JP3484875B2 - IC card reader / writer - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card reader / writer suitable for use in a gate system using an IC card, an entrance / exit management system, and the like.

[0002]

2. Description of the Related Art Conventionally, an online or offline gate system using an IC card, an entrance / exit management system, etc. have been developed. This kind of system is IC
The card reader / writer is used to access the IC card, and based on the information recorded on the IC card, the progress of the object carrying the card is limited or managed, which is usually performed for the IC card. Information about access (access information) is stored in the host computer.

In a large-scale system in which a plurality of gates are provided separately from each other in an online system, an IC card reader / writer is connected to and controlled by a plurality of terminals provided in the system. In such a system, the access information is temporarily stored in the RAM in the terminal and transferred to the host computer via the communication line.
In order to securely store the access information, the terminal is usually provided with a backup power supply for holding the data stored in the RAM in a system separate from the main power supply.

Although it is conceivable to record the access information in the IC card reader / writer, the storage means in the IC card reader / writer is usually a program for accessing the IC card or an IC card reader / writer.
There is only a PROM that stores the operation program of the writer itself (in the case of wired logic, there is no PROM). Therefore, in order to store the access information in the IC card reader / writer, a RAM is separately required.
In addition, it is necessary to provide a backup power source and the like, and in order to save this trouble and cost, a method of storing access information in a terminal is generally used.

In the off-line system, the IC card reader / writer operates independently and stores the access information inside. However, since the PROM storing the above various programs cannot be used for storing access information, the access information is recorded using a recording medium such as a removable memory card, and this recording medium is mounted on the host computer. , The access information was transferred to the host computer.

[0006]

As described above, in the off-line system, the memory card slot or interface is used for IC in order to use the memory card.
It must be provided in the card reader / writer and has a different configuration from the IC card reader / writer in the online system. However, the gate system and entrance / exit management system can be operated in various forms.
Since there may be a mixture of online and offline systems, it is possible that IC card reader / writers with different configurations must be used within a single system. In such a case, compared to the case of using the IC card reader / writer having the same configuration, there is a drawback that system management takes more time.

In addition, there may be a case where a communication line in an online system has a problem and must be operated offline. However, conventional IC
The card reader / writer cannot use the online one for the offline due to the difference in configuration. Therefore, the system using the conventional IC card reader / writer has a drawback that the degree of freedom of the system is reduced.

[0008] Further, it can be said that the IC card reader / writer manufacturer is also in an undesired state because it is necessary to manufacture products having different configurations and productivity is reduced. Of course, it is conceivable to provide all IC card readers / writers with memory card slots and interfaces, but this raises the problem of increased manufacturing costs. This also applies to the case where a RAM and a power supply for holding data stored in the RAM are provided in the IC card reader / writer, or an EEPROM is provided.

In particular, when a RAM and a holding power supply are adopted, there are cases where the data stored in the RAM is not always held, and this cannot be the final solution. Also,
When the EEPROM is used, the writing speed of data to the EEPROM is slow, and there is a possibility that a sufficient processing speed cannot be obtained in a system such as an entry / exit management system where access information frequently occurs.

Further, the use of the memory card for recording access information is not preferable from the viewpoint of security. A memory card has a drawback that it is relatively easy to forge and falsify the recorded data, so that sufficient safety cannot be ensured unless appropriate measures are taken in operation.

The present invention has been made under such a background, is applicable to both online and offline systems, and is an IC card reader / card capable of safely recording access information to an IC card. It is intended to provide a writer.

[0012]

In order to solve the above-mentioned problems, the invention according to claim 1 is an IC card having an insertion port and reading / writing data from / into the IC card inserted in the insertion port. Read / write means, real-time clock for outputting real-time data representing the actual time, first non-volatile data storage means for storing the control program of the IC card read / write means, and second rewritable non-volatile data A storage unit, a communication unit for transmitting and receiving data to and from an external device, and a control program stored in the first nonvolatile data storage unit are executed, and an access history to the IC card by the IC card reading and writing unit is recorded. An IC card reader / writer, comprising: a processing unit that stores the real-time data in the second nonvolatile data storage unit. The means reads the access history from the second non-volatile data storage means when the log command is received via the communication means, transmits the access history to the outside via the communication means, and is inserted into the insertion opening. I
When the C card is a log IC card, the access history is read from the second non-volatile data storage means and written in the log IC card.

