JP2853549B2 - Portable data carrier processing system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable data carrier processing system, and more particularly to a mobile communication system used in mobile communication and the like.
IM (Subscriber Identity Mo
dule), SAM (S
application ApplicationModule),
Alternatively, the present invention relates to a portable data carrier processing system such as an IC card.

[0002]

2. Description of the Related Art In recent years, in fields such as mobile communication and financial applications, SIMs, SAMs,
A portable data carrier such as an IC card is used. For example, a SAM that is being considered for use in the field of financial applications and the like is a portable data carrier such as an IC card in which a part of an application program requiring security, for example, an encryption / decryption program is written. It is different from the card used by the user.

[0003] Such a portable data carrier is inserted into an insertion slot of a host terminal, and the legitimacy of the portable data carrier is confirmed by judging whether or not both keys match. Then, when the portable data carrier is authenticated, the host terminal accesses data such as a session. At this time, data indicating that valid authentication has been performed, key data for authentication, data of random numbers, and the like are written in the portable data carrier.

However, if the portable data carrier is removed from the host terminal before the end of the session, the portable data carrier remains authenticated. Therefore, when the extracted portable data carrier is inserted into another host terminal or the like, data access is permitted in this host terminal. That is, when only the security function portion such as the portable data carrier is illegally extracted, there is a possibility that the host device is illegally used in another host terminal. That is, when the portable data carrier is inserted into the host terminal, the Ke for authentication is used.
The session is performed without exchanging y data and random number data. Such a problem is particularly serious in financial applications and the like.

[0005]

SUMMARY OF THE INVENTION It is an object of the present invention to prohibit unauthorized use of a portable data carrier extracted during a session in a portable data carrier processing system.

[0006]

According to the first aspect of the present invention, as shown in FIG. 1, a portable data carrier 1 and a portable data carrier after authentication of the portable data carrier are performed. In a portable data carrier processing system including a host terminal 2 for accessing data, the portable data carrier includes an end information storage unit 3, and the host terminal 2 performs the following processes (1) to (4). A portable data carrier processing system characterized by performing.

(1) When the host terminal 2 has authenticated the portable data carrier 1, the host terminal 2
"Unfinished" data is written to (2) When the data access to the portable data carrier 1 ends normally, the host terminal 2 writes the “end” data in the end information storage means 3. (3) When the host terminal 2 authenticates the portable data carrier 1 and “end” data is written in the end information storage means 3, the host terminal 2 accesses the portable data carrier 1 for data. Tolerate.
(4) When the host terminal 2 authenticates the portable data carrier 1 and the “unfinished” data is written in the end information storage means 3, the host terminal 2 transmits the data to the portable data carrier 1. Prohibit access.

[0008]

According to the first aspect of the present invention, when the host terminal has authenticated the portable data carrier, the host terminal writes "unfinished" data in the end information storage means. Then, when the access of the data to the portable data carrier is normally completed by the deactivation instruction by the authorized person, the host terminal writes the data of "END" to the end information storage means. It is assumed that the portable data carrier normally terminated by the authorized person in this way is inserted into the host terminal again. In this case, "end" is stored in the end information storage means.
Is written, the host terminal permits data access to the portable data carrier. On the other hand, if the portable data carrier is illegally removed before the data access ends normally, the end information remains in the “unfinished” state. Therefore, when the portable data carrier is inserted into the host terminal again, the host terminal prohibits any data access to the portable data carrier, and the portable data carrier cannot be used. As a result, it is possible to prevent fraudulent activities using the portable data carrier that has been illegally extracted.

[0009]

An embodiment of the present invention will be described below with reference to the drawings.

FIG. 2 is an external configuration diagram of a portable data carrier processing system according to the present embodiment. This portable data carrier processing system comprises a host terminal 10, a user card 2
0, a security card 30 is provided.
The host terminal 10 reads and writes data from and to the user card 20, and includes a CPU that executes encryption / decryption and authentication processing, a memory in which application programs and the like are written, and the like. .
The host terminal 10 has an insertion slot into which the user card 20 and the security card 30 are inserted.

The user card 20 holds data such as financial information, and includes a microcomputer for encrypting and decrypting data and a nonvolatile memory for storing transaction files and the like. .
This user card 20 is owned by each user.

The security card 30 also includes a microcomputer and a nonvolatile memory. The security card 30 is mainly owned by a service provider, and checks whether the user card 20 inserted into the host terminal 10 is valid, and whether the data received by the host terminal 10 is valid. It has a function to check whether or not it is. The nonvolatile memory includes an electrically erasable EEPROM, a battery-backed static RAM, or the like. Further, the security card 30 includes a non-volatile memory that cannot be accessed from the outside, and end information described later is written in the non-volatile memory.
The end information is a state of “unfinished” when the security card 30 is illegally removed during the previous session. Therefore, by confirming the end information, unauthorized use of the security card 30 can be prevented.

