JP2002015289A - Communication equipment with ic card r/w - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable information processing terminals 32 such as personal computers in a house to read and write an IC card and have an Internet communication by using one device in common. SOLUTION: Communication equipment 31 is connected between terminals 32 and a communication line 33 and when an outgoing address from the communication line 35 of one terminal 32 to an authentication provider 51 or a server 52A under its control is detected, the adequacy of the user of the terminal 32 is checked by the provider 51 by using authentication information of the IC card 22 loaded in an IC card R/W part 41. When the IC card is accessed from the R/W line of the terminal 32, processing is carried out by associating application data on the IC card 22 loaded in the IC card R/W part 41 and a corresponding program on the terminal 32.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a computer-based set (STB: Set) attached to, for example, a personal computer, a computer game machine, a television set, etc. at home.
The present invention relates to a communication device for using an IC card of an information processing terminal such as a Top Box and performing communication with the Internet.

[0002]

2. Description of the Related Art Conventionally, as shown in FIG. 4, a personal computer 11, a computer game machine 12, and a television set computer use set (ST) are used at home, for example.
B) In many cases, a plurality of various information processing terminals including a computer such as a personal computer such as 13 are provided.
In order to receive various services through the Internet by these information processing terminals, for example, the terminal adapter 14 is connected to the information processing terminal, and the
Connects to the DN network 15 and further connects to the Internet 16
Connect with Alternatively, as shown by a broken line in FIG.
Is connected to the information processing terminal, connected to the telephone network 18 via the modem 17, and further connected to the Internet 16.

The service server 19 of the Internet 16
When receiving a service from, especially if only a contracted person can receive the service, a user who wants to receive the service needs to be authenticated first. One method of strictly performing this authentication is to use authentication information on the user in the IC card.
In order to use this method, an IC card reader / writer 21 is connected to the information terminal to be used, an IC card 22 is attached to the IC card reader / writer 21, and authentication is received from the service server 19, for example. .

Recently, so-called application data (referred to as AP data) such as electronic money, diagnosis information of the person's body, etc., and a part of an application program for processing the AP data (both of these are stored in the IC card 22). (Represented simply as application on behalf of)
It has been proposed to store It is conceivable that an application in the IC card 22 is linked with a program in an information processing terminal such as the personal computer 11 to perform various processes. Also in that case, it is necessary to connect the IC card reader / writer 21 to the information processing terminal.

[0005]

As described above, a plurality of information processing terminals are often provided in homes, offices, and the like, and in any of these information processing terminals, the IC card is used. It is very convenient to be able to perform processing in cooperation with the application inside the service and to receive services through the Internet. However, connecting the IC card reader / writer 21 to each of the plurality of information processing terminals and connecting the terminal adapter 14 and the modem 17 for communication each time is uneconomical, cumbersome, and takes up space. Is not preferred.

[0006]

SUMMARY OF THE INVENTION The present invention provides a communication device with an IC card R / W which solves this problem. The communication device with an IC card R / W is interposed between a plurality of information processing terminals and a communication line connectable to the Internet, and communicates with an IC card R / W unit that can read and write the IC card. A processing unit; and a control unit, wherein the control unit enables the information processing terminal to selectively read from and write to the IC card mounted on the IC card R / W unit. Any of these can selectively communicate with the Internet via a communication line.

An authentication unit is further provided, and this communication device is connected to a service provider device for performing authentication, and an IC card R / W
Utilizing the authentication information stored in the IC card mounted on the unit, the service provider device for performing authentication uses the IC.
It is also possible to allow the card user to be authenticated. Further, it is also possible to link a program in the information processing terminal with an application stored in an IC card mounted on the IC card R / W unit.

[0008]

FIG. 1 shows an embodiment of the present invention.
Parts corresponding to those in FIG. 4 are denoted by the same reference numerals. A communication device 31 with an IC card R / W according to the present invention includes an information processing terminal 32 such as a personal computer 11, a game machine 12, or an STB 13, and a communication line 33 such as a subscriber line connected to the ISDN network 15 or the telephone network 18. Connected between The communication line 33 only needs to be able to connect to the Internet 16.

In this embodiment, an IC card R / W-equipped communication device 31 includes an IC card R / W unit 41 and an encryption / decryption unit 4.
2. It comprises an authentication unit 43, a communication processing unit 44, and a control unit 45. The IC card R / W unit 41 can be detachably mounted on the IC card 22, and reads out or writes information stored in the mounted IC card 22 according to an instruction from the information processing terminal 32. It is possible,
The authentication section 43 can also read authentication information stored in the IC card 22 mounted on the IC card R / W section 41.

[0010] The encryption / decryption unit 42 encrypts information transmitted via the communication line 33 and decrypts encrypted information to be received. The authentication unit 43 uses the communication processing unit 44 to connect the communication line 33, that is, the IC card R /
The communication device 31 with W is connected to the authentication provider 51 on the Internet 16 and the authentication provider 51 is connected to the authentication provider 51 using the authentication information stored in the IC card 22 mounted on the IC card R / W unit 41. This is for authenticating the identity of the user of the IC card 22. For this purpose, various authentication methods can be used, and in order to obtain security, information to be transmitted for the authentication processing is required. The encryption is performed by the encryption / decryption unit 42.

