JP2005258885A - Ic card settlement system, and ic card settlement method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card settlement system for performing an IC card settlement processing with a simple device without disclosing security information of an IC card to an outer part. <P>SOLUTION: When the settlement processing using the IC card is performed, a host terminal 101 issues an instruction command, which includes an instruction code corresponding to information required for the settlement processing, by referring to a card processing table 106 arranged in a storage part 105, and then, transmits the command to an IC card processing terminal 201 via a communication I/F 107. The IC card processing terminal 201 performs access control with respect to the IC card via a reading/writing part 202 by acquiring card access information which is required in the settlement processing, by referring to a card access information table 207 which is arranged in the storage part 206 of the IC card processing terminal 201 corresponding to the received instruction command. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an IC (Integrated Circuit) card payment system and IC card payment method, and in particular, IC card payment processing can be performed with a simple mechanism without disclosing the security information of the IC card to the outside. The present invention relates to an IC card settlement system and an IC card settlement method.

  2. Description of the Related Art In recent years, various systems and apparatuses have been proposed that perform transaction processing such as settlement using an IC card in supermarkets, convenience stores, restaurants, shops, and the like.

  For example, a “product sales registration data processing system” disclosed in Patent Document 1 is disclosed as a system for performing transactions via this type of IC card.

  In the invention of this patent document 1, a product is recognized by a product sales registration data processing device, and transaction data based on the product is generated. Then, the transaction data is compared with the free space in the storage unit of the IC card by the IC card reader / writer, and if there is an area where the transaction data can be stored in the IC card by the comparison, the transaction data is stored in the storage unit of the IC card. When it is determined that there is no free space in the card storage unit, a receipt is issued so that the storage capacity of the IC card storage unit is not exceeded and transaction interruptions can be prevented. , Time and resources can be used effectively.

Recently, an IC card module (a processing board for exchanging IC cards with special encrypted data or managing access to data in the card) is used as a dedicated module for IC card processing. Thus, it has been proposed to ensure high security and to be incorporated into various devices and connected.
JP 2000-11259 A

  By the way, when an IC card payment system is configured using the IC card module, a manufacturer of a higher-level terminal such as a POS (Point Of Sales) register connected to the IC card module develops an IC card and an IC card module. Card security information (for example, information about where and what data is written in the storage area of the card, and information stored in the card from the card issuing company or service management company that manages the card processing security information) The access key necessary for accessing the area) is disclosed, and the manufacturer of the upper terminal itself has to develop relatively large dedicated software for processing the IC card each time. It is a burden.

  In addition, since it is beginning to be proposed that a plurality of payment methods (for example, electronic money (mainly prepaid type), credit, debit, etc.) can be selected with one IC card, the card processing becomes more complicated. ing.

  On the other hand, crimes such as card counterfeiting and fraudulent transaction operations are increasing, so for the above-mentioned card issuing companies and service management companies, at least the card security information is not disclosed to the manufacturer of the upper terminal, and the IC card module is used. There is also a desire to provide.

  Therefore, an object of the present invention is to provide an IC card payment system and an IC card payment method that can perform IC card payment processing with a simple mechanism without disclosing the security information of the IC card to the outside.

  In order to achieve the above object, the invention of claim 1 is a card access for accessing information necessary for the payment processing stored in the IC card in an IC card payment system for performing payment processing using an IC card. IC card module having a card access information table storing information and instruction code in association with each other, and an upper level having a card processing table storing information necessary for the payment processing and the instruction code in association with each other And the higher-level terminal issues an instruction command including an instruction code corresponding to the content of information necessary for the payment process with reference to the card processing table during the payment process and transmits the command command to the IC card module When the IC card module receives the command command from the host terminal, the card card module Access the information necessary for the settlement processing stored in the IC card using the card access information corresponding to the instruction code included in the instruction command with reference to the access information table and execute the instruction of the instruction command The execution result is returned to the host terminal.

