JP2009211318A - Recording medium processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a recording medium processing apparatus reducing the time required for authentication while flexibly responding to the general tendency of the market. <P>SOLUTION: An electronic money reload terminal is provided with: a memory 110 for storing a plurality of authentication keys for accessing data in a money card for each version; and a read/write control part 102 for accessing data in a set money card by using the authentication key stored in the memory 110 and reading/writing data when access is permitted. When access to the data in the money card is permitted, the read/write control part 102 temporarily stores the authentication keys of a version used for the access in a nonvolatile area 111 of the memory 110. When a new money card is set thereafter, data in the money card are accessed by using the authentication key of the version temporarily stored in the nonvolatile area 111 of the memory 110. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a recording medium processing apparatus, and more specifically, for example, a recording medium using an authentication key stored in a storage unit for a recording medium such as an IC card or a mobile phone equipped with a storage element such as an IC chip. The present invention relates to an improvement of a recording medium processing apparatus that accesses data in a disk.

  In recent years, for example, electronic money is recorded on a recording medium such as an IC card equipped with an IC chip or a mobile phone, and electronic money recorded on the recording medium is used to make payments for purchases of goods and provision of services. Payment systems are widespread.

  In such an electronic settlement system, a recording medium processing device called an electronic money charging machine is prepared, and deposit information (electronic money) corresponding to the inserted money is recorded through the recording medium processing device. Are charged (added) (see, for example, Patent Document 1 or Patent Document 2).

JP 2003-036466 A JP 2005-284359 A

  Incidentally, although not explicitly disclosed in Patent Document 1 and Patent Document 2, in the electronic money charging machine, when the recording medium is held in a predetermined communicable area, the recording medium and the electronic money charge are stored. Generally, an authentication process is performed with a machine. Such authentication processing is for determining whether or not access to data stored in an encrypted state in the recording medium is legitimate. Specifically, the data in the recording medium is accessed using a specific authentication key that the electronic money charger has in advance, and it is determined whether or not such access is valid as a result of data collation. Thereby, if access is permitted, the electronic money charging machine can perform processing such as reading or writing data in the recording medium.

  On the other hand, in recent years, in order to improve the security level, the recording medium is generally upgraded every predetermined time cycle, whereby a plurality of versions of the recording medium are distributed in the market.

  Thus, in order to cope with the situation where a plurality of versions of recording media are distributed in the market, the electronic money charging machine has a plurality of authentication keys for each version, and these authentication keys are arranged in a predetermined order, for example, By using the authentication keys of the older generation version in order, authentication processing is performed with the recording medium held in the communicable area.

  However, since the authentication keys are used according to a predetermined order, there are the following problems. In other words, even if the latest generation version of the recording medium is distributed most in the market, for example, if it is set to use the authentication key of the older generation version one after another, it will change flexibly in the market. There is a possibility that the time required for authentication may be lengthened without being able to cope with this.

  In view of the above circumstances, an object of the present invention is to provide a recording medium processing apparatus capable of reducing the time required for authentication while adapting to the market in a flexible manner.

  In order to achieve the above object, a recording medium processing apparatus according to claim 1 of the present invention includes a storage unit that stores a plurality of authentication keys for accessing data in a recording medium for each type, and a predetermined communicable area. Read / write control means for accessing data in the recording medium with respect to the held recording medium using an authentication key stored in the storage means, and reading and writing data when access is permitted In the recording medium processing apparatus, when the access to the data in the recording medium is permitted, the read / write control unit temporarily stores the type of authentication key used for the access in the storage unit, and then When a recording medium is newly held in a predetermined communicable area, data in the recording medium is accessed using an authentication key of a type temporarily stored in the storage means And wherein the door.

  According to a second aspect of the present invention, there is provided a recording medium processing apparatus according to the first aspect, wherein the read / write control means uses an authentication key of a type temporarily stored in the storage means. When the access to the data is denied, the authentication key stored in the storage means is determined in advance and used according to the order to access the data in the recording medium.

  According to the present invention, when access to the data in the recording medium is permitted, the read / write control unit temporarily stores the type of authentication key used for this access in the storage unit, and then performs predetermined communication. When the recording medium is newly held in the possible area, the data in the recording medium is accessed using an authentication key of a type temporarily stored in the storage means. The type of authentication key most used for authentication is stored in the storage means. Therefore, it is possible to shorten the time required for authentication while adapting to the market in a flexible manner.

  Exemplary embodiments of a recording medium processing apparatus according to the present invention will be described below in detail with reference to the accompanying drawings. In the following embodiments, an electronic money charging machine will be described as an example of a recording medium processing apparatus.

