JP3090265B2 - Authentication IC card - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication IC card used as an authentication card for performing personal authentication in electronic information exchange and electronic commerce, or authentication capable of providing appropriate protection when presenting stored personal information. It relates to an IC card.

[0002]

2. Description of the Related Art An authentication IC card is effective for restricting persons who can enter and exit a specific place such as a research institute, a business office, a laboratory, a data storage room, and a house, and improving security. In addition, for the purpose of correctly authenticating the user when only the person is authorized to do business, such as e-commerce such as product sales and credit, online medical consultation, personal medical records and registration at government offices, issuing certificates, etc. Can be used. Such an authentication IC card performs personal authentication based on information recorded on the card, so that the security of the card becomes a major problem.

In particular, as disclosed in Japanese Patent Application No. 10-299181 filed by the applicant of the present invention, an authentication IC which stores personal identification information of a user himself / herself in an IC card and uses it for personal identification in transactions. With a card, authentication can be performed based only on information recorded on an IC card and information input by the card owner. Therefore, the security of the card is more important than ever, so it is important to use the biometric information such as the signature, voiceprint, fingerprint, palmprint, and iris of the genuine trader and the PIN code with a high degree of freedom. In addition, advanced security measures have been prepared to prevent anyone other than the genuine transaction target from using the authentication card, and directly use the authentication IC card obtained by others who are not authorized users through theft or discovery. Or tampered with.

[0004] However, it is necessary to provide a means for teaching the recorded personal identification information to the person in case the personal identification information is forgotten, and to permit rewriting of the personal identification information for his / her own convenience. There is a possibility that a person other than the person may use the means to trick the staff or collude with the staff and abuse the personal identification information obtained illegally. Further, it is impossible to completely prevent a criminal act such as rewriting an IC card using fraudulently acquired personal identification information or forging an authentication card of another person using a new IC card. As described above, even with the authentication IC card having improved security, it is difficult to prevent a person who has been familiar with the used system or an insider from falsifying or falsifying the malicious system.

[0005]

SUMMARY OF THE INVENTION An object of the present invention is to provide an authentication IC card having extremely high security. In particular, an authentication IC that records personal identification information of a valid user on the card itself.
It is to further enhance the security of the card.

[0006]

In order to solve the above problems, an authentication IC card according to the present invention comprises a CPU, personal identification information or an authentication file storing personal identification information and authentication information,
An application file that stores job programs and data that are classified according to the authentication depth. When an external access request to the application file is made, based on personal identification information or authentication information in the authentication file, An authentication IC card that permits access based on the result of authenticity determination, and stores, in an authentication file, personal identification information of a second person or authentication information of a subject in addition to personal identification information of an authorized user. Alternatively, a job or data requiring authentication of the subject is specified in advance, and when there is a request to execute or present such a specified job or data, personal identification information or authentication information input from the outside is authenticated. When a user passes the authentication against the personal identification information and authentication information of the file, the specified job is executed or And it said that it has to admit the presentation of the data.

[0007] According to the authentication IC card of the present invention, in order to access the designated job or data, in addition to the authorized user of the authentication IC card, a second person or an entity having a specific authority (hereinafter, a witness). ), It is necessary to specify such a job that it is important to check the validity of the authentication IC card itself and the validity of the user. can do. It should be noted that the witness's approval becomes effective only when authentication is performed based on personal identification information or authentication information stored in the IC card.

For example, when issuing an authentication IC card, one or more witnesses are set up, and personal identification information and authentication information of this person are recorded on the authentication IC card and used. can do. Even if such a card is used, even if there is a request from the user, it will not be possible to view the entered personal identification information again without the approval of the witness, Do not allow rewriting. The witness may be a third party trusted by the user or a person designated by the card issuer. Further, it may be a subject such as an issuer as a mechanism or an organization.

