JP2007048103A - Identification method for non-contact communication medium, and settlement device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an identification method for a non-contact type IC card, for certainly identifying a plurality of non-contact type IC cards. <P>SOLUTION: The identification of the non-contact type IC card needs two mutual authentication procedures of first mutual authentication and second mutual authentication between a CPU 6, and first and second cards C1, C2. First, the CPU 6 transmits a poling instruction so as to capture the first and second cards C1, C2, and the CPU 6 transmits a first mutual authentication instruction to the first card C1 when the first card C1 returns a poling response thereto. The first card C1 receives the first mutual authentication instruction to come into a mutual authentication standby state, and returns a first mutual authentication response. Thereafter, the CPU 6 newly transmits the poling instruction instead of successively transmitting a second mutual authentication instruction, and sees whether a poling response returns from the other, i.e., second card C2 or not, so as to identify the other card. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a non-contact communication medium identification method and a settlement apparatus, and in particular, when a plurality of non-contact communication media are used in combination, the non-contact communication medium identification method and this The present invention relates to a settlement apparatus to which the method is applied.

  In recent years, for example, a non-contact communication medium such as a non-contact type IC card (hereinafter referred to as a card) issued by a railroad company is used, and a non-contact settlement is performed by a settlement apparatus installed in a store or the like. Cards are being used in a wide range of fields such as leisure and distribution, as well as transportation.

  In general, this type of card is often used as a single card, but may be used in a state where two cards are stacked. For example, if you pass through a section of a card commuter pass (first card) and get off at a station other than the section of this card commuter pass, another card (second card) Are presented to the reader in a stacked state. At this time, the card system including the reading device (in this example, an automatic checkout machine) uses the second card to pay the charge for the transit section. In this way, convenience for the user is improved.

  This type of card is widely used not only as a ticket but also for distribution such as shopping at a store. There are cases where the card is held directly over the reader / writer unit, and there are cases where the card is used while being put in a wallet, bag, etc. taking advantage of non-contact. In this case, there is a possibility that cards issued by different business operators are mixed, and in this case, it is necessary to identify a card issued by the business operator and other cards.

As an identification method for identifying a plurality of cards as described above, a method according to a procedure as shown in FIG. 11 has been proposed (for example, see Patent Document 1).
FIG. 11 is an explanatory diagram of a conventional card identification method when two cards are used simultaneously.

As shown in the figure, based on a communication command from a CPU (Central Processing Unit) 6, the communication device 1a built in the reader / writer unit of the card communicates with two cards as follows. Execute. That is, when a polling command (a) is issued from the CPU 6 and a polling response (b) is returned, the first first card C1 is polled and connected, and then a mutual authentication command (c) is issued from the CPU 6. When the mutual authentication response (d) is returned, the mutual authentication with the first first card C1 is completed (e), and communication with the first card C1 is established. Then try re-polling. When a polling command (f) is issued from the CPU 6 and a polling response (g) is returned, the CPU 6 issues a mutual authentication command (h) from the CPU 6 because the polling connection is established with the second card C2. When the authentication response (i) is returned, mutual authentication with the second second card C2 is completed (j), and communication with the second card C2 is established. As a result, the CPU 6 can determine a plurality of cards.
JP 2000-276561 A (paragraph number [0042], FIG. 5)

  However, the above method is limited to the case where the issuers of the two cards are the same and legitimate, and there is a problem that other cards cannot recognize a plurality of cards.

  That is, in the above conventional method, a re-polling command is issued after a mutual authentication response with the first first card C1. Thereby, in the re-polling, the first card C1 does not return a polling response, and only the second second card C2 returns a polling response, so that mutual authentication with the second card C2 can be established thereafter. . However, when the first card C1 is issued by another business, the following problems occur.

FIG. 12 is an explanatory diagram of an example in which communication establishment fails in the case of cards with different operators.
As shown in the figure, for example, when the first card C1 is issued by another business operator, a polling response (b) is returned to the polling command (a) from the CPU 6, The mutual authentication response (d) in response to the mutual authentication command (c) from the CPU 6 is not returned (x mark on the line d). Accordingly, the polling command (e) is issued again from the CPU 6, but in this case, there is a possibility that the first card C1 returns the polling response (f). In this case, the mutual authentication from the CPU 6 is similarly performed. Even if the command (g) is issued, the mutual authentication response (h) is of course not returned (x mark on the h line). After all, in the worst case, there was a problem that neither card could establish communication.

  The present invention has been made in view of the above points, and provides a method for identifying a non-contact communication medium capable of reliably identifying a plurality of IC cards and a settlement apparatus to which this method is applied. For the purpose.

