JP3107907B2 - Optical / IC card recording / reproducing system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention
Regarding an optical / IC card recording / reproducing system in which a reproducible optical memory section and an integrated circuit section including a central processing unit are integrated into a card, particularly, whether or not recorded data is genuine data On a system that can be verified during playback.

[0002]

2. Description of the Related Art Conventionally, card-shaped recording media such as cash cards, credit cards and telephone cards having a magnetic recording portion provided on a part of the surface of the card have been widely used. Cards have an advantage over other recording media in terms of convenience of portability, and application developments taking advantage of this feature are being actively pursued. Recently, in order to expand the field of use of the card, the card is required to have a larger recording capacity and more advanced functions, and optical cards, IC cards, and the like have been developed as cards to meet this demand.

An optical card writes information by laser light by applying optical disk technology, and reads the written information by a reading device having an optical sensor, and can record information of about 50 million characters. IC card is a central processing unit (CPU) constructed using semiconductor integrated circuit technology
Integrated circuit part (hereinafter referred to as IC module part)
Is equipped with intelligent functions such as advanced judgment, high-speed calculation, and data processing, and can record about 8,000 characters of information although the recording capacity is not as large as that of an optical card.

[0004] The optical card not only has a remarkably large information recording capacity but also has an advantage that the manufacturing process is simple and mass production can be performed in a short period of time, so that the cost can be reduced. The information content can be read by simply enlarging and viewing using a simple optical system, and there is a disadvantage that the confidentiality of the information is low. On the other hand, the IC card records the record information in the memory of the IC module unit and can process all the input / output information electronically by the operation of the CPU, so that a high degree of information confidentiality can be obtained. The manufacturing cost is high and the amount of information that can be recorded on one card is significantly lower than that of an optical card.

Therefore, recently, an optical / IC card in which an optical memory section and an IC module section are integrally provided on a single card in consideration of the large-capacity recordability of the optical card and the confidentiality and intelligence of the IC card. Has been proposed.
Consider using this characteristic of optical / IC cards for a wide range of applications such as managing personal medical records such as medical charts in hospitals, managing money such as savings passbooks, managing equipment including corporate secrets, and managing documents. Have been.

[0006]

Since the optical / IC card can be used in a wide range as described above, for example, only a specific person can record registration data on the card. A system that can reproduce the registered data from the card without limiting the user is conceivable. For example, when using a card as a medical chart, there is a system that allows only the attending physician to record registration data on prescriptions, and allows registered data to be played back by non-specific pharmacists. That is it.

However, in the conventional card system, the recording of the registration data on the card or the reproduction of the registration data from the card can be performed as long as the user inputs a correct password. Otherwise, recording or reproduction of registration data is easily performed. Moreover, since the user who reproduces the registered data cannot confirm whether the registered data recorded on the card is genuine data, the registered data can be used even if the registered data is forged or falsified by a third party. And an unexpected situation may occur.

An object of the present invention is to provide a recording / reproducing system capable of verifying at the time of reproduction that registered data recorded on a card is genuine data.

[0009]

An optical / IC card recording / reproducing system according to the present invention provides an encryption processing section for encrypting data to be registered by an arbitrary encryption key in a predetermined encryption procedure, and to register the data. Recording means for recording data and encrypted data in an optical memory unit in the card; reading means for reading data recorded in the optical memory unit; and a predetermined decryption of the encrypted data read by the reading means using an arbitrary decryption key. A decryption processing unit for decrypting the data by the decryption procedure, a collation unit for collating the registered data read by the reading unit with the decrypted data decrypted by the decryption processing unit, and a reading unit when the collation unit determines that the two data match. And a data output unit for outputting the registration data read in step 1. The encryption key and the decryption key are composed of a pair of public encryption keys having different contents, and the encryption key is a secret key. , Decryption key is characterized by a public key.

A compression processing unit for compressing the registered data in a predetermined procedure is added. The registered data is compressed by the compression processing unit at the time of data recording and then supplied to the encryption processing unit, and is read by the reading means at the time of data reproduction. It is characterized in that the registration data is supplied to the matching means after being compressed by the compression processing section.

