JP2022164009A - Electronic information storage medium, processing method, and program - Google Patents

Abstract

To provide an electronic information storage medium, a processing method, and a program, which allow for preventing unauthorized use of functions provided by applications.SOLUTION: While in a state where the selection of a specific application via a specific interface is disabled, an IC card 1 enables selection of the specific application via the specific interface at the time user fingerprint data is registered.SELECTED DRAWING: Figure 2

Description

The present invention relates to technical fields such as IC cards capable of acquiring human biometric data.

Conventionally, an IC card with a fingerprint authentication function has been proposed. For example, Patent Document 1 discloses an RFID device including an antenna for receiving RF (Radio Frequency) signals, an RFID chip and a fingerprint authentication engine that are powered by contactless communication using the antenna. The fingerprint authentication engine is configured to compare the fingerprint read by the fingerprint reader with pre-stored fingerprint data.

Japanese Patent Publication No. 2017-538188

By the way, when the RFID device disclosed in Patent Document 1 is used as, for example, a credit card, contactless communication is performed by a third party in the process of delivering a newly issued credit card to the user by mail or other means. There is a possibility that functions (for example, payment functions) by applications within the device may be abused via

Therefore, the present invention has been made in view of such problems, and provides an electronic information storage medium, a processing method, and a program that can prevent unauthorized use of functions by applications. With the goal.

In order to solve the above problems, the invention according to claim 1 has one or a plurality of interfaces for receiving commands from an external device, and is equipped with an application for executing processing according to the commands. an electronic information storage medium, which is biometric data acquired from a user's body by a biometric data acquisition sensor and which is used for user authentication, is acquired from the biometric data acquisition sensor; registration means for registering the acquired biometric data in the electronic information storage medium; setting means for enabling selection of the application via the specific interface.

The invention according to claim 2 is characterized in that, in the electronic information storage medium according to claim 1, the specific interface is a contactless communication interface.

The invention according to claim 3 is the electronic information storage medium according to claim 2, wherein the electronic information storage medium has a plurality of interfaces including the contactless communication interface and the contact communication interface. and

The invention according to claim 4 is the electronic information storage medium according to any one of claims 1 to 3, wherein when the application selection command is received from the external device via the specific interface, , determination means for determining whether or not selection of the application via the specific interface is set to be possible; and when the determination means determines that selection of the application is set to be possible, and selection means for selecting the application.

A fifth aspect of the invention is the electronic information storage medium according to any one of the first to fourth aspects, wherein the application is a payment processing application.

According to the sixth aspect of the present invention, there is provided a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and loading an application for executing processing according to the commands. a processing method executed by a biometric data acquisition sensor, which is biometric data acquired from a user's body by a biometric data acquisition sensor and used for user authentication, is acquired from the biometric data acquisition sensor; a step of registering the biometric data obtained in the electronic information storage medium; and C. enabling selection of the application via the application.

According to a seventh aspect of the present invention, there is provided a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing processing according to the commands. a biometric data acquired from a user's body by a biometric data acquisition sensor, and used for user authentication, is acquired from the biometric data acquisition sensor; registration means for registering in the electronic information storage medium; and when biometric data is registered by the registration means in a state in which selection of the application via the specific interface is disabled, the specific interface is registered. It is characterized by functioning as setting means for enabling the selection of the application via the application.

According to the present invention, it is possible to prevent unauthorized use of functions by applications.

1 is a diagram showing an example of a schematic configuration of an IC card 1; FIG. FIG. 10 is a diagram showing an example of an operation sequence during fingerprint registration; FIG. 10 is a diagram showing an example of an operation sequence when selecting an application for payment processing; FIG. 10 is a diagram showing an example of an operation sequence during payment processing;

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below has a plurality of interfaces for receiving commands from an external device, and an IC card with a fingerprint authentication function (an electronic It is an embodiment when the present invention is applied to an information storage medium). Examples of such IC cards include credit cards and electronic money cards.