[0009] In such a system, the witness who is not the principal must be approved and authenticated, or the witness and the witness together must pass the authentication. Not only can the disclosure of the authentication IC card be prevented from being stolen, but also a person in charge of internal information can be prevented from colluding and rewriting personal identification information. In addition, since high security can be set for authentication related to the reliability of the authentication IC card, the security of the authentication IC card is threatened even if there is no special security system at the card issuing office that issues the authentication IC card. There is no. Further, the data relating to the individual stored in the card may be stored in the authentication IC card, and does not need to be left at the authentication IC card issuing place. Therefore, a card issuing system with a high credit level can be constructed more easily.

The pass / fail of the authentication is determined by the C in the authentication IC card.
It may be a PU or an external device. When an external device is used, the personal identification information or the authentication information stored in the authentication file is output to the external device via the CPU, and the external device determines whether or not the authentication is successful.
Access the application file via the PU. In the case where the pass / fail of the authentication is performed by the CPU in the authentication IC card, the equipment on the IC card reading device side can be simplified and improved, and the equipment cost at the place of use can be reduced. Further, when the operation is performed by an external device, the performance of the IC card can be simplified. Further, the system is suitable for a system that further improves security by sharing a part of personal identification information in a storage device other than the authentication IC card.

It is preferable that the personal identification information includes biological information for distinguishing the individual of the authentic owner of the authentication IC card. Biological information includes signatures, voice prints, fingerprints, palm prints, and irises. However, it goes without saying that a password having a high degree of freedom can be used in addition to biological information. Also. Further, it is preferable that a log of a matter using the witness authentication is recorded in the authentication IC card. This is because when an accident occurs, it is useful for grasping the situation and estimating the cause.

[0012]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The details of the present invention will be described below based on embodiments with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an authentication IC card according to an embodiment of the present invention, and FIGS. 2 to 4 are flowcharts showing an example of use of the present embodiment. As shown in FIG. 1, an authentication IC card according to the present embodiment includes a CPU 1 for executing arithmetic processing, and a RO storing an arithmetic processing program.
M2, a RAM 3 for storing data being processed, a data storage device 4 capable of writing and reading data, an interface 5 for an applet program, an external connection circuit 6, and an external connection terminal 7.

The external connection terminal 7 is used for signal transmission and power supply, and may be a non-contact type electrode or antenna. Further, in order to support various card reading devices, both contact type and non-contact type connection terminals may be provided. Applet interface 5 is C
It is used when a small program (applet) for operating the PU is received from outside, and is an interface for making the received applet function with an authentication IC card. It is not necessary to provide the applet interface 5 in an authentication IC card which does not accept an applet for safety.

The files in the data storage device 4 include an authentication file 10 storing authentication data, and an application file 20 storing a job program for executing a specific job and various data. The authentication file 10 stores personal identification information for authenticating the authentic owner of the authentication IC card, in addition to data for ensuring that the authentication IC card is authentic.

The personal identification information is preferably information such as a personal identification number, a fingerprint, a voiceprint, a face photograph, a signature handwriting, etc. that is known only to the person or that is biological information that cannot be reproduced by anyone other than the person. The authentication information is not limited to one type, and a large number of types may be stored and used alone or in combination of a plurality of types. The authentication file 10 includes a first personal identification file 11 storing personal identification information of a genuine owner authenticated by an authentication IC card, and personal identification information relating to a second person such as a guarantor, a witness, or an issuer. A second personal identification file 12 for storing authentication information about the subject. The witnesses such as the second person and the subject may be two or more persons and the subject as required in the system.

The application file 20 contains an authentication I
It includes a first work file 21 storing a part for handling information on the authenticity of the C card, and a second work file 22 storing a part for executing based on the authentication result. In the second work file 22, for example, information required for each service institution using authentication, such as house management information, medical information, financial information, and communication information, can be accessed by simple authentication such as a password. Are stored in a state of being classified according to the required degree of authentication, from those that have not passed until advanced authentication such as confirmation with a fingerprint is granted access. Note that an encryption key, an electronic certificate, and the like can be stored. Further, programs such as a job for issuing an unlock instruction may be stored.

