JP2000215279A - Ic card settlement device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To dynamically optimize the relation between the cost required for identity certification and the certainty of identity certification in accordance with a value which is to be protected by identity certification. SOLUTION: The input of a shopping amount and a password is received (steps 103 and 105). When the shopping amount is lower than a setting value (Step 107), settlement is executed (steps 111 and 112) if the inputted password matches with a password stored in an IC card. When the shopping amount is higher than the setting value (step 107), the fingerprint of a user is read (step 109) and settlement is executed (steps 111 and 112) only when the fingerprint which is read matches with a fingerprint stored in the IC card (S110).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card settlement apparatus for performing settlement using an IC card storing credit information, electronic money information, and the like.

[0002]

2. Description of the Related Art At present, as a method for settlement of transactions other than cash between traders, settlement by credit card is generally used. In addition, as a credit card, a card using a magnetic stripe card is mainstream, and the settlement procedure is generally as follows.

[0003] First, a purchaser gives a credit card to a seller at the time of shopping. The seller reads the credit number of the card stored in the magnetic stripe using the magnetic stripe reader. Thereafter, the user connects to a credit card inquiry center using a telephone line and inquires the read credit number online. Then, as a result of the inquiry, if it has been confirmed in the past that there has been no illegal shopping with this credit card, it is confirmed by the purchaser's signature that the card holder is himself, and the credit card is sold. Notify the credit company of the content. In this case, payment to the seller is made later by the credit company, and payment by the buyer is made to the credit company at a later date.

[0004] Such a conventional payment method using a credit card cannot sufficiently prevent the credit card from being illegally used due to forgery, theft, imitation of a signature, or the like. In addition, the technology to prevent repeated credit card fraud by the above-mentioned online inquiry is not always used, because in practice, the seller may omit the online inquiry in the case of small transactions. It was not working effectively.

[0005] Recently, a new settlement method using an IC card has been actively proposed and tested.

[0006] One of them is a credit card converted into an IC card, and the other is electronic money using an IC card. Electronic money is stored in a memory in an IC card, and electronic money is exchanged between IC cards instead of cash during a transaction.

[0007] In any case, in order to prevent unauthorized use of the IC card, personal authentication for confirming that the IC card user is a valid owner of the IC card is important.

As a technique for authenticating the identity of the IC card owner, the personal identification number of the IC card owner is recorded in the IC card so that it cannot be known from outside the IC card. When an IC card is attached to the card payment device, the password entered by the user of the IC card into the IC card payment device is compared with the password recorded on the attached IC card. There is something that tries to authenticate itself. This technology attempts to use a personal identification number instead of a conventional credit card signature, and this technology eliminates the need for a user to sign each time a transaction is made, and at the same time, provides a security code. Since the number is stored on the IC card so that the number cannot be known from outside the IC card, this code cannot be easily known by a third party like a sign,
Better than traditional credit cards.

As a technique for authenticating the identity of an IC card owner, biometric information of the IC card owner is recorded in the IC card, and at the time of settlement, the IC card is attached to the IC card settlement device, Some card payment devices take in biometric information from an IC card user into the IC card payment device, collate the biometric information with the biometric information recorded on the attached IC card, and if they match, attempt to authenticate the user. this is,
This technology attempts to use biometric information instead of a conventional credit card signature.This technology eliminates the need for the user to memorize the PIN, and the biometric information is unique and inseparable from the legitimate IC card holder. Therefore, the technique is superior to the technique using a password in that it can be expected that personal authentication can be performed with higher accuracy. Note that typical biometric information includes shapes such as a fingerprint, palm print, iris, and retina.

[0010]

According to the technique using a personal identification number for the personal identification of the IC card, there is a problem that if the personal identification number is stolen, the illegal use of the IC card cannot be prevented. . On the other hand, according to the technology using biometric information for personal authentication of the IC card, the amount of processing required for matching biometric information is large, and biometric information must be acquired every time payment is performed. There is a problem in that the processing time required for personal authentication and the cost of use increase.

That is, there is a relationship in that the cost is high when the authentication of the IC card is performed with high accuracy, and the accuracy of the authentication is low when the authentication of the IC card is performed at low cost. Since cost and accuracy are in a trade-off relationship in this way, it is best to optimize what kind of cost and how much accuracy to perform personal authentication according to the value to be protected by personal authentication. Although rational, in the case of electronic money and credit cards, the value protected by personal authentication changes every moment depending on the usage status of each IC card, so use one or both of the above-mentioned password and biometric information In some cases, such optimization cannot be performed.

Accordingly, the present invention provides an IC card settlement apparatus capable of dynamically optimizing the relationship between the cost required for personal authentication and the accuracy of personal authentication according to the value to be protected by personal authentication. Make it an issue.

Further, according to the technique of using a personal identification number for personal identification of the IC card, if the authorized owner of the IC card forgets the personal identification number, even if the valid owner is the IC owner, There is a problem that the card cannot be used. Therefore, an object of the present invention is to provide an IC card settlement device that can use an IC card even if a legitimate owner forgets a password.

Further, according to the technology using biometric information for personal authentication of the IC card, there is a problem that the owner of the IC card is uncomfortable when obtaining biometric information at the time of settlement, for example, when obtaining a fingerprint. There is.

It is another object of the present invention to reduce the discomfort given to the owner of an IC card when acquiring biometric information.

