JP4337333B2 - Card authentication method and apparatus - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a card authentication method, and more particularly, to a card authentication method that increases the security level and enables reuse of a card that is recovered after being lost by a simple method.
[0002]
[Prior art]
Japanese Patent Laid-Open No. 2001-291103 discloses a fingerprint authentication device using an IC card. First, fingerprint data is recorded in advance on an IC card. In this fingerprint authentication device, the fingerprint data recorded on the IC card is read out, the fingerprint data of the user is newly read out, and the two fingerprints are collated to perform the personal authentication.
[0003]
[Patent Document 1]
JP-A-2001-291103 [0004]
[Problems to be solved by the invention]
As described above, the conventional method has the following problems.
[0005]
Equipment for recording fingerprint data on an IC card, a device for authenticating fingerprints, and the like are necessary, and large-scale equipment is required.
[0006]
An object of the present invention is to provide a card authentication method that increases the security level by a simple method.
[0007]
[Means for Solving the Problems]
In order to achieve the above object, the card ID, password, and update count are stored in the card. Also, the correspondence between the card ID and the number of updates is registered in the CPU device. If the card is lost, a card with the card ID stored in the lost card and having a different number of updates is issued.
[0008]
Also, the correspondence between the card ID of the issued card and the number of updates is registered in the CPU device. In the card authentication, when the password is correct and the update count stored in the card matches the update count of the authentication target card registered in the CPU device, the authentication is passed.
[0009]
In this way, a card authentication method that increases the security level can be provided by a simple method.
[0010]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described with reference to the drawings.
[0011]
FIG. 1 is a structural diagram of an IC card 1 of the present invention. The IC card 1 includes a card ID 2, an update count 3, and a password 4. The update of the update count 2 will be described in detail later.
[0012]
FIG. 2 is a system configuration diagram of the present invention. The CPU device 5 has an external input control function 6 and another device cooperation function 7. The CPU device 10 includes another device cooperation function 11, an information storage device 12, and an external input control device 13. The CPU devices 5 and 10 are connected by a network 9. The information storage device 12 stores a card ID 2 stored in the IC card 1 and an update count 3.
[0013]
It should be noted that the number of updates stored in the information storage device 12 can be changed by an administrator having specific authority using the external input control function 13 and cannot be referred to by general users. When a general user loses the IC card 1, the administrator issues a new IC card 1, the card ID 2 of the new IC card 1 is the same as the lost IC card, and the update count 3 is the lost IC card. The number is different from the card update count (for example, a value obtained by adding 1 to the lost update count). Then, the update count 3 of the new IC card 1 is recorded in the information storage device 12 in association with the card ID 2.
[0014]
In this way, a user who has lost the IC card 1 can use the card with the same card ID 2 and password 3 as the IC card 1 before the loss, and convenience is enhanced. In addition, the manager can change the update count 3 corresponding to the IC card 1 to reject a person who tries to abuse the lost IC card even if it tries collation.
[0015]
Note that the CPU device 5 has the information storage device 12 and the above functions can be realized without cooperation with other devices via the network 9.
[0016]
FIG. 3 is a flowchart of the IC card authentication method of the present invention. In step 14, the CPU device 5 is powered on. In step 15, the CPU device 5 requests IC card authentication. The general user inserts the IC card 1 into the external input control function 6 at step 16, and inputs the card ID 2 and the password 4 using the external input control function 6 at step 17.
[0017]
Thereafter, the collation process in step 18 is started. In step 19, the card ID 2 and the password 4 are collated. If they pass, the process proceeds to step 21, and if they do not pass, the process returns to step 17 as in step 20.
[0018]
The above is the conventional flow, but step 21 is a new step according to the present invention. In step 21, the number of updates stored in the information storage device 12 corresponding to the card ID 2 stored in the IC card 1 is extracted and collated with the number of updates 2 stored in the IC card 1. If the verification is successful, the operation is started. If the verification is not successful, the process returns to step 17.
[0019]
Although the authentication in the IC card has been described above, it can be applied to a card other than the IC card.
[0020]
【The invention's effect】
As described above, the present invention can provide a card authentication method that increases the security level in a simple manner.
[Brief description of the drawings]
FIG. 1 is a structural diagram of an IC card 1 of the present invention.
FIG. 2 is a system configuration diagram of the present invention.
FIG. 3 is a flowchart of an IC card authentication method of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... Card ID, 3 ... Update frequency, 4 ... Password, 5 ... CPU apparatus, 9 ... Network.

Claims (4)

In a card authentication method using a card in which a card ID, a password, and the number of updates are stored, and the card authentication method when the card is lost,
Register the correspondence between the card ID and the number of updates in the CPU device,
The card reissued due to loss stores the card ID of the card before reissuance and the number of updates different from the card before reissuance,
When reissuing , the correspondence between the card ID of the reissued card and the number of updates is given to the CPU device by an input from an administrator who can change the registration contents for the CPU device. Register,
When the password of the authentication target card is accepted and it is determined that the password is correct, the update count stored in the authentication target card matches the update count of the authentication target card registered in the CPU device. A card authentication method, wherein the authentication target card is authenticated as a correct card. The card authentication method according to claim 1,
The card authentication method according to claim 1, wherein the re-issued card update count is a value obtained by adding 1 to the card update count before the re-issue. Card authentication device that authenticates a card that stores a card ID, number of updates, password, and a card authentication device that authenticates a reissued card when the card is lost,
An information storage device that stores the card ID of the card to be authenticated, the number of times the card has been updated, an external input control function that acquires the card ID and password of the inserted card, and a CPU that performs verification processing in response to an authentication request An apparatus,
When the information storage device is reissued, the correspondence between the card ID of the reissued card and the number of times of renewal is obtained by an input via an input control device from an administrator who can change the registration contents for the CPU device. Store relationships,
After the verification of the card ID and password of the inserted card has passed, the number of updates of the inserted card and the update stored in the information storage device corresponding to the card ID of the inserted card The card authentication device is characterized in that the authentication is terminated as a correct card when the number of times matches the number of times the reissued card is updated . In the card | curd authentication apparatus of Claim 3,
The information storage device stores a value obtained by adding 1 to the number of updates of the card before the reissuance as the number of updates of the reissued card.

Images