Further, the first work file 21 includes a job for writing personal identification information, a job for reading and rewriting personal identification information, and a job for reading and erasing a log. Stores related jobs and information. Jobs and information stored in the first work file 21 may be those that need only be authenticated by the owner, those that need only be authenticated by the second person, and those of the owner and the second person. Both can be separated into those that must be authenticated.

Referring to FIGS. 2 to 4, the authentication I of this embodiment is described.
An example of using the C card will be described. FIG. 2 illustrates a procedure for issuing an authentication IC card. Authentication IC
When there is a card issuance request (S11), the card issuer performs a credit check on the person to be authenticated of the authentication card (S12),
If it is determined that the person to be authenticated is a person who can properly use the authentication card after passing this examination, a person who can guarantee the person to be authenticated or a person whom the person to be authenticated trusts is designated as a witness (S13). ).

When the authentication IC card is issued, all the persons concerned gather at the designated card issuing office (S14), and confirm whether the authentication IC card and the card issuing device are genuine (S15). When the issuance of the IC card is approved (S16), each person inputs personal identification information (S17). In order to provide the authentication IC card with a function of confirming that the card reader is genuine, it is necessary to prevent information stored in the authentication IC card from being stolen or rewritten. Because.

The person who becomes the card holder responds to the fact that the credit required for the transaction when performing the transaction based on the card differs, and accordingly, the personal identification number, a unique symbol, a signature, a fingerprint, a voiceprint, an iris, a palm print, etc. Enter some personal identification information. A plurality of personal identification information may be input for the witness, but there are only a limited number of cases where the witness needs to be authenticated, so there is no need to use multiple personal identification information. In addition, the witness may be a subject as an organization or a mechanism,
In this case, authentication can be performed using authentication information such as an electronic signature instead of biological information.

In some cases, the authentication IC card is used for confirming various authorities in the company. In such a case, for example, a person in charge of issuing, such as a personnel department in charge of issuance, or a person in charge of issuance, issues the above-mentioned information. You may be made to be authenticated as a card issuer or a witness. Alternatively, the person in charge of the department to which the person holding the card belongs may be authenticated.

The input personal identification information of the owner is authentication I
It is stored in the first personal identification file 11 in the C card, and personal identification information such as a witness and authentication information are stored in the second personal identification file 12. In addition, when an authentication is performed, an electronic certificate stating the reliability and basis of the authentication may be required, but such an authentication IC card issues an electronic certificate in various types of transactions. Is stored in the second work file 22 in the application file 20 together with the application data used for (S18).

A program for displaying and rewriting personal identification information recorded on the authentication IC card is stored in the first work file 21. In order to access the program, access is required in advance for each job. Must meet the required certification. As described above, the authentication IC card in which the necessary information has been written is subjected to an appropriate test to confirm the completeness of the product, such as performing an appropriate operation when the person to be authenticated enters appropriate personal identification information. Receiving (S1
9) If it passes, it will be issued to the owner (S2
0). If it does not pass, for example, the step of writing authentication information or the like (S18) is repeated to make a proper authentication IC card, and then the card is issued. In addition, by the examination of the issuer (S1
2) If the person to be authenticated with the card determines that the card is not suitable for using the authentication system, the issuance of the authentication IC card is rejected (S21).

Such an authentication IC card records an encryption signal for authorizing the transaction on an authentication IC card possessed by a person who is entitled to use for each service or transaction (represented as a transaction). It can be used in a mechanism for confirming that the carrier of the authentication IC card is a genuine holder when conducting a transaction and permitting the transaction. In this case, the information that the trader should receive from the authentication IC card is the authentication I card.
That is, the carrier of the C card is the genuine owner of the card, and the authentication IC card records an encrypted signal as proof of eligibility for use. The authentication performed by the authentication IC card means that the reading device is appropriate and that the carrier is a genuine holder.

With this authentication IC card, the qualifications for entering a building or entering a certain reference room, bank account, possession of credit, family register, history, credit balance when used as electronic money, etc. In other words, by storing the attributes of the holder in the authentication IC card, it is possible to integrate the authentication of all transactions for which the use qualification has been given into one card.