[0016]

In order to achieve the above object, the present invention provides, for example, the settlement of a commercial transaction using an IC card in which a personal identification number of a valid IC card and biometric information are stored. An IC card payment device, a payment amount receiving means for receiving an input of an amount to be settled, a password receiving means for receiving a password input from an IC card user, and reading biometric information from the IC card user. The biometric information reading means, and when the input payment amount is lower than a predetermined value, checks whether the password received by the password receiving means matches the password stored in the IC card, and checks both passwords. A first payment unit for performing payment when the numbers match, and a biological information read by the biological information reading unit when the input payment amount is higher than a predetermined value. There is provided an IC card settlement device comprising: a second settlement means for checking the coincidence with the biometric information stored in the IC card, and performing settlement when the two biometric information coincide.

According to such an IC card settlement apparatus, at the time of low-cost settlement, rapid personal authentication using only a personal identification number is performed, and at the time of high-cost settlement, highly accurate personal authentication using biometric information is performed. Thus, the accuracy and cost of personal authentication can be dynamically optimized according to one of the values to be protected, that is, the payment amount, which is the damage amount when the payment is an unauthorized use of the IC card.

Further, the present invention provides the above-mentioned object,
For example, an IC card settlement device that performs settlement of a commercial transaction using an IC card in which a personal identification number and a biometric information of a valid owner of the IC card are stored.
A password receiving means for receiving a password input;
From the IC card user, the biometric information reading means for reading biometric information and the security code accepted by the security code accepting means are checked for a match between the security code and the security code stored in the IC card. If the two passwords do not match, the system further checks whether the biometric information read by the biometric information reading means matches the biometric information stored in the IC card, and performs a settlement if the biometric information matches. An IC card payment device having a payment means.

According to such an IC card settlement apparatus, at the time of ordinary settlement, the settlement can be promptly performed by the personal authentication using the personal identification number, and at the same time, the user who does not know the personal identification number, that is, the suspicious user can In other words, the settlement processing can be performed by performing the personal authentication with high accuracy by the personal authentication using the biometric information. In other words, even if the legitimate user forgets the password, he or she can still use the IC card for shopping.

Further, the present invention provides a method for achieving the above object,
An IC card processing device that authenticates an IC card user using the password and fingerprint information of a valid owner of the IC card stored in the IC card. An input unit for receiving an input of a number,
A reading unit for reading fingerprint information from a fingertip placed for inputting a personal identification number in the input unit.

According to such an IC card processing device, the IC
The IC card user can read the fingerprint information when inputting the personal identification number without making the card user aware of the reading of the fingerprint information. Therefore, IC for fingerprint reading
The discomfort of the card user can be reduced.

[0022]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below.

First, a first embodiment will be described.

FIG. 1 shows a configuration of an IC card settlement terminal according to the present embodiment.

The IC card settlement terminal is a credit terminal that performs a credit settlement process. In the figure, reference numeral 1 denotes a credit terminal, and reference numeral 10 denotes an IC card that is removably attached to the credit terminal 1. In the credit terminal 1, 2 is a key input unit, 3 is a display unit, 4 is a receipt printing unit, 5 is an arithmetic processing unit, 6 is a modem unit for connecting to a credit center, and 7 is a transaction history information storage unit. , 8 denotes an IC card reading / writing unit, and 9 denotes a fingerprint reading unit. In addition, IC card 1
In 0, 11 is a connection unit, 12 is an arithmetic processing unit, 13 is a transaction history information storage unit, 14 is an ID information storage unit, 15 is a password storage unit, and 16 is a fingerprint information storage unit.

Here, an ID information storage unit 14 stores a unique credit number for each IC card, a password storage unit 15 stores a password registered by a user, and a fingerprint information storage unit. Reference numeral 16 stores fingerprint information registered by the user.

Next, the transaction history information shown in FIG. 2 is stored in the transaction history information storage unit 13 of the IC card 10.

As shown in the figure, the transaction history information includes a transaction date of shopping, a purchase amount, an accumulated amount, and an accumulated number.
These items are stored by the credit terminal 1 that has made the payment when the user makes a purchase with the credit by the IC card. Here, the cumulative amount is the accumulation of the purchase amount of the purchase made by the credit by the IC card, and the cumulative purchase number is the number of the purchases by the credit by the IC card. However, as described later, The accumulated amount and the accumulated number are the credit terminal 1 that performs the settlement of shopping by the credit by this IC card.
Is initialized when the credit center of the IC card is referred to the credit center to confirm that there has been no unauthorized use in the past. The cumulative number of times for the next purchase is 1, and the cumulative amount is the amount of the next purchase. Becomes The example in the figure is No. 7,
4 shows a case where the credit terminal 1 that has made the payment at the time of the shopping in step 4 checks the credit number of this IC card with the credit center to confirm that there has been no unauthorized use in the past.

Hereinafter, the credit terminal 1 according to the present embodiment will be described.
Will be described.

FIG. 3 shows the arithmetic processing unit 5 of the credit terminal 1.
The procedure of the operation at the time of the settlement performed by is described below.

As shown, when the user inserts the IC card 10 into the credit terminal 1 by inserting the arithmetic processing unit 5 of the credit terminal 1 (step 10).
2) power supply to the IC card 10 for the IC card read / write unit 8;
A clock and a reset signal are supplied to activate the IC card. As a result, the arithmetic processing unit 5 of the credit terminal 10
Is connected via the connection unit 11 and the IC card read / write unit 8
The information in the card can be read.

Next, when the clerk inputs the shopping amount to the credit terminal from the input unit 2 (step 103), the processing unit 5 first displays a confirmation screen as to whether or not to make a payment on the display unit 3 (step 103). Step 104). And
When the user selects payment from the input unit 2, the input unit 2 further receives an input of a password from the user (step 105). On the other hand, if the user selects from the input section 2 that payment is not to be made, the IC card 10 is ejected to the IC card reading / writing section 8 (step 114), and the process is terminated (step 11).
5).

