JP2004341943A - Ic card processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card processing system capable of processing IC cards in a vehicle while securing security. <P>SOLUTION: The IC card processing system with its security secured by a server (4) and capable of processing an IC card (1) carried into a moving vehicle by a terminal (2) is provided with first authentication processing means (41, 43, 46) for authenticating the terminal (2) on the basis of an equipment ID code stored in the terminal (2) and an equipment ID code stored in the server (4), second authentication processing means (41, 43, 46) for authenticating a clerk's ID card on the basis of a clerk's ID code read out from a clerk's ID card and transmitted to the terminal (2) and a clerk's ID code stored in the server (4) and control means (41, 46) for controlling the limitation of IC card processing by the terminal (2) on the basis of the authenticated results of the first and second authentication means. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an IC card processing system that processes an IC card as a wireless communication medium.
[0002]
[Prior art]
In recent years, various services in transportation such as railways have been improved. For example, a technology is disclosed in which various services required by each passenger at that time are provided to each passenger riding a running train (Patent Document 1).
[0003]
Also, proposals have been made for improving the efficiency of in-vehicle ticket inspection. For example, there is disclosed a technology related to a train ticket inspection system including a plurality of ground systems connected to a network via a communication line and an in-train system installed in a moving train (Patent Document 2).
[0004]
[Patent Document 1]
JP-A-2001-222603
[0005]
[Patent Document 2]
JP-A-7-65207
[0006]
[Problems to be solved by the invention]
On the other hand, entrance and exit systems using IC cards have begun to spread in transportation systems such as railways. Along with this, it is desired to improve various services in a vehicle using an IC card and to improve the efficiency of a ticket inspection in a vehicle.
[0007]
However, the above-described conventional technology does not assume the use of an IC card, and has a problem in that it is not possible to receive various services (for example, over-the-counter settlement) and an in-car ticket using the IC card.
[0008]
More specifically, in order to process an IC card in a vehicle, an IC card processing terminal that can be carried by a staff member is required. However, such a terminal may be carried away because it is portable, and it is difficult to realize a system for processing an IC card in a vehicle for security reasons.
[0009]
SUMMARY OF THE INVENTION An object of the present invention is to provide an IC card processing system capable of processing an IC card in a vehicle while ensuring security, in view of the circumstances described above.
[0010]
[Means for Solving the Problems]
In order to solve the above problems and achieve the object, an IC card processing system according to the present invention is configured as follows.
[0011]
The present invention is an IC card processing system in which security is secured by a server and an IC card carried into a moving vehicle is processed by a portable terminal, wherein the portable terminal is wirelessly communicated between the portable terminal and the server. First authentication processing means for authenticating the portable terminal based on the device ID code stored in the portable terminal and the device ID code held in the server transmitted from the server, and a clerk ID by the portable terminal. Based on the clerk ID code read from the card, the clerk ID code transmitted from the portable terminal by wireless communication between the portable terminal and the server, and the clerk ID code held in the server, Second authentication processing means for authenticating the attendant ID card; and an authentication method based on an authentication result by the first and second authentication means. IC card processing system is characterized in that a control means for controlling the limit of the processing of the IC card according to type terminal.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0013]
FIG. 1 is a diagram showing an outline of an IC card processing system according to an example of the present invention. FIG. 2 is a block diagram showing a configuration of an IC card processing system according to an example of the present invention. As shown in FIGS. 1 and 2, the IC card processing system includes a card 1, a card processing terminal device 2, a relay device 3, a security server 4, and a train information system 5.
[0014]
The card 1 is carried by a passenger using a moving vehicle in a transportation system such as a railway or a bus. The card processing terminal device 2 is a portable terminal, and is carried by a staff member. The card processing terminal device 2 processes the card 1. The relay device 3 is installed in a moving vehicle. The relay device 3 can perform wireless communication with the card processing terminal device 2 and exchange various information. The security server 4 is a host device that is a higher-level device of the card processing terminal device 2 and is installed in a moving vehicle. The security server 4 can perform wireless communication with the relay device 3 and exchange various information. That is, the card processing terminal device 2 and the security server 4 can exchange various information via the relay device 3.
