JP2004086357A - Ic card processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To let a user know a diagnostic result of an IC card which is not normally operating due to abnormality or lock, and to repair this IC card. <P>SOLUTION: When any failure is generated in an IC card, failure restoration is remotely operated from external equipment on-line, or failure restoration is operated by downloading a failure restoration program from the external equipment. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an IC card processing system that processes an IC card.
[0002]
[Prior art]
At present, IC cards are steadily spreading. Along with this, IC card issuing companies, manufacturing companies, and system operating companies have been receiving many requests for repairs related to IC cards.
[0003]
In the first place, existing magnetic cards simply embed the necessary data in the magnetic stripe, and the abnormalities of the card itself did not exist much, except for the appearance and expiration date, the magnetic data itself was garbled, etc. . On the other hand, the IC card has a CPU in the card, so the range of abnormalities of the card itself has been widened. The abnormality in this case includes a case where the CPU in the card is intentionally abnormal and a case where the CPU is not intentional. A case where the card is intentionally abnormal is a case where the card is locked by itself if a wrong PIN (Personal Identification Number) is entered a plurality of times in order to restrict the use of the card other than the card owner, If the player intentionally mischiefs during the processing, some DFs (folders) in the card may be locked to cause an abnormal state. Also, similar to the case of a magnetic card, when an error occurs because the internal data has accidentally changed, or when abnormal data is written to the card due to a problem on the system (terminal) side, an error occurs. In other words, it may be unintentional.
[0004]
If the IC card becomes abnormal and can no longer be used, the card holder has sent the abnormal IC card to the card issuer, and the card issuer evaluates the details of the card abnormality and reissues it. And sent it to the cardholder. This required a considerable amount of time before the cardholder could use the card again. If the IC card owner uses the card in a mischievous (illegal) manner of use and the card becomes abnormal, there is no help for it even if it takes time to reissue. However, it is not very kind to the system that the card is locked due to inadvertently entering the wrong PIN (Personal Identification Number) and reissue processing is required. Further, if the IC card becomes abnormal due to a problem on the system (terminal) side, the card becomes abnormal despite the responsibility of the system side, and further reissue processing is required. In this case, there is a problem as a system. Further, since the card issuer also incurs a cost for collecting the card, the loss of the entire system is immeasurable.
[0005]
Therefore, when the IC card becomes abnormal, the card owner judges (confirms) the content of the abnormality on the PC at hand or the terminal at the storefront, and in some cases, repairs the card remotely from a card issuing company or the like. There is a need for a system that can do this.
[0006]
[Problems to be solved by the invention]
SUMMARY OF THE INVENTION It is an object of the present invention to provide an IC card processing system that can notify a diagnosis result of an IC card that does not operate normally due to an abnormality, a lock, and the like, and can further repair the IC card.
[0007]
[Means for Solving the Problems]
An IC card processing system according to the present invention includes a terminal device that handles an IC card having a control element and a data memory, and a host terminal that is connected to the terminal device via a line and manages the IC card. Requesting means for requesting the host terminal to download a diagnostic program; installing means for installing the diagnostic program supplied from the host terminal in response to the request by the requesting means; The diagnostic means comprises a diagnostic means for diagnosing the IC card based on the installed diagnostic program, and an output means for outputting a diagnostic result by the diagnostic means.
[0008]
An IC card processing system according to the present invention comprises a terminal device for handling an IC card having a control element and a data memory, and a host terminal connected to the terminal device via a line and managing the IC card. Request means for requesting the host terminal to download a diagnostic program, installing means for installing the diagnostic program supplied from the host terminal in response to the request by the request means, and installing by the installing means. Diagnostic means for diagnosing the IC card based on the diagnosed program, output means for outputting a diagnosis result by the diagnostic means, and repair means for repairing the IC card based on the output of the output means. .
[0009]
An IC card processing system according to the present invention comprises a terminal device for handling an IC card having a control element and a data memory, and a host terminal connected to the terminal device via a line and managing the IC card. First transmission means for transmitting a request for diagnosis of the IC card to the host terminal, installation means for installing a diagnostic program supplied from the host terminal in response to the transmission of the first transmission means, A second transmitting unit that transmits a trigger to the host terminal when the diagnostic program is installed by the installing unit; and a command supplied from the host terminal in response to the transmission of the second transmitting unit. And a second transmitting means for transmitting a response from the IC card to the host terminal. A third transmitting unit that transmits a diagnostic program to the terminal device based on an IC card diagnostic request from the terminal device, and a trigger from the terminal device in response to the transmission by the third transmitting unit. A fourth transmission unit that transmits a diagnostic command to the terminal device when supplied, and an output unit that outputs a diagnosis result supplied from the terminal device in response to the transmission by the fourth transmission unit. , The IC card includes a diagnosis unit that diagnoses with a diagnosis command supplied from the terminal device, and a fifth transmission unit that transmits a diagnosis result by the diagnosis unit to the terminal device as a response.