When the personal identification number is input in step 105, the arithmetic processing unit 5 passes the personal identification number to the arithmetic processing unit 12 of the IC card 10, and the input personal identification number and the IC card 10
Is compared with the number stored in the password storage unit 15 of
It is confirmed from the result whether the two match (step 1).
06). If no match is found, IC
The IC card 10 is ejected to the card reading / writing section 8 (step 114), and the process is terminated (step 115).

On the other hand, if it is determined in step 106 that the passwords match, then it is determined whether or not the shopping amount exceeds a preset amount (step 107). If the shopping amount does not exceed the value set in advance, the process proceeds to step 111 assuming that the personal authentication has been established.

On the other hand, if it is determined in step 107 that the purchase amount exceeds the set value, an inquiry is made to the credit center online to check whether there has been any unauthorized use of the IC card used by the user in the past. Is confirmed (step 108). In this case, data is exchanged with the credit center via a telephone line via the modem 6. If it is not confirmed that there is no unauthorized use in the past, the IC card 10 is ejected (step 114),
The process ends (step 115).

On the other hand, if it is confirmed in step 108 that there has been no unauthorized use in the past, the fingerprint reading unit 9
To read the user's fingerprint (step 109).
The arithmetic processing unit 5 is configured to execute the arithmetic processing unit 1 of the IC card 10.
Hand over the fingerprint information to the IC card 1
The fingerprint information stored in the 0 fingerprint information storage unit 16 is compared, and it is confirmed from the result whether or not they match (step 110). If no match is found, the IC card 10 is ejected to the IC card read / write unit 8 (step 114), and the process is terminated (step 11).
5).

On the other hand, if it is determined in step 110 that the fingerprints match, it is determined that the personal authentication has been established, and the process proceeds to step 111.

At step 111, which is executed when the personal authentication is established, an IC is set according to the shopping amount and today's date.
The transaction history information in the transaction history information storage unit 13 of the card is updated.

The transaction history information storage unit 7 of the credit terminal 1 is also updated (step 112). The transaction history information storage unit 7 of the credit terminal 1 stores the date of shopping, the amount of shopping, the credit number of the IC card 10 used for shopping, and the like.

Then, a receipt is issued by the printing unit 4 (step 113), and at the same time, the IC card 10 is ejected (step 114), and the process is terminated (step 11).
5).

In the update of the transaction history information in the transaction history information storage unit 13 of the IC card in step 111, the accumulated amount and the number of times are also updated as described above. Also, as described above, the accumulated amount and the accumulated number are initialized at the time of the next shopping if it is confirmed in step 108 that there has been no unauthorized use in the past. In the case where it has been confirmed that there has been no unauthorized use in the past, the fact is stored in association with the purchase of the transaction history information in the transaction history information storage unit 13 which has been confirmed that there has been no unauthorized use in the past, If it is stored in step 111 that no unauthorized use has been confirmed in the past in association with the previous shopping, the IC in step 111
In updating the transaction history information in the transaction history information storage unit 13 of the card, the accumulated amount and the accumulated number of times may be initialized. Alternatively, if it is confirmed in step 108 that there has been no unauthorized use in the past, the transaction history information in the transaction history information storage unit 13 may be deleted at the end of the transaction at that time.

As described above, the first embodiment of the present invention has been described.

As described above, in the first embodiment, when the shopping amount is equal to or less than the set value, the personal identification is performed using the personal identification number. In this case, since the online inquiry is not performed, the processing is performed in a short time. You can end it. On the other hand, if the purchase amount exceeds the set value, online inquiry is performed and personal identification is performed again with the user's fingerprint, so that unauthorized use can be prevented even if the card and PIN are stolen and misused. it can. That is, according to the first embodiment, at the time of low-cost shopping, rapid personal authentication using only the personal identification number is performed, and at the time of expensive shopping, highly accurate personal authentication using a fingerprint is performed. In other words, the accuracy and cost of personal authentication can be dynamically optimized in accordance with one of the methods, that is, the amount of shopping which is the amount of damage when the shopping is an unauthorized use of an IC card.

It should be noted that the confirmation of fingerprint information is safe in terms of security.
The comparison is performed by the arithmetic processing unit 12 in the card. However, if there is a problem in processing time or the like, the processing may be performed by the arithmetic processing unit 5 in the credit terminal.

Hereinafter, a second embodiment of the present invention will be described. In the second embodiment, as shown in FIG. 4, the processing of FIG. 3 in the first embodiment is performed not only when the shopping amount exceeds the set value but also when the accumulated amount exceeds the set value (step 201), and also when the accumulated number exceeds the set value (step 202), an online inquiry (step 108) and a comparison of fingerprints (steps 109 and 110) are performed. If the agreement is confirmed, the personal authentication is established.

According to the second embodiment, in addition to the effects of the first embodiment, even when the accumulated amount exceeds the set value and when the accumulated number exceeds the set value, the accuracy using the fingerprint can be improved. Perform high personal authentication. Here, since the accumulated amount and the accumulated number can be estimated to be proportional to the magnitude of the damage amount when the IC card is continuously used illegally, according to the second embodiment, according to the second embodiment, On the other hand, the accuracy and cost of personal authentication can be dynamically optimized according to the magnitude of the damage due to continuous unauthorized use, which is one of the values to be protected by personal authentication.