  1 and 2 schematically show an electronic money charging machine (recording medium processing apparatus) according to an embodiment of the present invention. The electronic money charging machine exemplified here is described as an IC card or a mobile phone which is a recording medium on which an IC chip is mounted when a depositing operation is performed (hereinafter, these recording media are simply referred to as “money cards”). The electronic money information is read and written by non-contact communication. In this embodiment, in particular, in addition to a charge process by cash settlement using banknotes, a charge process by credit settlement using a credit card or a charge process by debit settlement using a debit card is illustrated. . In the following, for convenience, the credit card and the debit card are collectively referred to as “settlement card”, and the settlement by the settlement card is collectively referred to as “card settlement”.

  As is apparent from the drawing, the electronic money charging machine includes a main body cabinet 1 and a front door 2. The main body cabinet 1 is configured in a box shape having an open front surface by appropriately combining steel materials. The front door 2 is disposed on one side of the main body cabinet 1 so as to open and close the front opening 1a of the main body cabinet 1, and completely closes the front opening 1a of the main body cabinet 1 when the front door 2 is closed. Is possible.

  A front door locking means 3 is provided between the main body cabinet 1 and the front door 2. The front door locking means 3 prevents the front door 2 from opening when the front door 2 is locked in a state where the front opening 1a of the main body cabinet 1 is closed. Although not explicitly shown in the figure, as the front door locking means 3, one that can be locked / unlocked by operating a key cylinder by a key operation can be applied.

  On the front surface of the front door 2, a display unit 4, an input unit 5, a bill insertion slot 6, a settlement card insertion slot 7, a print output slot 8, and a money card mounting table 9 are provided. The display unit 4 is for performing various guidance displays for a user or the like, and is constituted by a liquid crystal panel, for example. The input unit 5 is for inputting various types of information to the electronic money charging machine, and includes, for example, a push button switch and a keyboard. In the present embodiment, a touch panel type is applied as the display unit 4 described above, and various information can be input using the touch panel as the input unit 5.

  The bill insertion slot 6 is an opening for inserting a bill for cash settlement, and the settlement card insertion slot 7 is an opening for inserting a credit card or a debit card used for card settlement. The print output port 8 is for discharging recording paper printed by a printer (not shown). The money card mounting table 9 is a table-shaped part for mounting a money card to be charged with electronic money information. The money card mounting table 9 is configured such that the upper surface thereof becomes a communicable area of a reader / writer described later. In addition, the code | symbol 20 in FIG. 2 is a safe for accommodating the banknote inserted from the banknote insertion slot 6. FIG.

  FIG. 3 is a block diagram showing a control system of the electronic money charger described above. As shown in FIG. 3, the electronic money charging machine includes a communication processing unit 11, a deposit processing unit 12, a reader / writer 13, and a main control unit 100.

  The communication processing unit 11 is connected to the electronic money server 200, the credit server 300, and the debit server 400 via the Internet or a dedicated line, and performs data transmission / reception processing with these server devices 200, 300, 400. is there.

  The deposit processing unit 12 transmits the deposit information to the main control unit 100 when a deposit operation is performed by the user. Although not clearly shown in the figure, in the present embodiment, the deposit processing unit 12 includes a bill validator and a payment card reader. In the deposit processing unit 12, for example, when a bill is inserted from the bill insertion slot 6, the authenticity and denomination of the inserted bill are discriminated, and the discrimination result is transmitted to the main control unit 100 as cash deposit information. On the other hand, when a payment card is inserted from the payment card insertion slot 7 and a deposit amount is designated through the input unit 5, the record information of the settlement card is read, and the deposit amount from the input unit 5 is included in the read result. To the main controller 100 as card deposit information.

  The reader / writer 13 reads and writes data by non-contact communication with an IC chip mounted on the money card when the money card is mounted on the money card mounting table 9.

  The main control unit 100 performs processing according to a program given in advance, and comprehensively controls the operation of the electronic money charging machine according to input information from the deposit processing unit 12, the communication processing unit 11, the input unit 5, and the reader / writer 13. It is something to control. The main control unit 100 includes an operation setting unit 101, a read / write control unit 102, a charge processing unit 103, and a history management unit 104.

  The operation setting unit 101 sets operations that can be performed for each operator according to preset conditions, and displays them on the display unit 4 as a selection menu.

  The read / write control unit 102 reads data recorded on the money card through the reader / writer 13 and writes data through the reader / writer 13. More specifically, the read / write control unit 102 accesses the money card using a specific authentication key stored in advance in the memory 110, and when this access is permitted, the read / write control unit 102 records the money card through the reader / writer 13. Reads data.