A communication processing unit 44 transmits and receives data to and from the Internet 16 through the communication line 33. The terminal adapter 14 or the modem 17 shown in FIG.
And a part of a communication procedure necessary for communication with the Internet 16 as necessary. In response to a request from each information processing terminal 32 and monitoring information, the control unit 45 enables the information processing terminal 32 to selectively access the IC card R / W unit 41,
Communication with the Internet 16 through
Alternatively, an authentication process by the authentication unit 43 is performed, and control of each unit is also performed. Each information processing terminal 32 has an R / W port through which information of cooperative processing with the IC card 22 enters and exits from the R / W line 3.
4, communication ports through which communication information with the Internet 16 enters and exits are connected to the control unit 45 via communication lines 35.

The control unit 45 waits for the generation of an authentication requirement as shown in FIG. 2 (S1). When receiving a service from the various service servers 52A and 52B on the Internet 16, if the user cannot receive the service unless he / she has a contract to receive the service, the user must obtain a valid contract before receiving the service. Is authenticated to the service server. For this reason, the user attaches his / her own IC card 22 to the IC card R / W unit 41,
From one of the information processing terminals 32, the service server is a service server 52A under the control of the authentication provider 51.
If the service server 52B is not under the control of the authentication provider 51, the address is changed to the authentication provider 51.
Enter the address and make a call. The control unit 45 determines from the transmission address that authentication is necessary, that is, an authentication requirement is generated. Alternatively, for example, when purchasing a product from the service server 52B that is not under the control of the authentication provider 51, the user may be previously authenticated by the authentication provider 51 as described above. Sometimes, a call is sent to the authentication provider 51, and the control unit 45 determines that authentication is necessary based on the sending address.

In addition, if the information processing terminal 32 makes a call, authentication requirements may be generated regardless of the destination of the call. When certification requirements arise, IC
It is checked whether the card R / W unit 41 can be used (S2). If it can be used, it is checked whether the authentication unit 43 is performing another authentication process (S3). Then, the communication processing unit 44 causes the connection processing with the authentication provider 51 to be performed (S4). When the connection is made, the authentication processing is performed with the authentication provider 51 (S5). If the user is recognized as a valid contractor (identity) by this authentication, this is displayed on the information processing terminal 32 and connected to the requested service server 52A. Can be provided. The service server 52B, which is not under the control of the authentication provider 51, inquires of the authentication provider 51 whether or not the user who has made the service request is a valid contractor (personality). .

If it is determined in step S2 that the IC card R / W unit 41 is not usable, it is checked whether or not the IC card is being used (S6). If not, it is determined that the IC card 22 is not mounted. An instruction to insert a card is displayed on the display screen of the information processing terminal 32 or / and by voice (announcement), and the process returns to step S2 (S7). If the IC card R / W unit 41 is in use in step S6, processing according to the use conditions is performed (S8), that is, the IC
If the card is in use for cooperation with the application in the card 22, the time during use may be relatively long, and an instruction to temporarily suspend the connection to the service server is issued; An instruction may be given.

If the authentication process is being performed in step S3, the process proceeds to step S4 after the authentication process is completed (S4).
9). In this way, it is possible to prevent a situation where a new authentication process is started during another authentication process and a correct authentication process cannot be performed. After the identity of the user who attempted to use the information processing terminal 32 is authenticated (for example, as a correct contractor) by the authentication information of the IC card 22 attached to the IC card R / W unit 41, Further, information that is difficult to be stolen by others, such as a credit card number of the user, is stored in the authentication provider 51 or the service servers 52A and 52A.
When transmitting to B, be sure to encrypt and send. Further, when the authentication is passed, the service can be provided from the service server 52A or 52B. The function for detecting the occurrence of the authentication requirement is provided in the control unit 45 or the communication processing unit 44.

On the other hand, the user uses one of the information processing terminals 32 to store a program in the terminal 32 and his / her own IC.
When cooperating with one of the applications stored in the card 22, for example, when performing a process of confirming the balance of electronic money in the IC card 22, when the information processing terminal 32 is operated to start the process therefor ,
At the start of the process or when a need arises during the process, an access request to the IC card R / W unit 41 occurs on the R / W line 34 of the information processing terminal 32. Control unit 4
In FIG. 5, for example, as shown in FIG. 3, one of the R / W lines 34 waits for an access to an application in the IC card to occur (S1). It is checked whether or not the / W unit 41 is in use (S2). If it is not in use, the IC card R / W unit 41
, Only the information processing terminal 32 that has issued the access request can access the application in the IC card 22 attached thereto.
Application in C card 22 and information processing terminal 32
The corresponding program in the program can be cooperatively executed (S3).

If the IC card R / W unit 41 is being used in step S2, the information processing terminal 32 is notified of the fact that the IC card R / W unit 41 is closed and cannot be used. When the use time of the IC card R / W unit 41 is short, such as when the IC card R / W unit 41 is used for reading information, processing according to various conditions, such as waiting for the IC card R / W unit 41 to be empty, is performed. (S4). If the IC card R / W unit 41 is not in use but the IC card 22 cannot be accessed in step S2, a display or announcement prompting the user to insert the IC card 22 is given to the information processing terminal 32, Authentication of whether the attached IC card 22 belongs to the user may be performed normally. A plurality of applications may be stored in the IC card 22.