In the first and second embodiments described above,
With respect to the purchase amount, the accumulated amount, and the accumulated number, the conditions for performing the online collation and the confirmation of the coincidence of the fingerprint are the same, but these may be different conditions. Further, in this case, the accumulated amount and the accumulated number may be initialized when the coincidence of the fingerprints is confirmed.

As described above, according to the first and second embodiments of the present invention, when it is estimated that the amount of damage due to fraud is small, the personal identification is performed only by the personal identification number, and therefore, such as in supermarkets and convenience stores. Processing can be performed smoothly even in shops where customers turn quickly. On the other hand, if it is estimated that the amount of damage due to fraud may be large, personal authentication based on fingerprint information is also performed, so even if the PIN is stolen, it is possible to prevent unauthorized use,
The occurrence of a large amount of damage can be prevented. In addition, since the personal authentication using the fingerprint information and the authentication using the personal identification number are also performed, the reliability of the personal authentication can be secured to some extent even if the accuracy of the personal authentication based on the biometric information is lower than when only the personal authentication based on the biometric information is performed. For this reason, it is possible to reduce the amount of biometric information stored in the IC card for personal authentication based on biometric information and the load for processing for comparing biometric information.

Hereinafter, a third embodiment of the present invention will be described.

In the third embodiment, as shown in FIG. 5, the processing of FIG.
If the password entered in step 3 is incorrect, and if the shopping amount does not exceed the set value (step 30).
3), compare fingerprints (steps 301 and 302),
If the fingerprints match, it is assumed that the personal authentication has been established even if the password is incorrect, and if the purchase amount exceeds the set value (step 303), the fingerprint comparison (steps 301 and 302) is performed. Online inquiry (Step 30
4) is performed, and as a result, if the coincidence of the fingerprint and the absence of the past fraud can be confirmed, it is assumed that the personal authentication has been established even if the password is wrong. However, when the password is incorrect, the online inquiry may be performed even when the purchase price does not exceed the set value. In the processing of FIG. 5, the input of the password is omitted by omitting the input of the password in step 105 according to the user's selection and always determining that the password is incorrect in step 106. A user who wants to do so may not be required to input a personal identification number.

Further, similarly to the second embodiment, when the accumulated amount or the number of times exceeds the set value, the same processing as when the shopping amount exceeds the set value may be performed. .

As described above, the third embodiment is different from the first and second embodiments in that even if the user forgets the password, the user does not know the password, that is, the suspicious user is not provided with the password. On the other hand, it is possible to perform the payment processing by performing the personal authentication with high accuracy by the personal authentication using the fingerprint. In other words, even if the legitimate user forgets the password, he or she can still use the IC card for shopping.

Hereinafter, a fourth embodiment of the present invention will be described.

In the fourth embodiment, as shown in FIG. 6, the processing of FIG.
If the password input in step 3 is incorrect, the fingerprint comparison (steps 301 and 302) or the fingerprint comparison (steps 301 and 302) and the online inquiry (step 30) are performed.
If the personal authentication is established in 4), the user is inquired via the display unit 3 whether to re-register the personal identification number (step 401), and if the personal identification number is inputted by the input part 2 (step 402). Then, the personal identification number stored in the personal identification number storage unit 15 of the IC card 10 is updated to the input personal identification number (step 403).

In this case, it is preferable to make an online inquiry even when the purchase price does not exceed the set value.

Further, similarly to the second embodiment, when the accumulated amount or the accumulated number exceeds the set value, the same processing as when the shopping amount exceeds the set value may be performed. .

As described above, according to the fourth embodiment, the third
As compared with the embodiment, the user can be authenticated with high accuracy by the personal identification using the fingerprint, and the user who can be authenticated can be provided with a quick and simple password re-registration service. .

Hereinafter, a fifth embodiment of the present invention will be described.

As shown in FIG. 7, the fifth embodiment is different from the fourth embodiment in that the processing of FIG.
7 to 110, 303 and 304 are omitted.

That is, in the fifth embodiment, irrespective of whether or not the purchase amount exceeds the set value, when the entered password is correct, it is assumed that the personal identification is always established, and the inputted password is determined. Is compared only when the password is incorrect (steps 315 and 316). When the fingerprints match, it is assumed that the personal authentication has been established even if the password is incorrect. If the input password is incorrect, an online inquiry may be performed.

As a result, usually, a quick settlement process using a password can be performed. In addition, even when the user forgets the password, the user does not know the password, that is, the authentication can be performed with high accuracy for the suspicious user by the personal authentication using the fingerprint, and the settlement process can be performed. . In other words, even if the legitimate user forgets the password, he or she can still use the IC card for shopping. In addition, the user can be authenticated with high accuracy by the personal authentication using the fingerprint, and a rapid re-registration service of the personal identification number can be provided to the user who has been authenticated.

The embodiments in which the IC card settlement terminal according to the present invention is a credit terminal have been described as the first to fifth embodiments.

Hereinafter, the IC card settlement terminal according to the present invention
An embodiment in the case of a POS terminal that performs settlement of electronic money will be described as a sixth embodiment.

FIG. 8 shows the configuration of a POS terminal according to the present embodiment.

In the figure, 17 is a POS terminal, 26 is an IC card used by the purchaser, and 71 is an IC card used by the seller.

In the POS terminal, reference numeral 18 denotes a key input unit, 1
9 is a display unit, 20 is a receipt printing unit, 21 is an arithmetic processing unit, 22 is a modem unit, 23 is a transaction history information storage unit, 24
Denotes an IC card reading / writing unit, and 25 denotes a fingerprint reading unit. In the IC card 26, 27 is a connection unit, 28 is an arithmetic processing unit, 29 is an amount information storage unit, 30 is an ID information storage unit, 31 is a password storage unit, and 32 is a fingerprint information storage unit. Here, the amount information storage unit 29 stores the amount of money that can be used as electronic money. In addition, IC card 7
1 has the same internal configuration as the IC card 26.