A typical example of a method of using an authentication IC card will be described with reference to an example used for entry control of a house. The door of each room is provided with a door opening / closing control device, and the door is opened / closed according to a control signal generated therefrom. An authentication control device, a personal identification information input device, and a card reader are connected to the door opening / closing control device. When the card user trying to enter the room inserts the authentication IC card into the card reader, the authentication control device and the authentication IC card exchange IDs and confirm whether or not the combination is genuine. All information exchange is performed via the CPU, and the card reader cannot directly access the data storage device of the authentication IC card.

When the authentication IC card is a genuine one conforming to the system, the authentication control device provides the user of the card with, for example, a fingerprint determined based on the authentication level.
It prompts for input of personal identification information and extracts the input information to create personal identification information. When it is confirmed on the authentication IC card side or the door opening / closing control device side that the personal identification information is genuine, a door opening code for opening the door is generated, and the door is opened by the door opening / closing control device.

The number of personal identification information stored in the authentication file may be set to any number. The personal identification information includes, from the simplest stage of certifying the authenticity based only on the ID number entered by the card issuer, the personal identification number determined by the card owner, the owner's fingerprint, iris, and face photograph Bioinformation, dynamic information such as a signature input by the owner, and more sophisticated composite information obtained by combining these. In this way, highly reliable authentication that is difficult to impersonate by others can be performed.

The authentication IC card uses various types of personal identification information depending on the case. Therefore, even the genuine owner often forgets the personal identification information to be used. In such a case, it is inconvenient if the card can no longer be used, so that the recorded personal identification information is usually displayed. Further, it is preferable that the personal identification information can be changed according to the necessity of the owner himself, for example, when the personal identification information is likely to be stolen by being leaked to another person, or when the personal identification information is periodically changed to enhance security.

Therefore, a person who can deal with the authentication IC card in detail and can freely handle the equipment can extract the information stored in the authentication IC card with malicious intent, falsify the card, or use a false authentication IC card. It is not easy to prevent this if the production is attempted. However, since the authentication IC card of the present embodiment can request the authentication of a witness for a predetermined job, it is necessary to request the approval of the witness when accessing the authentication information of the authentication IC card. If it is, even a person who is familiar with internal circumstances cannot steal and use personal ID information or rewrite personal ID information.

FIG. 3 is a flowchart showing a procedure required when a genuine person to be authenticated confirms his / her personal identification information. When it is desired to read the personal identification information of the authentication IC card (S31), a person to be authenticated by the card, a witness at the time of issuing the card, and a person in charge of the card issuer or an entity as an organization gather (S32). After confirming that the card is genuine (S33), the user inputs personal identification information or authentication information (S34).

If the personal identification information / authentication information of each person or the like matches with the personal identification information / authentication information stored in the authentication IC card (S35), it is determined that such an access has been made. The fact is left as a log in the storage device in the authentication IC card (S36), and the recorded personal identification information is displayed on a display attached to the card reading device (S37). If the required personal identification information does not match, it is an unauthorized access, and the display of the personal identification information is rejected (S
38).

It is assumed that the person to be authenticated on the card inputs one piece of personal identification information that he or she remembers, and it is sufficient that this information matches one of those stored in the authentication IC card. Here, for example, if you forgot your PIN, you will disclose it by referring to your fingerprint, but if you want to know your signature, do not give it even if the PIN matches, so that a person who is more advanced than the personal information required to display It may be displayed only when authentication is possible with the certificate information. In addition, personal identification information that does not require a high level of security may be disclosed as long as personal identification can be performed using personal identification information based on the biological characteristics of the owner, without gathering witnesses. . In a special case, it is possible for the person in charge of issuing a card to independently read out information under his / her responsibility.