In any of the processes shown in FIGS. 2 and 3, the control unit 45 returns to step S1 when the process is completed. When a communication request from the information processing terminal 32 occurs on the communication line 35 and it is determined that the authentication does not require authentication, if the communication line 33 is free, the communication line 35 is connected to the communication processing unit 44. Further, it connects to a desired place on the Internet 16 through the communication network 15 (or 18) to enable communication therewith. In any of the processes using the communication line 33, when the process is completed, the communication processing unit 44 performs a process of disconnecting the connection between the information processing terminal 32 and the connected place on the Internet 16. Further, in the above description, the authentication provider 51 uses the authentication information of the IC card 22 to authenticate the user. For example, the service server 52B performs authentication of the user using the authentication information of the IC card 22. You may do so. In short, not only the authentication provider that is connected to the Internet 16 and has a service of performing authentication,
A service provider device that needs to authenticate the user with a server or the like that provides other services is connected to the communication device 31 with the IC card R / W, and the authentication information in the IC card 22 is used to use the device. Authentication of the person can be performed. Therefore, the service provider device for performing the authentication (the device for performing the user authentication, the device for performing the user authentication for providing other services) and the communication device 31 with the IC card R / W The connection is not limited to the case where the address for the service provider device performing the authentication is recognized and the recognition process is performed as described above. Sometimes it is done.

When the information processing terminal 32 and the application in the IC card are operated in cooperation with each other, the identity of the user is first recognized using the authentication information in the IC card 22 and the user is passed. Furthermore, it is also possible to enable cooperation between the application in the IC card and the information processing terminal 32.

[0020]

As described above, according to the present invention, an IC card R / W of the present invention can be used without connecting a communication device and an IC card reader / writer to a plurality of information processing terminals.
By using only one attached communication device 31, each information processing terminal can use this in common to cooperate with the application in the IC card and communicate with the Internet. Therefore, it is more economical than connecting each communication terminal for connection to the Internet and each IC card reader / writer to each information processing terminal 32, and the occupied space is small. Become.

Further, only one information processing terminal of the user who intends to use the information processing terminal is prevented from connecting to the communication line 33, and the user is authenticated using the authentication information in the IC card. In this case, the identity of a user who intends to use the information processing terminal can be strictly authenticated, and a secure communication path can be provided by using encrypted communication as necessary. .

[Brief description of the drawings]

FIG. 1 is a diagram showing a functional configuration of an embodiment of the present invention.

FIG. 2 is a flowchart showing an example of a processing procedure for generation of an authentication requirement.

FIG. 3 is a flowchart showing an example of a processing procedure for a read / write request generation to an IC card.

FIG. 4 is a diagram showing a conventional device.

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 29/10 H04L 13/00 309Z (72) Inventor Hiroshi Yusa 1-6-6 Uchisaiwaicho, Chiyoda-ku, Tokyo F-term within NTT Communications Corporation (reference) 2C005 MB05 QC14 SA02 SA25 5B035 AA13 BB09 BC01 BC03 CA29 5B058 CA25 CA27 KA02 KA04 KA08 KA33 YA13 5K034 AA11 FF02 FF13

Claims (6)

[Claims] 1. A communication line connectable to the Internet,
An IC card R / W unit provided between a plurality of information processing terminals and capable of reading and writing to the IC card; a communication processing unit; A control unit that enables reading and writing on an IC card mounted on the W unit and selectively enables communication with the Internet via the communication line by the communication processing unit with any of the information processing terminals. IC card R / W
With communication equipment. 2. The communication processing unit is connected to a service provider device that performs Internet authentication, and performs the authentication using authentication information in an IC card mounted on the IC card R / W unit. 2. The communication device with an IC card R / W according to claim 1, wherein the service provider device includes an authentication unit for authenticating a user of the IC card. 3. The control unit according to claim 2, wherein the information processing terminal is configured to control the I
In a state where reading and writing to the IC card mounted on the C card R / W unit are enabled, the information processing terminal and the I
3. The communication device with an IC card R / W according to claim 1, wherein the communication device is capable of cooperating with an application in the IC card mounted on the C card R / W unit. 4. The apparatus according to claim 2, further comprising: means for automatically performing the authentication by the authentication unit when detecting a transmission address to the service provider apparatus for performing the authentication.
Or the communication device with an IC card R / W described in 3. 5. When an access request to the IC card R / W section is generated, it is determined whether or not the IC card R / W section is being used. The IC according to any one of claims 1 to 4, further comprising means for enabling reading and writing of the IC card mounted on the card R / W unit.
Communication equipment with card R / W. 6. When an authentication request is issued to the authentication unit, it is determined whether or not the authentication unit is performing an authentication process. If the authentication unit is not performing an authentication process, an authentication process is performed based on the authentication request. The communication device with an IC card R / W according to any one of claims 2 to 5, further comprising: