JP2020149534A - IC card - Google Patents

Abstract

To prevent unauthorized access to an IC module by non-contact IC card communication.SOLUTION: An IC card includes an antenna coil, a main IC module, a fingerprint sensor, and a fingerprint authentication IC chip. The fingerprint authentication IC chip includes a communication unit, fingerprint data storage means, and fingerprint collation means, and connects the antenna coil to the communication unit. The communication unit includes means for accumulating power received by the antenna coil in a power supply circuit and means for replying to a command of an external device received from the antenna coil. When the fingerprint collation means authenticates fingerprint data of a user, the power supply circuit is connected to the main IC module, so the main IC module is operated. The communication unit mediates communication between the main IC module and the external device.SELECTED DRAWING: Figure 2

Description

The present invention relates to an IC card, and more particularly to an IC card which prevents access to an IC module by unauthorized non-contact IC card communication and improves security.

IC cards are used in a wide range of fields such as credit cards, cash cards, transportation cards, passports and driver's licenses. An IC card is a card in which an IC module having an external communication terminal (contact terminal or antenna coil) is incorporated in a card made of a plastic plate. A processor such as a CPU or a coprocessor (for example, a cryptographic processing circuit) and a memory such as a ROM, RAM, or EEPROM are integrated in the IC module.

IC cards are classified into contact type and non-contact type according to the type of external communication terminal. The contact type IC card has an external communication terminal composed of a contact terminal, and the non-contact type IC card has an external communication terminal composed of an antenna coil.

The IC card can communicate with an external device (for example, a reader / titer) and receive power supply from the external device via a non-contact communication means such as a contact terminal or an antenna coil. For example, an IC module of an IC card performs a given process and returns a response in response to a command from the external device while power is being supplied from the external device via a non-contact communication means. Can be done.

On the other hand, an IC card having a non-contact communication means receives the power supply required for operating the mounted IC module from the reader / writer of the external device by electromagnetic induction and operates, so that the external device in operation operates. If the user unintentionally brings the IC card close to the reader / writer, the IC card may receive power and the IC module may automatically start and operate.

In addition, there is a risk that the IC module may be accessed by a third party due to unauthorized non-contact IC card communication by a reader / writer of a malicious third party's external device.

Therefore, conventionally, as in Patent Document 1, an IC card in which a fingerprint sensor is provided on the IC card and the user is authenticated by the fingerprint sensor so that only a legitimate user can access the IC card has been proposed.

JP-A-2018-151799

However, in the technique of Patent Document 1, the IC card is powered by a reader / writer of a malicious third-party external device to operate the IC module, and then the fingerprint authentication function of the IC module is invalidated. There is a problem that the IC module may be illegally accessed by using the skimming means.

Therefore, an object of the present invention is to solve the conventional problem and obtain an IC card having improved security by preventing an external device from accessing the IC module by unauthorized non-contact IC card communication. ..

The present invention is an IC card having an antenna coil, a main IC module, a fingerprint sensor, and a fingerprint authentication IC chip in order to solve the above problems.
The fingerprint authentication IC chip has a communication unit, a fingerprint data storage means, and a fingerprint verification means.
The antenna coil is connected to the communication unit,
The communication unit has a means for storing the electric power received by the antenna coil in the power supply circuit and a means for returning to a command of an external device received from the antenna coil.
When the fingerprint collating means authenticates the user's fingerprint data, the power supply circuit is connected to the main IC module to operate the main IC module, and the communication unit communicates between the main IC module and the external device. It is an IC card characterized by acting as an intermediary.

The present invention has the effect of obtaining an IC card capable of preventing an external device from accessing the data stored in the main IC module by unauthorized non-contact IC card communication.

Further, the present invention is the above-mentioned IC card, characterized in that the main IC module is a dual interface IC module provided with an external contact terminal for direct connection and communication with a terminal provided in an external device. It is an IC card to be used.

Further, the present invention is the above-mentioned IC card, characterized in that the fingerprint authentication IC chip is embedded inside the card base material and is not exposed on the surface.

