JP3849036B2 - Card reader and card reader communication control method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a card reader that reads data stored in an IC card and transmits it to the host device side by communicating with the host device, and a card reader communication control method.
[0002]
[Problems to be solved by the invention]
Currently, a system using an IC card including a memory, a CPU, and the like in which data is stored is being applied to, for example, room entry management, personal computer access management, company attendance management, payment terminal, and the like. Since the IC card has a large memory data capacity, one IC card can handle a plurality of applications. In this case, data corresponding to each application is stored in the internal memory, and security protection is applied to each data for each application, so that unauthorized access is prohibited.
[0003]
On the other hand, various communication interfaces (protocols such as RS-232C, USB, LAN, etc.) are used for each application between a card reader that communicates with an IC card and reads stored data and a host device. Has been. Therefore, it is necessary to provide the card reader with a communication port that is used according to each application, and there is a problem that the burden on development and product management increases.
[0004]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a single card reader that can easily cope with a case where an interface for communicating with a host device differs depending on an application. It is another object of the present invention to provide a card reader communication control method.
[0005]
[Means for Solving the Problems]
According to the card reader of claim 1, wherein, since the communication port for communicating respectively with a plurality of connected host device for each of a plurality of said application comprises a plurality of types, between the host device in accordance with various applications Even if the communication interface is different, the communication port can be selected and used by one unit. Since there is no need to make different card readers corresponding to different interfaces, product development and management can be performed in a lump, and the burden required for them can be reduced.
[0008]
Further, the communication control means performs communication performed through a plurality of types of communication ports between a plurality of host devices and an IC card before the host device to communicate according to the application to be executed is selected. Communication for checking the presence / absence of a file is permitted, and after any one of the host devices is selected, the IC card is connected to the IC card via another communication port other than the communication port for the selected host device. Communication to be performed is temporarily prohibited until communication with the selected host device is completed. That is, when data is read from the IC card after the host device to be communicated is selected according to the application to be executed, the security applied to the data on the IC card side is released. Therefore, an unauthorized access is easily made at that time.
[0009]
Therefore, after any one of the host devices is selected , communication with the IC card using another communication port other than the communication port for the selected host device is temporarily performed (for example, for a predetermined application). If it is prohibited during execution, the possibility of unauthorized access can be eliminated. In this case, communication for executing different applications using other communication ports can be executed in parallel.
[0010]
According to the card reader of claim 2, the communication control means is configured so that the plurality of types of communication ports are connected between the plurality of host devices and the IC card before the host device for communication is selected according to the application to be executed. Is permitted for communication that verifies the presence or absence of an application information file, and after any of the higher-level devices is selected, other communication other than the communication port for the selected higher-level device Mode in which communication performed with the IC card via the communication port is temporarily prohibited until communication with the selected host device is completed, and the host device via any of a plurality of types of communication ports When communication is performed, setting switching of a mode for prohibiting communication performed via other communication ports can be changed from the outside . According to this configuration, a mode in which communication is temporarily prohibited and a mode in which subsequent communication is completely prohibited can be selected according to the user's application, so that convenience can be improved.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
(First embodiment)
Hereinafter, a first embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a functional block diagram showing an electrical configuration of the card reader 1. The card reader 1 includes a control unit (communication control means) 2 including a CPU and a memory, and a plurality of peripheral circuits centering on the control unit 2. The control unit 2 communicates with the host device (host), and when data corresponding to various applications is read from the IC card 3 in response to a command from the host device, the control unit 2 transmits the data to the host device. Yes. Further, the data transmitted from the host device is written into the IC card 3 as necessary.
[0012]
The card reader 1 includes three types of interfaces (I / F, communication LSI) for communicating with a host device: (RS-) 232C interface 4, USB (Universal Serial Bus) interface 5 and LAN interface 6. Yes. That is, the card reader 1 needs to communicate with different host devices according to various applications, and can cope with various communication interfaces (protocols) provided on the host device side. .