[1. Configuration and function of IC card 1]
First, referring to FIG. 1, the configuration and functions of an IC card 1 according to this embodiment will be described. FIG. 1 is a diagram showing an example of a schematic configuration of an IC card 1. As shown in FIG. As shown in FIG. 1, the IC card 1 comprises an antenna section 11, an I/O circuit 12, a fingerprint sensor 13, a fingerprint controller 14, and a main controller 15. FIG.

The antenna unit 11 receives radio waves (RF signals) transmitted from a reader/writer (RW) provided in an external device, and outputs the electric signals to the main controller 15 via the I/O circuit 12 . The antenna unit 11 also transmits an electric signal output from the main controller 15 via the I/O circuit 12 as radio waves. Thereby, non-contact communication is performed between the main controller 15 and the external device. Power can be supplied to each component of the IC card 1 by the voltage induced by the antenna section 11 .

The I/O circuit 12 is electrically connected to the main controller 15 and has eight terminals C1 to C8 defined by ISO/IEC7816, for example. For example, the C6 terminal is electrically connected to the antenna section 11 and can be used as part of a contactless communication interface for performing contactless communication with an external device. The C7 terminal can be electrically connected to an external device, and can be used as part of a contact communication interface that performs contact communication with the external device. Power can be supplied to each component of the IC card 1 from an external device via the C1 terminal.

The fingerprint sensor 13 (an example of a biometric data acquisition sensor) is mounted on the surface of the IC card 1, reads the fingerprint from the pad of the finger of the user using the IC card 1, and acquires the fingerprint data (an example of biometric data). . For example, the fingerprint sensor 13 has tens of thousands of electrodes and a contact surface with which the pad of a user's finger contacts. An amount of electric charge accumulates according to the proximity to the contact surface due to the unevenness of the pad of the finger (that is, the unevenness forming the fingerprint). The fingerprint sensor 13 acquires fingerprint data by detecting the amount of charge accumulated in each electrode and converting it into a numerical value (that is, a numerical value corresponding to the amount of charge). Note that the fingerprint sensor 13 may acquire fingerprint data by a method other than the above.

The fingerprint controller 14 and the main controller 15 are each configured with RAM (Random Access Memory), ROM (Read Only Memory), NVM (Nonvolatile Memory), CPU (Central Processing Unit), and the like. Fingerprint controller 14 and main controller 15 are electrically connected. The main controller 15 can transmit and receive commands/responses to and from external devices via the I/O circuit 12 . The fingerprint controller 14 and the main controller 15 may be composed of one IC chip, or may be composed of separate IC chips.

The fingerprint controller 14 drives the fingerprint sensor 13 to read the user's fingerprint and transmit the fingerprint data. As a result, the fingerprint controller 14 acquires the fingerprint data used for user authentication from the fingerprint sensor 13 as acquisition means of the present invention. Communication between the fingerprint sensor 13 and the fingerprint controller 14 is performed via, for example, SPI (Serial Peripheral Interface). Note that the fingerprint controller 14 may be incorporated within the main controller 15 .

The main controller 15 is an example of a computer in the present invention. The ROM or NVM of the main controller 15 stores an OS (Operating System), applications, and an API (Application Programming Interface). Here, the application includes a management application and a payment processing application. A management application includes the program of the present invention. Note that the NVM may be a flash memory or an "Electrically Erasable Programmable Read-Only Memory".

Also, the NVM includes payment data. The settlement data may be a settlement ID (identification information) unique to the user of the IC card 1 . In this case, the payment ID is linked to the user's payment information and managed by a predetermined payment processing server. The payment information includes information necessary for payment according to the payment method. Examples of settlement methods include electronic money settlement and credit card settlement. For example, if the payment method is credit card payment, the payment information includes data such as the credit card number, the name of the holder, and the expiration date necessary for credit card payment. If the payment method is electronic money payment, the payment information includes data such as an electronic money number and electronic value required for electronic money payment. Note that the NVM may include payment information as payment data.

