JP2850120B2 - IC card system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Summary] By storing a predetermined passcode from the system control unit to the IC card and determining the passcode in the IC card, the storage of the IC card from a system other than the authorized system is performed. It provides protection for data and the like. BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card having a memory for storing identification data such as a personal identification number and a CPU as a data processing device, a so-called IC card, and more particularly to an IC card system having a high security function. About. In recent years, IC cards, which are cards of a size that can be formed into credit cards, bank cards, and the like, have been used in place of magnetic cards. [Prior art] Conventionally, an IC card is merely an external IC memory image, and after satisfying predetermined hardware conditions such as a power supply voltage of the IC card as shown in FIG. 4, an IC card reader / writer (system control) By specifying an address from the IC card 5 to the IC card 5, it is possible to read data stored in the storage means in the IC card 5 and write data in the storage means. For security reasons, the storage means of the IC card 5 usually stores a password given to the owner of the card.
Each time a transaction or the like is performed, the IC card reader / writer 4 reads the data stored in the storage means in the IC card 5 after confirming the identity of the user by using a password. [Problems to be Solved by the Invention] By the way, conventionally, as described above, communication between the IC card 5 and the system control unit is possible after satisfying a predetermined hardware condition or at most after confirming a password. there were. Therefore, once the password is known, the private or secret data of the individual stored in the IC card may be leaked to another person by an unauthorized IC card reader / writer of another system, or the IC card system may be confused. There was a problem that it might occur. Therefore, the present invention has been made to solve the above problems, and it is determined whether or not an IC card reader / writer and a system control unit conform to the IC card before normal processing of the IC card is performed. IC that can check whether
The purpose of the present invention is to provide a card system. [Means for Solving the Problems] The system control unit 1 for controlling the IC card system includes:
With a built-in timer, a specific passcode is written to the IC card 2 within a predetermined time after satisfying a predetermined hardware condition.
Notifying means for notifying via the IC card reader / writer 3, the IC card 2 has a built-in timer, and receives a clock signal from the built-in timer.
Based on the acceptance or rejection of the passcode within a predetermined time, a selection is made as to whether or not to respond to a predetermined processing command of the system control unit 1. If so, the IC card reader / writer 3 An IC card reader / writer selecting means for transmitting a response signal, the IC receiving the response signal
The card reader / writer determines whether the response signal is correct, and determines whether the response signal is accepted or rejected within a predetermined time. If the response signal is determined to be correct, the IC card 2 including collation of the personal identification number is used.
The IC card is ejected when it is determined that the IC card is incorrect or when the IC card is not accepted within the predetermined time. [Operation] In FIG. 1, a specific pass code stored in the system control unit 1 is stored in the system control unit 1 after a predetermined time has passed after satisfying predetermined hardware conditions such as mounting the IC card 2 on the IC card reader / writer 3. By the notification means provided in the control unit 1,
Notify the IC card 2 via the IC card reader / writer 3. Then, when the IC card 2 receives the pass code, the IC card reader / writer selection means causes the IC card 2 to respond to the predetermined processing instruction of the system control unit 1 and not to receive the pass code. In this case, the IC card 2 does not respond to the predetermined processing command of the system control unit 1 by the IC card reader / writer selecting means. FIG. 2 shows an embodiment of an IC card system according to the present invention. Reference numeral 10 denotes an IC card, which includes an arithmetic processing unit 11 such as a CPU and a storage unit 12. The storage means 12
It is composed of a fixed storage memory such as a ROM, and stores various data. The arithmetic processing means 11 includes an IC card reader for selecting whether or not to respond to a predetermined processing command of the system control unit 1 based on whether or not the specific passcode is received from the control unit 14 by the IC card system. The access means for accessing the / writer selection means and the storage means 12 is constituted by software of a program. 13
Is an IC card reader / writer that reads data from and writes data to the IC card 10.