The IC card reader / writer according to a second aspect is the IC card reader / writer according to the first aspect, wherein the first non-volatile data storage means stores first key data, and the processing means is the communication means. When the second key data is received via the second key data, the second key data is collated with the first key data, and only when the second key data is authenticated, the log command is received. It is characterized in that the access history can be read. The IC card reader / writer according to claim 3 is the IC card reader / writer according to claim 1, wherein the first non-volatile data storage means stores first key data, and the processing means includes the log IC card. When inserted into the insertion slot, the second key data in the log IC card is collated with the first key data, and the access is performed only when the second key data is authenticated. The feature is that the history is read.

An IC card reader / writer according to a fourth aspect is the IC card reader / writer according to any one of the first to third aspects,
The processing means is characterized in that the access history stored in the second nonvolatile data storage means is cleared after the access history is read.

[0015]

DETAILED DESCRIPTION OF THE INVENTION An embodiment of the present invention will be described below with reference to the drawings. [A. Usage Form] First, an IC according to an embodiment of the present invention
The usage of the card reader / writer will be described. FIG. 2 is a diagram showing a configuration example of a system using an IC card reader / writer according to an embodiment of the present invention. The system shown in this figure is used as a gate system or an entrance / exit management system.

In FIG. 2, reference numeral 1 denotes an IC card carried by an object, which can record, for example, 32 Kbytes of data. Reference numeral 2 denotes an IC card reader / writer according to an embodiment of the present invention, which is provided for each gate. Reference numeral 3 denotes a terminal, to which at least one IC card reader / writer 2 and a modem 3a are connected via RS-232C. There may be a plurality of terminals 3 in one system, but here, in order to avoid a complicated description, it is assumed that only one terminal 3 exists in the system.

Reference numeral 4 is a host computer arranged at a remote place, and a modem 4a and one IC card reader / writer 2 are connected via RS-232C. The host computer 4 and the terminal 3 are connected via modems 4a, 3a and an analog public line to construct an online system. Note that IS is not limited to analog public lines.
LAN (Loca such as DN public line, leased line, Ethernet, etc.)
l Area Network) or the like may be used. In this case, it is necessary to appropriately use devices such as DSU, TA, gateway, LAN board, etc. instead of the modem. In the online system, the access information of the IC card 1 is transmitted from the IC card reader / writer 2 to the host computer 4 via the terminal 3, the modem 3a, the analog public line, and the modem 4a.

On the other hand, in the off-line system, the access information is transmitted to the host computer 4 via the portable log IC card 5. This log IC card 5
A indicating that it is a log IC card when the reset signal is received
IC except for sending TR information (initial response information)
It has the same structure as the card 1. The access information is transmitted by inserting the log IC card 5 into the IC card reader / writer 2 and writing the access information stored in the IC card reader / writer 2 to the log IC card 5 to write the access information. The log IC card 5 is transported to the installation location of the host computer 4, and the host computer 4
It is achieved by inserting the IC card reader / writer 2 connected to the.

The connection between the IC card reader / writer 2 and the computers 3 and 4 is not limited to the connection using a serial port such as RS-232C, but a parallel port or an S port.
Although a connection using a CSI port or the like may be used, here, RS-232C is used from the viewpoint of simplifying the configuration of the IC card reader / writer 2. Also,
The host computer 4 can operate as a host computer in a plurality of systems, but here, in order to avoid complicated description, it is assumed that only one system is targeted.