[0013]
Although not specifically shown, the card reader 1 communicates after transporting the IC card 3 to a predetermined position inside the main body 1a when the IC card 3 is inserted into a card slot provided in the main body 1a. It is comprised so that it may perform. That is, when the control unit 2 detects the IC card 3 by a sensor (not shown) or the like, the IC card 3 is transported inside by driving the card transport unit 7 constituted by a motor, a roller and the like. Then, the control unit 2 communicates with the IC card 3 via the contact IC card interface 8 or the non-contact IC card interface 9 according to the type of the IC card 3 and reads data stored in the IC card 3. The data read by the control unit 2 is transmitted to the higher-level device side via any one of the interfaces (communication ports) 4-6.
[0014]
In addition, the card reader 1 includes a numeric keypad 10 for input operation, a display unit 11 for performing necessary display, a power supply unit 12 for supplying power for operation to each unit, and the like.
[0015]
FIG. 2 schematically shows the configuration of the entire IC card system including the host device side. For example, a host device 13 (A) such as a personal computer is connected to the card reader 1 via the USB interface 5. A database (DB) 14 that manages electronic money information as an application (application) A is connected to the host device 13. Then, the host device 13 reads the electronic money information stored in the IC card 3 and processes the settlement performed by the user of the IC card 3 using the electronic money.
[0016]
In addition to (2) electronic money information, (1) credit information, (3) bank account information, etc. are stored in the memory of the IC card 3 as data files, so that these applications can also be used. It is configured.
[0017]
The host device 15 is a host for executing a credit application, and is connected to a database 16 that manages credit information. The host device 15 can be connected to the card reader 1 via the 232C interface 4 but is not connected in the initial state.
[0018]
Next, the operation of this embodiment will be described with reference to FIG. FIG. 3 is a sequence of communication processing performed between the host device 13, the card reader 1, and the IC card 3. As shown in FIG. 2, the host device 13 is connected to the card reader 1 via the USB interface 5.
[0019]
Then, when the IC card 3 is inserted into the main body 1a of the card reader 1, when there is an inquiry of “card IN?” From the higher-level device 13 ((1)), the control unit 2 causes the higher-level device 15 (B). The setting for prohibiting communication with the terminal is made (2). That is, only the USB interface 5 used first is set as an effective communication port, and the 232C interface 4 and the LAN interface 6 are set to be disabled, and the communication port is set to indicate that only the USB interface 5 is enabled. The flag is set in the internal memory ((3)).
[0020]
Thereafter, normal communication processing with the normal IC card 3 is performed. That is, the control unit 2 returns a response “YES” to the inquiry of “card IN?” From the higher-level device 13 ((4)). Then, the host device 13 inquires whether or not the IC card 3 has an information file related to electronic money ((5)), and the control unit 2 receives the inquiry and the IC card 3 has. The information contents that are present are collated ((6)). As a result, if the IC card 3 has an electronic money information file, the control circuit 2 returns a response “YES” to the host device 13 (7).
[0021]
Next, the host device 13 instructs the card reader 1 to display a menu of electronic money ((8)). Then, the control unit 2 displays a menu on the display unit 11 and returns a response “OK” ((9)). Here, when the user operates the numeric keypad 10 of the card reader 1 to select electronic money processing (10), the control unit 2 receives an inquiry “select electronic money?” From the upper device 13 ( 11) A response “YES” is returned (12).
[0022]
Then, communication related to the authentication command (for example, card authentication communication using a ciphertext, password communication, etc.) is performed between the host device 13 and the IC card 3 via the card reader 1 (13). At that time, the user operates the numeric keypad 10 to input a password. When the communication of the authentication command is properly performed, the security on the IC card 3 side is released, and the upper device 13 reads the electronic money information from the IC card 3 (and writes it as necessary). (14).
[0023]
Here, it is assumed that the host device 15 (B) is connected to the 232C interface 4 of the card reader 1 and behaves like the host device 13 and attempts to read / write data from / to the IC card 3 (15). However, since the use of the 232C interface 4 has already been prohibited in the process (2), access by the host device 15 is blocked at the card reader 1 stage.
[0024]
Finally, the host device 13 issues a command for ending communication processing such as “REST” to the card reader 1 (16). Then, a series of communication processing with the IC card 3 ends.