  When the charge processing unit 103 receives the deposit information from the deposit processing unit 12 and confirms that the money card is mounted on the money card mounting table 9 through the read / write control unit 102, the above-described server devices 200, 300, 400 is executed as appropriate, and a write command is transmitted to the read / write control unit 102 in order to accumulate electronic money information corresponding to the deposit amount on the money card in accordance with the charge permission from the electronic money server 200. is there.

  Specifically, when cash deposit information is given from the deposit processing unit 12 in a state where the money card is placed on the money card mounting table 9, the charge processing unit 103 issues a charge request to the electronic money server 200. And waits for a charge permission from the electronic money server 200. During this time, the electronic money server 200 that has received the charge request from the electronic money charging machine determines whether or not the money card is genuine based on the money card identification information included in the charge request. If it is determined that there is, the charge permission is transmitted to the electronic money charging machine that is the transmission source of the charge request.

  On the other hand, when the card deposit information is given from the deposit processing unit 12 in a state where the money card is mounted on the money card mounting table 9, the charge processing unit 103, the server device 300, which is the payment card issuer, A settlement request is transmitted to 400, and a charge permission from electronic money server 200 is awaited. During this time, in the server apparatuses 300 and 400 that have received the settlement request from the electronic money charging machine, an authentication process is performed with the deposit processing unit 12. If the authentication determines that the request is a payment request using a regular payment card, a charge request is transmitted from the server device 300 or 400 to the electronic money server 200. The electronic money server 200 that has received the charge request from the server devices 300 and 400 determines whether the money card is genuine based on the money card identification information included in the charge request, as before. If it is determined that the payment is permitted, a charge permission is transmitted to the electronic money charging machine that is the transmission source of the settlement request.

  The history management unit 104 sequentially stores, in the memory 110, history data including a history of read / write processing with respect to the money card performed by the read / write control unit 102 and a deposit history acquired through the deposit processing unit 12.

  FIG. 4 is a flowchart showing the contents of processing that is repeatedly executed at predetermined cycle times in the main control unit 100 of the electronic money charger described above. Hereinafter, the operation of the electronic money charging machine will be described with reference to FIG.

  In the electronic money charger described above, when a power (not shown) is turned on, first, an operation group for the user is set by the operation setting unit 101 of the main control unit 100, and operations included in this operation group are operated. A menu is displayed on the display unit 4 (step S1). As a result, the user of the electronic money charging machine can select his / her desired operation from the operation menu displayed on the display unit 4 and can instruct this through the input unit 5.

  The main control unit 100 displaying the operation menu monitors whether or not there is an operation input from the user. When the charging process is selected (step S2: Yes), the authentication process and the charging process are performed (step S3, step). S4).

  FIG. 5 is a flowchart showing the contents of the authentication process shown in FIG. As a premise for the description of the authentication process, the electronic money charging machine may, for example, have three versions of authentication keys (that is, the oldest generation version 1 authentication key, the version 2 authentication key newer than version 1 and the latest generation). , Version 3 authentication key) is stored in the memory 110.

  In this authentication process, the main control unit 100 determines whether or not the authentication process is the first time, that is, whether or not it is the first activation (step S301), and in the case of the first activation, according to a predetermined order. The version 1 authentication key stored in the memory 110 is set as the authentication key A (step S301: Yes → step S302).

  On the other hand, when the activation is not the first time, that is, when the authentication process is performed many times, the authentication key of version n (n: 1 to 3) stored in the nonvolatile area 111 of the memory 110 will be described in detail later. Is set as the authentication key A (Step S301: No → Step S303). In the following, first, the process when it is the first activation in step S301 will be described, and then the case where it is not the first activation in step S301 will be described.

  The main control unit 100 that has set the version 1 authentication key as the authentication key A places the money card on the money card mounting table 9 by the reader / writer 13 through the read / write control unit 102 until a preset time elapses. It is determined whether or not it has been performed (step S304, step S305). When the charge process is selected in step S2, the display for starting the charge process is performed and the display for prompting the operation for placing the money card on the money card placing table 9 is performed. preferable. If the money card is not placed on the money card placing table 9 until the preset time elapses, or if it is not detected that the money card is placed through the reader / writer 13, the main control is performed. The unit 100 returns the procedure and ends the current process (step S304: No → step S305: Yes).