  Further, the invention of claim 2 is the payment according to the invention of claim 1, wherein the upper terminal selects a payment process to be executed from a plurality of types of payment methods including credit payment, prepaid payment, debit payment and the like. A method selection unit is provided, and an instruction command including an instruction code corresponding to the content of information necessary for the payment process by the payment method selected by the payment method selection unit is issued with reference to the card processing table in the payment process And transmitting to the IC card module.

  The invention of claim 3 is the invention of claim 1 or claim 2, wherein the card access information is an authentication key necessary for accessing information necessary for the settlement processing stored in the IC card. It is characterized by including information.

  According to a fourth aspect of the present invention, in the first to third aspects of the invention, the card access information table is encrypted with an encryption key, and the IC card module encrypts the card access information table. Decryption means for decrypting with a decryption key paired with the key is provided.

  According to a fifth aspect of the present invention, there is provided an IC card payment method for performing a payment process using an IC card. Card access information and an instruction code for accessing information necessary for the payment process stored in the IC card are provided. An IC card module having a card access information table stored in association with each other, and a host terminal having a card processing table storing the contents of information necessary for the settlement processing and the instruction code in association with each other The upper terminal issues an instruction command including an instruction code corresponding to the content of information necessary for the payment process by referring to the card processing table during the payment process, and transmits the command command to the IC card module. When the module receives the command command from the upper terminal, the module refers to the card access information table. Then, using the card access information corresponding to the instruction code included in the instruction command, the information necessary for the settlement processing stored in the IC card is accessed to execute the instruction of the instruction command, and the execution result is A response is made to the upper terminal.

  According to the present invention, the card security information (storage area, access key, etc.) of the IC card is managed by the IC card module, and the host terminal (POS register) for the card payment processing is sent to the IC card processing terminal (IC card module). Since the information required for payment processing can be acquired from the IC card simply by sending an instruction code corresponding to the information required for payment processing, it is no longer necessary to disclose card security information to manufacturers that manufacture higher-level terminals. The confidentiality of card security information is increased.

  Further, even when a plurality of types of payment methods can be processed in the host terminal, it is possible to perform the payment process with a very simple process.

  Further, it is effective in preventing forgery of the IC card, and there is an effect that high security can be secured at the time of settlement processing.

  Embodiments of an IC card settlement system and an IC card settlement method according to the present invention will be described below in detail with reference to the accompanying drawings.

  FIG. 1 is a block diagram showing a schematic configuration of an IC card settlement system configured by applying the present invention.

  The IC card settlement system shown in FIG. 1 includes a host terminal (POS register) 101, an IC card processing terminal 201, and a center 301.

  Here, the host terminal 101 is, for example, a POS register installed in a store or the like that performs IC card payment using the IC card processing terminal 201. The upper terminal performs a settlement process of the sale when selling the product. If the settlement is a settlement using an IC card, the IC card settlement is controlled by sending a command command to the IC card processing terminal 201. To do. In addition, settlement processing by a plurality of settlement methods such as prepaid settlement by electronic money, credit settlement, and debit settlement is possible.

  The upper terminal 101 includes a display unit 102 for displaying data and prices related to products, an operation unit 103 for inputting data about products and selecting a payment method, a main control unit 104 that controls the upper terminal 101 as a whole, A storage unit 105 that stores and manages data, and a communication I / F 107 that performs communication processing with the IC card processing terminal 201 and the center 301 are provided. As will be described in detail later, the storage unit 105 has a card processing table 106 that stores the contents of information necessary for the settlement processing and a table number (instruction code, hereinafter referred to as a table number) in association with each other. Is provided. When the settlement method is selected by the operation unit (settlement method selection means) 103, the main control unit 104 corresponds to the content of information necessary for the settlement process by the settlement method selected with reference to the card processing table 106. Select a table number and issue an instruction command including a processing command (a so-called READ or WRITE command, which will be referred to as a processing command hereinafter) indicating the processing to be performed with the selected table number. The data is transmitted to the IC card processing terminal 201 (actually, an IC card module 203 described later).

  The IC card processing terminal 201 is a processing device that performs predetermined processing on the IC card in accordance with a command command from the upper terminal 101.

  The IC card processing terminal 201 includes a read / write unit 202 and an IC card module 203.