[0010]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a schematic configuration of an IC card processing system according to the present invention.
[0011]
This IC card processing system is composed of a host device of a card issuing company (or a manufacturing company, a system operating company, etc.) connected to a terminal device 1 constituted by a PC or the like, an IC card 2, and a PC 1 via a line 3 such as the Internet. The terminal 4 is configured. The PC 1 is connected by a connection line 7 to an arithmetic unit 5 that performs calculations and inputs from humans, and a reader / writer 6 that controls inputs and outputs to and from the IC card 2. The PC 1 may be any terminal other than the host terminal 4, such as a cardholder's PC, a storefront terminal, or the like.
The arithmetic unit 5 has a processor for performing arithmetic operations, and has external input means including a human system. The request to the IC card 2 and the processing of the result status are performed here.
[0012]
The reader / writer 6 receives a request from the arithmetic unit 5 and outputs the request to the IC card 2 inserted in the card insertion slot 8. Similarly, it receives the status from the IC card 2 and reports the result to the arithmetic unit 5.
[0013]
As shown in FIGS. 1 and 2, the IC card 2 has a contact 10 serving as a contact point with the outside, a processor 11 for performing calculations and control, and volatile data used as an area necessary for executing transient data and programs. A memory (RAM) 12, a rewritable program code, a non-volatile memory (EEPROM) 13 for storing rewritable data having a permanent attribute, a coprocessor 14 that assists the processor 11, a byte code of a card domain or an application. A non-rewritable program code (a program for executing loading / installing of a card operating system (COS) or an application) and a ROM 15 for storing data that is not to be rewritten are provided. The communication with the reader / writer 6 is performed through the contact 10. As the non-volatile memory 13, a flash memory, an FRAM or the like may be used.
[0014]
Under the control of the processor 11, two types of memories, a RAM 12 and an EEPROM 13, are managed. In addition, there may be a co-processor 14 for performing an operation that generates a load, and this performs an operation under the instruction of the processor 11.
[0015]
Data is input from the contact 10 in FIG. 1 and is generally stored in the RAM 12. The data received here is analyzed and processed by the processor 11. Here, the data that needs to be stored is written into the EEPROM 13 under the instruction of the processor 11, and the processing instruction is sent to the coprocessor 14 for those capable of performing special calculations. In addition, large data that cannot be stored in the RAM 12 may be temporarily written to another area of the EEPROM 13.
[0016]
In the above-described configuration, when a failure occurs in the IC card 2, the PC 1 is used to access the host terminal 4 of the issuing company via the Internet 3. A program for diagnosing the IC card is downloaded from the site of the host terminal 4 of the issuing company, and installed on the PC 1. The settings such as the communication between the PC 1 and the reader / writer 6 are performed so that the PC 1 can control the IC card 2. (In the case of a terminal at a storefront, this work may be performed in advance.)
From here, two types of methods are conceivable.
1. 1. When closed and processed by the PC 1 and the IC card 2 When processing is performed between the host terminal 4 and the IC card 2 1. In the case of (1), each command for the IC card 2 is registered in the downloaded program. After executing the program, the owner performs processing according to the screen of the PC1. After the authentication processing, the PC 1 and the IC card 2 respond to the command from the PC 1 by the IC card 2, and the PC 1 determines the abnormal state of the IC card 2, and in some cases, also performs repair and unlocking.
[0017]
However, in this case, if a program is provided with a cryptographic function (key) such as a card authentication process, the security level of the system may be reduced.
2. In the case of (1), when the owner executes the program according to the screen of the PC 1, first, the PC 1 and the host terminal 4 perform mutual authentication and share the encryption key. However, in practice, the PC 1 is in the slave state of the host terminal 4 and decrypts the encrypted data sent from the host terminal 4 and transmits / receives it to / from the IC card 2 or displays it on the screen. Only has the function of. In this case, since the encryption function (key) of the system or the IC card 2 is not provided in the program (the encryption of the PC 1 and the host terminal 4 is another key), the security level of the entire system is not significantly reduced. However, the load on the host terminal 4 increases.
Of course, any IC card that cannot be repaired by using either of these two methods must be sent to the issuing company and reissued.
The above 1. Will be described with reference to the flowchart shown in FIG.
[0018]
First, when a failure occurs in the IC card 2, the host terminal 4 of the issuing company is accessed via the Internet 3 using the PC 1 (ST1). At this time, identification (ID card holder) is performed using an ID or the like. Next, an IC card diagnostic program is downloaded from the site of the host terminal 4 of the issuing company and installed on the PC 1 (ST2). The settings such as the communication between the PC 1 and the reader / writer 6 are performed so that the PC 1 can control the IC card 2.
