JP3910300B2 - IC card program management system and method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a system for managing a program stored in an IC card, and in particular, when a user replaces his IC card with a new one, the same function as the IC card used so far is put in the new IC card. The present invention relates to an IC card program management system suitable for use.
[0002]
[Prior art]
A system using a conventional IC card is a single-purpose use type. For example, an IC card used in a health management system serving in A town has been issued by and can only be used in the A town system. In other words, it is an lcard 1 application. However, with the increase in capacity of IC cards, there is a shift to multipurpose use IC cards, that is, one card and multiple applications. For example, an application program for a book lending system in a library in town B and an application program having the function of a cash card for bank C are stored on one IC card and can be used in both systems.
[0003]
By the way, since the IC card is hardware and naturally deteriorates when the years of use elapse, the expiration date is set for the IC card as the current expiration date of the cash card, and when the expiration date is passed, Makes the card unusable and asks the user to follow a procedure to replace it with a new IC card. In addition, the IC card may be damaged or lost. In other words, IC cards must be replaced sooner or later.
[0004]
[Problems to be solved by the invention]
However, in the case of a multi-purpose IC card, when a user replaces his IC card with a new one, it is very difficult to make the IC card having the same function as the IC card used so far, that is, the same application program. . The reason is as follows.
[0005]
Each application program stored in the multipurpose IC card is expected to be created and operated by a different company or organization. It is also expected that the system to be used is different for each IC card owner, that is, the user, and therefore the application program stored for each IC card is different. Therefore, in order to give a new IC card the same function as the conventional IC card, the user needs to know the information in the previous IC card, for example, what version of what application program of which company is included. It is necessary to know accurately. Furthermore, the user must ask each of a plurality of companies that provided these applications to reload the application onto a new IC card. This is a great work burden for the user, and the utility value of the multipurpose IC card can be negatively reversed.
[0006]
Accordingly, an object of the present invention is to make an IC card having the same function (same application program) as an IC card used so far easily and surely when a user replaces his IC card with a new one. It is to provide a system that can do this.
[0007]
[Means for Solving the Problems]
The IC card program management system according to the present invention relates substantially to the program stored in the IC card possessed by each of a large number of users , and information on the application used by the user, to the specific information of each user. When managing the program management server that is attached and the IC card that each user has so far to update to a new IC card, the new IC card can be set and can communicate with the management server And a connected IC card read / write device. The IC card read / write device receives the input of the unique information of the user who set the new card, reads out the type information indicating the type of the program stored in the card from the new card, and transmits it to the program management server. The program management server receives the unique information and type information , detects the application program used by the user from the information related to the unique information, and among the detected programs, the detected program and A program that is determined not to be stored in the new IC card from the difference between the type of program indicated by the received type information is transmitted to the IC card read / write device. The IC card read / write device receives the program sent from the program management server and installs it on the new IC card. Thereby, the same function as the IC card possessed until now can be given to the new IC card.
[0008]
The program management server of the present invention is typically implemented by a computer, and the computer program for this purpose can be installed or loaded on the computer through various media such as disk storage, semiconductor memory, and communication network.
[0009]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 shows the overall configuration of an embodiment of the present invention.
[0010]
An application program management server (hereinafter referred to as “management server”) 1, various IC card read / write devices (for example, ATM, cash dispenser, personal computer, etc.) 5 used by a user, and an IC card application program or its application Servers and hosts (eg, bank gateways, hereinafter referred to as “supplier hosts”) 7 of systems such as companies and organizations (hereinafter referred to as “suppliers”) that provide services that have been provided to each other through the communication network 3 Connected as possible.
[0011]
The management server 1 manages application programs stored in a large number of IC cards 13 owned by a large number of users, and when each user obtains a new IC card, the user has previously received the new IC card. It has the function of installing the same function (same application program) as the IC card used. The management server 1 includes a user management database 9 in which personal information such as the name and ID number of each user and user information such as the ID number and expiration date of the IC card 13 possessed by the user are registered, and each user's And a program management database 11 in which program information such as information identifying application programs stored in the IC card 11 and application programs provided from the supplier host 7 is registered.
[0012]
The operation will be described below.
[0013]
It is assumed that the IC card 13 used by the user has expired, is damaged, malfunctioned, or lost. First, the user notifies the IC card issuer accordingly. Here, the IC card issuer is a person who has the authority to issue an IC card as hardware, and is, for example, a third institution authorized by all suppliers and managing the management server 1. That doesn't have to be the case. Note that when the expiration date of the IC card 13 expires, the IC card issuer manages the expiration date in the user management database 9 or the like, so the user does not need to report in particular.