[0011]

In the configuration of the present invention, when recording the registration data on the optical / IC card, the user inputs a secret encryption key from the terminal device, and the encryption processing section uses the encryption key to perform a predetermined operation. The digital signature is generated by encrypting the registration data according to the encryption procedure. Next, the encrypted data and the registered data are recorded in the optical memory section in the card by using an optical recording means.

When reproducing the data recorded in the card, the registered data and the encrypted data are read from the optical memory unit by using the optical reading means, and the encrypted data is inputted by the user from the terminal device. Using a public decryption key, the decryption unit decrypts the data according to a predetermined decryption procedure. Next, the decrypted data and the reproduced registered data are collated, and the registered data is output only when they match. If a third party who does not know the encryption key records the registration data, the two data do not match because a correct electronic signature cannot be created. In this case, the output of the registration data is prohibited.

The digital signature may be generated by directly encrypting the registered data, or may be encrypted after a predetermined compression process is performed by a compression processing unit. When the compression processing is performed, the same compression processing is performed on the reproduced registered data, and thereafter, the registered data is collated with the decoded data.

[0014]

FIG. 1 shows an optical / IC card 1 used in the present invention.
The optical memory unit 3 and the integrated circuit unit (IC module unit) 4 are formed on a plastic card base 2.

The optical memory section 3 is a large-capacity information recording section in which information is written by irradiating laser light and information recorded by reflected light of weak laser light is read. As shown in the vertical sectional view of FIG. 2, the optical memory section 3 includes a low-reflection section 31 (reflectance 5
%), And the aluminum reflective layer 32
(Reflectance: 80%) to form an information recording layer. The information recording layer is a transparent protective layer 33 and a card base layer (substrate) 3
4 and a hardened surface layer 35 is provided on the surface of the protective layer 33 to prevent the surface from being damaged.

In the optical memory unit 3, a plurality of bands B are formed in the longitudinal direction of the card 1 in parallel with the transverse direction of the card 1, and are formatted so as to form an information area. In each band B, a large number of tracks each containing several bytes of data are formed side by side, and information pits constituting each track are provided with or without a low reflection portion 31 or a low reflection portion in each unit area called a pit cell. It is recorded as a binary signal at position 31.

The IC module portion 4 is a device in which an IC chip such as a CPU or a memory constituted by a semiconductor integrated circuit technology is mounted on a printed circuit board and embedded in a card base material 2. Six terminals C1 to C6 for connecting to a card terminal device to be described later are exposed at standard positions defined by the ISO (International Organization for Standardization). The terminals C1 to C6 are used for supplying a power supply voltage from a terminal device, transmitting data to and from the terminal device, and the like.

FIG. 3 is a block diagram showing an example of an optical / IC card recording / reproducing system according to the present invention. In FIG. 1, the optical / IC card 1 has an optical memory unit 3 and an IC module unit 4 as described above, and a CPU 40, an IC memory 41, an encryption processing unit 42 for encrypting plaintext, A decryption processing unit 43 for decrypting cipher text, a compression processing unit 44 for compressing input data with a predetermined function, and a contact unit 45 including terminals C1 to C6 are connected via a bus 46, respectively.

The card terminal device 5 includes a CPU 5
0, a program memory 51, a working memory 52, and other ordinary computer systems, a card reader / writer unit (hereinafter, referred to as an R / W unit) 53 into which the card 1 is inserted, and data for inputting a password, recording data, and the like. An input unit 54 and a data output unit 55 for performing instructions on operation procedures for a user and outputting reproduced data are connected via a bus 56.

The R / W unit 53 is connected to the contact unit 44 of the card 1 inserted or ejected manually or automatically to supply power to the IC module unit 4 or supply control signals such as a clock signal and a reset signal. In addition to controlling the data transmission and reception between the IC module unit 4 and the terminal device 5, recording and reproduction of data with respect to the optical memory unit 3 are performed by a built-in optical head device.