[0015]
The card 1 is, for example, a contactless wireless IC card. The card 1 includes a control unit 11, a memory 12, and a communication control unit 13. The control unit 11 includes a CPU and the like. The memory 12 is a nonvolatile memory such as an EEPROM. The memory 12 stores a card number unique to the card, expiration date information indicating the expiration date of the card, accumulated usage amount information, additional usage information due to excess credit or lost or stolen, usage log information, and the like. The communication control unit 13 performs wireless communication with an external device (the card processing terminal device 2). This card 1 may be a card corresponding to the advance payment processing of the use fare (a card capable of charging the use fare) or a card (credit card) corresponding to the postpay processing of the use fare. . The card 1 is a wireless IC card as described above, but the present invention is not limited to this. For example, a portable information terminal device such as a mobile phone having an IC card function may be used. In this case, the control unit 11, the memory 12, and the communication control unit 13 are embedded in the portable information terminal device.
[0016]
The card processing terminal device 2 includes a CPU 21, a memory 22, an output device 23, an input device 24, a communication device 25, and a card reading / writing device 26. The CPU 21 controls the overall control. The memory 22 functions as a work memory and stores various data. The output device 23 is, for example, a display or a printer. The input device 24 is, for example, a button, a switch, or a touch panel. The communication device 25 communicates with an external device (security server 4) via the relay device 3. The card reading / writing device 26 reads data from the card 1 and writes data to the card 1.
[0017]
The relay device 3 includes a control unit 31, a memory 32, a communication device 33, and a communication control unit 34. The control unit 31 controls the overall control. The memory 32 functions as a work memory and stores various data. The communication device 34 communicates with an external device (the card processing terminal device 2). The relay device 3 can perform wireless communication with both the card processing terminal device 2 brought into the vehicle and the card processing terminal device 2 taken out of the vehicle.
[0018]
The security server 4 includes a CPU 41, a memory 42, a magnetic disk device 43, an output device 44, an input device 45, and a communication device 46. The CPU 41 controls the overall control. The memory 42 functions as a work memory. The magnetic disk device 43 stores various data. For example, the magnetic disk device 43 records encryption data for processing the card, fare data, usage data generated when the card is used, device ID data, staff ID data, and the like. Since the encrypted data is secure information, the encrypted data is obtained by communication from the host device (train information system 5) when the power is turned on, and is deleted from the memory when the power is turned off. The encrypted data may be obtained from a memory card or the like. The output device 44 is, for example, a display or a printer. The input device 45 is, for example, a keyboard. The communication device 46 communicates with external devices (the card processing terminal device 2 and the train information system 5) via the relay device 3.
[0019]
Subsequently, with reference to FIG. 3, the authentication processing of the terminal and the authentication processing of the attendant will be described. These authentication processes will be described separately at the start of work and during work.
[0020]
First, an authentication process at the start of a job will be described.
[0021]
(1) The card processing terminal device 2 transmits the terminal-specific device ID code stored therein to the security server 4 via the relay device 3 and requests authentication.
(2) The security server 4 receives the device ID code, and authenticates the terminal based on the received device ID code and the device ID data held by the security server 4 (first authentication process). That is, the communication device 46 that receives the device ID code transmitted from the card processing terminal device 2, the magnetic disk device 43 that holds the device ID data, and the CPU 41 execute the terminal authentication process. The device ID data held by the security server 4 includes a device ID code and information on whether the terminal corresponding to the device ID code is usable (permitted or not permitted). If the device ID code transmitted from the card processing terminal device 2 does not match the device ID code included in the device ID data, authentication is NG, and use of the terminal is not permitted. Even in the case of a match, if the usability information corresponding to the matched ID code indicates non-permission, authentication is also NG, and use of the terminal is not permitted. If they match and the use permission information corresponding to the matched ID code indicates permission, the authentication is OK and the use of the terminal is permitted.
[0022]
(3) The card processing terminal device 2 receives the authentication result of the device ID code from the security server 4 via the relay device 3. If the result is authentication NG, the card processing terminal device 2 stops the subsequent operation. That is, the card processing terminal device 2 cannot process the IC card. If the result of the authentication is OK, then the person operating the card processing terminal device 2 is authenticated.
[0023]
(4) The security server 4 reads the staff ID code from the staff ID card via the card processing terminal device 2, and authenticates the staff based on the read staff ID code and the staff ID data held by the security server 4. (Second authentication process). That is, the communication device 46 that receives the clerk ID code transmitted via the card processing terminal device 2, the magnetic disk device 43 that holds the clerk ID data, and the CPU 41 perform the authentication process of the clerk. The clerk ID data held by the security server 4 includes a clerk ID code and valid information (valid, invalid) of the clerk ID code. If the clerk ID code transmitted via the card processing terminal device 2 does not match the clerk ID code included in the clerk ID data, authentication is NG, and use of the terminal is not permitted. Even if they match, if the valid information corresponding to the matching ID code indicates invalid, the authentication is also NG, and the use of the terminal is not permitted. If they match and the validity information corresponding to the matching ID code indicates validity, the authentication is OK and the use of the terminal is permitted.