[0014]
The IC card issuer who knows the above fact gives the user an IC card 13 in which only basic information such as an OS and an authentication program, and an IC card ID number and expiration date are stored. hand over. Here, as a delivery method, a conventional method such as mail may be used, or the delivery may be entrusted to a supplier who installs the IC card read / write device 5 (for example, at a store such as a bank or a convenience store or a card) Handed to the user from a machine like an automatic issuing machine). Since this new IC card 13 has not yet been stored with application programs, user information, etc., it cannot be used in any system yet. The IC card ID number, expiration date, etc. of the issued new IC card are registered in the user area of the user management database 9.
[0015]
Next, the user inserts the new IC card 13 into the IC card read / write device 5 and selects and presses a new issue button from the menu buttons on the device 5. At this time, the user inputs information identifying himself / herself such as his / her name and user ID number, and also inputs information indicating that the user is a regular user such as a password. The IC card read / write device 5 transmits the information input by the user to the management server 1. The management server 1 collates the user information in the user management database 9 with the user input information, and if a match is obtained, confirms that the user is a legitimate user who needs to replace the IC card.
[0016]
Next, the management server 1 sends user information (such as authentication information such as name, user ID number, and password) to be written to the new IC card 13 from the user management database 9 to the IC card read / write device 5. The IC card read / write device 5 writes the received user information in the IC card 13.
[0017]
Next, the management server 1 searches the program management database 11 for all of the application programs (which may be plural) that have been in the old IC card that the user has used so far, and the IC card read / write device. Send to 5. The IC card read / write device 5 writes the received application program 5 on the IC card. As a result, the new IC card 13 has substantially the same function as the old IC card used so far.
[0018]
When a user newly installs or upgrades an application program of a certain supplier in the IC card 13, the supplier uses the IC card read / write device 5 at the supplier (or its agent) or at the supplier. New installation or version upgrade can be performed online from the host 7 or the management server 1. In that case, information on the newly installed or upgraded program is provided to the management server 1 online from the supplier host 7 or offline from the supplier (or its agent) as needed. The management server 1 updates the program information of the user in the program management database 11 based on the new installation or version upgrade information. Therefore, the management server 1 always holds the latest state of the IC card 13 possessed by all users.
[0019]
By the way, it is desirable that data and commands communicated on the network 3 or between the IC card read / write device 5 and the IC card 13 are encrypted for security. When performing this encryption, as a matter of course, the network communication program of the management server 1 and the IC card read / write device 5, the IC card access unit of the IC card write device 5, and the IC card 13 are encrypted. And a decryption processing component.
[0020]
Hereinafter, the configuration and operation of each part of the system will be described in more detail.
[0021]
FIG. 2 shows the configuration of the IC card read / write device 5.
[0022]
The IC card read / write device 5 is under the control of a display unit 21 that displays menu buttons and messages to the user, a main processing unit 23 that executes a corresponding process in response to a menu button operation by the user, and a main processing unit 23. A reading unit 25 and a writing unit 27 that respectively read and write data to and from the IC card 13, and a transmission unit 29 that receives and transmits data to and from the management server 1 and the supplier host 7 through the network 3 under the control of the main processing unit 23 and reception. Part 31.
[0023]
FIG. 3 shows the configuration of the management server 1.
[0024]
The management server 1 includes a display unit 41 that provides a graphical user interface to the operator, a main processing unit 43 that executes a corresponding process in response to a command from the operator or a request from the IC card read / write device 5, A user management database access unit 45 and a program management database access unit 47 for accessing the user management database 9 and the program management database 11 under the control of the main processing unit 43, and an IC through the network 3 under the control of the main processing unit 43, respectively. It has a transmission unit 49 and a reception unit 51 that respectively transmit and receive data to and from the card read / write device 5 and the supplier host 7.
[0025]
FIG. 4 shows the configuration of the program in the IC card 13.
[0026]
The usable IC card 13 has an internal memory (mask ROM, programmable ROM, nonvolatile RAM, etc.), OS 61, authentication program 63, common information (IC card ID number, expiration date, user number, password, issuance count). , User name, etc.) 65, stored application type (identification) information 67, and one or more application programs 69A, 69B,... Here, the IC card ID number and the expiration date in the OS 61, the authentication program 63, and the common information 65 are already installed when the IC card 13 is first issued. In particular, since the IC card ID number and the expiration date are information unique to the card and are unchanged, they are written in the mask ROM. Of course, the OS 61 and the authentication program 63 can also be stored in the mask ROM if it is not necessary to cope with version upgrades. Since other information is written after the card issuance, it is stored in a writable non-volatile medium such as a programmable ROM or a non-volatile RAM.
[0027]
FIG. 5 shows data items of the user management database 9 managed by the management server 1.