Next, with reference to sequence diagrams shown in FIGS. 4 and 5, a processing procedure when recording or reproducing registered data by inserting the card 1 into the terminal device 5 will be described. In each case, it is assumed that the password verification has already been completed. First, the encryption system used in the present invention will be described. The encryption system used in the present invention is different from an encryption key and a decryption key, and one of the keys is a public key encryption system that can be made public.
(st, Shamir, Adleman). The details of the encryption are given to publicly known documents (eg, "Encryption and Information Security", edited by Tsujii and Kasahara). However, this encryption is based on the difficulty of factoring large numbers into security factors, and calculates the power-residues. And decryption / decryption processing.

The encryption procedure E is “C = E (M) = M ^e mod
n ”, and the decoding procedure D is“ M = D (C) = C ^d mo
dn ”. M is a plaintext and C is a ciphertext. The encryption key is e and n, the decryption key is d and n, the encryption key e and the common key n are public, and the decryption key d is secret. Keys e, d, n
Is determined in the following procedure. Two large prime numbers p and q are arbitrarily selected, and n = pq. The least common multiple L of (p-1) and (q-1) is calculated, and L
And any integer e smaller than L that is relatively prime to Find d that satisfies ed = 1 (mod L). The values e, d, and n thus selected are, for all plaintexts M,
“M ^ed mod n = M” holds.

In order to decipher the ciphertext C, the decipherer must know the decryption key d. For this purpose, the decipherer knows the secret prime numbers p and q and obtains the minimum of (p-1) and (q-1). It is necessary to calculate “d = e ⁻¹ (mod L)” from the common multiple L and the public key e to obtain the secret key d. Since the public key n is a product of the prime numbers p and q, the public key n is not encrypted if the integer is such that the prime factor can be easily factored. Therefore, usually p and q
Is about 100 digits (decimal), and the public key n is about 200 digits. In this way, even if a computer of 1,000 MIPS is used, the factorization will take millions of years, making it virtually impossible to decipher.

In this embodiment, the encryption key e is a secret key,
The decryption key d is a public key. The encryption key e is input by a specific card user from the terminal device 5 at the time of data recording, and the decryption key d is registered in the public key list in advance and input by the card user from the terminal device 5 at the time of data reproduction. To do it. The common key n is stored in the IC memory of the card 1 in advance.

First, in the case of the recording process, as shown in the sequence diagram of FIG. 4, the user inputs the encryption key e from the data input unit 54 of the terminal device 5 (step S1). The input encryption key e passes through the bus 56, passes through the R / W unit 53 and the contact unit 45 of the card 1, and is stored in the IC memory 41 (step S2). Next, the registration data M is input from the data input unit 54 of the terminal device 5 (Step S3). The input of the registration data M is performed by direct input from a keyboard device by a user or transfer of data recorded in advance on a magnetic disk from a drive device.

The input registration data M is transferred to the compression processing section 44 via the R / W section 53 and the contact section 45 of the card 1 via the bus 56. The compression processing unit 44 compresses the registered data M with a public hash function h to generate compressed data Ne (step S4). The compressed data Ne is transferred to the encryption processing unit 42 through the bus 46,
The encryption data C (= N) is encrypted by a predetermined encryption procedure E using the encryption keys e and n supplied from the C memory unit 41.
e ^e mod n) (step S5). This encrypted data C becomes an electronic signature.

Next, the encrypted data C passes through the bus 46,
The data is transferred from the contact unit 45 to the R / W unit 53 of the terminal device 5 (step S6), and is registered together with the registration data M by the optical head device in the R / W unit 53 in the optical memory unit 3 in the card 1.
(Step S7).

Next, in order to reproduce the data recorded in the optical memory unit 3 of the card 1 in this manner, as shown in the sequence diagram of FIG. To start (step S10). The input decryption key d passes through the bus 56,
The data is stored in the IC memory 41 via the R / W unit 53 and the contact unit 45 of the card 1 (step S1).
1). Since the decryption key d is a public key registered in the public key list in advance, the card user can know the decryption key d from this list as needed.

Next, the registered data M and the encrypted data C recorded in the optical memory section 3 are read by the optical head device in the R / W section 53 (step S12). The read registration data M and encrypted data C are again stored in the contact section 45.
Then, the registration data M is supplied to the compression processing unit 44 and the encryption data C is supplied to the decryption processing unit 43 through the IC module unit 4 (step S13).

