JP2001175824A - Device for prevention against illegal use of ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a device for prevention against card illegal use which can guarantee security even for an ID card system which requires no troublesome operation. SOLUTION: This device is equipped with an IC card 1 where personal information is stored and an electronic wallet 2 that a user carries together with the IC card 1. The IC card 1 is provided with a time-limiting means 8 which is actuated once put away from the electronic wallet 2 and a control means 6 which invalidates the IC card 1 when the time limited by the time-limiting means 8 is exceeded.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a device for preventing unauthorized use of a personal portable card used in an authentication system for authenticating an individual user.

[0002]

2. Description of the Related Art An authentication system using an ID card is:
It is already routinely used in a wide range of fields, such as commerce, bank ATMs, and entry cards. What is important in this ID card is how to prevent unauthorized use by persons other than individuals who are properly authorized.

Conventionally, as a general method for accurately specifying and identifying a properly authorized individual, a method of reading card information of a dedicated ID card or a method of setting personal information in addition to this method is used. There is known a method of inputting a password that has been entered. It is a relatively simple and highly safe method to confirm that the user is the proper user by the combination of the card and the password.

[0004]

However, the method of confirming that the user is the proper user by the combination of the card and the personal identification number requires time and effort for inputting the personal identification number, and is a dedicated method that anyone can handle. Machine must be installed. For this reason, authentication is often performed only with an ID card. In this case, if the ID card is stolen, security cannot be ensured.

The present invention has been made in order to solve such a problem, and an object of the present invention is to provide a card unauthorized use prevention device which can secure security even if an ID card system which does not involve complicated operations is employed. Aim.

[0006]

According to a first aspect of the present invention, there is provided a card improper use prevention apparatus which stores personal information.
A C card, and a management device carried by the user with the IC card. When the IC card is separated from the management device, the IC card detects the separation and the detection device detects the separation. When it is detected that the IC card has been separated from the management device, a timer means for counting the time that the IC card has been separated, and a data rewriting means for invalidating the IC card when the time counted by the timer means has been exceeded. A card improper use prevention device for preventing improper use of a personal portable IC card used in an authentication system for authenticating an individual user. With this configuration, when the IC card is separated from the management device and a predetermined time has elapsed, the card is invalidated by the data rewriting means. Therefore, if you leave the IC card,
Even if the device is stolen and used illegally, it cannot be used and high security can be ensured.

According to a second aspect of the present invention, there is provided an IC card unauthorized use preventing apparatus according to the first aspect of the present invention, wherein the manager has a transmitter and the detecting means has the transmitter. A receiver for receiving a signal from the transmitter, wherein the detecting means recognizes that the IC card has left the manager when the signal from the transmitter being received by the receiver is interrupted. It has the structure provided with the means which performs. According to this configuration, the IC card is separated from the management device to a position where the signal from the management device cannot be received by the receiver on the IC card side. When the separated state elapses a predetermined time, the card is rewritten to be invalid. If the user forgets to place the card or is stolen and leaves the individual for a predetermined time, the use of the IC card becomes impossible, and high security can be ensured.

According to a third aspect of the present invention, there is provided an IC card unauthorized use preventing apparatus according to the first aspect of the present invention, wherein the detecting means is mechanically switched when the detecting means is separated from the manager. A switch, wherein the detecting means includes means for recognizing that the IC card has left the manager when the switch is switched. With this configuration, the IC card is detected as soon as it is separated from the management device, and the card is rewritten to be invalid after a lapse of a predetermined time. Therefore, if the IC card is misplaced or stolen away from the individual for a predetermined time, the use of the IC card becomes impossible,
High security can be ensured and responsiveness can be improved.

According to a fourth aspect of the present invention, there is provided an IC card unauthorized use preventing apparatus according to any one of the first to third aspects of the present invention, wherein the time limit means includes a charge / discharge circuit. ing. With this configuration, the time limit can be easily set.

According to a fifth aspect of the present invention, there is provided an IC card unauthorized use prevention apparatus according to any one of the first to fourth aspects of the present invention, wherein the data rewriting means reads data in the IC card. It has a configuration including an erasing means for erasing. With this configuration, it is possible to prevent data in the card from being illegally used.

According to a sixth aspect of the present invention, there is provided an IC card unauthorized use prevention apparatus according to any one of the first to fourth aspects of the invention, wherein the data rewriting means is configured to invalidate the IC card. Is displayed on the surface of the IC card. With this configuration, the validity / invalidity of the IC card can be easily visually distinguished, and the management can be simplified.