[0025]
As described above, according to the present embodiment, since the card reader 1 is provided with the three communication interfaces 4 to 6 in order to communicate with the host device, it is performed with the host device according to various applications. Even when the communication interfaces are different, it is possible to cope with one by selecting and using the interfaces 4 to 6. Since there is no need to make different card readers corresponding to different interfaces, product development and management can be performed in a lump, and the burden required for them can be reduced.
[0026]
Further, according to the present embodiment, when the card reader 1 control unit 2 communicates with the host device 13 via the USB interface 5, the card reader 1 control unit 2 thereafter performs communication performed via the other interfaces 4 and 6. It was banned. Therefore, it is possible to reliably prevent the host device 15 or the like for executing an application other than electronic money from illegally accessing the IC card 3 via the 232C interface 4.
[0027]
(Second embodiment)
4 and 5 show a second embodiment of the present invention. The same parts as those of the first embodiment are denoted by the same reference numerals and the description thereof is omitted. Only different parts will be described below. The configuration of the second embodiment is basically the same as that of the first embodiment, and the processing contents based on software in the control unit 2 are different.
[0028]
As shown in FIG. 4, in the second embodiment, the upper device 13 corresponding to the electronic money application and the upper device 15 corresponding to the credit application are preliminarily connected to the card reader 1 via the USB interface 5 and 232C interface 4 respectively. It is connected to the. The control unit 2 is configured to execute the electronic money application and the credit application in parallel.
[0029]
Next, the operation of the second embodiment will be described with reference to FIG. First, the host device 15 makes an inquiry of “card IN?” To the card reader 1, and the control unit 2 returns a response “YES” ((1)). Subsequently, the host device 13 makes an inquiry of “card IN?” To the card reader 1 as in the first embodiment, and receives a response “YES” ((2)).
[0030]
Next, it is verified whether or not the host devices 15 and 13 have a credit file and an electronic money file, respectively, and a response “YES” is received from the card reader 1 ((3), (4)). Subsequently, the host devices 15 and 13 issue a credit menu and electronic money menu display request to the card reader 1, respectively, and receive a response “OK” from the card reader 1 ((5), (6)).
[0031]
Here, it is assumed that the user selects an electronic money application by operating the numeric keypad 10 as in the first embodiment (7). In this case, when the higher-level device 15 makes an inquiry about “credit selection?”, A response “NO” is received from the card reader 1 ((8)), and when the higher-level device 13 makes an inquiry about “electronic money selection?” A response “YES” is received from the card reader 1 (9).
[0032]
Then, the host device 13 communicates an authentication command with the IC card 3 via the card reader 1 as in the first embodiment (10). Then, the card reader 1 temporarily prohibits communication on the higher-level equipment 15 side (that is, prohibits communication processing performed via the 232C interface 4). (11) Electronic money is exchanged with the IC card 3. Information is read (and written if necessary) (12).
In the process (11), communication via the LAN interface 6 at the same time is temporarily prohibited.
[0033]
In this case, it is assumed that the host device 15 behaves like the host device 13 and tries to read / write data from / to the IC card 3 even though it has received the response “NO” in process (8) (13). However, since the use of the 232C interface 4 is prohibited at this time, access by the host device 15 is blocked at the stage of the card reader 1, and the control unit 2 is currently communicating with the IC card 3, so that the host device A response “BUSY” indicating that the request of 15 cannot be responded is returned.
[0034]
Thereafter, the host device 13 issues a communication processing end command to the card reader 1, thereby completing a series of communication processing with the IC card 3 (14). Thereafter, the control unit 2 permits the use of the 232C interface 4 and cancels the prohibition of communication on the higher-level equipment 15 side (15). At this time, the prohibition of communication performed via the LAN interface 6 is also canceled.
[0035]
Note that the communication prohibition process in the process (11) and the communication prohibition release process in the process (15) match the setting conditions by the user at the time of designing the card reader 1 or at the time of shipment from the production line or after the shipment. To do. The setting is performed using a dip switch, for example, and when the control unit 2 is activated, the setting of the switch is read to perform the setting when the communication inhibition mode is set.
[0036]
As described above, according to the second embodiment, the control unit 2 reads / writes data from / to the IC card 3 based on communication with the host device 13 performed through the USB interface 5. Communication performed through other interfaces 4 and 6 is temporarily prohibited.