  In the present invention, in order to solve the above problem, a non-contact communication medium for identifying the non-contact communication medium by performing first and second mutual authentication between the CPU and the non-contact communication medium via a communication device. In the identification method, the step of transmitting a polling command from the CPU and the step of transmitting a first mutual authentication command from the CPU to the first non-contact communication medium that first responded to the polling command. And when a first mutual authentication response is returned from the first non-contact communication medium that has been in a mutual authentication standby state in response to the first mutual authentication command, a step of transmitting a re-polling command from the CPU; A non-contact communication medium different from the non-contact communication medium that is in a mutual authentication standby state depending on whether or not there is a polling response within a predetermined time from the transmission of the re-polling command. Identification method of the non-contact communication medium, characterized in that it comprises the steps of determining whether standing, is provided.

  Further, in a payment apparatus that performs payment using a non-contact communication medium identified by performing first and second mutual authentication between a CPU and a non-contact communication medium via a communication apparatus, the non-contact communication medium Between reader / writer means for reading and writing information, polling means for capturing the non-contact communication medium, and the non-contact communication medium after receiving a polling response from the non-contact communication medium by the polling means A mutual authentication unit that performs the first and second mutual authentications; and an identification unit that identifies the contactless communication medium based on an authentication result by the mutual authentication unit, wherein the mutual authentication unit includes the first mutual authentication. After performing the re-polling by the polling means to capture another non-contact communication medium, to perform the first mutual authentication by the mutual authentication means, When the polling response from the non-contact communication medium is not received, the second mutual authentication by the mutual authentication means is performed on all of the captured non-contact communication media and the authenticated non-contact communication There is provided a settlement apparatus in which the identification means reads or rewrites information by the reader / writer means with respect to a medium.

  According to such a non-contact communication medium identifying method and settlement apparatus, the second and second mutual authentications are performed so that re-polling for capturing the non-contact communication medium is performed during communication. All of the contactless communication media can be captured before mutual authentication is performed, which makes it possible to reliably identify a plurality of contactless communication media.

  The non-contact communication medium identification method and settlement apparatus of the present invention can reliably perform identification when a plurality of non-contact communication media are used in combination, so that only the non-contact communication medium issued by the operator is used. In addition, a non-contact communication medium issued by other than the business operator can be recognized, and communication with the non-contact communication medium issued by the business operator can be performed reliably. Therefore, there is an advantage that reliability and user convenience can be improved. In addition, since the number of contactless communication media can be identified in the middle of mutual authentication, speedy settlement processing can be realized by reducing the processing procedure compared to the method of identifying after mutual authentication is completed.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings, taking as an example a case where the present invention is applied to a settlement apparatus.
FIG. 1 is a block diagram of the settlement apparatus.

  As shown in the figure, the settlement apparatus includes a reader / writer unit 1 having a communication device 1a including a communication antenna, an LCD (Liquid Crystal Display) display unit 2 for displaying a monetary amount, a settlement start button, An input unit 3 such as an amount input key, a ROM (Read Only Memory) 4 for storing various programs, a RAM (Random Access Memory) 5 for storing various data, a control CPU 6, and an upper server 8 It is comprised by the communication interface 7 which communicates between. In particular, the ROM 4 stores a program that realizes functions corresponding to the polling unit, the mutual authentication unit, and the identification unit described in the claims. The program is expanded in the RAM 5 and executed by the CPU 6. .

FIG. 2 is an external view of the settlement apparatus.
In the settlement apparatus, the display unit 2, the reader / writer unit 1 with a built-in communication antenna, and the input unit 3 are provided on the front surface of the housing 10. When making payment by card, press the payment start button in the input unit 3, input the payment amount, and then hold the card over the reader / writer unit 1 in accordance with the guide by the display unit 2, so that the electronic money charged in the card is used. Settlement is performed. Next, the operation of the settlement apparatus will be described.

  3 is a flowchart showing the basic operation of the payment process, FIG. 4 is a flowchart showing the operation of the card identification process, FIG. 5 is a flowchart showing the operation of the multiple card process, and FIG. 6 is the operation of the single card process. FIG. 7 is an explanatory diagram of a card identification processing procedure.

  When a card user purchases a product at a store and pays with a card, in FIG. 3, first, the settlement process is started by pressing the settlement start button of the input unit 3 (step S <b> 1). Next, when the amount of payment is input through the input unit 3 (step S2), the amount is displayed on the display unit 2, and at the same time, a message such as “Please hold the card” is displayed (step S3). Here, when the card user holds the card over the reader / writer unit 1 (step S4), the settlement apparatus performs card identification processing (step S5).