According to the present invention, an IC card in which an antenna coil is connected to a communication unit of a fingerprint authentication IC chip, the fingerprint authentication IC chip operates a means for storing the power received by the antenna coil in a power supply circuit and a fingerprint sensor. It has a means for causing the antenna coil and a means for transmitting a reply signal to the command received from the antenna coil to the antenna coil.
The fingerprint authentication IC chip controls the power switch to connect the power supply circuit to the main IC module to operate the main IC module, and the communication unit is used to mediate the communication between the main IC module and the external device. You get a card.

As a result, the present invention has the effect of reducing the power consumed by the IC module of the IC card. In addition, it is possible to prevent an external device from accessing the data stored in the IC module by unauthorized non-contact IC card communication by a malicious third party, which has the effect of improving the security of the stored data in the IC module. ..

(A) It is a plan view of the IC card of the embodiment of this invention. (B) The same is a side sectional view. (C) The same is a partially enlarged view of the side sectional view. It is a block diagram which shows the internal structure of the IC card of embodiment of this invention. It is a flowchart which shows the processing procedure of embodiment of this invention.

Hereinafter, embodiments of the present invention will be described.

<First Embodiment>
FIG. 1 is a configuration diagram of the IC card 100 of the first embodiment. The IC card 100 has an antenna coil 1 as shown in the plan view of FIG. 1A, and connects the antenna coil 1 to the fingerprint authentication IC chip 30. It also has a fingerprint sensor 20 connected to the fingerprint authentication IC chip 30, a power supply circuit 40, and a main IC module 10.

The block diagram of FIG. 2 shows the internal hardware configuration of the IC card 100. The IC card 100 has a power switch 41 that connects the power circuit 40 to the main IC module 10. The power switch 41 is controlled to be ON / OFF by the fingerprint authentication IC chip 30, and controls the supply of electric power to the main IC module 10.

The communication unit 31 of the fingerprint authentication IC chip 30 of the IC card 100 receives power and communication data from the reader / writer 200 of the non-contact external device via the antenna coil 1.

The fingerprint authentication IC chip 30 stores the electric power received through the antenna coil 1 in the power supply circuit 40. Further, the fingerprint authentication IC chip 30 supplies power to the fingerprint sensor 20 to operate it, receives the fingerprint data of the user from the fingerprint sensor 20, and authenticates the fingerprint data.

When the fingerprint authentication IC chip 30 can authenticate the fingerprint data received from the fingerprint sensor 20, the power switch 41 is turned on to operate the main IC module 10 to which power is supplied.

(Structure of IC card 100)
As shown in the side sectional view of FIG. 1B, the IC card 100 is installed by wiring the antenna coil 1 to the antenna sheet 4 and connecting the fingerprint authentication IC chip 30 to the antenna coil 1 on the antenna sheet 4. To do. Further, the fingerprint authentication IC chip 30 and the power supply circuit 40 are electrically connected to the wiring 3 formed on the antenna sheet 4 and installed.

(Antenna sheet 4)
The antenna sheet 4 manufactures the antenna sheet 4 in which the pattern of the antenna coil 1 and the pattern of the wiring 3 are formed of a metal foil or the like on a base resin film. The base resin film of the antenna sheet 4 is made of a tough resin film having insulation and flexibility. For example, polyimide (PI), polyethylene terephthalate (PET), or polyethylene having a thickness of 15 μm to 200 μm is used. Use a material such as naphthalate (PEN).
(Card base material 5)

A card base material 5 made of a thermoplastic resin such as polyvinyl chloride (PVC) is laminated on both sides of the antenna sheet 4, and the antenna sheet 4, the fingerprint authentication IC chip 30, and the power supply circuit 40 are covered with the card base material 5 to cover the antenna. Create a built-in card substrate.

The card base material 5 having holes for mounting the main IC module 10 and the fingerprint sensor 20 is attached to the antenna sheet 4, or the card base material with a built-in antenna is counterbored (milled) to have a built-in antenna. The card base material is provided with a recess having a shape for mounting the main IC module 10 and the fingerprint sensor 20. The main IC module 10 and the fingerprint sensor 20 are installed in the recess.

As the main IC module 10, as shown in the plan view of FIG. 1A, a dual interface main IC module 10 having an external contact terminal 2 for directly connecting and communicating with a terminal provided in the external device is used. You can also.