In the IC card 1 configured as described above, the following two parameters (a) and (b) are set to True or False when the card is issued, for example.

Parameter (a): Disable selection of a specific application via the communication interface for contact when the fingerprint is not registered.
Parameter (b): Disable selection of a specific application via the contactless communication interface when fingerprints are not registered.

Here, the specific application is, for example, a payment processing application, which is set in advance when the card is issued. True or False associated with each parameter may be represented by a flag stored in the NVM of the main controller 15 . If one of the parameters (a) and (b) is set to True, a specific application cannot be selected on the contact communication interface or the non-contact communication interface when the fingerprint is not registered. Such a state is called a deactivated (deactivated) state of the contact communication or contactless communication interface. On the other hand, if both flags of parameters (a) and (b) are set to True, a specific application cannot be selected on either the contact communication interface or the non-contact communication interface when the fingerprint is not registered. Such a state is called a deactivated state of a particular application.

The main controller 15 functions as registration means, setting means, determination means, and selection means in the present invention by executing the program of the present invention. The main controller 15 writes the fingerprint data obtained from the fingerprint controller 14 into a predetermined area of NVM. As a result, the fingerprint data is registered (fingerprint registration) in the IC card 1 . When fingerprint registration is performed in a state in which selection of a specific application via a specific interface is disabled, the main controller 15 enables selection of a specific application via the specific interface. . As a result, the flag of either or both of parameters (a) and (b) is set to False.

Here, the specific interface is either or both of the contactless communication interface and the contact communication interface. Thus, at the timing when the user's fingerprint is registered in the IC card 1, the deactivated specific interface or specific application is activated. Further, when the main controller 15 receives a specific application selection command from an external device via a specific interface, the main controller 15 determines whether the specific application can be selected via the specific interface. If it is determined that the selection of the specific application is enabled, the specific application is selected.

Commands transmitted and received between the main controller 15 and external devices are composed of command APDUs (Application Protocol Data Units) defined by ISO7816, for example. A command APDU is composed of at least CLA, INS, P1 and P2. CLA indicates a command class (instruction class), and INS indicates a command code (instruction code). For example, INS identifies the type of command. P1 and P2 denote command parameters (instruction parameters). A response indicating the result of processing according to the command is sent back to the external device. Such a response is composed of, for example, a response APDU defined by ISO7816. The response APDU is composed of SW (status word), for example. Alternatively, the response APDU is composed of, for example, Data and SW.

[2. Operation of IC card 1]
Next, the operation of the IC card 1 will be explained. In the operation example below, the specific application is a payment processing application, the specific interface is a non-contact communication interface, and the contact communication interface is activated and the non-contact communication interface is disabled. An IC card 1 shipped in an activated state will be described as an example. That is, immediately after shipment of the IC card 1, only payment by contact communication can be performed. The shipped IC card 1 is delivered to the user by mail or other means.

(2.1. Operation at Fingerprint Registration)
First, with reference to FIG. 2, the operation during fingerprint registration will be described. FIG. 2 is a diagram showing an example of an operation sequence during fingerprint registration. In FIG. 2, the registration terminal 2 is an example of an external device having a reader/writer. It may be an installed fingerprint registration device. In the latter case, the user of the IC card 1 visits the place where the registration terminal 2 is installed to register his fingerprint. The user of the IC card 1 brings the IC card 1 closer to the reader/writer of the registration terminal 2 or mounts it while touching the fingerprint sensor 13 of the IC card 1 with his or her finger.

Since a constant power supply is required to write the fingerprint data into the NVM of the main controller 15, it is preferable that the IC card 1 and the registration terminal 2 are electrically connected to perform contact communication. However, if the IC card 1 can secure the power for writing the fingerprint data to the NVM of the main controller 15 by coupling the IC card 1 with the registration terminal 2 by electromagnetic induction (that is, by induced voltage), then the IC card 1 Non-contact communication may be performed with the registration terminal 2 .