  In the card identification process, the settlement apparatus establishes communication with the first and second cards C1 and C2 via the reader / writer unit 1. That is, as shown in FIGS. 4 and 7, a polling command (a) is first transmitted from the CPU 6 of the settlement apparatus to the communication apparatus 1a (step S6). Next, the CPU 6 determines whether or not there is a polling response (b) in response to this polling command (step S7). If there is no polling response (b), the CPU 6 returns to step S6 and transmits the polling command again. In step S7, if there is a polling response (b), the first mutual authentication command (c) is transmitted to the card that returned the polling response first (in this example, the first card C1) (step S8). . Upon receiving the first mutual authentication command (c), the first card C1 enters a mutual authentication standby state (d) and returns a first mutual authentication response (e) to the CPU 6.

  Subsequently, the CPU 6 transmits a polling command (f) (step S9). If a plurality of cards are held over the reader / writer unit 1, the card that has already returned the first mutual authentication response (e) (the first card C1 in this example) A card not responding to (f) and not in the mutual authentication standby state (second card C2 in this example) returns a polling response (g). Thus, the CPU 6 can reliably detect a plurality of cards by receiving a response to the re-polling command of the card (in this example, the second card C2), and thus can determine a plurality of cards. .

  In addition, when the CPU 6 puts a plurality of cards into the mutual authentication standby state, there is no response from the card for the polling command transmission, so in such a case, the CPU 6 terminates the card identification process due to a timer monitoring timeout. Thus, a mechanism for shifting to the next processing can be provided.

  That is, as shown in FIG. 4, a timer is started after the polling command (f) in step S9 (step S10), and it is determined whether or not a time-out has occurred (step S11). If not timed out, it is determined whether or not there is a polling response (step S12), the first mutual authentication command for the second card C2 is transmitted with the polling response (g) (step S13), and the number of detected sheets is determined. +1 is set (step S14), and the process returns to step S9.

  As described above, when a plurality of cards are held over the reader / writer unit 1, the detected number is set to +1 and the card (the second card C2 in this example) is in the mutual authentication standby state by the first mutual authentication command. Thus, the CPU 6 can easily detect even when there are three or more cards by repeating the process of receiving a polling response from the card in response to the next polling command.

  In FIG. 3 again, after the card identification process is completed, the CPU 6 determines whether or not there are a plurality of cards (step S15). If there is one card, the one-card process (step S16) described later is performed. In this case, the multiple card processing (step S17) described later is performed, and finally the remaining amount and a message “Thank you” are displayed on the display unit 2 (step S18), and the process is terminated.

  If it is determined in step S15 that the CPU 6 determines that the card is a single card, as shown in FIG. 5, the CPU 6 first sets the card in the mutual authentication standby state (in this example, the first card C1) to the second card. A mutual authentication command is transmitted (step S20). When the first card C1 receives the second mutual authentication command, the first card C1 enters a mutual authentication state and returns a response of the second mutual authentication to the CPU 6. The CPU 6 determines whether or not the mutual authentication is OK depending on whether or not there is a second mutual authentication response from the first card C1 (step S21). If the second mutual authentication is OK, the CPU 6 transmits a reading command to the first card C1 (step S22).

  When receiving the read command, the first card C1 responds with the card information of the first card C1. The CPU 6 transmits a write command in order to write the remaining amount obtained by subtracting the payment amount based on the card information of the first card C1, the payment log data, etc. into the card (step S23).

  When receiving the write command, the first card C1 rewrites the information in the card and returns a write response to the CPU 6. Subsequently, as described above, the CPU 6 displays the remaining amount and a message “Thank you” on the display unit 2 to notify the completion of the settlement (step S18), and the process is terminated.

  In step S21, if the CPU 6 does not respond to the second mutual authentication from the first card C1, it is determined that the mutual authentication is abnormal, and the process proceeds to step S37 in FIG. In order to tell that the card is held up, a message such as “Card cannot be used” is displayed on the display unit 2.

  If the CPU 6 determines that there are a plurality of cards in step S15, as shown in FIG. 6, the CPU 6 first transmits a second mutual authentication command for the first card C1 in the mutual authentication standby state ( In step S30, it is determined whether or not the mutual authentication is OK depending on whether or not there is a second mutual authentication response from the first card C1 (step S31). If the second mutual authentication is OK, the CPU 6 sends a read command to the first card C1, reads the card information from the first card C1 (step S32), sends a write command, Information in the card is rewritten (step S33).