The operation of the POS terminal 17 will be described.

FIG. 9 shows an operation procedure at the time of settlement performed by the arithmetic processing unit 21 of the POS terminal 17.

However, here, a description will be given on the assumption that the seller's IC card 71 is already mounted on the POS terminal 17 and that the authentication of the seller's IC card 71 has already been completed.

As shown in the figure, when the purchaser inserts the IC card 26 into the POS terminal 17 by inserting the IC card 26 into the POS terminal 17 (step 502), the seller or the purchaser sends a message to the purchaser. An input of the transfer amount, which is the amount of electronic money transferred from the IC card 26 to the seller's IC card 71, is received via the input unit 18 (step 5).
03) After that, the input of the personal identification number from the purchaser is performed in the input unit 1
8 (step 504).

When the personal identification number is input, the arithmetic processing part 21 passes the personal identification number to the arithmetic processing part 28 of the IC card 26 and stores the input personal identification number and the personal identification number storage part 31 of the IC card 26. The stored numbers are compared with each other, and based on the result, whether or not the two numbers match is confirmed (step 505).
If no match is found, step 5
Proceed to 07.

On the other hand, if it is determined in step 505 that the passwords match, it is determined whether or not the purchase price exceeds a preset price (step 50).
6). If the shopping amount does not exceed the value set in advance, the process proceeds to step 509 assuming that the personal authentication has been established. On the other hand, if the shopping amount exceeds the preset amount, step 50
Go to 7.

In step 507, the fingerprint reading unit 25
Reads the user's fingerprint. Then, the arithmetic processing unit 21 passes the read fingerprint information to the arithmetic processing unit 28 of the IC card 26, and compares the read fingerprint information with the fingerprint information stored in the fingerprint information storage unit 32 of the IC card 26. It is confirmed whether the two match with each other (step 508). If the match is not confirmed, the IC card 26 is ejected to the IC card reading / writing section 24 (step 51).
2), end the process (step 513).

On the other hand, if it is determined in step 508 that the fingerprints match, the process proceeds to step 509 assuming that personal authentication has been established.

In step 509, which is performed when the personal authentication is established, the electronic money stored in the price information storage unit 29 of the IC card 26 for the purchaser is replaced by the IC for the seller by the amount of the input transfer amount. Payment is made by moving to the amount information storage section of the card. More specifically, for buyers
The amount usable as electronic money stored in the amount information storage unit 29 of the IC card 26 is reduced by the transfer amount, and can be used as electronic money stored in the amount information storage unit of the IC card 71 for the seller. Increase the amount by the transfer amount.

Next, at step 510, the POS terminal 17
The transaction history information storage unit 23 stores the contents of the settlement. For example, the date of the purchase, the amount of the purchase,
The ID and the like stored in the ID information storage unit 30 of the IC card 26 are stored. Then, the receipt is issued by the printing unit 20 (step 511), and at the same time, the IC card 26 is ejected (step 512), and the process ends (step 513).

The sixth embodiment of the present invention has been described above.

In the above, a case has been described in which electronic money is transferred from the IC card 26 for the purchaser to the IC card 71 for the seller. However, in the sixth embodiment, for example, a transfer is made from a bank via a telephone line. The same applies to the case where electronic money is transferred to the IC card 26. In this case, the POS terminal receives the electronic money corresponding to the transfer amount from the bank via the modem 22 in step 509 of FIG. 8 and transmits the electronic money stored in the amount information storage unit 29 of the IC card 26. Add to

Further, in the sixth embodiment, similarly to the second embodiment, the accumulated amount and the accumulated number of times are stored in the IC card 26, and when these exceed the set values, the transfer amount is set. The same processing as the case where the value is exceeded may be performed. Further, as in the first and second embodiments, when the passwords do not match, the user may be unconditionally set as a person whose personal authentication is not established, and may not be able to perform the payment.

Also, in the case where the personal identification is established when the fingerprints match even when the passwords do not match, as in the fourth embodiment, the owner of the IC card with the matching fingerprint is used. However, the user may be allowed to re-register the password, or may not be required to input the password for a user who wants to omit the input of the password.

Also, as in the fifth embodiment, regardless of whether or not the purchase amount exceeds the set value, when the entered password is correct, it is always assumed that the personal authentication has been established, and The comparison of fingerprints may be performed only when the password is incorrect, and when the fingerprints match, the personal authentication may be established even if the password is incorrect.

As described above, according to the sixth embodiment, the same effects as those of the respective embodiments relating to the credit terminal can be achieved for the settlement of electronic money.

In recent years, Internet shopping using personal computers has been widespread due to the spread of the Internet. In this case, settlement by electronic money is superior to credit and the like in terms of security and fees.

Therefore, hereinafter, an embodiment in which the IC card settlement terminal according to the present invention is a personal computer for performing Internet shopping using electronic money will be described as a seventh embodiment.

FIG. 10 shows the configuration of the personal computer in this case.