The main IC module 10 and the fingerprint sensor 20 are electrically connected to the wiring 3 in the recess of the card base material 5, and the sensor portion of the fingerprint sensor 20 is exposed and installed. When using the main IC module 10 also provided with the external contact terminal 2, the main IC module 1 is placed on the surface of the card base material 5.
The external contact terminal 2 of 0 is also exposed.

When the main IC module 10 also provided with the external contact terminal 2 is used, a hole is formed in the antenna sheet 4 of the portion where the IC chip of the main IC module 10 is embedded, as shown in FIG. 1 (c). Is desirable.

Here, the fingerprint authentication IC chip 30 that controls the power switch 41 that connects the power supply circuit 40 to the main IC module 10 is embedded in the card base material 5 of the IC card 100 so as not to be exposed on the surface of the IC card 100. Therefore, the operation of the fingerprint authentication IC chip 30 cannot be illegally interfered with from outside the IC card 100.

(Fingerprint sensor 20)
The surface of the fingerprint sensor 20 is exposed on the IC card 100 and installed. The fingerprint sensor 20 receives electric power from the power supply circuit 40 and operates to detect the fingerprint of a finger abutting on the surface of the fingerprint sensor 20 exposed from the IC card 100 to obtain fingerprint data. The fingerprint sensor 20 detects the pressure-sensitive fingerprint sensor 20 that directly measures the unevenness of the fingerprint and converts it into fingerprint data, and the electrostatic capacitance between the sensor electrode provided for each tens of thousands of pixels and the fingerprint surface. A semiconductor-type fingerprint sensor 20 or the like that can be converted into fingerprint data can be used.

(Fingerprint authentication IC chip 30)
The fingerprint authentication IC chip 30 built in the IC card 100 includes a communication unit 31, a fingerprint data storage means 32 for storing the registered fingerprint data of the user, and a fingerprint data and fingerprint data storage means of the user received from the fingerprint sensor 20. It has a fingerprint collating means 33 for collating the registered fingerprint data of the user stored in 32.

(Communication unit 31)
The communication unit 31 of the fingerprint authentication IC chip 30 receives communication data from the reader / writer 200 of the external device from the antenna coil 1 that generates an induced voltage due to the electromagnetic field of the reader / writer 200 of the external device, and also receives electric power. receive.

The communication unit 31 rectifies the voltage induced in the antenna coil 1 by the electromagnetic field of the reader / writer 200 of the external device, and charges the power supply circuit 40 with electric power in addition to the power supply circuit 40. The fingerprint authentication IC chip 30 and the fingerprint sensor 20 are supplied with electric power from the power supply circuit 40 to operate.

Further, the communication unit 31 of the fingerprint authentication IC chip 30 provides a power supply circuit 40 to the main IC module 10 when the fingerprint authentication IC chip 30 receives a signal from the reader / writer 200 of the external device via the antenna coil 1. The power switch 41 to be connected is turned off to put the main IC module 10 in an inactive state, and a response process to a command of an external device is performed instead of the main IC module 10.

For example, when the communication unit 31 of the fingerprint authentication IC chip 30 of the IC card 100 receives a command (processing request) transmitted from the reader / writer 200 by the external device via the antenna coil 1, the communication unit 31 sends the main IC. The response process according to the received command is executed and the response data is returned to the external device without passing through the module 10.

(Fingerprint data storage means 32 and fingerprint collation means 33)
The fingerprint authentication IC chip 30 operates the fingerprint sensor 20 to acquire the fingerprint information of the user, and the fingerprint verification means 33 compares the fingerprint information with the fingerprint information stored in the fingerprint data storage means 32. , If both match, it is determined that the user authentication was successful. When the user authentication is successful, the fingerprint authentication IC chip 30 turns on the power switch 41, connects the power supply circuit 40 to the main IC module 10, and operates the main IC module 10.

(Power supply circuit 40)
The power supply circuit consists of a capacitor and a rechargeable battery. When the IC card 100 receives power from the antenna coil 1 by the electromagnetic field of the reader / writer 200 of the external device, the reader / writer 200 of the external device communicates with the fingerprint authentication IC chip 30 via the antenna coil 1. The unit 31 receives the electric power and stores the received electric power in the power supply circuit 40. Further, the main IC module 10 having the external contact terminal 2 can receive electric power directly from the external device, and the electric power can be stored in the power supply circuit 40.