In FIG. 2, the registration terminal 2 starts communication when it recognizes the IC card 1, and after the management application is selected in the main controller 15, it transmits a fingerprint registration command to the IC card 1 (step S1). A fingerprint registration command is transmitted to the main controller 15 via the I/O circuit 12 . Next, when the main controller 15 receives the fingerprint registration command from the registration terminal 2, the management application transmits a fingerprint reading command to the fingerprint controller 14 according to the fingerprint registration command (step S2).

Next, upon receiving the fingerprint reading command from the main controller 15, the fingerprint controller 14 transmits a fingerprint reading signal to the fingerprint sensor 13 according to the fingerprint reading command (step S3). Next, when the fingerprint sensor 13 receives the fingerprint reading signal from the fingerprint controller 14, the fingerprint sensor 13 reads the fingerprint from the pad of the user's finger using the IC card 1 according to the fingerprint reading signal (step S4), and stores the fingerprint data. is sent to the fingerprint controller 14 (step S5).

Next, upon receiving the fingerprint data from the fingerprint sensor 13, the fingerprint controller 14 transmits a response including the fingerprint data to the main controller 15 (step S6). Next, when the main controller 15 receives the response from the fingerprint controller 14, the management application registers the fingerprint by writing the fingerprint data included in the response into a predetermined area of the NVM (step S7).

Next, the main controller 15 enables selection of the payment processing application via the non-contact communication interface by the management application (step S8). That is, the flag of parameter (b) is set to False (that is, the value on NVM is rewritten). However, it is also possible not to set the flag of parameter (b) to False (that is, not to rewrite the value on NVM). That is, the parameter (b) is configured to restrict the behavior when the fingerprint is not registered, and after the fingerprint is registered, no restriction is imposed on the selection of applications regardless of whether the parameter (b) is True or False. Next, the main controller 15 transmits a response indicating normal termination (SW: 9000) to the registration terminal 2 via the I/O circuit 12 (step S9).

(2.2. Operation when selecting application for payment processing)
Next, with reference to FIG. 3, the operation when the payment processing application is selected will be described. FIG. 3 is a diagram showing an example of an operation sequence when an application for payment processing is selected. In FIG. 3, the settlement terminal 3 is an example of an external device having a reader/writer, and is, for example, a settlement device installed at a predetermined place such as a store. A user of the IC card 1 visits a predetermined place such as a store, for example, and brings the IC card 1 close to the reader/writer of the payment terminal 3 or inserts it when paying for a product or service.

In FIG. 3, the payment terminal 3 starts communication when it recognizes the IC card 1, and after a management application is selected by the main controller 15, a selection command (including an application ID) for selecting a payment processing application is issued. is sent to the IC card 1 (step S11). The selection command is sent to the main controller 15 via the I/O circuit 12 .

Next, when the main controller 15 receives the selection command from the payment terminal 3, it calls an API (function) for confirming the fingerprint registration status from the management application (step S12). The confirmation API confirms the fingerprint registration status, and the confirmation result is returned to the management application as a return value (return value of the function). In this operation example, the specific interface is used as a non-contact communication interface, so the flag of the parameter (b) is confirmed by the confirmation API, and True or False indicated by the flag is returned as a return value. Here, if the user's fingerprint has already been registered by the operation sequence shown in FIG. 2, False is returned as a return value.

Next, the main controller 15 determines whether or not fingerprint registration has been completed based on the confirmation result (True or False) of the fingerprint registration status (step S13). In other words, it is determined whether or not the payment processing application can be selected via the contactless communication interface. When the main controller 15 determines that the fingerprint has not been registered (the confirmation result is True) (step S13: NO), the process proceeds to step S14. On the other hand, when the main controller 15 determines that fingerprint registration has been completed (the confirmation result is False) (step S13: YES), the process proceeds to step S17.