[0037]
In other words, when data is read from or written to the IC card 3, the security applied to the data on the IC card 3 side is released, so that unauthorized access is easily performed at that time. It becomes. Therefore, by temporarily prohibiting communication using the other interfaces 4 and 6 at the previous stage, the possibility of unauthorized access can be eliminated. In this case, the control unit 2 can execute communication for executing different applications in parallel using the other interfaces 4 and 6.
[0038]
The present invention is not limited to the embodiments described above and illustrated in the drawings, and the following modifications or expansions are possible.
In the first embodiment, the memory in which the controller 2 sets the flag may be either volatile or nonvolatile. In the case of a volatile memory, the use state of the communication interfaces 4 to 6 can be initialized by resetting the supply of power via the power supply unit 12 and newly set again.
For example, the mode in which the subsequent communication is permanently prohibited as in the first embodiment and the mode in which the communication is temporarily prohibited as in the second embodiment are set by using a dip switch as described above, for example. You may comprise so that switching is possible. If comprised in this way, since a mode can be selected according to a user's use, the convenience can be improved.
[0039]
In the second embodiment, the communication prohibition process in the process (11) may be performed before the process (10) is executed.
The number of communication ports may be two, or four or more. There may be a plurality of communication ports of the same type.
The type of communication port is not limited to that shown in the embodiment. In addition, for example, a communication port corresponding to a protocol such as Bluetooth may be provided.
The card reader may only read data from the IC card.
[Brief description of the drawings]
FIG. 1 is a functional block diagram showing an electrical configuration of a card reader according to a first embodiment of the present invention. FIG. 2 is a diagram schematically showing an overall configuration of an IC card system including a host device side. The figure which shows the sequence of the communication processing performed between a high-order apparatus, a card reader, and an IC card. [FIG. 4] The equivalent figure of FIG. 2 which shows 2nd Example of this invention [FIG. 5] The equivalent figure of FIG. ]
1 is a card reader, 2 is a control unit (communication control means), 3 is an IC card, 4 is a 232C interface (communication port), 5 is a USB interface (communication port), 6 is a LAN interface (communication port), Reference numerals 13 and 15 denote host devices.

Claims (3)

In a card reader that reads data stored in an IC card and transmits it to the host device side by communicating with the host device corresponding to the application ,
A plurality of types of communication ports for the plurality of host devices and the respective communication connected to each of a plurality of said application,
Before the host device that communicates according to the application to be executed is selected, the communication performed between the plurality of host devices and the IC card via the plurality of types of communication ports is determined by the presence or absence of the application information file. The communication to be verified is permitted, and after any one of the host devices is selected, the communication is performed with the IC card via another communication port other than the communication port for the selected host device. And a communication control means for temporarily prohibiting communication until the communication with the selected host device is completed. In a card reader that reads data stored in an IC card and transmits it to the host device side by communicating with the host device corresponding to the application,
A plurality of types of communication ports for communicating with a plurality of the host devices connected for each of the plurality of applications;
Before the host device that communicates according to the application to be executed is selected, the communication performed between the plurality of host devices and the IC card via the plurality of types of communication ports is performed based on whether or not an application information file exists. The communication to be verified is permitted, and after any one of the host devices is selected, the communication is performed with the IC card via another communication port other than the communication port for the selected host device. Communication is temporarily prohibited until communication with the selected host device is completed, and communication with the host device is performed via any of the plurality of types of communication ports. setting mode switching prohibiting communication through the other communication port of mosquitoes characterized in that a communication control unit configured to be changed from the outside Dorida. The data stored in the IC card is read out by communicating with the host device corresponding to the application and transmitted to the host device side, and each of the plurality of host devices connected for each of the plurality of applications a method for controlling communication of a plurality of types includes a card reader for communication ports for communicating,
Before the host device that communicates according to the application to be executed is selected, the communication performed between the plurality of host devices and the IC card via the plurality of types of communication ports is determined by the presence or absence of the application information file. The communication to be verified is permitted, and after any one of the host devices is selected, the communication is performed with the IC card via another communication port other than the communication port for the selected host device. The card reader communication control method is characterized in that communication is temporarily prohibited until communication with the selected host device is completed.

Images