It comprises a card interface 15, an IC card power supply 16, a CPU 17, and an external interface 18. When the IC card 10 is mounted, the IC card interface 15 electrically connects the CPU 17 and the IC card 10 to form a path for information transmission. The IC card interface 15 is connected to the system control unit via the external interface 18.
14 and a drive power supply 16 for the IC card 10. Reference numeral 17 denotes a CPU for the IC card reader / writer 13, which internally has storage means such as ROM and RAM for writing and reading, and motor control means for inserting and discharging the IC card 10. As the external interface 18, for example, RS-232C is used. The system control unit 14 controls the entire IC card system, and is, for example, a personal computer or a host computer of a computer network. The system control unit 14 issues a control command such as read / write to the IC card reader / writer 13 and, after satisfying a predetermined hardware condition such as mounting of the IC card 10, passes a specific pass to the IC card 10 within a predetermined time. A notification means for notifying the code via the IC card reader / writer 13 is provided by software of the program. The system control unit 14 has a built-in timer. This embodiment operates as follows. FIG. 3A is a flowchart of the whole system according to the embodiment of the present invention. In the initial state, steps SS1 and SR1 of the system controller 1 and the IC card reader / writer 13 are I
Waiting for C card insertion. When the IC card 10 is inserted into the IC card reader / writer 13, the CPU 1 of the IC card 2
1 is initially reset in step SC1. On the other hand, when the IC card 10 is inserted, the IC card reader / writer 13 uses the steps described later in detail with reference to FIG.
Insert SR2, that is, in cooperation with step SC2 of IC card 10
The suitability of the IC card 2 for the present system and the suitability of the present system for the inserted IC card are individually confirmed. When step SR2 of this confirmation is completed normally, the IC card reader /
When the writer 13 notifies the system controller 1, the step SS1 of the system controller 1 shifts to step SS2. This step SS2 includes a step of inputting a personal identification number (PIN) by an operator of the system control unit 1, and the system control unit 1 uses the IC card reader /
The IC card 10 is notified via the relay step SR3 of the writer 13. In step SC2, the IC card 10 is
If it is determined that the device is compatible with the personal identification number (PIN)
It is in step SC3 in the waiting state, and upon receiving the notification of the personal identification number, moves to the next step SC4. In step SC4, the IC card 10 stores its own memory 1
In step 2 (FIG. 2), the personal identification number stored at the time of card issuance is compared with the notified personal identification number. If the check matches, the IC card 10 returns an acknowledgment to the system control unit 1 via the relay step SR3 'of the IC card reader / writer 13. Also, as a result of the comparison in step SC4,
If no correspondence is obtained, a negative response is made. Although a flowchart in this case is not shown, the system control unit 1
Makes the operator input the personal identification number again based on the negative response, and notifies the IC card 10 of the input personal identification number.
The IC card 10 returns a negative response a predetermined number of times, for example, up to three times, but if the verification does not match the fourth time, the entire operation as the IC card 10 is terminated, and the initial reset SC1 is performed again.
If you do not perform the operation. When the collation matches and an acknowledgment is returned to the system control unit 1, the system control unit 1 proceeds from step SS3 indicating waiting for a response to the next step S3.
Move to S4. Step SS4 is a step in which data is stored in the IC card 10 using the data stored in the IC card 10 or data is written from the system control unit 1 to the storage function of the IC card 10. IC card
After the matching, the process also proceeds to step SC5, where the process is performed jointly via step SS4 of the transaction processing of the system control unit 1 and relay step SR3 ″ of the IC card reader / writer 13 in step SC5. FIG. 3 (b) shows steps SR1, SR in FIG. 3 (a).
2 and SC2 are shown in detail. As shown in the flowchart of FIG. 3B, from the state of waiting for the insertion of the IC card 10 in step S1 (SR1), the IC card 10 is inserted into the IC card reader / writer 13 in step S2 (SR2).