In step S14, the main controller 15 calls a communication protocol confirmation API (for example, a function APDU.getProtocol( )) from the management application. Whether the communication at that time is contact communication or non-contact communication is confirmed by the confirmation API, and the confirmation result is returned to the management application as a return value. In other words, it is confirmed whether the selection command was received by contact communication or non-contact communication, and the confirmation result is returned as a return value.

Next, the main controller 15 determines whether or not the current communication is non-contact communication based on the confirmation result of the communication protocol (step S15). When the main controller 15 determines that the current communication is non-contact communication (step S15: YES), the main controller 15 transmits a response indicating abnormal termination to the settlement terminal 3 via the I/O circuit 12 (step S16). When the payment terminal 3 receives a response indicating abnormal termination, it does not proceed to payment processing. On the other hand, when the main controller 15 determines that the current communication is not non-contact communication (that is, contact communication) (step S15: NO), the process proceeds to step S17.

In step S17, the main controller 15 selects a payment processing application. As a result, even if the user starts using the IC card 1 without registering the fingerprint data (for example, forgetting to register) after receiving the IC card 1, if the current communication is contact communication, the IC card can be used. Settlement by 1 becomes feasible. Next, the main controller 15 transmits a response indicating normal termination (including FCI (File Control Information)) to the settlement terminal 3 via the I/O circuit 12 (step S18). When the payment terminal 3 receives a response indicating normal termination, the payment terminal 3 proceeds to payment processing.

(2.3. Operation during payment processing)
Next, with reference to FIG. 4, operations during payment processing will be described. FIG. 4 is a diagram showing an example of an operation sequence during payment processing. It should be noted that the operation during the settlement process described below is based on the premise that fingerprint registration has been performed according to the operation sequence for fingerprint registration shown in FIG. In FIG. 4, when the settlement terminal 3 starts settlement processing, it transmits a settlement command to the IC card 1 (step S22). The payment command is sent to the main controller 15 via the I/O circuit 12 .

Next, when the main controller 15 receives the payment command from the payment terminal 3, the payment processing application transmits a fingerprint reading command to the fingerprint controller 14 (step S23). Next, upon receiving the fingerprint reading command from the main controller 15, the fingerprint controller 14 transmits a fingerprint reading signal to the fingerprint sensor 13 according to the fingerprint reading command (step S24). Next, when the fingerprint sensor 13 receives the fingerprint reading signal from the fingerprint controller 14, the fingerprint sensor 13 reads the fingerprint from the pad of the user's finger using the IC card 1 according to the fingerprint reading signal (step S25), and stores the fingerprint data. to the fingerprint controller 14 (step S26). Next, upon receiving the fingerprint data from the fingerprint sensor 13, the fingerprint controller 14 transmits a response including the fingerprint data to the main controller 15 (step S27).

Next, when the main controller 15 receives the response from the fingerprint controller 14, it acquires the fingerprint data from the response and the registered fingerprint data from the NVM by the payment processing application (step S28). Next, the main controller 15 compares the fingerprint data obtained from the response with the fingerprint data obtained from the NVM by using the payment processing application, and determines whether the degree of matching between the two is a threshold value or more (for example, if both fingerprint data match (step S29). That is, user authentication is performed by the payment processing application. When the main controller 15 determines that the degree of matching between the two is not equal to or greater than the threshold value (step S29: NO), the main controller 15 transmits a response indicating abnormal termination to the settlement terminal 3 via the I/O circuit 12 as user authentication failure ( step S30). When the payment terminal 3 receives a response indicating abnormal termination, it stops the payment process. On the other hand, when the main controller 15 determines that the degree of matching between the two is equal to or greater than the threshold (step S29: YES), the process proceeds to step S31 as user authentication success.

In step S31, the main controller 15 acquires payment data from the NVM using the payment processing application. Next, the main controller 15 uses the payment processing application to send a response indicating normal termination (including payment data) to the payment terminal 3 via the I/O circuit 12 (step S32). When the payment terminal 3 receives a response indicating normal termination, it acquires payment data from the response, accesses the payment processing server as necessary, and uses the payment data to pay for the product or service. Execute the settlement to charge the user with

As described above, according to the above embodiment, in a state in which selection of a specific application via a specific interface is disabled, an Since it is configured to enable selection of a specific application, it is possible to prevent unauthorized use of the function of the application.