FIG. 4 is a flowchart showing a procedure for rewriting personal identification information. When there is a request for rewriting personal identification information (S41), it is sometimes impossible to eliminate unauthorized use by another person if only the person to be authenticated can approve the request. S42) Confirm that all members approve. After confirming the authenticity of the authentication IC card and the issuing device with each other (S4
3) Each of the gathered persons and the like inputs personal identification information and authentication information (S44). The entered personal identification information is the authentication IC
When it matches the information stored in the card (S4
5) Allow rewriting of personal identification information for the first time.

When each person has passed the authentication, the recorded personal identification information is transferred to an external storage device (S46).
A log on the fact of rewriting is recorded in the authentication IC card (S47). Further, the personal identification information that is no longer needed is erased (S48), and the personal identification information is input to the owner (S48).
49), storing the new personal identification information in the authentication IC card (S50). Thereafter, the function of the authentication IC card is tested (S51), and if it passes, the card is issued to the owner (S52). If the authentication IC card is defective, the personal identification information is rewritten again and the pass is issued when the test passes. If the authentication of each person does not pass, rewriting of personal identification information is rejected because there is a possibility of unauthorized access (S5).
3).

When personal identification information is read or rewritten, it may be a cause of abnormalities such as unauthorized use, so log it and store it in the authentication IC card itself. Is preferred. in this way,
Since the authentication IC card of the present embodiment can require the approval of a witness or the like to read or rewrite personal identification information, the authentication IC card obtained by theft or discovery can be stolen or tampered. Not only, authentication I
Even a person who can freely handle a C card issuing device, a reading device, a rewriting device, and the like cannot be used unless approved by a witness or the like, so that the security of the authentication IC card is extremely high.

[0037]

As described above in detail, the authentication IC card of the present invention can require the approval of a second person for issuance and confirmation and rewriting of personal identification information, so that there is no danger of plagiarism or the like. Extremely small and highly secure.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of an authentication IC card according to one embodiment of the present invention.

FIG. 2 is a flowchart showing a procedure for issuing an authentication IC card according to the embodiment.

FIG. 3 is a flowchart showing a procedure for reading personal identification information recorded on the authentication IC card of the embodiment.

FIG. 4 is a flowchart showing a procedure for rewriting personal identification information of the authentication IC card of the embodiment.

[Description of Signs] 1 CPU 2 ROM 3 RAM 4 Data storage device 5 Applet interface 6 External connection connection circuit 7 External connection terminal 10 Authentication file 11 First personal identification file 12 Second personal identification file 20 Application file 21 First work File 22 Second work file

Claims (6)

(57) [Claims] 1. An external device comprising: a CPU; an authentication file storing personal identification information or personal identification information and authentication information; and an application file storing job programs and data classified according to the authentication depth. When there is a request for access to the application file,
An authentication IC card for permitting the access based on a result of judging the authenticity based on the personal identification information stored in the authentication file.
Storing personal identification information of at least one second person other than the person or authentication information of at least one subject,
A job or data requesting the authentication of the person or the subject is determined in advance, and when there is a request to execute or present the job or data requesting the authentication of the second person or the subject, the first person and the Second person
Through said first the CPU when passes authentication by comparing the human card information or authentication information and the authorization file to the stored human card information or authentication information inputted from the outside to both of the object or the metallic Authentication I characterized by allowing execution of a job and presentation of data
C card. 2. The authentication IC card according to claim 1, wherein the CPU determines whether or not the authentication is successful. 3. The CPU outputs personal identification information or authentication information stored in the authentication file to an external device, and the CPU outputs the personal identification information or the authentication information based on a determination result received from the external device.
2. The authentication IC card according to claim 1, wherein the access to the application file is performed via a PC. Wherein the authentication IC card according to any of claims 1-3 wherein the human certificate information, characterized in that it comprises a distinguishing biological information authentic owner of an individual of the IC card. Wherein further said second person or authentication IC card according to any one of claims 1 to 4, characterized in that so as to log on matters using authentication of the principal. 6. The authentication IC card further has an electronic certification file recording the contents of authentication, and presents an electronic certificate representing the contents of the authentication used when accessing the application file. The authentication IC card according to any one of claims 1 to 5 , wherein the authentication IC card according to any one of claims 1 to 5 , wherein