JP2002203195A - Ic card collation system and its method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To quickly check a location of an IC card and to reject access to a credit company or a bank when the IC card is illegally used by another person. SOLUTION: This IC card collation system uses a management server 2 managing card ID information of the IC card 1 distributed to a user and provided with an actuating function, a card reader/writer 3 having an authorizing function for actuating the IC card only when authentication is obtained and transmitting/receiving an information signal including the card ID information to/from the IC card, and a transmitting means transmitting the information signal obtained by the card reader/writer 3 to the management server 2. The management server 2 restricts performance of processing such as payment matching the IC card 1 on the basis of the information signal transmitted from the card reader/writer 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card verification system and a method for verifying the validity of an IC card usable as a so-called "credit card" or "debit card".

[0002]

2. Description of the Related Art Conventionally, ID information for identifying a user is recorded on a card-like recording medium such as a so-called "credit card" or "electronic money", and this ID information is recorded.
A system that identifies a user based on D information and performs payment as necessary from a bank account corresponding to the user is used. Also, a so-called “debit card” using a bank card as such a card has been put to practical use.

[0003] In such a system such as a "credit card", a credit company or a bank makes a payment for a store or the like where the card is used, and the payment is made from a user's bank account.
This is a system in which the credit company or the bank is settled according to the advance payment.

[0004] However, these cards have a security problem in that the cards are stolen and used by others, or counterfeit cards are used. That is, in a “credit card”, ID information is recorded on a magnetic recording section (magnetic stripe) provided on the card, and this ID information is read out by a dedicated reader and sent to a management computer of a credit company, and The system which matches is adopted. And
Authentication confirmation is done by the card owner signing the output slip,
A store clerk or the like receiving the replacement payment checks the signature of the slip with the signature of the credit card.

[0005] In other words, in such a collation system, the authentication confirmation is related to the collation behavior of a store clerk or the like who uses the card, and is a mismatch between the card owner and the user or a forged card. It is not always safe to say, and it is hard to say that it is safe. In some cases, counterfeiting is prevented by, for example, putting a photograph of the owner's face on the card, but the authentication confirmation still involves human judgment, leaving ambiguity.

[0006] In the case of a "debit card", a user inputs a personal identification number using a keyboard or the like at the time of use, and the personal identification number information is stored in an I
The information is sent to the center computer of the bank together with the D information, and the user is collated. This can be said to be more secure than the signature method described above, but the number of digits of the PIN and the code to be used are limited (for example, it must be a "four-digit" number). ), Security of confidentiality cannot be said to be high.

Therefore, an IC card has been proposed as a card-like recording medium used in such a settlement system. Such an IC card is configured in a card shape by incorporating a memory and a circuit formed as an IC (integrated circuit), and can store various information signals including ID information in the memory.

[0008] The memory provided in such an IC card includes:
An enormous amount of information signals can be stored as compared with magnetic recording generally used in conventional "credit cards" and the like. Therefore, by using such an IC card, for example, compared with a system using a card having a conventional magnetic recording unit, for example, the number of digits of a personal identification number is increased or characters including characters other than “numeric characters” are included. It is possible to construct a highly secure system by using a password that has been used.

[0009] The memory provided in this IC card includes:
Information signals can be transmitted and received in a non-contact manner through a transmission and reception circuit provided in the IC. For this reason, the IC card stores not only ID information but also various information signals, and various methods of use corresponding to these information signals are being studied.

[0010]

In a system using an IC card as described above, it is desired to establish more robust authentication means and forgery prevention means as a means for preventing unauthorized use of the card. It is rare.

All of the security systems that have been put into practical use are measures for preventing unauthorized use using a personal identification number or the like. In other words, in the conventional system, if the card is lost or stolen, if this preventive measure is breached, when the card is used illegally by another person, the card can be quickly identified and the credit company can be used. And could not deny access to the bank.

Accordingly, the present invention has been proposed in view of the above-mentioned circumstances, and when an IC card is illegally used by another person, the IC card can be promptly confirmed for its location, a credit company or a bank. It is an object of the present invention to provide an IC card collation system and an IC card collation method capable of denying access to the IC card.

[0013]

In order to solve the above-mentioned problems, an IC card collating system according to the present invention comprises: a management server for managing card ID information of an IC card having an activation function distributed to a user; A card reader / writer that has a function and activates an IC card only when authentication is obtained, and transmits and receives an information signal including card ID information to and from the IC card, and a card reader / writer obtained by the card reader / writer. Transmission means for transmitting an information signal to the management server, wherein the management server restricts execution of processing corresponding to the IC card based on the information signal sent from the card reader / writer. It is.