Insert into Then, the two terminals of the IC card interface 15 and the IC card 10 of the IC card reader / writer 13 come into contact with each other to be electrically connected, and a predetermined hardware condition is satisfied. Then, after a predetermined time has elapsed, step S3 (SR2)
Then, a specific passcode is transmitted from the IC card reader / writer 13 to the IC card 10. In step S4 (SR2), a timer is set together with transmission of a specific passcode. In step S5 (SR2), the IC card 10 is powered by the IC card power supply 16.
The CPU as the arithmetic processing means 11 operates by the drive current from the CPU, receives the clock signal from the IC card built-in timer,
It is determined whether a specific passcode is received from the system control unit 14 within a predetermined time. According to the result, the IC card reader / writer selecting means of the arithmetic processing means 11 sends or does not send a response signal to the IC card reader / writer 13. In step S6, the card reader / writer is
When the response signal from IC card 10 is received, it is determined whether or not the response signal from IC card 10 is a correct response. In step S7 (SR2), if the response signal is a correct response, the CPU 17 of the card reader / writer 3 continues the predetermined processing for the IC card 10. When a response signal from the IC card 10 is not received within a predetermined time [S8 (SR
2)] or when it is determined that the response signal from the IC card 10 is not a correct response [S6 (SR2)], step S9 (SR
In step 2), the IC card 10 is discharged from the IC card reader / writer 13. In this embodiment, the ROM is used as the storage means.
A ROM or an EEPROM may be used, or a device incorporating a RAM and a battery may be used. Thus, in the present embodiment, the IC card not only selects the valid IC card reader / writer, but also selects the IC card reader / writer.
The writer can also select a valid IC card. [Effects of the Invention] The present invention provides a communication between an IC card and a system control unit using a passcode specified in advance, separately from a password for confirming the validity of the card with respect to the cardholder. Is determined. Therefore, the security of the IC card prevents the confidential data and information stored in the IC card from leaking to another person and prevents the IC card system from being disrupted by an unauthorized IC card reader / writer of another system. Is effective for

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a principle diagram of the invention, FIG. 2 is an overall view of an IC card system, FIGS. 3 (a) and (b) are flowcharts according to an embodiment, and FIG. FIG. 1, 14 system control unit 2, 10 IC card 3, 13 IC card reader / writer 11 arithmetic processing unit 12 storage unit

Continuation of front page    (72) Inventor Toshihiko Taguchi               Fujitsu, 1015 Ueodanaka, Nakahara-ku, Kawasaki-shi               Inside the corporation (72) Inventor Nobuhiko Nishio               Fujitsu, 1015 Ueodanaka, Nakahara-ku, Kawasaki-shi               Inside the corporation (72) Inventor Junji Seki               Fujitsu, 1015 Ueodanaka, Nakahara-ku, Kawasaki-shi               Inside the corporation                (56) References JP-A-61-43376 (JP, A)                 JP-A-60-207991 (JP, A)                 JP-A-60-49471 (JP, A)                 JP-A-61-196368 (JP, A)                 JP-A-61-160174 (JP, A)                 JP-A-60-207940 (JP, A)                 JP-A-59-191650 (JP, A)                 JP-A-61-139873 (JP, A)                 US Patent 3868784 (US, A)

Claims (1)

(57) [Claims] System controller for controlling IC card system (1)
Notification means for notifying a specific passcode to the IC card (2) via the IC card reader / writer (3) within a predetermined time after satisfying a predetermined hardware condition, and The IC card (2) has a built-in timer, receives a clock signal from the built-in timer, and receives or rejects the passcode within a predetermined period of time based on a system control unit. (1) selecting whether or not to respond to the predetermined processing command, and if so, IC card reader / writer selecting means for sending a response signal to the IC card reader / writer (3); The IC card reader / writer that has received the signal
It is determined whether the response signal is correct and whether the response signal is accepted or rejected within a predetermined time. If it is determined that the response signal is correct, predetermined processing for the IC card (2) including collation of the personal identification number is continued, An IC card system, wherein the IC card is ejected when it is judged that the IC card is incorrect or when the IC card is not accepted within the predetermined time.