[B. Configuration] Next, the configuration of the IC card reader / writer 2 will be described with reference to FIG. Figure 1
3 is a block diagram showing the configuration of the IC card reader / writer 2. As shown in FIG.
The writer 2 is composed of an IC card R / W unit 6 that actually reads from and writes to the IC card and its control circuit 7. The IC card R / W unit 6 has an IC
A card insertion port and a sensor that detects that an IC card has been inserted into the insertion port are provided. The control circuit 7 is a one-chip microcomputer with a built-in flash memory (FROM) (for example, HD64F manufactured by Hitachi, Ltd.).
5388), which will be described in detail below.

In the control circuit 7, 8 is a FROM, which is a program for accessing the IC card, IC
The operation program of the card reader / writer itself, the first key data required for authentication, and the IC card reader / card.
The number of the gate where the writer 2 is installed is stored.
Further, 9 is a CPU (central processing unit) that executes programs stored in the FROM 8, and 10 is a FRAM (flash RAM) that stores access information as a log,
It is controlled by the CPU 9. This FRAM10 is E
EPROM (Electricaly Erasable Programmable ROM)
It is a non-volatile memory that can realize much faster access than the above.

Reference numeral 11 is a real-time clock that generates data representing the actual time and supplies it to the CPU 9.
It is controlled by the CPU 9. Reference numeral 12 is an RS232C conversion circuit (IC), which is an RS232C for external connection with the CPU 9.
Converts the data format to and from the connector 13. The above elements 8, 10, 11, 12 are each connected to the CPU 9 by a bus.

The CPU 9 and the IC card R / W unit 6 are connected to each other by five control lines including GND at the connector 14, and the CPU 9 and the IC card R / W unit 6 are connected.
To Vcc, reset signal (RST), data signal (I /
O), and a clock signal (CLK). A clock 15 is inserted on the clock signal line and is configured to generate a clock signal based on the data supplied from the CPU 9 and supply it to the IC card R / W unit 6.

[C. Operation of IC Card Reader / Writer 2] Next, the operation of the IC card reader / writer 2 will be described with reference to FIG. However, if the subject of the operation is omitted in the following description, it is assumed that the CPU 9 is the subject. Figure 3 shows the IC card reader / writer 2
3 is a flowchart showing an example of the operation flow of FIG.
Command has not been received via the
While not being inserted into the card R / W unit 6, keep waiting for any event (steps SA1, SA
2). When a command is received from the host side in such a state, it is judged whether or not the command is addressed to itself (step SA3),
If it is addressed to itself, the process based on the command is executed (step SA4). Specific execution processing will be described later.

Whether the execution process of the instruction is completed, or step S
If it is determined in A3 that the command is not addressed to itself, the process returns to the above event waiting loop. Note that the reception of the command from the host side is an event that can occur only in the online system, and the processing of steps SA3 and SA4 is not executed in the offline system.

When the IC card is inserted into the IC card R / W unit 6 in the event waiting loop, the processing after step SA5 is executed. First, IC card R
A reset signal is transmitted to the IC card via the / W unit 6 to activate the IC card (step SA5), and correspondingly, the ATR information transmitted from the IC card is received (step SA6). The second key data (card number) included in is read (step S
A7).

The above card number is compared with the card number (first key data) of the log IC card stored in the FROM 8 (step SA8).
The card is recognized as the log IC card 5, and the FRAM1
The log stored in 0 is read (step SA9) and written in the log IC card 5 (step SA10).
On the contrary, if they do not match, the IC card is replaced with a normal IC card.
It is recognized as the card 1, and the gate number and the date and time generated by the real-time clock 11 are written into this IC card 1 (step SA11), and access information is generated to generate FR.
Add to the log stored in AM10 (step SA1)
2).

In any of the above cases, the IC is
The card is ejected (step SA13), and the process returns to steps SA1 and SA2, that is, the event waiting loop. Since the reception of the command from the host is realized by the SCI interrupt, steps SA5 to SA1 are executed.
Even during the card processing in No. 3, the data can always be received.

