card to arrive by mail or the like after the loss, and obtain the card at a nearby IC card reading / writing device or at an agency, and use the IC card reading / writing device. You just need to download it and you can get a reissued IC card immediately.

The embodiment of the present invention has been described above.
This embodiment is merely an example for explaining the present invention, and is not intended to limit the present invention to only this embodiment. Therefore, the present invention can be implemented in various forms other than the above-described embodiment.

[Brief description of the drawings]

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of an IC card read / write device 5;

FIG. 3 is a block diagram showing a configuration of a management server 1.

FIG. 4 is a block diagram showing a configuration of a program in an IC card 13;

FIG. 5 is an explanatory diagram showing data items of a user management database 9 managed by the management server 1.

FIG. 6 is an explanatory diagram showing data items of a program management database 11 managed by the management server 1.

FIG. 7 is a flowchart showing a flow of a main processing unit 23 of the IC card read / write device 5 when an application is installed.

FIG. 8 is a flowchart showing the flow of the main processing unit 43 of the management server 1 when installing an application.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Application program management server 3 Communication network 5 IC card read / write device 9 User management database 11 Program management database 13 IC card

Continued on the front page (72) Inventor Yusaku Nakajima 3-3-3 Toyosu, Koto-ku, Tokyo Inside NTT Data Corporation (72) Inventor Yasunari Kasuga 3-3-1, Toyosu, Koto-ku, Tokyo No. F-term in NTT Data (reference) 5B058 CA25 KA11

Claims (4)

[Claims] 1. A program management server for managing a program, which is substantially the same as a program stored in an IC card possessed by each of a large number of users, in association with each user's unique information; New IC card with IC card
When updating to a card, the new IC card is set, communicably connected to the management server, and an IC card read / write device for transmitting unique information of each user to the program management server; A program management server that receives the unique information from the IC card read / write device, and transmits a program associated with the received unique information to the IC card read / write device; IC that receives the program transmitted from the IC card and installs the new IC card on the new IC card, thereby giving the new IC card the same function as the IC card previously held
Program management system for cards. 2. A process in which a program management server manages substantially the same program as a program stored in an IC card possessed by each of a large number of users, and an IC card possessed by each user until now. A new IC
Setting the new IC card in the IC card read / write device when updating to a card; and storing the program stored in the IC card that the user has possessed from the program management server to the IC card read / write device. Transmitting substantially the same program; and transmitting the program transmitted from the program management server to the new IC from the IC card read / write device.
A method of managing a program for an IC card which has a step of writing to a card, whereby the new IC card can be given the same function as the IC card which has been held so far. 3. A program management means for managing a program, which is substantially the same as a program stored in an IC card possessed by each of a large number of users, in association with the unique information of each user, and possessed by each user so far. Replaced IC card with new IC
An IC card read / write device capable of setting the new IC card when updating to a card; connecting means for communicatively connecting; receiving the unique information from the IC card read / write device; Program download means for acquiring the attached program from the program management means and transmitting the acquired program to the IC card read / write device, whereby the new IC card is given the same function as the previously owned IC card. A management server for an IC card program that can be used. 4. A program management means for managing a program, which is substantially the same as a program stored in an IC card possessed by each of a large number of users, in relation to the unique information of each user; Replaced IC card with new IC
An IC card read / write device capable of setting the new IC card when updating to a card; connecting means for communicatively connecting; receiving the unique information from the IC card read / write device; Program download means for acquiring the attached program from the program management means and transmitting the acquired program to the IC card read / write device, whereby the new IC card is given the same function as the previously owned IC card. A computer-readable recording medium carrying a program for causing a computer to function as a management server for an IC card program that can be used.