[0012]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a configuration image diagram of an IC card fraud prevention device according to the first embodiment of the present invention. In FIG. 1, this IC card fraud prevention device is mainly composed of a personal portable IC card 1 and an electronic wallet 2 as a management device carried with the IC card 1.

More specifically, the electronic wallet 2 is configured as a transmitter that always emits a signal of a specific frequency, and is set so as to be weak and reach a radius of only a few meters. The reach is preset according to the purpose of use.

The IC card 1 includes a transmitter 3 of the electronic wallet 2
A communication device 5 configured as a receiver disposed in a region 4 (hereinafter, referred to as a “signal region 4”) for receiving a signal from the IC card 1 and a microcomputer for controlling the entire IC card 1 are incorporated. A control unit 6, an ID holding unit 7 having a rewritable memory storing data for authenticating an individual user, a time limiter 8 having a CR time constant circuit, and a battery 9. It is configured.

FIG. 2 is a flowchart showing an example of the operation procedure of the IC card fraud prevention device according to the first embodiment of the present invention. Next, the operation of the IC card fraud prevention device shown in FIG. 1 will be described with reference to the flowchart shown in FIG. First, in this apparatus, usually, the IC card 1 and the electronic wallet 2 are carried together with each other.
Is located in the signal area 4 of the electronic wallet 2 and is in a state where the receiver 3 is always receiving a signal. In consideration of theft or misplacement, for example, the IC card 1 is placed in a wallet, the electronic wallet 2 is placed in a pocket of clothes, and the IC card 1 and the electronic wallet 2 are separated from each other in the signal area 4. Is preferred. Further, the capacitor of the time limiter 8 is in a fully charged state.

The control unit 6 constantly monitors whether the receiver 3 is receiving a signal from the electronic wallet 2 (whether or not the signal is interrupted) (step S101).
When only the IC card 1 is taken out and moved out of the signal area 4 in order to use the IC card 1, the timer 8 is activated to start discharging the capacitor (step S102). It takes about 5 minutes. Therefore, when it is detected that the IC card 1 has separated from the electronic wallet 2, the time limiter 8 has a function of counting the time that the IC card 1 has been separated. If the IC card 1 is returned into the signal area 4 before the discharging of the capacitor is completed, the discharging of the capacitor is stopped and charging is started (steps S103 and S104), and the process proceeds to step S101. It monitors that the IC card 1 is taken out of the signal area 4. On the other hand, if the IC card 1 is not returned to the signal area 4 until the discharge of the capacitor is completed, the data (ID information) stored in the ID holding means 7 for authenticating the individual user. Is deleted by the control unit 6 (steps S105 and S106).
Here, even if the data to be erased is all data,
Some data may be added, or new data indicating that the IC card 1 is invalid may be added. In this case, the erasure of ID information including these is also included. As a result, thereafter, the IC card 1 cannot be used as it is. In order to be able to use the card again, it is possible to go to a card issuing window, for example, and take a formal procedure.

Therefore, in the apparatus according to the first embodiment, when the settlement processing of shopping is performed using the IC card 1 or when the IC card 1 is used in a cash corner of a bank, the IC card 1 is signaled for a short time. When the data is taken out from the area 4 and returned, no data is erased. However, if the user drops, forgets, or is stolen, and is away from an individual (signal area 4) for a certain period of time (5 minutes in the present embodiment), the data is erased and becomes unusable. As a result, unauthorized use can be prevented without using a card that performs complicated operations, and high security can be ensured. Further, since the IC card 1 can be detected in a non-contact manner, even if the IC card 1 is deformed or the like, it can be reliably detected.

FIG. 3 is a configuration image diagram of an IC card fraud prevention device according to a second embodiment of the present invention. FIG.
In the following description, components corresponding to those in FIG. The IC card fraud prevention device shown in FIG.
Broadly, a personal portable IC card 21 and an electronic wallet 22 as a management device carried with the IC card 21.
It is composed of

More specifically, the electronic wallet 22 includes an I
It has a card receiving recess 22a into which a part of the C card 21 is inserted.