[D. Instruction Execution Process from Host Side] Next, the instruction execution process from the host side in step SA4 will be described with reference to FIGS. 4 to 6. Figure 4
In the flow shown in (1), first, it is determined whether the received command is a log command (log command) or a Time command (clock command). (Steps SB1 to SB3). The command from the host side and the response to the host side are shown in Fig. 5.
The format is as shown in. In the command and response, the ID is a block of 2 bytes in total, in which the upper 1 byte is the partner address and the lower 1 byte is the own address. COD is a 1-byte block indicating the instruction code,
DATA is a variable-length block that stores the parameters attached to the instruction and the processing result of the instruction, and LEN is a 2-byte block that stores the sum of the lengths of the COD block and the DATA block. In the response, ST
Reference numerals 1 and ST2 are blocks for storing a status code indicating whether or not the instruction has been successfully executed. Therefore, in step SB1, the type of instruction can be determined by referring to the COD block of the instruction.

When it is determined in steps SB1 and SB2 that the command is not one of the commands, a response indicating a command error is set (step SB4), and this is transmitted to the host side (step SB5). That is, in the present embodiment, commands other than the above two types of commands are issued to the IC card reader /
It is assumed that the writer 2 does not receive it.

By the way, since the date and time generated by the real-time clock 11 may be different from the actual date and time, the host side needs to make adjustments so that the real-time clock 11 generates a normal date and time. This adjustment processing is realized by transmitting the Time command twice to the IC card reader / writer 2. First, the real-time clock 11
The time command for reading the date and time generated by the real-time clock 11 is transmitted, and if the time and date are deviated, the real-time clock 11 is adjusted by transmitting the Time command for setting the date and time generated by the real-time clock 11 to a normal time and date.

The Time instruction has a 1-byte block P1 for designating read / write, as shown in FIG. 6 (b). In step SB3,
The content of the block P1 indicates reading (for example, 1
When it is determined that the hexadecimal number is 30), YY is written in the read data block (12 bytes) of the response.
The generation date and time of the real-time clock 11 is set in the format of MM DD hour, minute, second (step SB6).
On the contrary, if it is determined that the content of the block P1 indicates writing (for example, 31 in hexadecimal notation),
Write data in the above format with real time clock 11
Is set (step SB7). Then, in any of the above cases, data indicating that the Time command has been normally completed is stored in the ST1 block and / or ST2 block of the response, and the response is transmitted to the host side (step SB5).

If it is determined in step SB1 that the instruction is a log instruction, it is first determined whether the system key collation has succeeded. The format of the log command and its response is as shown in FIG. 6A, and the log command has a system key block of 8 bytes. System key (second key data) and FR in this block
The above collation is performed by comparing the first key data stored in the OM8. If this collation fails, the ST1 block and / or ST2 of the response
Data to that effect is set in the block, and the response is transmitted to the host side (step SB5).

On the contrary, if the system key verification is successful, the log stored in the FRAM 10 is read (step SB9), this is set in the log data block of the response, and the log in the FRAM 10 is cleared ( In step SB10), the response is transmitted to the host side (step SB5). In addition, S of the response
For the T1 block and / or the ST2 block, lo
Data indicating that the g instruction has been normally completed is stored.

[E. [Conclusion] As described above, according to the embodiment of the present invention, the real-time clock 11 is built in and the log is written in the FRAM 10. Therefore, the log is logged at a speed sufficient to be applied to a gate system or an entrance / exit management system. The writing process can be executed. Further, a power supply for holding the log is unnecessary, and it is possible to reliably avoid the situation where the log disappears.

Further, the IC card reader / writer 2 installed in each gate can have the same structure regardless of whether it is online or offline, so that the labor required for system management can be reduced. Further, when offline, the log is written in the IC card so that it can be transported to the host side, and at that time, the key data of the IC card is used for authentication, which is superior in security as compared to a memory card and the like. Even when a failure such as a disconnection of a communication line in an online system occurs, logs can be collected via an IC card without replacing the IC card reader / writer 2.