The IC card collating method according to the present invention distributes an IC card having an activation function to a user, and has a management server for managing card ID information of the IC card, and has an authentication function and authentication is obtained. Card reader / writer that activates the IC card only when the IC card is activated and transmits / receives an information signal including the card ID information to / from the IC card, and transmits the information signal obtained by the card reader / writer to the management server. And that the management server restricts the execution of processing corresponding to the IC card based on the information signal sent from the card reader / writer by the management server.

Further, the IC card verification method according to the present invention distributes an IC card having an activation function to a user, and has a management server for managing card ID information of the IC card and has an authentication function and authentication is obtained. Card reader / writer that activates the IC card only when the IC card is activated and transmits / receives an information signal including the card ID information to / from the IC card, and transmits the information signal obtained by the card reader / writer to the management server. When the management server determines that the IC card is invalid based on the information signal sent from the card reader / writer by the management server, the management server uses the communication means to transmit the card via the transmission means. leader/
An IC card collation method for controlling a writer and performing a process of invalidating the IC card, wherein information about an IC card to be determined to be invalid is distributed to a management server via a transmission unit. It is characterized by the following.

Further, in the IC card collation method according to the present invention, an IC card having an activation function is distributed to a user, and a management server for managing card ID information of the IC card is provided with an authentication function and authentication is obtained. Card reader / writer that activates the IC card only when the IC card is activated and transmits / receives an information signal including the card ID information to / from the IC card, and transmits the information signal obtained by the card reader / writer to the management server. When the management server determines that the IC card is invalid based on the information signal sent from the card reader / writer by the management server, the management server uses the communication means to transmit the card via the transmission means. leader/
An IC card collation method for controlling a writer to perform a process of invalidating the IC card, the method being adapted to handle an invalid IC card before the management server acquires information on the IC card to be determined to be invalid. The invention is characterized by compensating for the damage caused by the execution of the processing.

[0017]

Embodiments of the present invention will be described below with reference to the drawings.

The IC card collation method according to the present invention is implemented in the IC card collation system according to the present invention.
As shown in FIG. 1, this IC card verification system includes an IC card 1 having a start function distributed to a user, a management server 2 for managing card ID information of these IC cards, an authentication function having an authentication function, Is activated only when the IC card 1 is obtained, and the card ID is exchanged with the IC card 1.
Multiple card readers that send and receive information signals containing information
It comprises a writer 3 and transmission means for transmitting an information signal obtained by the card reader / writer 3 to the management server 2. This transmission means may be any of the Internet, a satellite communication network for transmitting and receiving via the artificial satellite 5, and a dedicated network for connecting a plurality of card readers / writers 3 to the management server 2.

First, the plurality of card readers / writers 3
It is connected to the server 4 of the card company, and is connected to the management server 2 via this server 4.

The non-life insurance business server 6 is connected to the management server 2 and the card business server 4 via various transmission means such as the Internet.

The IC card 1 has a built-in IC (integrated circuit) chip including a memory and an electronic circuit unit and a driving power supply in a card-shaped casing, and has a starting input unit (keyboard including numeric keys) 7 and a display unit 8. It is provided with.

The IC card 1 may be used for information transmission and authentication, and as a coupon for various services, in addition to settlement at the time of purchase of a product as described later.

The IC card 1 has a built-in rechargeable power supply, and the power supply is charged by a dedicated charger (not shown). This charger has a function of setting a password for activation. That is, the user
As shown in the flowchart of FIG. 2, when charging is performed by the charger using the dedicated charger in step st1, the password for activation can be changed in step st2 at any time, and the security is closed. System.

Then, in step st3, this I
In order to use the C card 1, first, in step st4, a password for activation is input in the input unit 7 for activation of the IC card 1. Then, the IC card 1 holds the operating state for a certain period of time, and thereafter,
Stop. The operating state is a state in which the interface with the card reader / writer 3 is activated to enable communication with the card reader / writer 3. During this operation state, in step st5, the collation of the activation password is performed. If the collation is successful, the process proceeds to step st6, where the IC card is activated. If the collation cannot be performed, the process proceeds to step st9. To stop the operation of the IC card. After the activation of the IC card, step st6
To determine whether or not a predetermined time has elapsed. If the predetermined time has elapsed, the operation proceeds to step st9 to stop the operation of the IC card. If the predetermined time has not elapsed, the operation proceeds to step st8. To connect to the card reader / writer 3. Then, when the transmission and reception of the information signal with the card reader / writer 3 are completed, the process proceeds to step st9, where the operation of the IC card is stopped, and the process ends.