  The read / write unit 202 reads various information from the IC card in a non-contact manner and writes various information to the IC card.

  The IC card module 203 is a processing board that performs transmission / reception of information with the IC card and special encrypted data, and manages access to various information held by the IC card.

  The IC card module 203 includes a main control unit 204 that controls the entire IC card processing terminal 201, a communication I / F 205 that performs communication processing with the host terminal 101, and a storage unit 206 that stores and manages data. Is done. Although details will be described later, the card 206 is stored in the storage unit 206 in association with the card access information and the table number for accessing information necessary for the settlement processing stored in each storage area of the IC card. A table 207 is provided. When the main control unit 204 of the IC card module 203 receives the above-described command command from the upper terminal 101, the main control unit 204 refers to the card access information table 207 and uses the card access information corresponding to the table number included in the command command. The information necessary for the settlement processing stored in the IC card is accessed, the command included in the command command is executed, and the execution result is responded (transmitted) to the upper terminal 101.

  The center 301 is operated by an electronic money management company or a credit card company, and manages transactions. The center 301 also distributes an encryption key for encrypting the card access information table 207 provided in the storage unit 206 of the IC card module 203 and a decryption key for decrypting the table. To the terminal 201.

  FIG. 2 is a diagram showing an example of the card processing table 106 stored in the storage unit 105 of the upper terminal 101 and the card access information table 207 stored in the storage unit 206 of the IC card module 203.

  FIG. 2A shows an example of the card processing table 106 stored in the storage unit 105 of the upper terminal 101.

  2A, the card processing table 106 stores “table number” and “content” in association with each other. Here, as described above, the “table number” corresponds to an instruction code, and “content”, that is, a number assigned for each content of information necessary for settlement processing such as a customer number and a prepaid balance, When the information shown in “Content” is acquired or rewritten, the table number and the processing command are transmitted to the IC card processing terminal 201 as an instruction command.

  FIG. 2B shows an example of the card access information table 207 stored in the storage unit 206 of the IC card module 203.

  In FIG. 2B, the card access information table 207 stores “table number”, “area information”, and “key information” in association with each other. Here, the “table number” corresponds to the table number included in the command command from the host terminal 101 described above.

  In addition, “area information” indicates information on what data is written in the storage area in the IC card. The “key information” indicates information such as an access key necessary for accessing the storage area of the IC card.

  Here, by having the card access information table 207 having such a configuration, when the above command is received from the upper terminal 101, the “area information” and “key information” corresponding to the table number included in the command are included. ”(Corresponding to the above-mentioned card access information) can be used to access information stored in the storage area of the corresponding IC card and execute the command included in the command command.

  The card access information table 207 stored in the storage unit 206 of the IC card module 203 is decrypted using the decryption key distributed from the center 301 when the IC card processing terminal 201 is turned on and can be used. Become. When the power of the IC card processing terminal 201 is turned off, the card access information table 207 is encrypted using the encryption key distributed from the center 301.

  Thereby, even when the IC card processing terminal 201 is stolen when the power is turned off, the card security information is not leaked to the outside, and high security can be ensured.

  In this embodiment, the read / write unit 202 and the IC card module 203 are incorporated into the IC card processing terminal 201. However, the read / write unit 202 and the IC card module 203 of the IC card processing terminal 201 are connected to the upper terminal 101. You may make it the structure built in.

  FIG. 3 is a sequence chart showing a communication procedure between the upper terminal 101 and the IC card processing terminal 201 in the credit settlement process using the IC card.

  Here, the processing after credit settlement is selected as the settlement method by the operation unit 103 will be described.

  When a credit settlement process using an IC card is performed in the host terminal 101 when selling goods or the like, the main control unit 104 of the host terminal 101 refers to the card processing table 106 stored in the storage unit 105 to the IC card processing terminal 201. On the other hand, a command command including a processing command and a table number necessary for performing a credit settlement process using an IC card is issued and transmitted via the communication I / F 107.

  In credit settlement processing using an IC card, among the IC card information, “customer number”, “credit number”, “card expiration date”, and “cumulative point” are required. As the table number, “1”, “4”, “5”, “6” is selected from “table number” of the card processing table 106 shown in FIG. It transmits to the card processing terminal 201.