[0024]
(5) If the authentication of the terminal and the authentication of the attendant are OK, the security server 4 creates an authentication code, stores it as authentication data, and notifies the corresponding card processing terminal device 2 of the authentication code. That is, the CPU 41 that generates the authentication code and the communication device 46 that notifies the card processing terminal device 2 of the authentication code notify the card processing terminal device 2 of permission to process the IC card. The authentication code is used by the authenticated terminal in authentication during business. For example, a valid condition can be set in the authentication code. The validity condition of the authentication code will be described later.
[0025]
(6) The card processing terminal device 2 receives the authentication result of the staff ID code from the security server 4 via the relay device 3. If the result is authentication NG, the card processing terminal device 2 stops the subsequent operation. That is, the card processing terminal device 2 cannot process the IC card. If the result is authentication OK, the card processing terminal device 2 becomes usable. That is, the IC card can be processed by the card processing terminal device 2. Further, when the authentication result is OK, the card processing terminal device 2 also receives the authentication code.
[0026]
Next, an in-service authentication process will be described.
[0027]
{Circle around (7)} After starting the business, the card processing terminal device 2 makes an authentication request within a fixed time (periodically), and transmits the device ID, the staff ID, and the authentication code received when the authentication is OK.
[0028]
(8) The security server 4 receives, via the relay device 3, the device ID, the staff ID, and the authentication code accompanying the authentication request from the card processing terminal device 2. The security server 4 re-authenticates the card processing terminal device 2 and the clerk based on the received device ID, clerk ID, and authentication code. That is, a comparison between the received device ID and the device ID included in the device ID data held by the security server 4 itself, a comparison between the received agent ID and the agent ID included in the agent ID data held by the security server 4 itself, By comparing the received authentication code with the authentication code held by the security server 4 itself, the card processing terminal device 2 and the attendant are re-authenticated. As a result of the re-authentication, if the authentication is NG, the authentication NG is returned to the card processing terminal device 2. If the authentication is OK, the updated new authentication code is returned to the card processing terminal device 2. The next re-authentication is performed based on the updated new authentication code.
[0029]
(9) When the card processing terminal device 2 receives the re-authentication OK, the use permission is extended, and the IC card can be processed continuously.
[0030]
Here, an operation example of the authentication code will be described. For example, a case will be described in which an authentication code used in authentication (re-authentication) during operation is variable according to train operation. The security server 4 acquires information such as a column number, a kilometer, and a driving direction from the train information system 5. The column number is the stop information of the train. The operation direction is information indicating the traveling direction of the train. The security server 4 sets operation information data based on information such as a column number, a kilometer, and an operation direction. The operation information data includes information such as a stop station and a stop order. If the authentication of the attendant is OK in the above-described processing, the security server 4 creates a valid authentication code for each station based on the operation information data.
[0031]
It is assumed that the stop station and the station order of a certain train are A station → B station → C station → D station. The authentication code between the stations at this time is assumed as follows.
Station A → Station B: Authentication code 1
Between station B and station C: Authentication code 2
Station C → Station D: Authentication code 3
If the authentication of the terminal at the start of the business is OK and the authentication of the staff ID card is OK, the card processing terminal device 2 can use the authentication code 1 valid between the station A and the station B. During this time, the card processing terminal device 2 becomes usable). A request for re-authentication is issued to the security server 4 based on the authentication code 1 valid between the station A and the station B before the train departs from the station A and stops at the station B. As a result of this re-authentication request, if the authentication is OK, a valid authentication code 2 is received between station B and station C. Thereby, the card processing terminal device 2 can be used until it arrives at the station C and departs from the station C. In the case of authentication NG, the card processing terminal device 2 cannot be used. During the time from departure from station B to stop at station C, the security server 4 issues a re-authentication request to the security server 4 based on an authentication code 2 valid between station B and station C by the same processing as that for station A → station B. Do. Thereafter, the above processing is repeated until the end point.
[0032]
Next, with reference to FIG. 4, a description will be given of a card processing restriction by the card processing terminal device 2. The IC card processing system of the present invention can limit the card processing function of the card processing terminal device 2 based on the state of the moving vehicle (running state, door open / close state, etc.).
[0033]
First, processing before operation will be described.