In the figure, 33 is a personal computer, 4
2 is an IC card. Also, in the IC card 42, 43 is a connection unit, 44 is a calculation processing unit, 45 is a money amount information storage unit, 46
Is an ID information storage unit, 47 is a password storage unit, 48 is a fingerprint information storage unit, and 49 is a personal information storage unit. The personal information storage unit 49 stores the date of birth, age, gender,
Personal information such as nationality is stored. In the personal computer 33, reference numeral 34 denotes a key input unit, 35 denotes a display unit, 36 denotes a printing unit, 37 denotes an arithmetic processing unit, 38 denotes a modem unit, 39 denotes a customization information storage unit, and 40 denotes an IC card reading / writing unit. In the customization information storage unit 39,
How to customize the Internet shopping user interface according to the personal information is stored. However, each unit in the personal computer 33 is a functional unit realized on the personal computer 33 by the personal computer 33 executing predetermined software.

In this embodiment, in order to enhance the convenience of Internet shopping, personal information of the user is stored in the personal information storage unit 49 in the IC card 42, and a screen used for Internet shopping based on the information is stored. Customize the font size, language, menu contents, etc. according to the IC card owner.

FIG. 11 shows a procedure of processing performed by the arithmetic processing unit 37 of the personal computer 33.

First, when an IC card is inserted (step 602), personal information such as a date of birth, age, gender, and nationality stored in the personal information storage unit 49 of the IC card 42 is read (step 603). .

Then, the data downloaded from the center via the modem 38 in cooperation with the center is customized according to the read personal information and displayed on the display unit 35 (step 604). The contents to be customized include the contents of the shopping catalog, the character size, the language, and the like. For example, youth and the elderly, women and men,
The content of the shopping catalog provided to the user is different.

Next, when the input of the number of the product to be purchased and the price information is received from the user (step 605), the password of the personal identification number is confirmed in order to confirm that the user is the owner of the IC card 42. Accepts input (step 60
6) If the passwords match, settlement is performed by moving the electronic money for the entered amount to the center (step 6).
10). If an incorrect password is entered, the fingerprint reading unit 41 reads the user's fingerprint (step 608), and checks whether the fingerprint information matches the fingerprint information stored in the fingerprint information storage unit 48 in the IC card 42. Confirmation is made (step 609), and if they match, payment is made to move the entered amount of electronic money to the center (step 610), and the transaction history is stored in the personal computer (step 611).

When the end of shopping is selected by the user (step 612), and when the password and the fingerprint do not match, the IC card 42 is ejected (step 613) and the processing is performed. The process ends (step 614).
To continue shopping, the processing from step 604 is performed.

The seventh embodiment of the present invention has been described above. However, in the seventh embodiment, similarly to the sixth embodiment, even when the passwords match, the input amount is smaller than the set value. If it is, check the fingerprints further,
Only when they match, the settlement in step 608 may be performed. Further, when the age indicated by the personal information indicates a child, it may not be possible to access the adult information. Further, when the age indicated by the personal information indicates a child, a restriction may be imposed so that only low-value transactions can be performed.

The customization of the user interface according to the personal information in the seventh embodiment can be similarly applied to various devices such as a credit terminal, a POS terminal, and various electronic money terminals that handle electronic money. .

For example, as shown in FIG. 12, the present invention can also be applied to an electronic wallet terminal that operates offline and performs personal authentication using only a personal identification number.

In FIG. 12, reference numeral 50 denotes an electronic wallet terminal. In the electronic wallet terminal 50, 51 is a key input unit, 52 is a display unit, 53 is an arithmetic processing unit, 54 is a customization information storage unit, and 55 is an IC card read / write. Department. Reference numeral 56 denotes an IC card.
8 is an arithmetic processing unit, 59 is an amount information storage unit, 60 is an ID information storage unit, and 61 is a personal information storage unit.

The electronic wallet terminal 50 displays information such as the balance and transaction history stored in the IC card. At this time, the personal information read from the personal information storage section 61 of the IC card 56 uses the character size, language, and the like. To customize.

It is also possible to customize only the user interface of a general personal computer by using the personal information of the IC card. For example, when operated by children or the elderly, the number of selectable items is reduced, or high-performance applications cannot be selected, so that operations can be performed without much hesitation.

Hereinafter, an eighth embodiment of the present invention will be described.

The eighth embodiment relates to reading of a fingerprint in each of the above embodiments.

Since fingerprint information is often used in criminal investigations by police, problems such as physiological discomfort are likely to occur when reading fingerprint information of an IC card user. . Therefore, it is important how to perform reading without giving the user any discomfort.

Therefore, in the eighth embodiment, as shown in FIG. 13, by providing a fingerprint reading unit on a numeric key for inputting a personal identification number, the user is not conscious of reading the fingerprint. Can read fingerprints. Normally, a password has four digits or more, and therefore, when a reading unit is provided on a numeric key, a fingerprint can be read as many times as the number of digits of the password. Therefore, accuracy can be improved by performing processing using a plurality of read data.

On the other hand, when inputting the personal identification number, by always pressing the input key (enter key) after inputting with the numeric keys, it is also possible to provide a fingerprint reading section only on the input keys as shown in FIG. It is. In this case, since there is only one reading unit, the cost of the apparatus can be reduced.

It is necessary to unify the fingerprint information of the user, for example, so as to read it from the index finger of the right hand. However, for example, by disposing a key on the right side of the screen and providing a depression in the shape of a finger on the key, It is possible to take a fingerprint from a desired finger to some extent without being aware of the fingerprint.

In any case, if the fingerprint cannot be read, a message may be displayed on the screen to explain to the user, and the finger may be placed on the key again to acquire the fingerprint.

The embodiments of the present invention have been described.

In the first to seventh embodiments described above, the case where a fingerprint is used as biometric information used for personal authentication has been described, but other biometric information such as a palm print, an iris, and a retina may be used as biometric information. May be used.