In the above embodiment, the IC card reader / writer 2 is connected via the terminal 3 and the modem 3a when online, but the IC card reader / writer 2 is provided with a modem function. The terminal 3 and the modem 3a may be omitted. Further, in the verification of the system key, the random number based on the date and time generated by the real-time clock 11 may be used for encryption and authentication. Further, without clearing the log after reading, the start address of the log to be read next time is set to FRAM.
The log may be stored in 10 specific areas and the log may be read from the middle by referring to this.

[0038]

As described above, according to the present invention,
Since it can be used both online and offline, the degree of freedom of the system can be secured without significantly increasing the manufacturing cost, and the time and effort required for system management can be reduced. Further, by using the second non-volatile data storage means that can be rewritten at high speed, it is possible to obtain a sufficient processing speed even in a system in which access information frequently occurs, such as an entrance / exit management system, and the data once recorded can be recorded. The possibility of disappearance can be suppressed to an extremely low level (Claim 1).

Further, since the collation processing of the key data is imposed at the time of reading the access history, it is possible to surely prevent the falsification and forgery of the data in both online and offline cases (claims 2 and 3). Further, since the access history after reading is cleared, the configuration of the access program for the second nonvolatile data storage means can be further simplified (claim 4).

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an IC card reader / writer according to an embodiment of the present invention.

FIG. 2 is a diagram showing an operation example of the IC card reader / writer.

FIG. 3 is a flowchart showing an operation example of the IC card reader / writer.

FIG. 4 is a flowchart showing a processing example of a command from a host in the IC card reader / writer.

FIG. 5 is a diagram showing a general format example of an instruction from a host in the IC card reader / writer.

FIG. 6 is a diagram showing a specific example of a format of an instruction supplied to the IC card reader / writer, (a) corresponding to a log instruction and (b) corresponding to a Time instruction.

[Explanation of symbols]

1 ... IC card, 2 ... IC card reader / writer, 6 ...
IC card R / W unit, 7 ... control circuit, 8 ... FRO
M, 9 ... CPU, 10 ... FRAM, 11 ... Real-time clock, 12 ... RS232C conversion circuit, 13 ... RS2
32C connector, 14 ... Connector.

─────────────────────────────────────────────────── ─── Continuation of the front page (56) References JP-A-4-215163 (JP, A) JP-A-4-184647 (JP, A) JP-A-5-204767 (JP, A) (58) Field (Int.Cl. ⁷ , DB name) G06K 17/00

Claims (4)

(57) [Claims] 1. An I provided with an insertion opening and inserted into the insertion opening.
An IC card read / write means for reading / writing data from / to the C card, a real-time clock for outputting real-time data representing an actual time, and a first nonvolatile data storage storing a control program for the IC card read / write means. Means, high-speed rewritable second non-volatile data storage means, communication means for transmitting and receiving data to and from an external device, and executing the control program stored in the first non-volatile data storage means, An IC card reader / writer comprising: a processing unit that stores the access history of the IC card read and written by the IC card reading and writing unit in the second non-volatile data storage unit using the real-time data. When the log command is received via the communication means, the access history is retrieved from the second non-volatile data storage means. When the IC card inserted in the insertion slot is a log IC card, the access history is read out from the second non-volatile data storage means, and the log is transmitted to the outside through the communication means. An IC card reader / writer characterized by writing on an IC card for use. 2. The first non-volatile data storage means stores first key data, and the processing means stores the second key data when the second key data is received via the communication means. 2. The key history is collated with the first key data, and the access history can be read when the log command is received only when the second key data is authenticated. IC card reader / writer described. 3. The first non-volatile data storage means stores first key data, and the processing means, when the log IC card is inserted into the insertion port, the log IC. 2. The access history is read only when the second key data in the card is compared with the first key data and only when the second key data is authenticated. IC card reader / writer. 4. The processing unit clears the access history stored in the second non-volatile data storage unit after the access history is read out. IC card reader / writer.