For example, when the purchase price of a product is settled using the IC card 1, the IC card 1 is activated and loaded into the card reader / writer 3, and the IC card 1 and the card reader / writer 3 are loaded. Information signals are exchanged between the writers 3. That is, the IC card 1
To the card reader / writer 3, card ID information indicating the owner (authorized user) of the IC card, the payment amount input by the input unit 7, and the like are sent. Then, an information signal or the like for recording that the payment processing has been performed is transmitted from the card reader / writer 3 to the IC card 1.

The card reader / writer 3 is an IC card 1
Is transmitted to the management server 2 via the card business server 4. The management server 2 determines whether or not to make a payment based on the information signal sent from the card reader / writer 3, and if the payment can be made, performs a predetermined process for making the payment.

If the IC card is lost or stolen, the user proceeds to step st10, as shown in the flowchart of FIG.
Notify the card operator of the C card invalidation application. This notification is made using a telephone or the Internet, using an e-mail, a card company's homepage, or the like. In this invalidation application, as shown in step st11, the member information (user ID, password) is input (the re-entry can be skipped at the time of access), user authentication is performed in step st12, and step s
At t13, an invalidation application item is selected. In step st14, predetermined information is further input, and the flow advances to step st15 to check whether or not the input information is corrected. If there is a correction in the input information, the process returns to step st14, and if there is no correction in the input information, the process proceeds to step st16. In step st16, it is determined whether or not the input information has been confirmed.
Returning to t14, if the input information is confirmed, step st
Proceed to 17.

At step st17, the management server 2 is notified of the contents of the application for invalidating the IC card. In step st18, the management server 2 transmits information on the invalidation of the IC card. This IC card invalidation information is converted into a data string to which card ID information and invalidation data of the IC card are added, via a server of a card company using the IC card via the Internet or a satellite network. 4 and each card reader / writer 3.

The server 4 of the card company and each card reader / writer 3 perform processing corresponding to the invalidation information in step st19, and in step st20,
It is determined whether the invalidation response has been completed. If the invalidation has not been completed, the process returns to step st19. If the invalidation has been completed, the process proceeds to step st21. In step st21, the management server 2 is notified that the invalidation has been completed in the server 4 of the card company and each card reader / writer 3, and the process ends.

When an invalid IC card is loaded and accessed to the card reader / writer 3 for which such invalidation has been completed, the card reader / writer 3
Stop the reading function, emit an alarm sound, LE
D and the like are displayed, blinked, displayed on an LCD, and the like, and the server 4 and the management server 2 of the card company are notified that an invalid IC card has been accessed. Also,
At this time, the card reader / writer 3 may make the information content of the invalid IC card inaccessible. That is, the internal data in the IC chip is locked,
The data may be changed or deleted.

At this time, the card reader / writer 3
If the history of the IC card loaded therein and the history of the IC card loaded therein are left in the management server 2, the location of the invalid IC card can be roughly determined by collating with the invalidation notification made earlier. In addition, the location information of the invalid IC card can be referred to the police, a security company, or a general insurance company.

The non-life insurance company operates the IC
If the IC card is misused after the application for card revocation and before the revocation is completed, check the date and time of the revocation application and compensate for the damage by property insurance. .

The IC card verification system as a whole collects system maintenance costs from a system user, collects a membership fee (membership fee) from an IC card user, collects a non-life insurance fee, and collects an information distribution fee. , IC card and card reader / writer sales price, lease price, or
Profit can be obtained by charging according to usage.

[0034]

As described above, in the IC card collation system and the IC card collation method according to the present invention, sufficient security can be realized without using an advanced authentication technique, and the security system can be re-established. The labor, cost, and capital investment required for construction and replacement can be suppressed. Further, the IC card verification system can be easily expanded.

If the invalid IC card is used illegally until the invalidation of the IC card is completed,
Loss of C card owners and service providers who have introduced this system will be compensated by property and casualty insurance, which will give users a sense of security in this system, and will promote the expansion of use routes. In addition, it is possible to suppress crimes in economic activities and crimes of taking cash.

When an IC card is used, the card is once set to active (activated state) and a predetermined card reader / writer is accessed, so that it can be used at any time like a conventional credit card or bank card. Unlike a card in a state (active holding state), primary security is achieved even if the card is lost or stolen. Further, in this IC card, if a password (password) is further set when passing through the card reader / writer, the second security is achieved, and further, the procedure after the loss report (invalidation application) is performed. Third security is ensured.