  When the IC card processing terminal 201 receives the command command including the processing command and the table number from the upper terminal 101 via the communication I / F 205, first, until the read / write unit 202 detects that the IC card is held up. The IC card is placed in a waiting state.

  When the IC card is held over, the IC card processing terminal 201 performs a mutual authentication process with the IC card by transmitting a card authentication command to the IC card.

  Here, the card authentication command is a command for confirming whether or not the IC card can be traded.

  By this mutual authentication processing, the IC card can be handled, and when a card authentication response (response to the card authentication command) is received from the IC card, the main control unit 204 of the IC card module 203 incorporated in the IC card processing terminal 201 , By referring to the card access information table 207 stored in the storage unit 206, using the “area information” and “key information” corresponding to the table number included in the command received from the upper terminal 101, the corresponding storage of the IC card The processing command included in the instruction command is executed by accessing the information stored in the area.

  In this case, since the processing command received from the upper terminal 101 is READ and the table numbers are “1”, “4”, “5”, “6”, the “table number” in the card access information table 207 is “1”. , “4”, “5” and “6” are referred to, and the corresponding area information and key information are acquired, thereby transmitting a card information read / write processing request to the IC card.

  As a result, the “customer number”, “credit number”, “card expiration date”, and “cumulative point” are received from the IC card as a card information response.

  Thereafter, the “customer number”, “credit number”, “card expiration date”, and “cumulative point” received from the IC card are transmitted to the upper terminal 101, whereby credit settlement processing using this IC card is performed.

  In FIG. 3, the credit settlement process using the IC card is shown. For example, in the prepaid settlement process using the IC card, among the IC card information, “customer number”, “prepaid balance”, “ Since “last use date” is required, the READ command is selected as the processing command, and “1”, “2”, and “3” are selected from the “table number” of the card processing table 106 shown in FIG. And transmitted to the IC card processing terminal 201.

  The subsequent processing is the same as the credit settlement processing using the IC card shown in FIG. 3 except that the card information received from the IC card is “customer number”, “prepaid balance”, and “last use date”. .

  FIG. 4 shows the operation of the IC card payment system according to the present invention shown in FIG. 3 in a flow format. For convenience of explanation, it is assumed that credit payment is selected as the payment method.

  First, a credit settlement selection / execution button is pressed on the operation unit 103 of the host terminal 101, and a settlement method is selected / executed (step S101).

  Next, as described above, the upper terminal 101 selects a table number corresponding to the content of the information necessary for processing in the credit settlement selected with reference to the card processing table 106, and selects the selected table number and information. An instruction command including a READ command for acquisition is issued and transmitted to the IC card processing terminal 201 (actually, the IC card module 203) (step S102).

  Then, the IC card processing terminal 201 that has received the command command from the upper terminal 101 receives a card holding request for prompting the user to hold the card, for example, a character or voice guidance by a display unit not shown or a voice output unit not shown. (Step S103), the card is placed in a waiting state (Step S104).

  Next, when it is detected that the card is held over (YES in step S104), the above-described IC card mutual authentication processing is performed (step S105).

  Here, if the mutual authentication of the IC card is NG (NO in step S106), the IC card processing terminal 201 executes error processing such as transmitting information indicating that the card authentication is NG to the upper terminal 101 ( In step S107), the host terminal 101 ends the process.

  On the other hand, if mutual authentication is OK (YES in step S106), the IC card processing terminal 201 refers to the card access information table 207, and "area information" corresponding to the table number included in the command received from the upper terminal 101 is displayed. And using the “key information”, the information stored in the corresponding storage area of the IC card is read and acquired (step S108), and this information is transmitted to the upper terminal 101 (step S109).

  Then, the upper terminal 101 executes credit settlement using the IC card information transmitted from the IC card processing terminal 201 (step S110), and ends this IC card settlement processing.

  Note that the execution of credit payment in step S110 is a known process, and therefore the description thereof is omitted here.