The IC card 21 includes a switch device 25 as a sensor provided corresponding to a portion inserted into the card receiving recess 22a of the electronic wallet 22;
A control unit 6 in which a microcomputer (microcomputer) for controlling the entire C card 1 is incorporated, and an ID holding unit 7 having a rewritable memory for storing data for authenticating an individual user and the like. , A time limiter 8 having a CR time constant circuit, and a battery 9. The switch device 25 outputs an ON signal while the IC card 21 is inserted into the card receiving recess 22 of the electronic wallet 22, and outputs an OFF signal when the IC card 21 is removed. Or an electrical switch.

FIG. 4 is a flowchart showing an example of the operation procedure of the IC card fraud prevention device according to the second embodiment of the present invention. Next, the operation of the IC card fraud prevention device shown in FIG. 3 will be described with reference to the flowchart shown in FIG. First, in this device, the IC card 21 is usually carried in a state of being inserted into the card receiving recess 22a of the electronic wallet 22, for example, in a bag or the like.
In this case, it is preferable that the electronic wallet 22 is firmly tied to the back with a string or the like so as not to be stolen or dropped together with the IC card 21. In this state, the switch device 25 of the IC card 21 is
Is kept on, and the capacitor of the timer 8 is in a fully charged state.

First, the control section 6 constantly monitors whether or not the switch device 25 is switched from on to off (step S201). When the IC card 21 is taken out of the card receiving recess 22a of the electronic wallet 22 to use the IC card 21, the switch device 25 is used.
Is switched from on to off. Then, the timed means 8
Is started to start discharging the capacitor (step S
202), this discharge is performed for about 5 minutes. Also,
If the IC card 21 is returned into the card receiving recess 22a before the discharge of the capacitor is completed, the discharge of the capacitor is stopped and charging is started (steps S203 and S204), and the process proceeds to step S201. It monitors that the IC card 21 is removed from the card receiving recess 22a. On the other hand, if the IC card 21 is not returned to the card receiving recess 22a until the discharge of the capacitor is completed, the data (I
D information) is deleted by the control unit 6 (step S20).
5, S206). Here, the data to be erased may be all data or some data.
It is possible to add new data indicating that the C card 21 is invalid.
This is called erasure of D information. As a result, thereafter, the IC card 21 cannot be used as it is. In order to be able to use the card again, it is possible to go to a card issuing window, for example, and take a formal procedure.

Therefore, in the apparatus according to the second embodiment, when the settlement processing of shopping is performed using the IC card 21, or when the IC card 21 is used in a cash corner of a bank, the IC card 21 is electronically operated for a short time. When the card is removed from the card receiving recess 22a of the wallet 22 and returned, the data is not erased. But,
Dropped, forgotten, or stolen, from an individual (electronic wallet 22) for a certain period of time (5 minutes in this embodiment)
If you leave, the data will be erased and unusable. As a result, unauthorized use can be prevented without using a card that performs complicated operations, and high security can be ensured.

FIG. 5 is a diagram showing the configuration of an IC card fraud prevention apparatus according to a third embodiment of the present invention. FIG.
In the following description, components corresponding to those in FIG. The IC card fraud prevention device is mainly composed of a personal portable IC card 31 and an electronic wallet 2 as a management device carried with the IC card 31.

More specifically, the electronic wallet 2 is configured as a transmitter that constantly emits a signal of a specific frequency, and is set so as to be weak and reach a radius of only a few meters. The reach is preset according to the purpose of use.

The IC card 31 includes a communication device 5 configured as a receiver arranged in an area 4 (hereinafter, referred to as a “signal area 4”) for receiving a signal from the transmitter 3 of the electronic wallet 2, A control unit 6 in which a microcomputer (microcomputer) for controlling the entire card 1 is incorporated;
It comprises an ID holding means 7 having a rewritable memory for storing data for authenticating an individual user, a time limit means 8 having a CR time constant circuit, a battery 9, and a display means 32. ing. The display means 32 displays the validity / invalidity of the card. For example, the character "valid" is displayed only when the card is valid, and nothing is displayed when the card is invalid. A liquid crystal display is used for display.

FIG. 6 is a flowchart showing an example of the operation procedure of the IC card fraud prevention device according to the third embodiment of the present invention. The operation of the IC card fraud prevention device shown in FIG. 5 will now be described with reference to the flowchart shown in FIG. First, in this device, usually, the IC card 31 and the electronic wallet 2 are carried together with each other, and the receiver 3 is arranged in the signal area 4 of the electronic wallet 2, and the receiver 3
Are always receiving signals. In addition,
In consideration of theft or misplacement, it is preferable that the IC card 1 and the electronic wallet 2 are separated from each other in the signal area 4, for example, the IC card 1 is placed in a wallet and the electronic wallet 2 is placed in a pocket of clothes. . Further, the capacitor of the time limiter 8 is in a fully charged state.