In the above embodiment, an IC card with a fingerprint authentication function that has a plurality of interfaces for receiving commands from an external device and that is equipped with a specific application for executing processing according to the commands is described. Although an example in which the present invention is applied has been described, there is only one interface (for example, a contactless communication interface) for receiving commands from an external device, and a specific interface for executing processing according to the command. The present invention can also be applied to an IC card equipped with an application and having a fingerprint authentication function. For example, the present invention can be applied to an IC card having only contactless communication functions or an IC card having only contact communication functions. In this case, the application cannot be selected until the user's fingerprint data is registered in the IC card. If such an application is a payment processing application, payment processing cannot be performed. In other words, payment by the IC card cannot be performed at all until the fingerprint data is registered, and payment by the IC card can be performed simultaneously with the registration of the fingerprint data. Also, the specific application may be an application other than the payment processing application (for example, an application for viewing confidential information). Further, in the above embodiment, an example in which an IC card is the electronic information storage medium of the present invention has been described, but the main controller 15 (or an IC chip constituting the main controller 15) is the electronic information storage medium of the present invention. It may be a medium.

Further, in the above embodiment, the case where the fingerprint sensor, which is an example of the biometric data acquisition sensor, is mounted on the IC card 1 has been described as an example. is applicable. In this case, the fingerprint sensor is installed at a predetermined place such as a store, and is capable of communicating with the IC card 1 . In the above embodiment, fingerprint data was used as biometric data used for user authentication. The iris of the user's eye may be acquired as biometric data, and the present invention can be applied in such a case as well.

1 IC card 2 Registration terminal 3 Payment terminal 11 Antenna unit 12 I/O circuit 13 Fingerprint sensor 14 Fingerprint controller 15 Main controller

Claims (7)

An electronic information storage medium having one or more interfaces for receiving a command from an external device and loaded with an application for executing processing according to the command,
an acquisition means for acquiring, from the biometric data acquisition sensor, biometric data acquired from a user's body by a biometric data acquisition sensor and used for user authentication;
a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium;
A setting for enabling selection of the application via the specific interface when biometric data is registered by the registration means in a state in which selection of the application via the specific interface is disabled. means and
An electronic information storage medium comprising: 2. An electronic information storage medium according to claim 1, wherein said specific interface is a contactless communication interface. 3. The electronic information storage medium according to claim 2, wherein said electronic information storage medium has a plurality of interfaces including said contactless communication interface and contact communication interface. determining means for determining, when a selection command for the application is received from the external device via the specific interface, whether or not selection of the application via the specific interface is enabled; ,
selection means for selecting the application when the determination means determines that the selection of the application is enabled;
4. The electronic information storage medium according to any one of claims 1 to 3, comprising: 5. The electronic information storage medium according to claim 1, wherein the application is a payment processing application. A processing method executed by a computer contained in an electronic information storage medium having one or more interfaces for receiving commands from an external device and loading an application for executing processing according to the commands, wherein ,
a step of acquiring, from the biometric data acquisition sensor, biometric data acquired from a user's body by a biometric data acquisition sensor and used for user authentication;
registering the acquired biometric data in the electronic information storage medium;
enabling selection of the application via the specific interface when the biometric data is registered in a state in which selection of the application via the specific interface is disabled;
A processing method comprising: A computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and loaded with an application for executing processing according to the commands,
an acquisition means for acquiring, from the biometric data acquisition sensor, biometric data acquired from a user's body by a biometric data acquisition sensor and used for user authentication;
a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium;
A setting for enabling selection of the application via the specific interface when biometric data is registered by the registration means in a state in which selection of the application via the specific interface is disabled. A program characterized by functioning as a means.

Images