  According to such a configuration, it is not necessary to disclose the security information of the IC card, for example, what data is written in which storage area in the card to the maker that manufactures the upper terminal, and the IC card. It is possible to improve the security of settlement processing in

  In addition, since the IC card settlement process can be performed with a relatively simple mechanism, there is no need to create a new large-scale system from the beginning in order to increase security, and the cost can be reduced.

  Further, even when a plurality of types of payment methods can be processed by the host terminal, it is possible to perform the payment process with a very simple process.

  Further, in the IC card settlement system of this embodiment, the card access information table 207 is decrypted and encrypted when the IC card processing terminal is turned on / off, so that the IC card processing terminal 201 is turned off. Even in the case of theft, the card security information is not leaked to the outside, and high security can be ensured.

  The IC card settlement system and the IC card settlement method of the present invention are effective in increasing the secrecy of card security information and suppressing crimes such as forgery of cards and unauthorized transaction operations due to unauthorized acquisition of card security information. It can be used effectively in supermarkets, convenience stores, restaurants, etc. where payment processing is frequently performed.

It is a block diagram which shows schematic structure of the IC card payment system comprised by applying this invention. It is a figure which shows an example of the card access table provided in the card | curd process table provided in the high-order terminal, and the inside of an IC card module. It is a sequence chart which shows the communication procedure between a high-order terminal and an IC card processing terminal in the payment process using an IC card. FIG. 4 shows the operation of the IC card settlement system in the present invention shown in FIG. 3 in a flow format.

Explanation of symbols

101 Host terminal (POS register)
102 Display Unit 103 Operation Unit 104 Main Control Unit 105 Storage Unit 106 Card Processing Table 107 Communication I / F
201 IC card processing terminal 202 Read / write unit 203 IC card module 204 Main control unit 205 Communication I / F
206 Storage Unit 207 Card Access Information Table 301 Center

Claims (5)

In an IC card payment system that performs payment processing using an IC card,
An IC card module having a card access information table storing card access information and an instruction code in association with each other for accessing information necessary for the settlement processing stored in the IC card;
A host terminal having a card processing table that stores the content of information necessary for the payment processing and the instruction code in association with each other;
The upper terminal is
Issuing an instruction command including an instruction code corresponding to the content of information necessary for the payment process with reference to the card processing table during the payment process, and transmitting to the IC card module,
The IC card module is
When the command command is received from the higher-level terminal, the card access information table is referred to and necessary for the settlement process stored in the IC card using the card access information corresponding to the command code included in the command command. An IC card payment system characterized by accessing information, executing an instruction of the instruction command, and responding the execution result to the host terminal. The upper terminal is
A payment method selection means for selecting a payment process to be executed from a plurality of types of payment methods including credit payment, prepaid payment, debit payment, etc .;
An instruction command including an instruction code corresponding to the content of information necessary for the payment process by the payment method selected by the payment method selection means with reference to the card processing table in the payment process is issued to the IC card module. The IC card settlement system according to claim 1, wherein transmission is performed. The card access information is
The IC card settlement system according to claim 1 or 2, further comprising authentication key information necessary for accessing information necessary for the settlement processing stored in the IC card. The card access information table is
Encrypted with an encryption key,
The IC card module is
The IC card settlement system according to any one of claims 1 to 3, further comprising decryption means for decrypting the card access information table with a decryption key paired with the encryption key. In an IC card payment method for performing payment processing using an IC card,
An IC card module having a card access information table storing card access information and an instruction code in association with each other for accessing information necessary for the settlement processing stored in the IC card;
A host terminal having a card processing table that stores the content of information necessary for the payment processing and the instruction code in association with each other;
The upper terminal is
Issuing an instruction command including an instruction code corresponding to the content of information necessary for the payment process with reference to the card processing table during the payment process, and transmitting to the IC card module,
The IC card module is
When the command command is received from the higher-level terminal, the card access information table is referred to and necessary for the settlement process stored in the IC card using the card access information corresponding to the command code included in the command command. An IC card settlement method characterized by accessing information, executing an instruction of the instruction command, and responding the execution result to the host terminal.

Images