[0034]
{Circle around (1)} The security server 4 acquires information such as a column number, a kilometer, and an operation direction from the train information system 5. The column number is the stop information of the train. The operation direction is information indicating the traveling direction of the train.
[0035]
(2) The security server 4 sets operation information data based on information such as a column number, a kilometer, and an operation direction. The operation information data is data indicating a stop station and a stop order.
[0036]
Next, processing during operation will be described.
[0037]
{Circle around (3)} The security server 4 acquires information on the train operation speed and the door open / close state from the train information system 5 and holds the information as operation information data.
[0038]
{Circle around (4)} The security server 4 determines the running state of the train based on the information on the operating speed of the train and the open / closed state of the door. For example, if the speed is equal to or lower than a predetermined speed (or the speed is zero) and the door is open, it is determined that the train is stopped at the station, and the stop station is also determined from the operation information data. If the speed is equal to or higher than the predetermined speed and the door is closed, it is determined that the train is running.
[0039]
{Circle over (5)} The security server 4 restricts the card processing function of the card processing terminal device 2 based on the determination result of the running state. For example, when the vehicle is stopped, card processing related to entrance / exit processing is permitted. If the vehicle is running, card processing relating to the overtaking settlement process and the ticket inspection process (proper inspection) is permitted.
[0040]
{Circle around (6)} The security server 4 transmits to the card processing terminal device 2 the function information of the permitted card processing. That is, the CPU 41 instructs the card processing function to be restricted, and the communication device 46 transmits the instruction to the card processing terminal device 2. The card processing terminal device 2 can execute only a predetermined card processing function based on the transmitted instruction, that is, the function information.
[0041]
Next, with reference to FIGS. 5 and 6, the flow of both the above-described authentication processing and card processing restriction will be described. The flowchart shown in FIG. 5 is a continuation of the flowchart shown in FIG.
[0042]
Before operation, the security server 4 acquires information such as a column number, a kilometer, and an operation direction from the train information system 5, and sets operation information data from these information. For example, assume that station A → station B → station C → station D is set. Thereafter, when the security server 4 confirms the conditions of the terminal authentication OK and the staff authentication OK, the security server 4 transmits the authentication code 1 to the card processing terminal device 2 (step 101). The authentication code 1 transmitted here is an authentication code valid between station A and station B. In response, the card processing terminal device 2 receives the authentication code 1 (step 201). The card processing terminal device 2 that has received the authentication code 1 can use the card processing terminal device 2 until it departs from the station B by the authentication code 1.
[0043]
The security server 4 determines the running state of the train based on the information provided from the train information system 5. For example, when the security server 4 receives from the train information system 5 the information indicating that the door is open and the information of the zero speed (step 102), the security server 4 determines that the train is stopped at the station, and further operates the operation information data. Then, a stop station (for example, stop at station A) is also determined (step 103). At this time, the security server 4 restricts the card processing function according to the various states of the train (running state, door open / close state, etc.) by the function of restricting the processing of the IC card. Allow processing of cards by. For example, in this case, the card processing relating to the entrance / exit processing is permitted, and information on the current stop station (station A) is transmitted (step 104). In response to this, the card processing terminal device 2 can execute the restricted card processing function, and holds information on the current stop station (station A) (step 204).
[0044]
Subsequently, the security server 4 checks the running state of the train based on the information provided from the train information system 5. For example, when the security server 4 receives information indicating that the door is closed from the train information system 5 (step 105) and further receives information indicating that the vehicle is traveling at a predetermined speed or more (step 106) ( (Step 107, YES), the running information is set in the operation information data (Step 108). That is, the security server 4 recognizes that the vehicle is traveling from the station A to the station B.
[0045]
Along with this, the security server 4 restricts the card processing function according to various train states (running state, door open / close state, etc.) by the function of restricting the processing of the IC card, and then the card processing terminal device. 2 is allowed to process the card. For example, in this case, the card processing relating to the overtaking settlement processing and the ticket inspection processing (proper inspection) is permitted (step 109). In response, the card processing terminal device 2 can execute the restricted card processing function (step 209).
[0046]
After holding the information of the current stop station (station A), the card processing terminal device 2 requests a valid authentication code in a section after the next stop station (station B). Therefore, the card processing terminal device 2 periodically requests the security server 4 to re-authenticate. At this time, the card processing terminal device 2 transmits the device ID code, the staff ID code, and the latest authentication code received last time together with the request for re-authentication (step 210). Accordingly, the security server 4 receives the request for re-authentication, and also receives the device ID code, the staff ID code, and the latest authentication code received last time (step 110).