That is, according to the present invention, when an IC card is illegally used by another person, it is possible to promptly confirm the location of the IC card or deny access to a credit company or a bank. It is possible to provide a card collation system and an IC card collation method.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an IC card collation system according to the present invention that executes an IC card collation method according to the present invention.

FIG. 2 is a flowchart showing an operation of starting an IC card in the IC card verification system.

FIG. 3 is a flowchart showing an operation of invalidating an IC card in the IC card verification system.

[Explanation of symbols]

1 IC card, 2 management server, 3 card reader /
Writer, 4 card operator's server, 5 satellite, 6 non-life insurer's server

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 9/00 675D (72) Inventor Satoshi Matsuda 6-7-35 Kita Shinagawa, Shinagawa-ku, Tokyo Sony Stock Inside the company (72) Inventor Hiroshi Nakazawa 6-7-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Sony Corporation (72) Inventor Tsuyoshi Ono 6-35-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Sony Corporation F term (reference) 2C005 MA04 SA05 SA06 SA13 5J104 AA07 KA02 MA03 NA05 NA35 PA07 PA10

Claims (12)

[Claims] 1. An IC having an activation function distributed to a user.
A management server for managing the card ID information of the card, and an authentication function, the IC card is activated only when the authentication is obtained, and the card I is exchanged with the IC card.
A card reader / writer for transmitting and receiving an information signal including D information; and a transmitting unit for transmitting the information signal obtained by the card reader / writer to the management server. The management server includes the card reader / writer. An IC card verification system, wherein execution of processing corresponding to the IC card is restricted based on an information signal sent from the IC card. 2. When the management server determines that the IC card is invalid on the basis of the information signal sent from the card reader / writer, the management server controls the card reader / writer via a transmission unit to control the IC card. 2. The IC card verification system according to claim 1, wherein a process of invalidating the card is performed. 3. The IC card verification system according to claim 1, wherein the transmission means is the Internet. 4. The IC card verification system according to claim 1, wherein the transmitting means is a satellite communication network for transmitting and receiving via an artificial satellite. 5. The IC card verification system according to claim 1, wherein the transmission means is a dedicated network for connecting a plurality of card readers / writers to a management server. 6. A management server for distributing an IC card having an activation function to a user and managing card ID information of the IC card, and activating the IC card only when authentication is obtained having an authentication function. Let's get this card ID
A card reader / writer for transmitting and receiving an information signal containing information, and a transmission unit for transmitting an information signal obtained by the card reader / writer to the management server. An IC card verification method, wherein execution of a process corresponding to the IC card is restricted based on the transmitted information signal. 7. When the management server determines that the IC card is invalid on the basis of the information signal sent from the card reader / writer, the management server controls the card reader / writer via the transmission means. 7. The IC card verification method according to claim 6, wherein the control is performed to perform a process of invalidating the IC card. 8. The IC card verification method according to claim 6, wherein the transmission means uses the Internet. 9. The IC card verification method according to claim 6, wherein a satellite communication network for transmitting and receiving via an artificial satellite is used as the transmission means. 10. The IC card verification method according to claim 6, wherein a dedicated network for connecting a plurality of card readers / writers to the management server is used as the transmission means. 11. A management server for distributing an IC card having an activation function to a user and managing card ID information of the IC card, and activating the IC card only when an authentication function is obtained and authentication is obtained. Let's get this card ID
A card reader / writer for transmitting and receiving an information signal containing information, and a transmission unit for transmitting an information signal obtained by the card reader / writer to the management server. When it is determined that the IC card is invalid based on the sent information signal, the management server controls the card reader / writer via the transmission means to perform processing for invalidating the IC card. An IC card collation method, wherein information relating to an IC card to be determined to be invalid is distributed to the management server via the transmission means. 12. A management server which distributes an IC card having an activation function to a user and manages card ID information of the IC card, and activates the IC card only when an authentication function is obtained and an authentication is obtained. Let's get this card ID
A card reader / writer for transmitting and receiving an information signal containing information, and a transmission unit for transmitting an information signal obtained by the card reader / writer to the management server. When it is determined that the IC card is invalid based on the sent information signal, the management server controls the card reader / writer via the transmission means to perform processing for invalidating the IC card. An IC card collation method, wherein the management server compensates for damage caused by executing a process corresponding to an invalid IC card before acquiring information on the IC card to be determined to be invalid. IC card verification method.