The compression processing section 44 compresses the reproduced registered data M by using a public hash function h,
e ′ is generated (step S14), and the decryption processing unit 43 decrypts the encrypted data C by the predetermined decryption procedure D using the decryption keys d and n supplied from the IC memory 41, and decrypts the decrypted data Nd ( = C ^d mod n) (step S15).

Since the encrypted data C is data obtained by compressing the registered data M by the compression processing unit 44 during the recording process and then encrypting the same, the decrypted data Nd and the compressed data Ne 'should be equal. Therefore, both data N
d and Ne 'are collated (step S16). If the results are equal, the registered data M is determined to be genuine, and the registered data M is output from the data output unit 55. The output is prohibited because there is a risk of occurrence (step S17).

In the above-described embodiment, the encryption processing unit and the decryption processing unit are installed in the card. However, since these logic units are general-purpose, they are installed in the card. May be installed in the terminal device or both. Further, in the above-described embodiment, when the encrypted data (that is, the electronic signature) is generated, the data is encrypted after being compressed by the compression processing unit, but the registered data may be directly encrypted. The encryption system to be used is not limited to the RSA encryption system described above, and may be another public key encryption system in which an encryption algorithm is disclosed.

[0033]

According to the present invention, data can be recorded on the card only by a specific person who knows the encryption key, whereas reproduction of the data recorded on the card requires the user. It can be performed to some extent freely without limitation.
In addition, the encrypted data generated from the registered data is recorded together with the registered data as an electronic signature, and the digital signature is checked at the time of reproduction to verify whether the registered data is genuine data. It is possible to prevent an unexpected situation caused by a user who has reproduced the erroneous data as it is.

[Brief description of the drawings]

FIG. 1 is a plan view of an optical IC card used in the present invention.

FIG. 2 is a partial sectional view of an optical memory unit of the optical / IC card shown in FIG.

FIG. 3 is a block diagram showing one embodiment of the present invention.

FIG. 4 is a sequence diagram showing one embodiment of a recording procedure according to the present invention.

FIG. 5 is a sequence diagram showing one embodiment of a reproduction procedure according to the present invention.

[Brief description of reference numerals]

 DESCRIPTION OF SYMBOLS 1 Optical / IC card 2 Card base material 3 Optical memory part 4 IC module part 5 Card terminal device 40 CPU 41 IC memory 42 Encryption processing part 43 Decryption processing part 44 Compression processing part 45 Contact part 46 Bus 50 CPU 51 Program memory 52 Working memory 53 Card reader / writer unit (R / W unit) 54 Data input unit 55 Data output unit 56 Bus

──────────────────────────────────────────────────続 き Continuation of the front page (56) References JP-A-4-118777 (JP, A) JP-A-4-49098 (JP, A) JP-A-63-67194 (JP, A) JP-A-62-67 280991 (JP, A) JP-A-62-189593 (JP, A) JP-A-59-226935 (JP, A) JP-A-2-165186 (JP, A) (58) Fields investigated (Int. ⁷ , DB name) G06K 17/00-19/08 G09C 1/00

Claims (2)

(57) [Claims] 1. An encryption processing unit for encrypting data to be registered by a predetermined encryption procedure using an arbitrary encryption key, and recording the data to be registered and the encrypted data in an optical memory unit in a card. Recording means; reading means for reading data recorded in the optical memory section; a decryption processing section for decrypting the encrypted data read by the reading means with a given decryption key in a predetermined decryption procedure; Collating means for collating the registered data read in step 2 with the decrypted data decrypted by the decryption processing unit; and data for outputting the registered data read by the reading means when the collating means determines that the two data match. An output unit, wherein the encryption key and the decryption key comprise a pair of public encryption keys having different contents from each other, wherein the encryption key is a secret key and the decryption key. Is a public key,
Recording / playback system for IC cards. 2. A data processing apparatus according to claim 1, further comprising: a compression processing unit for compressing the registration data in a predetermined procedure, and when recording the data, compressing the registration data by the compression processing unit and supplying the compressed data to the encryption processing unit. An optical IC, wherein at the time of data reproduction, the registration data read by the reading means is compressed by the compression processing section and then supplied to the collating means.
Card recording and playback system.