Note that a function equivalent to that of the security card 30 can be realized as the security processing device 40 shown in FIG. The security processing device 40 is connected to the host terminal 10 via an interface or the like.
It can be separated from the host terminal 10.

FIG. 4 is a diagram showing an outline of processing in the portable data carrier processing system according to the present embodiment. The mutual authentication is a process for confirming whether or not the user card 20 is valid.
0 is the user card 20 and the security card 30
Is determined based on whether or not the respective encrypted data (keys) match. Further, the user card 20 generates an electronic signature in accordance with the transaction, and the electronic signature is confirmed by the security card 30.

The operation of the portable data carrier processing system configured as described above will be described with reference to the flowchart shown in FIG.

The service provider has the security card 30
Is inserted into the insertion slot of the host terminal 10, the host terminal 1
Power is supplied to the security card 30 from 0, and the security card 30 is activated (S1). Next, the host terminal 10 checks whether the end information recorded on the security card 10 indicates "end" (S).
2).

This termination information is a flag indicating whether or not the previous session has ended normally. If the security card 30 is pulled out of the host terminal 10 before the session ends normally, the termination information is It remains in the "not finished" state. When the read end information is “unfinished” (NO in S2), the host terminal 10 prohibits subsequent access without any response (S3). As a result, it is extracted during the session,
Unauthorized use using the security card 30 in the authenticated state can be prevented. The non-response process can be realized by using an infinite loop or the like. On the other hand, if the end information is “end” (YES in S2), the host terminal 10 rewrites the end information in the security card 30 to “not finished” (S4), and executes the processing after step S5. I do.

In step S5, the host terminal 10 permits the security card 30 to transmit a command, and waits for a command to be transmitted. Host terminal 10
When receiving the command (NO in S6), it determines whether the received command is a command of the deactivation command (S7). If not a deactivation command (N in S7
In O), a process such as a session command is executed (S1).
3) A response is transmitted (S14). Then, the host terminal 10 waits again for a new command to be transmitted (S5). On the other hand, in step S7,
When the host terminal 10 receives the deactivation command (S
If YES in step 7, the key received with this command is compared with the reference key in security card 30 (S7).
8).

If the two do not match (NO in S9)
, The host terminal 10 transmits a response to the effect that they did not match (S14), and waits for a new command (S14).
5). If both match (YES in S9), the above-mentioned end information is rewritten to "end" (S10). Then, the host terminal 10 transmits the response (S1
1) Deactivate the security card 30 (S1
2), end all processing.

Therefore, according to the present embodiment, by referring to the end information, it can be determined whether or not the security card 30 has been removed in the middle of the session, and unauthorized use using the security card 30 can be prevented. This can be prevented. Note that, as shown in FIG. 3, the present invention can be applied to a security processing device 40 having the same function as the security card 30. Further, even in the case where the security processing device 40 is provided inside the host terminal 10, the security processing device 40 may be separated and used improperly. Can be applied.

[0021]

As described above, according to the present invention, in a portable data carrier processing system, by confirming end information indicating whether or not a session has ended normally, data can be extracted in the middle of the session. It is possible to prevent unauthorized use of the portable data carrier.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a portable data carrier processing system according to the present invention.

FIG. 2 is a block diagram of a portable data carrier processing system according to one embodiment of the present invention.

FIG. 3 is a block diagram of a portable data carrier processing system according to one embodiment of the present invention.

FIG. 4 is a diagram showing a data flow of the portable data carrier processing system according to one embodiment of the present invention.

FIG. 5 is a flowchart showing the operation of the portable data carrier processing system according to one embodiment of the present invention.

[Explanation of symbols]

 10 Host terminal 30 Security card (portable data carrier)

Continuation of the front page (56) References JP-A-4-120685 (JP, A) JP-A-63-255781 (JP, A) JP-A-63-20680 (JP, A) JP-A-3-62290 (JP) , A) JP-A-2-197981 (JP, A) JP-A-4-101173 (JP, U) (58) Fields investigated (Int. Cl. ⁶ , DB name) G06K 17/00 G06F 19/00

Claims (1)

(57) [Claims] 1. A portable data carrier processing system comprising: a portable data carrier; and a host terminal for accessing the portable data carrier after authenticating the portable data carrier. A portable data carrier processing system, wherein the data carrier includes end information storage means, and the host terminal executes the following processes (1) to (4). (1) When the host terminal has authenticated the portable data carrier, the host terminal writes "unfinished" data in the end information storage means. (2) When the data access to the portable data carrier ends normally, the host terminal writes the data of "end" to the end information storage means. (3) When the host terminal authenticates the portable data carrier and the "end" data has been written in the end information storage means, the host terminal permits the data access to the portable data carrier. (4) When the host terminal authenticates the portable data carrier, if the “unfinished” data has been written in the termination information storage means, the host terminal prohibits data access to the portable data carrier.