  When it is detected that a money card is placed on the money card placing table 9 (step S304: Yes), the read / write control unit 102 of the main control unit 100 is stored in the memory 110 and the authentication set in step S301 is performed. Data stored in the money card is accessed through the reader / writer 13 using the key A (version 1 authentication key) (step S306). If the access is permitted as a result of the access (step S307: Yes), the authentication key A (version 1 authentication key) used for the access is temporarily stored in the nonvolatile area 111 of the memory 110 (step S308). ). The read / write control unit 102 of the main control unit 100 that stores the authentication key A in the nonvolatile area 111 reads the recorded information from the money card by the reader / writer 13 (step S309), and then returns the procedure. To end the current process.

  When the access in step S306 is denied without being permitted (step S307: No), the read / write control unit 102 of the main control unit 100 determines whether the authentication key A (version 1 authentication key) is the latest one. It is confirmed whether or not (step S310). Here, since the authentication key A is the version 1 authentication key, the authentication key A is not the latest one, and the read / write control unit 102 of the main control unit 100 uses the version 2 authentication stored in the memory 110. A new key is set as an authentication key A (step S310: No → step S311).

  The read / write control unit 102 of the main control unit 100 that has set the version 2 authentication key as the authentication key A in step S311 repeats the processing of step S304 to step S306, and when access is permitted (step S307: Yes). The authentication key A (version 2 authentication key) is temporarily stored in the non-volatile area 111 of the memory 110, and the process of step S309 is performed. On the other hand, when access is denied (step S307: No), the read / write control unit 102 of the main control unit 100 checks whether or not the authentication key A (version 2 authentication key) is the latest one. However, since the authentication key A set as the authentication key A is a version 2 authentication key, the authentication key A is not the latest one, and the read / write control unit 102 of the main control unit 100 stores it in the memory 110. The stored version 3 authentication key is newly set as the authentication key A (step S310: No → step S311).

  Then, the read / write control unit 102 of the main control unit 100 that sets the version 3 authentication key as the authentication key A repeats the processing of step S304 to step S306, and when access is permitted (step S307: Yes), The authentication key A (version 3 authentication key) is temporarily stored in the nonvolatile area 111 of the memory 110, and the process of step S309 is performed. On the other hand, when access is denied (step S307: No), the read / write control unit 102 of the main control unit 100 checks whether or not the authentication key A (version 3 authentication key) is the latest one. However, since the one set as the authentication key A is the version 3 authentication key, the read / write control unit 102 of the main control unit 100 stores the version stored in the memory 110. One authentication key is newly set as the authentication key A (step S310: Yes → step S312), and the processing from step S304 described above is repeated.

  Next, when the authentication process is not the first activation, the read / write control unit 102 of the main control unit 100 performs the version n temporarily stored in the nonvolatile area 111 of the memory 110 in step S308 of the previous authentication process. When the authentication key (n: 1 to 3) is set as the authentication key A, the above-described processing of steps S304 to S306 is performed, and when access using the authentication key A is permitted (step S307). : Yes), the authentication key A (version n authentication key) is temporarily stored in the nonvolatile area 111 of the memory 110, and the process of step S309 is performed. On the other hand, when access is denied (step S307: No), the read / write control unit 102 of the main control unit 100 checks whether or not the authentication key A (version n authentication key) is the latest one. (Step S310). If the version n authentication key is a version 3 authentication key, the authentication key A is the latest one, and the read / write control unit 102 of the main control unit 100 stores the version stored in the memory 110. One authentication key is newly set as the authentication key A (step S310: Yes-> step S312), and the process after step S304 mentioned above is repeated. On the other hand, if the version n authentication key is a version 1 or version 2 authentication key, the one set as the authentication key A is not the latest one, and the read / write control unit 102 of the main control unit 100 stores it in the memory 110. The authentication key of version (n + 1), that is, the authentication key of version 2 or version 3, is newly set as the authentication key A (step S310: Yes → step S311), and the processing after step S304 described above is repeated.

  The main control unit 100 that has performed the authentication process described above performs a charging process thereafter. FIG. 6 is a flowchart showing the contents of the charge process shown in FIG. In this charging process, the charge processing unit 103 of the main control unit 100 determines whether or not the money card that has read the recorded information in step S309 can be read / written by the reader / writer 13 through the read / write control unit 102. Is determined (step S401). When it is determined that reading / writing cannot be performed by the reader / writer 13, the main control unit 100 returns the procedure and ends the current process (No in step S401).

  On the other hand, when it is determined that the reader / writer 13 can read and write, that is, when it is determined that the money card placed on the money card placing table 9 is normal (step S401: Yes), the main control unit 100 Displays a screen for depositing on the display unit 4 (step S402), and then waits for deposit until a preset time has elapsed (step S403, step S404). When the deposit operation is not performed by the set time, the main control unit 100 returns the procedure and ends the current process (step S403: No → step S404: Yes).