(Power switch 41)
When the fingerprint authentication IC chip 30 succeeds in fingerprint authentication of the user, the power switch 41 is turned on and the power supply circuit 40 is connected to the main IC module 10. That is, the power supply circuit 40 is not connected to the main IC module 10 until the fingerprint authentication IC chip 30 succeeds in fingerprint authentication of the user.

This has the effect of reducing the power consumption of the main IC module 10. Further, until the fingerprint authentication IC chip 30 succeeds in fingerprint authentication of the user, the main IC module 10 is not connected to the power supply circuit 40 and does not operate, so that the external device cannot communicate with the main IC module 10. Therefore, it is possible to prevent an external device from accessing the data stored in the main IC module 10 by unauthorized non-contact IC card communication by a malicious third party, which has the effect of improving the security of the stored data in the main IC module 10. is there.

(Main IC module 10)
The main IC module 10 includes a control means 11 and a storage means 12, and executes a program of the IC card 100.

When the IC card 100 receives electric power from the antenna coil 1 by the electromagnetic field of the reader / writer 200 of the external device, the communication unit 31 of the fingerprint authentication IC chip 30 receives the electric power and stores it in the power supply circuit 40. Then, when the fingerprint authentication IC chip 30 succeeds in fingerprint authentication of the user, the power switch 41 is turned on, the power supply circuit 40 is connected to the main IC module 10, and the main IC module 10 is activated. Further, the main IC module 10 can also receive power directly from an external device through the external contact terminal 2.

The control means 11 of the main IC module 10 receives the communication data received from the reader / writer 200 of the external device by the communication unit 31 of the fingerprint authentication IC chip 30 from the wiring 3 connected to the signal terminal of the fingerprint authentication IC chip 30. ..

(Control means 11)
When the main IC module 10 receives electric power from the power supply circuit 40 and is activated, the control means 11 of the main IC module 10 communicates with an external device via the communication unit 31 of the fingerprint authentication IC chip 30 and the antenna coil 1. Then, data is transmitted and received to and from the external device according to the program of the IC card 100 written in the storage means 12 of the main IC module 10.

(Storage means 12 of the main IC module 10)
The storage means 12 of the main IC module 10 stores a program executed by the control means 11. The storage means 12 can include a non-volatile memory such as EEPROM (Electrically Erasable and Programmable ROM) or FeRAM, and / or a volatile memory such as DRAM or SRAM.

The storage area of the storage means 12 is divided into a system storage area 12a and a file storage area 12b.

(System storage area 12a)
The operating system (card OS) including the card manager 13 is written in the system storage area 12a of the storage means 12.

The operating system includes a card manager 13 that manages basic processing as an IC card, such as receiving instructions, transmitting responses, controlling access to data of a plurality of files in an application, and cryptographic processing. In addition, each application of the IC card 100 is operated on the operating system of the main IC module 10.

(File storage area 12b)
In the file storage area 12b of the storage means 12, a dedicated file DF (Dedicated File) and a basic file EF (Elementary File) related to the application program of the IC card 100 are arranged in a hierarchical structure under the main file MF (Master File). And remember.

The dedicated file DF is created for each application program such as a financial card, a transportation card, or an identification card installed in the main IC module 10. A file identifier, which is an application identifier, is assigned to the dedicated file DF.

(Operation procedure of IC card 100)
The operation procedure of the IC card 100 will be described below with reference to the flowchart of FIG.

(Step S1)
The user puts his finger on the fingerprint sensor 20 and holds the IC card 100 over the reader / writer 200 of the non-contact external device.

As a result, the voltage that the electromagnetic field of the reader / writer 200 of the non-contact external device induces to the antenna coil 1 is applied to the communication unit 31 of the fingerprint authentication IC chip 30.

(Step S1')
The communication unit 31 rectifies the voltage induced in the antenna coil 1 by the electromagnetic field of the reader / writer 200 of the external device, and charges the power supply circuit 40 with electric power in addition to the power supply circuit 40.

(Step S2)
The fingerprint verification means 33 of the fingerprint authentication IC chip 30 operates by being supplied with electric power from the power supply circuit 40 charged with electric power by the communication unit 31, and operates the fingerprint sensor 20 on which the user's finger is placed. Receive fingerprint data.