  In step S31, when the CPU 6 does not receive the second mutual authentication response from the first card C1 and the second mutual authentication is not possible, or when the rewriting of the information in the card is completed in step S33, It is determined whether or not mutual authentication with all cards has been confirmed (step S34). If there is a card for which mutual authentication has not been confirmed, the CPU 6 performs the first mutual authentication (step S36) with respect to that card. Second mutual authentication is performed (step S30).

  After confirming the mutual authentication with all the cards by repeating the above process, the CPU 6 checks whether there is a card that has completed the mutual authentication (step S35), and if there is a card that has completed the mutual authentication. The CPU 6 displays a message such as “Thank you” for the remaining amount on the display unit 2 in order to inform the completion of the settlement (step S18). When there is no card for which mutual authentication has been completed, that is, when all cards are determined to be issued cards other than the business operator, the CPU 6 displays a message such as “Card cannot be used” on the display unit 2 (step S37). In this way, even when the CPU 6 holds a plurality of cards over the reader / writer unit 1, the CPU 6 can execute a read command and a write command for the plurality of cards in one transaction. Is also possible.

  According to the non-contact type IC card identification method of the present embodiment, a plurality of cards can be reliably identified, and not only cards issued by the business operator but also other issued cards can be recognized. Thus, communication with the card issued by the card operator can be reliably performed. As a result, reliability and user convenience are improved, and after identifying a plurality of sheets, in addition to the method shown in the above embodiment, the processing is stopped when a plurality of sheets are identified. It is possible to cope with various processing methods.

  In addition, since the number of cards can be identified during mutual authentication, the number of processing steps is reduced compared to the method of identifying after completion of mutual authentication. If it is other than the user's card, it is possible to notify the user to that effect, and by making a notification prompting re-holding, it is possible to continue the settlement, thereby improving the convenience for the user. In the above description, the target card is two, but it is possible to identify three or more cards.

Next, a specific example will be described for the first and second mutual authentication procedures, the state transition of each mode of the card, and the time slot.
FIG. 8 is an explanatory diagram of the mutual authentication procedure.

  As shown in the figure, the CPU 6 and the card (in this example, the first card C1) each hold a mutual key (mutual authentication keys Ka, Kb). The CPU 6 generates a random number Ra in order to perform mutual authentication on the card captured by polling. The CPU 6 transmits the encrypted signal (Ra) b obtained by encrypting the random number Ra with the mutual authentication key Kb on the first mutual authentication command.

  The first card C1 generates a random number Rb and mutually authenticates the encrypted signal (Rb) a obtained by encrypting the random number Rb with the mutual authentication key Ka and the encrypted signal (Ra) b received by the first mutual authentication command. The encrypted signal (Ra) a decrypted with the key Kb and further encrypted with the mutual authentication key Ka is transmitted on the first mutual authentication response. At this time, the first card C1 changes its own mode to the mutual authentication standby mode.

  The CPU 6 decrypts the encrypted signal (Ra) a of the received first mutual authentication response with the mutual authentication key Ka, and compares the obtained Ra with the random number Ra generated by the CPU 6 first. The CPU 6 determines that mutual authentication is abnormal when the comparison result is NG. When the comparison result of Ra is OK, the encrypted signal (Rb) a of the received first mutual authentication response is decrypted with the mutual authentication key Ka, and the obtained Rb is further encrypted with the mutual authentication key Kb The signal (Rb) b is transmitted on the second mutual authentication command.

  The first card C1 decrypts the encrypted signal (Rb) b received by the second mutual authentication command with the mutual authentication key Kb, and the obtained Rb is a random number Rb generated first by the first card C1. Compare. If the comparison result of Rb is NG, the process ends with the mutual authentication standby mode. When the comparison result of Rb is OK, the own mode is changed to the mutual authentication mode, and the authentication result OK is transmitted on the second mutual authentication response.

The CPU 6 determines the authentication result of the received second mutual authentication response. If it is OK, the CPU 6 determines that the mutual authentication is OK, and if it is NG, it determines that the mutual authentication is abnormal.
FIG. 9 is a diagram showing a list of state transitions in each mode of the card.

  The card has three modes, “Waiting for polling”, “Waiting for authentication”, and “Mutual authentication”. In the polling waiting mode, the polling command and the first mutual authentication command are commands that can be reacted. In the mutual authentication mode, the second mutual authentication command is a reactable command. In the mutual authentication mode, the command after mutual authentication is a reactable command.

  Here, the initial state (No. 1) of the card is a polling waiting mode. When the card is in the polling waiting mode and the first mutual authentication command is executed by the CPU 6 (No. 2), the card transits to the mutual authentication standby mode. When the card is in the mutual authentication standby mode (No. 3), when the second mutual authentication command is executed by the CPU 6, the card transits to the mutual authentication mode. When the card is in the mutual authentication mode (No. 4), the card can execute a command after mutual authentication by the CPU 6 (for example, a read / write command or the like).