[0047]
At this time, the security server 4 re-authenticates the card processing terminal device 2 and the attendant based on the received device ID, attendant ID, and authentication code. That is, a comparison between the received device ID and the device ID included in the device ID data held by the security server 4 itself, a comparison between the received agent ID and the agent ID included in the agent ID data held by the security server 4 itself, By comparing the received authentication code with the authentication code held by the security server 4 itself, the card processing terminal device 2 and the attendant are re-authenticated. When the security server 4 determines that the authentication is OK as a result of the re-authentication (step 111, YES), the security server 4 transmits the authentication result (authentication OK) to the card processing terminal device 2 and updates the new authentication code. 2 is transmitted (step 112). At this time, the updated new authentication code 2 to be transmitted is, for example, a code valid between station B and station C. In response to this, the card processing terminal device 2 receives the authentication result (authentication OK) (step 211, YES), and receives the updated new authentication code 2 (step 212). The card processing terminal device 2 that has received the authentication code 2 can use the card processing terminal device 2 until it departs from the station C by the authentication code 2.
[0048]
Note that, as a result of the re-authentication, the security server 4 transmits an authentication result (authentication NG) to the card processing terminal device 2 when the authentication NG is determined (step 111, NO). In response to this, the card processing terminal device 2 receives the authentication result (authentication NG) (step 212, NO), stops the card processing function, and cannot process the card (step 213).
[0049]
Next, an example of a ticket inspection process will be described with reference to FIG. For example, it is assumed that the stop stations and the stop order are A station → B station → C station →... → Z station. That is, it is assumed that the operation information data created by the security server 4 includes the above-mentioned information on the stop station and the stop order.
[0050]
If the card 1 held by the passenger is held over the card processing terminal device 2 in a state where the card processing related to the ticket inspection process (proper inspection) by the card processing terminal device 2 is permitted, the card 1 can be inspected. For example, entry information is stored in the card 1, and the card processing terminal device 2 reads the entry information from the card 1. The entry information includes information such as an entry station and an entry time. In addition to the entry information read from the card 1, the appropriateness of boarding by the card 1 can be checked based on the operation information. The operation information includes information such as a stop station and a stop order, and also includes information on the current operation state (speed and door open / close state). When the card processing terminal device 2 receives and holds the operation information, the card processing terminal device 2 can perform an appropriate inspection. When the card processing terminal device 2 does not hold the operation information, the card processing terminal device 2 transmits the entry information to the security server 4, and the security server 4 uses the card 1 based on the entry information and the operation information. The adequacy of the ride can be checked.
[0051]
For example, it is assumed that the entrance information is determined to be the station A from the entrance information. It is assumed that the operation information indicates that the train is heading for Station A. In this case, the information indicating that the vehicle has stopped at Station A is not included in the operation information. From the above conditions, it can be determined that the boarding by the card 1 is illegal. In this case, it can be determined that there is a high possibility that the passenger who has entered from Station A is riding back. In this way, illegal riding can be prevented.
[0052]
Next, a process between the security server 4 and the card 1 via the card processing terminal device 2 will be described with reference to FIG.
[0053]
(1) After the authentication of the card processing terminal device 2 is completed, the security server 4 instructs the card processing terminal device 2 to poll the card 1 (command transmission).
[0054]
(2) The card processing terminal device 2 transmits polling to the card 1.
[0055]
(3) When the card 1 is held over the card processing terminal device 2, the card processing terminal device 2 receives a response from the card 1, and transmits the received response to the security server 4.
[0056]
(4) The security server 4 authenticates the card 1 via the card processing terminal device 2.
[0057]
(5) After the authentication of the card 1 is completed, the security server 4 transmits a command for reading data in the card 1 to the card 1 via the card processing terminal device 2. In response, the security server 4 receives the data in the card 1 via the card processing terminal device 2.
[0058]
{Circle around (6)} The security server 4 executes a predetermined process based on the received data. Further, the security server 4 transmits the processing result as write data to the card 1 via the card processing terminal device 2. Upon receiving the write result from the card 1, the security server 4 completes the processing for the card 1.
[0059]
As described above, according to the IC card processing system of the present invention, the following effects can be obtained.
[0060]
(1) The IC card processing system authenticates the terminal and the clerk ID card, and permits the terminal to process the IC card only when the terminal and the clerk ID card are recognized. Thereby, sufficient security can be ensured.