(Step S3)
The fingerprint verification means 33 of the fingerprint authentication IC chip 30 collates the user's fingerprint data acquired by the fingerprint sensor 20 with the user's fingerprint data held in the fingerprint authentication IC chip 30, thereby collating the user with the fingerprint data of the user. Authenticate your fingerprint data.

(Step S4)
If the fingerprint verification means 33 cannot perform the fingerprint authentication of the user, or if the fingerprint data of the user acquired by the fingerprint sensor 20 does not match the fingerprint data held in the fingerprint authentication IC chip 30, The communication unit 31 transmits an error response signal to the reader / writer 200 of the external device. Next, the process returns to step S2.

Here, when the user's finger is not placed on the fingerprint sensor 20, the fingerprint verification means 33 cannot authenticate the user's fingerprint, the communication unit 31 transmits an error response signal to the external device, and the main The IC module 10 is not connected to the power supply circuit 40 and is in an inactive state.

(Step S5)
When the fingerprint verification means 33 succeeds in fingerprint authentication of the user, the fingerprint authentication IC chip 30 turns on the power switch 41 that connects the power supply circuit 40 to the main IC module 10 to operate the main IC module 10.

(Step S6)
The main IC module 10 is activated when the power switch 41 is turned on by the fingerprint authentication IC chip 30 and connected to the power circuit 40.

The activated main IC module 10 takes over the communication from the fingerprint authentication IC chip 30 with the reader / writer 200 of the external device.

That is, the card manager 13 of the main IC module 10 mediates with the communication unit 31 of the fingerprint authentication IC chip 30 and communicates with the reader / writer 200 of the external device via the antenna coil 1 to receive a command from the external device. To do. Then, the card manager 13 transmits a response message as a result of executing the command received from the external device to the reader / writer 200 of the external device.

Then, the control means 11 of the main IC module 10 starts a transaction with the external device according to the program of the IC card 100 stored in the storage means 12.

By operating the IC card 100 as described above, the main IC module 10 is not connected to the power supply circuit 40 until the fingerprint verification means 33 of the fingerprint authentication IC chip 30 succeeds in fingerprint authentication of the user. It is in operation. During that time, the communication unit 31 of the fingerprint authentication IC chip 30 responds to the command data received from the reader / writer 200 of the external device and performs response processing.

As such, since the operation of the main IC module 10 is stopped, the reader / writer 200 of the external device not intended by the user cannot access the main IC module 10. As a result, a malicious third party cannot communicate with the user's IC card 100 in a non-contact manner using the reader / writer 200 of an unauthorized external device.

In this way, it is possible to prevent access to the main IC module 10 of the IC card 100 by unauthorized non-contact IC card communication by a third party, and it is possible to improve the security of the IC card 100.

1 ... Antenna coil 2 ... External contact terminal 3 ... Wiring 4 ... Antenna sheet 5 ... Card base material 10 ... Main IC module 11 ... Control means 12 ... Storage means 12a ... System storage area 12b ... File storage area 13 ... Card manager 20 ... Fingerprint sensor 30 ... Fingerprint authentication IC chip 31 ... Communication unit 32 ... Fingerprint data storage means 33.・ ・ Fingerprint verification means 40 ・ ・ ・ Power supply circuit 41 ・ ・ ・ Power supply switch 100 ・ ・ ・ IC card 200 ・ ・ ・ Reader / writer DF of external device ・ ・ ・ Dedicated file MF ・ ・ ・ Main file

Claims (3)

An IC card that has an antenna coil, a main IC module, a fingerprint sensor, and a fingerprint authentication IC chip.
The fingerprint authentication IC chip has a communication unit, a fingerprint data storage means, and a fingerprint verification means.
The antenna coil is connected to the communication unit,
The communication unit has a means for storing the electric power received by the antenna coil in the power supply circuit and a means for returning to a command of an external device received from the antenna coil.
When the fingerprint collating means authenticates the user's fingerprint data, the power supply circuit is connected to the main IC module to operate the main IC module, and the communication unit communicates between the main IC module and the external device. An IC card characterized by acting as an intermediary. The IC card according to claim 1, wherein the main IC module is a dual interface IC module including an external contact terminal for directly connecting and communicating with a terminal provided in an external device. .. The IC card according to claim 1 or 2, wherein the fingerprint authentication IC chip is embedded inside the card base material and is not exposed on the surface.

Images