The control unit 6 constantly monitors whether the receiver 3 is receiving a signal from the electronic wallet 2 (whether or not the signal is interrupted) (step S301).
When only the IC card 31 is taken out and moved out of the range of the signal area 4 to use the IC card 31, the timer 8 is activated to start discharging the capacitor (step S302). It takes about 5 minutes. Also, before the discharge of the capacitor is completed,
When the IC card 31 is returned into the signal area 4, the discharging of the capacitor is stopped and charging is started (steps S303 and S304), and the process proceeds to step S301.
It monitors that the IC card 31 is taken out of the signal area 4. On the other hand, if the IC card 31 is not returned to the signal area 4 until the discharge of the capacitor is completed, the word "valid" displayed on the display unit of the display means 32 is erased (step). S305, S30
6). This makes it possible to visually determine that the IC card 31 is invalid. This means that the check can be easily performed in the case where the check is performed visually, for example, as an introductory certificate. In order to be able to use the card again, it is possible to go to a card issuing window, for example, and take a formal procedure.

Therefore, in the device according to the third embodiment, when the settlement processing for shopping is performed using the IC card 31 or when the IC card 31 is used in a cash corner of a bank, the IC card 31 is signaled for a short time. Area 4
When the card is removed and returned, the "valid" characters on the card are not erased. However, if the user drops, forgets, or is stolen, and is away from the individual (signal area 4) for a certain period of time (5 minutes in the present embodiment), the characters are erased and use becomes impossible. As a result, unauthorized use can be prevented without using a card that performs complicated operations, and high security can be ensured.

FIG. 7 is a configuration image diagram of an IC card fraud prevention device according to a fourth embodiment of the present invention. FIG.
In the following description, the same reference numerals as those in FIGS. 1, 3 and 5 denote the same parts. The IC card fraud prevention device shown in FIG. 7 is mainly composed of a personal portable IC card 41 and an electronic wallet 22 as a management device carried with the IC card 41.

More specifically, the electronic wallet 22 includes an I
It has a card receiving recess 22a into which a part of the C card 41 is inserted.

The IC card 41 includes a switch device 25 as a sensor provided corresponding to a portion inserted into the card receiving recess 22a of the electronic wallet 22;
A control unit 6 in which a microcomputer (microcomputer) for controlling the entire C card 1 is incorporated; an ID holding unit 7 having a rewritable memory for storing data for authenticating an individual user; , A time limiter 8 having a CR time constant circuit, a battery 9, and a display 32. The switch device 25 is connected to the electronic wallet 22.
It outputs an ON signal while the IC card 21 is inserted into the card receiving recess 22, and outputs an OFF signal when the IC card 21 is removed. Even if it is a mechanical switch,
It may be an electric switch. The display means 32 displays the validity / invalidity of the card. For example, the character "valid" is displayed only when the card is valid, and nothing is displayed when the card is invalid. Further, a liquid crystal display is used for the display.

FIG. 8 is a flowchart showing an example of the operation procedure of the IC card fraud prevention device according to the fourth embodiment of the present invention. Next, the operation of the IC card fraud prevention device shown in FIG. 7 will be described with reference to the flowchart shown in FIG. First, in this device, usually, the IC card 41 is carried in a state of being inserted into the card receiving recess 22a of the electronic wallet 22, for example, put in a bag or the like.
In this case, it is preferable that the electronic wallet 22 is firmly tied to the back with a string or the like so as not to be stolen or dropped together with the IC card 21. In this state, the switch device 25 of the IC card 41
Is kept on, and the capacitor of the timer 8 is in a fully charged state.

First, the control section 6 constantly monitors whether or not the switch device 25 is switched from on to off (step S401). When the IC card 41 is taken out of the card receiving recess 22a of the electronic wallet 22 in order to use the IC card 41, the switch device 25
Is switched from on to off. Then, the timed means 8
Is started to start discharging the capacitor (step S
402), this discharge is performed for about 5 minutes. Also,
If the IC card 41 is returned into the card receiving recess 22a before the discharging of the capacitor is completed, the discharging of the capacitor is stopped and charging is started (steps S403 and S404), and the process proceeds to step S401. It monitors that the IC card 41 is removed from the card receiving recess 22a. On the other hand, if the IC card 41 is not returned into the card receiving recess 22a until the discharge of the capacitor is completed, the display means 32
Is deleted (steps S205 and S206). This makes it possible to visually determine that the IC card 41 is invalid. This makes it possible to easily perform a check when a visual check is performed, for example, for an introductory certificate. In order to be able to use the card again, for example, it is possible to go to a card issuing window and take a formal procedure.