[0028]
The user management database 9 includes, for each user, a user ID number, an IC card ID number, an IC card expiration date, the number of times of issuance, an issuance permission flag when an IC card is newly issued, a password, a user name, a date of birth, an address, Stores usage flags for various applications. Here, the IC card new issue permission flag indicates that an IC card can be newly issued to the user. For example, an application after a new IC card is issued to the user is installed. This flag is set during the period when If this flag is not set, the management server 1 does not install the application. The use flags for various applications are set when the user uses the application, and the management server 1 installs only the applications for which this flag is set.
[0029]
FIG. 6 shows data items of the program management database 11 managed by the management server 1.
[0030]
The program management database 11 stores, for each application, the service status flag of the application and the substance of the application program. Here, the service status flag is set when a service using the application is executed, and is lowered when the service is stopped. The management server 1 does not install an application with this flag turned off.
[0031]
FIG. 7 shows the flow of the main process 23 of the IC card read / write device 5 when installing an application.
[0032]
When the IC card read / write device 5 detects the insertion of the IC card 13 (step S1), the IC card read / write device 5 reads the common information 65 (see FIG. 4) from the IC card 13 (S2). It is checked whether the number is correct (S3). If the number does not pass, predetermined error processing is performed. If the check is passed, the user identification information such as the user ID number and authentication information such as powered are input to the user (S4), and the user input information, the IC card ID number and the expiration date are transmitted to the management server 1. (S5).
[0033]
Next, a message indicating whether the IC card exchange process (application installation) is permitted is received from the management server 1 (S6). In the case of permission, information that was not installed at the time of card issuance, such as the user ID number, password, number of issuances, and user name, among the common information 65 shown in FIG. become. Whether the electronic message is permitted or not is determined (S7). If the message is not permitted, predetermined error processing is performed.
[0034]
On the other hand, in the case of permission, the received user ID number, password, number of issues, user name, etc. are written in the IC card 13 (S8). Subsequently, the type information 67 of the stored application shown in FIG. 4 is read from the IC card 13 (S9), and the type information and the application download request command are transmitted to the management server 1 (S10). In the case of a new IC card, the stored application type information 67 indicates “no application”, whereby the management server 1 can confirm that it is a new IC card.
[0035]
Next, the entity of the application program to be stored sent from the management server 1 is received (S11), the received application program is written into the IC card 13, and the type information of the written application program is also stored in the IC card. Write (S12). When all the downloaded application programs have been written to the IC card 13, the IC card read / write device 5 ends the main process and returns the IC card 13 to the user.
[0036]
FIG. 8 shows the flow of the main processing unit 43 of the management server 1 during application installation.
[0037]
First, the management server 1 receives the user ID number, password, expiration date, card ID number, etc. transmitted from the IC card read / write device 5 in step S5 of FIG. 7 (S21). Next, using the received user ID number as a search key, user information such as the user's password, user ID number, number of times of issue, and user name is read from the user management database 9 (S22). The received password is compared (S22). As a result, if they do not match, an error is notified to the IC card read / write device 5 (S24).
[0038]
On the other hand, if the passwords match, the card ID number and expiration date received from the user are written in the record of the user in the user management database 9 (S25), and then the user ID obtained from the user management database 9 earlier. The number, password, number of times of issuance, user name, etc. are transmitted to the IC card read / write device 5 together with a message indicating that the card exchange is permitted (S26).
[0039]
Next, it waits for a response from the IC card read / write device 5 (S27), and receives from the IC card read / write device 5 the download request command and stored application type information transmitted in step S10 of FIG. 7 (S28). ). Next, the application program that the user has used so far is detected from the application use flag in the user management database 9 (S29), and this is compared with the application type information received in step S28, and the difference is detected. Is recognized as an application not yet stored in the user's IC card 13 (S30). In the case of a new IC card, since the application type information indicates “none”, all of the applications read from the application use flag are applications that have not yet been stored.
[0040]
Next, with respect to the application that has not yet been stored, it is checked from the service status flag in the program management database 11 whether or not it is “in service” (S 31), and only the application programs that are in service are checked from the program management database 11. Reading (S32) and transmitting to the IC card read / write device 33 (S33).
[0041]
As described above, the new IC card of the user can be given the same function as the IC card used so far.
[0042]
In the above embodiment, even if it is a multi-purpose use type IC card, the correspondence window for the user is unified to the IC card issuer, which is convenient for the user. In addition, since the application provider automatically updates the program in the IC card owned by the user simply by storing the application program in the program management database, maintenance and operation costs can be reduced. In addition, since the management server can centrally grasp which user uses which application program, that is, which system (service) is used, it is possible to easily know customer needs.
[0043]
For a card issuer, when issuing an IC card to a user, it is not necessary to store the user information and the program after storing them in the IC card. In other words, just handing over (selling) the card to the user at a place where there is an IC card read / write device or a convenience store, etc., and then the user can actually restore the original IC card by downloading his / her own program. can do. For the user, for example, there is no need to wait for the reissued IC card to arrive by mail after it has been lost. The IC card read / write device can be obtained at a nearby IC card read / write device or at a distributor. Download more and get a reissued IC card right away.