FIG. 10 is a diagram illustrating time slots.
First, when the settlement start button of the input unit 3 is pressed and settlement processing is started, the CPU 6 transmits a polling command to the card via the communication device 1a. When the first and second cards C1 and C2 receive the polling command, a random number is generated. Next, the first and second cards C1 and C2 sequentially return responses to the communication device 1a in time slots assigned by random numbers in order to prevent response telegrams from colliding. After receiving each, the communication device 1a transmits a card polling response to the CPU 6. The CPU 6 checks the communication contents of the received card polling response and determines the card.

  In the above-described embodiment, an apparatus centered on settlement placed in a store or the like has been described, but it can also be applied to a vending machine.

It is a block diagram of a payment apparatus. It is an external view of a payment apparatus. It is a flowchart which shows the basic operation | movement of a payment process. It is a flowchart which shows operation | movement of a card identification process. It is a flowchart which shows operation | movement of a multiple card | curd process. It is a flowchart which shows the operation | movement of 1 card processing. It is explanatory drawing of a card | curd identification processing procedure. It is explanatory drawing of a mutual authentication procedure. It is a figure which shows the list of the state transition of each mode of a card | curd. It is a figure which shows a time slot. It is explanatory drawing of the identification method of the conventional card | curd when using two cards simultaneously. It is explanatory drawing of the example in which communication establishment fails in the case of a card | curd from which a provider differs.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Reader / writer part 1a Communication apparatus 2 Display part 3 Input part 4 ROM
5 RAM
6 CPU
7 Communication interface 8 Server 10 Housing C1 First card C2 Second card

Claims (5)

In the non-contact communication medium identifying method for identifying the non-contact communication medium by performing first and second mutual authentication between the CPU and the non-contact communication medium via the communication device,
Sending a polling command from the CPU;
Transmitting a first mutual authentication command from the CPU to a first non-contact communication medium that first responds to the polling command;
When a first mutual authentication response is returned from the first non-contact communication medium that has received the first mutual authentication command and is in a mutual authentication standby state, a step of transmitting a re-polling command from the CPU;
The CPU determines whether or not there is a non-contact communication medium different from the non-contact communication medium in the mutual authentication standby state depending on whether or not there is a polling response within a predetermined time from the transmission of the re-polling command. And steps to
A method of identifying a non-contact communication medium, comprising:   After the step of determining whether or not there is another non-contact communication medium, when there is no polling response within a predetermined time from the transmission of the re-polling command, the CPU transmits a second mutual authentication command, 2. The method of identifying a non-contact communication medium according to claim 1, further comprising a step of performing mutual authentication with the first non-contact communication medium by returning two mutual authentication responses. After determining whether said another non-contact communication medium exists,
When there is a polling response within a predetermined time from the transmission of the re-polling command, the CPU transmits the first mutual authentication command to the non-contact communication medium that has returned the polling response to enter the mutual authentication standby state. When the mutual authentication response is returned, and repeating the procedure of re-polling until the polling response is not returned within a predetermined time,
The CPU transmits a second mutual authentication command to the non-contact communication medium in the mutual authentication standby state, and performs a procedure for performing mutual authentication with the non-contact communication medium by returning a second mutual authentication response. Repeating for all contactless communication media in
The method for identifying a non-contact communication medium according to claim 1, further comprising:   4. The contactless communication medium identifying method according to claim 2, wherein when the second mutual authentication response is not returned, it is determined that the mutual authentication has failed. In a payment apparatus that performs payment by a non-contact communication medium identified by performing first and second mutual authentication between a CPU and a non-contact communication medium via a communication apparatus,
Reader / writer means for reading and writing information of the non-contact communication medium;
Polling means for capturing the contactless communication medium;
Mutual authentication means for performing the first and second mutual authentication with the non-contact communication medium after receiving a polling response from the non-contact communication medium by the polling means;
Identification means for identifying the contactless communication medium based on an authentication result by the mutual authentication means;
With
After the mutual authentication means performs the first mutual authentication, the polling means performs re-polling to acquire another non-contact communication medium, performs the first mutual authentication by the mutual authentication means, When no polling response is received from the contact communication medium, the second mutual authentication by the mutual authentication means is performed on all of the captured non-contact communication media, and the authenticated non-contact communication medium On the other hand, a settlement apparatus characterized in that the identification means reads or rewrites information by the reader / writer means.

Images