In the first to sixth embodiments, the personal information of the owner of the IC card is stored in the IC card, and the personal information stored in the IC card is stored in the same manner as in the seventh embodiment. The personal authentication may be performed instead of or together with the biometric information. For example, a birthday or phone number input from an IC card user is accepted, and this is compared with the birthday or phone number stored as personal information in the IC card. Assume that authentication has been established.

[0109]

As described above, according to the present invention, an IC card which can dynamically optimize the relationship between the cost required for personal authentication and the accuracy of personal authentication according to the value to be protected by personal authentication. A payment device can be provided.

[0110] Further, if the authorized owner forgets the personal identification number, it is possible to provide an IC card settlement device that can use the IC card.

In addition, when acquiring biometric information, discomfort given to the owner of the IC card can be reduced.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of an IC card payment terminal according to a first embodiment of the present invention.

FIG. 2 is a diagram showing transaction history information recorded on an IC card according to the first embodiment of the present invention.

FIG. 3 is a flowchart illustrating an operation of the IC card payment terminal according to the first embodiment of the present invention.

FIG. 4 is a flowchart illustrating an operation of an IC card payment terminal according to a second embodiment of the present invention.

FIG. 5 is a flowchart showing an operation of an IC card payment terminal according to a third embodiment of the present invention.

FIG. 6 is a flowchart illustrating an operation of an IC card payment terminal according to a fourth embodiment of the present invention.

FIG. 7 is a flowchart illustrating an operation of an IC card payment terminal according to a fifth embodiment of the present invention.

FIG. 8 is a block diagram illustrating a configuration of an IC card payment terminal according to a sixth embodiment of the present invention.

FIG. 9 is a flowchart showing an operation of an IC card payment terminal according to a sixth embodiment of the present invention.

FIG. 10 is a block diagram showing a configuration of an IC card payment terminal according to a seventh embodiment of the present invention.

FIG. 11 is a flowchart illustrating an operation of an IC card payment terminal according to a seventh embodiment of the present invention.

FIG. 12 is a block diagram showing another configuration of the IC card settlement terminal according to the seventh embodiment of the present invention.

FIG. 13 is a diagram showing a fingerprint reading unit of the IC card payment terminal according to the embodiment of the present invention.

FIG. 14 is a diagram showing a fingerprint reading unit of the IC card payment terminal according to the embodiment of the present invention.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Credit terminal, 2 ... Input part, 3 ... Display part, 4 ... Printing part, 5 ... Calculation processing part, 6 ... Modem part, 7 ... Transaction history information storage part, 8 ... IC card reading / writing part, 9 ... Fingerprint reading Section, 10 IC card, 11 connection section, 12 arithmetic processing section, 13 transaction history information storage section, 14 ID information storage section, 15 password password storage section, 16 fingerprint information storage section, 1
7 POS terminal, 18 input unit, 19 display unit, 20 POS terminal
Printing unit, 21 arithmetic processing unit, 22 modem unit, 23 transaction history information storage unit, 24 IC card reading / writing unit, 25
... Fingerprint reading part, 26 ... IC card, 27 ... Connection part,
28 arithmetic processing unit, 29 amount information storage unit, 30 ID
Information storage unit, 31: password storage unit, 32: fingerprint information storage unit, 33: personal computer, 34: input unit,
35 display unit, 36 printing unit, 37 arithmetic processing unit, 38
... Modem section, 39 ... Customization information storage section, 40 ... I
C card reading / writing unit, 41: fingerprint reading unit, 42: I
C card, 43 connection unit, 44 arithmetic processing unit, 45 amount information storage unit, 46 ID information storage unit, 47 password password storage unit, 48 fingerprint information storage unit, 49 personal information storage unit, 50 ... Electronic wallet terminal, 51 ... Input unit, 52 ... Display unit, 53 ... Calculation processing unit, 54 ... Customization information storage unit, 55 ... IC card reading / writing unit, 56 ... IC card,
57: connection unit, 58: arithmetic processing unit, 59: amount information storage unit, 60: ID information storage unit, 61: personal information storage unit, 7
1. IC card

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G07D 9/00 461 G07D 9/00 461B G07F 7/12 G07F 7/08 B 7/08 R Z (72) Inventor Shigeyuki Ito 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Pref.Hitachi, Ltd.Multimedia System Development Division (72) Inventor Minoru Takami 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa, Japan Hitachi, Ltd. Inside the System Development Division (72) Inventor Masayuki Inoue 292, Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside Hitachi Image Information Systems (72) Inventor Koichi Yoneda 292, Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Hitachi, Ltd. In the image information system (72) Inventor Tetsuji Inamitsu 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Inside Hitachi Image Information System Co., Ltd. (72) Inventor Tsukasa Yamauchi 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside Multimedia System Development Division, Hitachi, Ltd. (72) Inventor Kiyoshi Inoue Totsuka-ku, Yokohama-shi, Kanagawa Prefecture 292 Yoshida-cho F-term in Hitachi Multimedia Systems Development Division (Reference) 3E040 AA03 DA02 FK09 3E044 AA20 BA05 CA06 DA01 DA05 DA06 DB02 DB05 DC05 DC06 DD02 DE05 5B058 CA27 KA33 KA38 KA40 YA02

Claims (12)