[0044]
As mentioned above, although one Embodiment of this invention was described, this Embodiment is an illustration for description of this invention to the last, and is not the meaning which limits this invention only to this Embodiment. Therefore, the present invention can be implemented in various forms other than the above-described embodiment.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an embodiment of the present invention.
2 is a block diagram showing a configuration of an IC card read / write device 5. FIG.
FIG. 3 is a block diagram showing the configuration of the management server 1;
4 is a block diagram showing the configuration of a program in the IC card 13. FIG.
FIG. 5 is an explanatory diagram showing data items of a user management database 9 managed by the management server 1;
6 is an explanatory diagram showing data items in a program management database 11 managed by the management server 1. FIG.
FIG. 7 is a flowchart showing the flow of the main processing unit 23 of the IC card read / write device 5 when installing an application.
FIG. 8 is a flowchart showing the flow of the main processing unit 43 of the management server 1 when installing an application.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Application program management server 3 Communication network 5 IC card reader / writer 9 User management database 11 Program management database 13 IC card

Claims (4)

A program management server that manages substantially the same program as the program stored in an IC card possessed by each of a large number of users , and information on the applications used by the users in association with the specific information of each user;
When updating the IC card that each user has so far to a new IC card, the new IC card is set, connected to the management server so as to be communicable, and the user's input entered by the user An IC card read / write device that transmits unique information and type information indicating the type of program stored in the new IC card, read from the new IC card, to the program management server;
The program management server receives the unique information and the type information from the IC card read / write device , detects a program of an application used by the user from information related to the received unique information, and detects this and among the program, and transmits the program to be determined from the difference of the comparison between the types of programs indicated by the type information received with the detected program is not stored in the new IC card to said IC card reading and writing apparatus,
The IC card read / write device receives the program transmitted from the program management server and installs it on the new IC card, whereby the new IC card has the same functions as those of the IC card possessed so far. Program management system for IC cards that can be given. A process of managing substantially the same program stored in an IC card possessed by each of a large number of users and information on the application used by the user in association with the specific information of each user in the program management server When,
A process of setting the new IC card in the IC card read / write device when each user updates the IC card possessed so far by a new IC card;
The IC card read / write device receives the user's unique information input by the user and the type information indicating the type of the program stored in the new IC card, read from the new IC card, to the program management server. Sending process,
The program management server receives the unique information and the type information from the IC card read / write device , detects a program of an application used by the user from information related to the received unique information, and detects this of the program, the process of transmitting a program which is determined from the comparison between the type of program indicated by the type information received with the detected program differences not stored in said new IC card to said IC card reading and writing apparatus When,
A process of writing the program transmitted from the program management server to the new IC card from the IC card read / write device, whereby the same function as that of the IC card possessed so far in the new IC card IC card program management method capable of providing A program management means for managing substantially the same program as the program stored in the IC card possessed by each of a large number of users , and information on the application used by the user in association with the specific information of each user;
An IC card read / write device capable of setting the new IC card when an IC card possessed by each user is updated to a new IC card, and a connection means for connecting to be communicable;
The specific information of the user input from the IC card read / write device to the IC card read / write device by the user and the program stored in the new IC card read from the new IC card by the IC card read / write device Receiving the type information indicating the type of the application, detecting the program of the application used by the user from the information related to the received unique information, and receiving the detected program and the detected program among the detected programs Program downloading means for obtaining from the program management means a program that is determined not to be stored in the new IC card from the difference between the type of program indicated by the type information and transmitting it to the IC card read / write device. , Thereby to the new IC card Serial management server of the program for the IC card, which can give the same function as the IC card that was in possession until now. A program management means for managing substantially the same program as the program stored in the IC card possessed by each of a large number of users , and information on the application used by the user in association with the specific information of each user;
An IC card read / write device capable of setting the new IC card when an IC card possessed by each user is updated to a new IC card, and a connection means for connecting to be communicable;
The specific information of the user input from the IC card read / write device to the IC card read / write device by the user and the program stored in the new IC card read from the new IC card by the IC card read / write device Receiving the type information indicating the type of the application, detecting the program of the application used by the user from the information related to the received unique information, and receiving the detected program and the detected program among the detected programs Program downloading means for obtaining from the program management means a program that is determined not to be stored in the new IC card from the difference between the type of program indicated by the type information and transmitting it to the IC card read / write device. , Thereby to the new IC card Carrying computer readable recording medium storing a program for causing a computer to function serial as the management server, the program IC card capable of providing the same function as the IC card which has been possessed far.

Images