[0019]
In this state, the PC 1 activates the installed IC card diagnostic program, and transmits an authentication command from the PC 1 to the IC card 2 (ST3). In response to this command, the IC card 2 transmits a card authentication response to the PC 1 (ST4). Thus, the PC 1 performs card authentication in response to the card authentication response from the IC card 2 (ST5).
[0020]
Next, a command for card diagnosis is transmitted from the PC 1 to the IC card 2 (ST6). With this command, the IC card 2 performs card diagnosis (ST7). Thereby, a response of the card diagnosis is transmitted from the IC card 2 to the PC 1 (ST8). In response to the card diagnosis response, the PC 1 displays an abnormal state of the IC card 2 (ST9).
With this display, the owner of the IC card 2 can know the details of the abnormality of the IC card 2 and can judge the subsequent measures.
Further, the PC 1 transmits a repair or unlock command to the IC card 2 depending on the content of the abnormal state of the IC card 2 (ST10). With this command, the IC card 2 performs repair and unlocking (ST11). Thereafter, a response of the card repair is transmitted from the IC card 2 to the PC 1 (ST12). In response to the card repair response, the PC 1 displays the repair status of the IC card 2 (ST13).
[0021]
2 above. Will be described with reference to the flowchart shown in FIG.
First, when a failure occurs in the IC card 2, the PC 1 is used to access the host terminal 4 of the issuing company via the Internet 3 (ST20). At this time, the host terminal 4 confirms the identity (owner of the IC card) using the ID or the like. Next, an IC card diagnostic program is downloaded from the site of the host terminal 4 of the issuing company (ST21) and installed on the PC 1 (ST22).
[0022]
In this state, the PC 1 activates the installed IC card diagnostic program, and transmits an authentication trigger from the PC 1 to the host terminal 4 (ST23). Thereby, a command for authentication is transmitted from the host terminal 4 to the PC 1 (ST24). With this command, the PC 1 authenticates the host terminal 4 (ST25). As a result, a terminal authentication response is transmitted from the PC 1 to the host terminal 4 (ST26). In response to the terminal authentication response, the host terminal 4 authenticates the PC 1 (ST27). With this authentication, the host terminal 4 and the PC 1 share a key.
[0023]
In this state, the host terminal 4 transmits a card authentication command encrypted with the key to the PC 1 (ST28). The PC 1 decrypts the encrypted card authentication command from the host terminal 4 using the key (ST29) and transmits the command to the IC card 2 (ST30). With this command, the IC card 2 sends a card authentication response to the PC 1 (ST31). Then, the PC 1 encrypts with the above-mentioned key the response of the card authentication from the IC card 2 (ST32) and transmits it to the host terminal 4 (ST33). Thus, the host terminal 4 performs card authentication in response to the card authentication response from the IC card 2 (ST34).
[0024]
Next, a command for card diagnosis encrypted with the key is transmitted from the host terminal 4 to the PC 1 (ST35). The PC 1 decrypts the encrypted card diagnostic command from the host terminal 4 using the key (ST36), and transmits it to the IC card 2 (ST37). With this command, the IC card 2 performs card diagnosis (ST38). Thereby, a card diagnosis response is transmitted from the IC card 2 to the PC 1 (ST39). Then, the PC 1 encrypts the response of the card diagnosis from the IC card 2 with the key (ST40) and transmits it to the host terminal 4 (ST41). As a result, the host terminal 4 displays an abnormal state of the IC card 2 in response to a card diagnosis response from the IC card 2 (ST42).
[0025]
This display allows the host terminal 4 to know the contents of the abnormality of the IC card 2 and to determine the subsequent measures.
Further, the host terminal 4 transmits a repair or unlock command to the IC card 2 via the PC 1 depending on the content of the abnormal state of the IC card 2 (ST43, ST44). With this command, the IC card 2 performs repair or unlocking (ST45). Thereafter, a card repair response is transmitted from the IC card 2 to the host terminal 4 via the PC 1 (ST46, ST47). In response to the card repair response, the host terminal 4 displays the repair status of the IC card 2 (ST48).
The card diagnosis in step 38 includes, for example, a hardware diagnosis command and a lock diagnosis command.
[0026]
The hardware diagnostic command is for diagnosing the volatile memory 12, the coprocessor 14, and the nonvolatile memory 13. With respect to the volatile memory 12, the processor 11 writes "0" and "F" in all areas and reads them, thereby diagnosing whether reading and writing can be performed correctly. For the non-volatile memory 13 as well, the data is recorded and read by the processor 11 to determine whether the read / write operation can be performed correctly. The coprocessor 14 is diagnosed based on whether encryption and decryption are correctly performed.