Therefore, in the apparatus according to the fourth embodiment, when the settlement processing of shopping is performed using the IC card 41, or when the IC card 41 is used at a cash corner of a bank, the IC card 41 is not used for a short time. When the card is removed from the card receiving recess 22a of the wallet 22 and returned, the "valid" character of the card is not erased. However, if the user drops, forgets, or is stolen, and is away from the individual (electronic wallet 22) for a certain period of time (5 minutes in the present embodiment), the characters are erased and use becomes impossible. As a result, unauthorized use can be prevented without using a card that performs complicated operations, and high security can be ensured. In the present embodiment, when the IC card 41 is not returned for a certain period of time or longer, “valid”
Although the description has been given of the case where only the character is deleted, the ID information in the ID holding means 7 may be deleted simultaneously with the deletion of the character.

[0036]

As described above, the IC card unauthorized use prevention device of the present invention, as is apparent from the above embodiment, invalidates the IC card after the IC card has left the manager and a predetermined time has elapsed. Since the rewriting is performed, even if the IC card is misplaced or stolen and attempted to be used illegally, it becomes impossible to use the IC card and high security can be ensured.

[Brief description of the drawings]

FIG. 1 is a configuration image diagram of an IC card unauthorized use prevention device according to a first embodiment of the present invention;

FIG. 2 is a flowchart illustrating an example of an operation procedure of the IC card unauthorized use prevention device according to the first embodiment;

FIG. 3 is a configuration image diagram of a device for preventing unauthorized use of an IC card according to a second embodiment of the present invention;

FIG. 4 is a flowchart illustrating an example of an operation procedure of the IC card unauthorized use prevention device according to the second embodiment.

FIG. 5 is a configuration image diagram of an IC card unauthorized use prevention device according to a third embodiment of the present invention.

FIG. 6 is a flowchart illustrating an example of an operation procedure of the IC card unauthorized use prevention device according to the third embodiment;

FIG. 7 is a configuration image diagram of a device for preventing unauthorized use of an IC card according to a fourth embodiment of the present invention;

FIG. 8 is a flowchart illustrating an example of an operation procedure of the IC card unauthorized use prevention device according to the fourth embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 IC card 2 Electronic wallet (management device) 3 Transmitter 4 Signal area 5 Communication device 6 Control part 7 ID holding means 8 Time limit means 9 Battery 21 IC card 22 Electronic wallet 22a Card receiving recess 25 Switch device 31 IC card 32 Display Means 41 IC card

Claims (6)

[Claims] 1. An IC card in which personal information is stored, and a management device in which an individual user carries the IC card together with the IC card. Detecting means for detecting, when the detecting means detects that the IC card has been separated from the management device, timed means for counting the time during which the IC card has been separated, and when the time counted by the timed means is exceeded. A card unauthorized use preventing device for preventing unauthorized use of a personal portable IC card used in an authentication system for authenticating an individual user, comprising: a data rewriting means for invalidating the IC card. 2. The apparatus according to claim 1, wherein the manager has a transmitter, and the detector has a receiver for receiving a signal from the transmitter, and the detector receives the signal from the receiver. 2. The IC card unauthorized use prevention device according to claim 1, further comprising means for recognizing that the card has left the manager when a signal from the transmitter is interrupted. 3. The apparatus according to claim 2, further comprising a switch that is mechanically switched when said detecting means is separated from said management device, wherein said detecting means is configured to switch said IC when said switch is switched.
2. The device according to claim 1, further comprising means for recognizing that the card has left the manager. 4. The I according to claim 1, further comprising a charge / discharge circuit as said time limit means.
C card unauthorized use prevention device. 5. The IC card unauthorized use prevention device according to claim 1, wherein the data rewriting means includes an erasing means for erasing data in the IC card. 6. The IC according to claim 1, wherein said data rewriting means comprises a display means for displaying validity / invalidity on a surface of said IC card.
Card unauthorized use prevention device.