[0061]
(2) The IC card processing system restricts functions related to card processing according to various states of the vehicle (running state, door open / close state, etc.), and then permits the card processing by the card processing terminal device 2. For example, it is possible to distinguish between restrictions on functions related to card processing during stopping and during traveling.
[0062]
(3) The IC card processing system is a system that requires not only the authentication process at the start of the business but also the authentication process at regular time intervals. If the authentication process is not performed at regular time intervals, the authentication becomes invalid in accordance with the passage of time or the transition of the operation section, and the terminal cannot execute the IC card process. As a result, security can be further improved. For example, an effective authentication code is issued for each predetermined operation section, and the authentication code needs to be updated periodically (along with the transition of the operation section).
[0063]
It should be noted that the present invention is not limited to the above-described embodiment, and can be variously modified in an implementation stage without departing from the gist thereof. In addition, the embodiments may be implemented in appropriate combinations as much as possible, in which case the combined effects can be obtained. Furthermore, the above embodiments include inventions at various stages, and various inventions can be extracted by appropriate combinations of a plurality of disclosed constituent elements. For example, even if some components are deleted from all the components shown in the embodiment, the problem described in the column of the problem to be solved by the invention can be solved, and the effects described in the column of the effect of the invention can be solved. Is obtained, a configuration from which this configuration requirement is deleted can be extracted as an invention.
[0064]
【The invention's effect】
According to the present invention, it is possible to provide an IC card processing system capable of processing an IC card in a vehicle while ensuring security.
[Brief description of the drawings]
FIG. 1 is a diagram showing an outline of an IC card processing system according to an example of the present invention.
FIG. 2 is a block diagram showing a configuration of an IC card processing system according to an example of the present invention.
FIG. 3 is a diagram for explaining terminal authentication processing and clerk authentication processing;
FIG. 4 is a diagram for explaining card processing restrictions of the card processing terminal device.
FIG. 5 is a flowchart for explaining the flow of both authentication processing and card processing restriction.
6 is a flowchart for explaining the flow of both authentication processing and card processing restriction, and is a flowchart showing a continuation of the flowchart shown in FIG. 5;
FIG. 7 is a diagram illustrating an example of a ticket inspection process.
FIG. 8 is a diagram for explaining processing between the security server and the card via the card processing terminal device.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Card, 2 ... Card processing terminal device, 3 ... Relay device, 4 ... Security server, 5 ... Train information system, 11 ... Control part, 12 ... Memory, 13 ... Communication control part, 21 ... CPU, 22 ... Memory, 23 output device, 24 input device, 25 communication device, 26 card reading / writing device, 31 control unit, 32 memory, 33 communication device, 34 communication control unit, 41 CPU, 42 ... Memory, 43: magnetic disk device, 44: output device, 45: input device, 46: communication device

Claims (6)

An IC card processing system in which security is secured by a server and an IC card carried into a moving vehicle is processed by a portable terminal,
Based on the device ID code stored in the portable terminal transmitted from the portable terminal by wireless communication between the portable terminal and the server, and the device ID code held in the server, the portable terminal First authentication processing means for authenticating;
A clerk ID code read from a clerk ID card by the portable terminal, the clerk ID code transmitted from the portable terminal by wireless communication between the portable terminal and the server, and held by the server. Second authentication processing means for authenticating the clerk ID card based on the clerk ID code,
Control means for controlling a restriction on processing of the IC card by the portable terminal based on an authentication result by the first and second authentication means;
An IC card processing system comprising: 2. The IC card processing system according to claim 1, wherein the control unit limits a function related to processing of the IC card by the portable terminal according to various states of the moving vehicle. 3. The portable terminal, to which the processing of the IC card is permitted by the control means, inspects the adequacy of boarding by the IC card based on the entrance information stored in the IC card and the operation information of the moving vehicle. The IC card processing system according to claim 1, wherein: The control means transmits an authentication code to the portable terminal when permitting the portable terminal to process the IC card, and the device ID code transmitted at a predetermined timing from the portable terminal, 2. The IC card processing system according to claim 1, wherein the portable terminal and the attendant are re-authenticated based on the attendant ID code and the authentication code. The method according to claim 4, wherein the control unit transmits an updated authentication code to the portable terminal when permitting the portable terminal to process the IC card based on the re-authentication. IC card processing system. The authentication code transmitted to the portable terminal by the permission control means is a code valid for each predetermined operation section determined based on operation information of the moving vehicle, and is a transition of the current operation section. 6. The IC card processing system according to claim 5, wherein said code is a code that needs to be updated.

Images