[Claims] Claims: 1. An IC card settlement apparatus for performing settlement of a commercial transaction using an IC card in which a personal identification number and a biometric information of a valid owner of the IC card are stored, wherein an input of an amount to be settled is received. Payment amount receiving means, password receiving means for receiving a password input from an IC card user, biometric information reading means for reading biometric information from an IC card user, and a predetermined amount of payment to be settled. If the price is lower, the password received by the password receiving means and
A first payment means for checking whether the password matches the password stored in the IC card and performing the payment when both passwords match; and when the input payment amount is higher than a predetermined value, the first payment means. The biological information read by the information reading means
An IC card payment device comprising: a second payment unit that checks whether the biological information matches the biological information stored in the IC card, and performs payment when the biological information matches. 2. An IC storing a password of an authorized owner of an IC card, biometric information, and history information of payment using the IC card capable of calculating the number of payments using the IC card.
An IC card payment device for performing payment of a commercial transaction using a card, a payment amount receiving means for receiving an input of an amount for payment, a password receiving means for receiving a password input from an IC card user, The biometric information reading means for reading biometric information from an IC card user, and the password receiving means when the number of payments using the IC card obtained from the history information stored in the IC card does not exceed a predetermined value. It checks the match between the accepted password and the password stored in the IC card, and uses the first payment means for performing payment if the passwords match, and the IC card obtained from the history stored in the IC card. If the number of payments exceeds the predetermined value, it is checked whether the biological information read by the biological information reading means matches the biological information stored in the IC card. IC There second settlement means for performing settlement if they match, if the payment is made, in accordance with the contents of the settlement performed
An IC card settlement device comprising: history information updating means for updating history information stored in a card. 3. The personal identification number of a valid owner of the IC card, biometric information, and history information of the payment using the IC card which can calculate the total amount of payment using the IC card are stored. An IC card settlement device for settlement of a commercial transaction using an IC card, comprising: a settlement amount accepting unit for accepting an input of an amount for settlement; and a PIN accepting unit for accepting an input of a PIN from an IC card user. If the accumulated amount of the settlement using the IC card obtained from the biometric information reading means for reading the biometric information from the IC card user and the history information stored in the IC card does not exceed a predetermined value,
A first settlement means for checking whether the password accepted by the password acceptance means coincides with the password stored in the IC card, and performing a settlement if both the passwords coincide; and a history from the history stored in the IC card. If the sum of the payment amounts obtained by using the IC card exceeds a predetermined value, it is checked whether the biological information read by the biological information reading means matches the biological information stored in the IC card, and the two biological information are matched. A second settlement means for performing settlement when payment is made, and an IC depending on the contents of the settlement made when payment is made
An IC card settlement device comprising: history information updating means for updating history information stored in a card. 4. The IC card settlement apparatus according to claim 1, 2 or 3, wherein the second settlement means is configured to determine whether the personal identification number received by the personal identification number receiving means and the personal identification number stored in the IC card are correct. An IC card settlement device that performs settlement only when the biometric information read by the biometric information reading means matches the biometric information stored in the IC card. 5. The IC card settlement device according to claim 1, wherein the first settlement means includes a password received by the password receiving means and a password stored in the IC card. If the two do not match, the biological information read by the biological information reading means is checked for consistency with the biological information stored in the IC card, and if both pieces of biological information match, settlement is performed. Card payment device. 6. An IC card payment device for performing settlement of a commercial transaction using an IC card in which a personal identification number and a biometric information of a valid owner of the IC card are stored. Means for receiving biometric information from an IC card user, and checking whether the password received by the password receiving means matches the password stored in the IC card. If the two passwords match, the settlement is performed, and if the two passwords do not match, the biometric information read by the biometric information reading means is further checked for a match between the biometric information stored in the IC card, An IC card payment device, comprising: payment means for performing payment when biometric information matches. 7. The method according to claim 1, 2, 3, 4, 5 or 6.
An IC card payment device, comprising: a new PIN receiving means for receiving an input of a new PIN desiring to be used in the future from an IC card user; biometric information read by the biometric information reading means; And a password updating unit that updates the password stored in the IC card to the new password received by the new password receiving unit when the two pieces of biological information match. IC card payment device. 8. The IC card settlement apparatus according to claim 1, wherein said biometric information is fingerprint information.
Card payment device. 9. An IC card processing device for authenticating an IC card user using a password and a fingerprint information of an authorized owner of the IC card stored in the IC card, the IC card processing device comprising: An IC card processing device further comprising: an input unit for receiving an input of a personal identification number by a fingertip; and a reading unit for reading fingerprint information from a fingertip placed on the input unit for inputting a personal identification number. 10. An IC card processing device for processing an IC card in which personal information of an IC card owner is stored, comprising: means for providing a user interface for providing a service to an IC card user; Means for customizing a user interface provided to an IC card user according to personal information stored in the card. 11. A method for authenticating an IC card user in an IC card settlement apparatus for performing settlement of a commercial transaction using an IC card in which a personal identification number of a valid IC card owner and biometric information are stored. If the possible amount of damage due to unauthorized use of the IC card is low, check the match between the PIN received from the IC card user and the PIN stored in the IC card, and if both PINs match If the potential amount of damage due to unauthorized use of the IC card is high, the system checks whether the biometric information read by the IC card user matches the biometric information stored in the IC card, A method for authenticating an IC card user, comprising: a second payment means for performing a payment when they match. 12. A method for authenticating an IC card user in an IC card settlement apparatus for performing settlement of commercial transactions using an IC card in which a personal identification number and personal information of a valid owner of the IC card are stored. If the possible amount of damage due to unauthorized use of the IC card is low, check the match between the PIN received from the IC card user and the PIN stored in the IC card, and if both PINs match If the possible amount of damage due to unauthorized use of the IC card is high, the personal information received from the IC card user and the personal information stored in the IC card are checked for consistency, and both personal information are A method for authenticating an IC card user, comprising: a second payment means for performing a payment when they match.