[0027]
When the program is stored in the nonvolatile memory 13, the processor 11 downloads the program and diagnoses whether the program is correct.
The lock diagnosis command is for diagnosing the status of whether or not the password is locked.
[0028]
The processor 11 checks the status based on the lock diagnosis command, that is, determines whether or not the password is locked, based on whether or not the password lock flag is stored in the nonvolatile memory 13.
[0029]
In step 42, the host terminal 4 displays a diagnosis result such as an abnormality of the volatile memory 12, the coprocessor 14, and the non-volatile memory 13 in response to the card diagnosis response supplied from the IC card 2 via the PC 1. Has become. When there is no response, the host terminal 4 displays a diagnosis result of the abnormality of the processor 11. When the response locks the password, the host terminal 4 displays the lock of the password.
[0030]
As described above, when a failure occurs in the IC card, the type of the failure can be known, and it is possible to select an appropriate measure for the type of the failure.
In addition, when a failure occurs in the IC card, the failure can be remotely recovered from an external device online, or the failure can be recovered by downloading a failure recovery program from the external device.
[0031]
As a result, it is possible to check the contents of the abnormal or locked IC card on the PC (store terminal) at hand without sending it to the issuing company of the card. Is a system that can be repaired.
[0032]
In addition, two types of schemes have been proposed according to the security requirements of the system, but in either case, the reissue process can be simplified by simplifying the reissue process of the card issuing company (manufacturing company, system operating company). It is possible to reduce the cost required by the card issuing company for the reissue processing and the time during which the cardholder cannot use the card in the reissue processing.
[0033]
【The invention's effect】
As described in detail above, according to the present invention, it is possible to provide an IC card processing system that can notify a diagnosis result of an IC card that does not operate normally due to an abnormality, lock, or the like, and can further repair the IC card.
[Brief description of the drawings]
FIG. 1 is a diagram showing a schematic configuration of a card processing system for describing an embodiment of the present invention.
FIG. 2 is a block diagram for explaining the internal configuration of the IC card.
FIG. 3 is a flowchart illustrating a failure confirmation process.
FIG. 4 is a flowchart illustrating a failure confirmation process.
[Explanation of symbols]
1 PC, 2 IC card, 4 host terminal.

Claims (6)

In an IC card processing system including a terminal device handling an IC card having a control element and a data memory, and a host terminal connected to the terminal device via a line and managing the IC card,
The terminal device is
Request means for requesting the host terminal to download a diagnostic program;
Installation means for installing a diagnostic program supplied from the host terminal in response to the request by the request means;
Diagnostic means for diagnosing the IC card based on the diagnostic program installed by the installation means;
Output means for outputting a diagnosis result by the diagnosis means.
An IC card processing system characterized by the above-mentioned. 2. The IC card processing system according to claim 1, wherein a card holder is confirmed between the terminal device and the host terminal. In an IC card processing system including a terminal device handling an IC card having a control element and a data memory, and a host terminal connected to the terminal device via a line and managing the IC card,
The terminal device is
Request means for requesting the host terminal to download a diagnostic program;
Installation means for installing a diagnostic program supplied from the host terminal in response to the request by the request means;
Diagnostic means for diagnosing the IC card based on the diagnostic program installed by the installation means;
Output means for outputting a diagnosis result by the diagnosis means;
Repair means for repairing the IC card based on the output of the output means.
An IC card processing system characterized by the above-mentioned. 4. The IC card processing system according to claim 3, wherein a card holder is confirmed between the terminal device and the host terminal. In an IC card processing system including a terminal device handling an IC card having a control element and a data memory, and a host terminal connected to the terminal device via a line and managing the IC card,
The terminal device is
First transmission means for transmitting a request for diagnosis of an IC card to a host terminal;
Installing means for installing a diagnostic program supplied from the host terminal in response to the transmission of the first transmitting means;
A second transmitting unit that transmits a trigger to the host terminal when the diagnostic program is installed by the installing unit;
In response to the transmission by the second transmission means, the second transmission means transmits a command supplied from the host terminal to the IC card, and transmits a response from the IC card to the host terminal,
The host terminal
Third transmission means for transmitting a diagnostic program to the terminal device based on a request for diagnosis of the IC card from the terminal device;
In response to the transmission by the third transmission unit, when a trigger is supplied from the terminal device, a fourth transmission unit that transmits a diagnostic command to the terminal device, and in response to the transmission by the fourth transmission unit. Output means for outputting a diagnosis result supplied from the terminal device,
IC card,
Diagnostic means for diagnosing with a diagnostic command supplied from the terminal device;
A fifth transmission unit for transmitting a diagnosis result by the diagnosis unit to the terminal device as a response.
An IC card processing system characterized by the above-mentioned. The IC card processing system according to claim 5, wherein a card holder is confirmed between the terminal device and the host terminal.

Images