  On the other hand, when the deposit operation is performed by the user by the set time and the deposit information is given from the deposit processing unit 12 accordingly, the main control unit 100 appropriately processes the deposit information through the charge processing unit 103. As a result, a charge (settlement) request is transmitted to the server devices 200, 300, and 400 (step S405), and then a response reception from the server devices 200, 300, and 400 is awaited (step S406).

  When the response received from the server devices 200, 300, and 400 is a charge permission (step S 406: Yes → step S 407: Yes), the main control unit 100 transmits a write command to the read / write control unit 102 through the charge processing unit 103. Then, a process of writing the electronic money information in which the deposit amount is increased to the money card is performed (step S408). If the response from the server device 200, 300, 400 does not permit charging (step S406: Yes → step S407: No), the main control unit 100 returns the procedure and ends the current process.

  When the series of processes described above is completed, the main control unit 100 performs an update process of the history data 112 through the history management unit 104 (step S409). Specifically, in step S409, the main control unit 100 uses the history data in the memory 110 to record the history of read / write processing on the money card performed by the read / write control unit 102 and the history of payment acquired through the deposit processing unit 12 as described above. The process of sequentially adding to 112 is performed. The main control unit 100 that has finished the update processing of the history data 112 through the history management unit 104 returns the procedure.

  As described above, according to the electronic money charger, when the access to the data inside the money card is permitted, the read / write control unit 102 of the main control unit 100 authenticates the type used for this access. When the key A is temporarily stored in the non-volatile area 111 of the memory 110 and then a money card is newly placed on the money card mounting table 9, it is temporarily stored in the non-volatile area 111 of the memory 110. Since the authentication key A is used to access the data inside the money card, the authentication key of the version most used for authentication is stored in the nonvolatile area 111 of the memory 110 while the authentication process is repeated a plurality of times. Become. Accordingly, it is possible to shorten the time required for authentication while responding to changes in the market.

  In the above-described embodiment, the type for each version is described as the type of authentication key. However, the present invention is not limited to each version, and the type of authentication key may be the type for each payment brand. Absent.

  In the above-described embodiment, an example of performing data read / write processing by non-contact communication is illustrated, but it is not always necessary to perform data read / write processing by non-contact communication.

  In the embodiment described above, the authentication key A is stored in the nonvolatile area of the memory 110. However, in the present invention, the authentication key may be stored not in the nonvolatile area but in the volatile memory. I do not care. Moreover, in this invention, you may memorize | store only the kind for every version or every payment brand in the non-volatile area | region of a memory | storage means.

  In the embodiment described above, the authentication key of each version has been described as being stored in advance in the memory 110. However, in the present invention, the authentication key itself may be stored in the volatile memory or downloaded each time. good. According to this, the security level for the authentication key can be improved when the electronic money charging machine is stolen or the like, and it is preferable that the version or type information is left as it is when the power is restored. Therefore, there are advantages such as easy operation.

  As described above, the recording medium processing apparatus according to the present invention is useful for giving deposit information corresponding to inserted money to a money card held in a predetermined communicable area.

It is a perspective view which shows simply the electronic money charging machine (recording medium processing apparatus) which is embodiment of this invention. It is a perspective view which shows the state which moved the front door open in the electronic money charging machine shown in FIG. It is a block diagram which shows the control system of the electronic money charging machine shown in FIG. It is a flowchart which shows the processing content which the main control part shown in FIG. 3 implements. It is a flowchart which shows the processing content of the authentication process shown in FIG. It is a flowchart which shows the processing content of the charge process shown in FIG.

Explanation of symbols

4 Display Unit 13 Reader / Writer 100 Main Control Unit 102 Read / Write Control Unit 103 Charge Processing Unit 110 Memory 111 Nonvolatile Area

Claims (2)

Storage means for storing a plurality of authentication keys for each type for accessing data in the recording medium;
Access the data in the recording medium to the recording medium held in a predetermined communicable area using the authentication key stored in the storage means, and read and write the data when access is permitted In a recording medium processing apparatus comprising a read / write control means,
When the access to the data in the recording medium is permitted, the read / write control means temporarily stores the type of authentication key used for the access in the storage means, and then stores it in a predetermined communicable area. When a recording medium is newly held, data in the recording medium is accessed using an authentication key of a type temporarily stored in the storage means.   When the access to the data in the recording medium using the type of authentication key temporarily stored in the storage unit is denied, the read / write control unit uses the authentication key stored in the storage unit. The recording medium processing apparatus according to claim 1, wherein data in the recording medium is accessed using a predetermined order.

Images