JP4555428B2 - IC chip drive system and chip drive server - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention is an IC chip drive in which an IC chip having a microprocessor and a memory, such as an IC card, is connected to a client terminal, a request from a service server is converted into a command by a driver, and the IC chip is logically driven The present invention relates to a system and a chip drive server used in the system.
[0002]
[Prior art]
FIG. 6 shows a conventional IC chip drive system. A client terminal 11 is connected to a network 12 and receives a service from a service server 13 connected to the network 12. The client terminal 11 is connected to an IC card 15 equipped with an IC chip 14 via a chip reader / writer 16. The IC chip 14 includes at least a microprocessor and a memory. For example, electronic cash is stored, and services such as payment by electronic cash and receipt of electronic cash can be received from the service server 13.
[0003]
In the client terminal 11, a CPU 17, a communication program memory 18, a driver memory 19, a RAM 21, an input / output interface 22 with a chip reader / writer, and a transmission / reception unit 23 for the network 12 are mutually connected by a bus 24.
When the client terminal 11 receives a processing request for the IC chip 14 from the service server 13, the processing request is converted into a corresponding command by the driver program in the memory 19. For example, the amount X is reduced from the electronic cash in the IC chip 14. This command is input to the IC chip 14 via the chip reader / writer 16, and processing corresponding to the command is executed in the IC chip 14. For example, in the above example, the balance of the electronic cash in the inside is X If the processing corresponding to the command has been performed, or if the processing could not be performed, a processing result indicating that is returned to the client terminal 11 as a response. In the client terminal 11, the response from the IC chip 14 is converted into data that can be processed by the service server 13 by the driver program in the memory 19, and the converted response data is transmitted via the network 12 to the service server 13. Send to.
[0004]
[Problems to be solved by the invention]
Conventionally, a driver function that logically drives the IC chip 14, that is, a driver program, is installed in the client terminal 11. The client terminal 11 converts a processing request from a service server into a command, and a response from the IC chip. Since the data is converted into data that can be processed by the service server, the client terminal 11 is required to have a high standard in terms of processing performance, storage capacity, and the like, and is expensive and large.
[0005]
Further, in order to change the driver function or improve the performance, it has been necessary to change or improve the performance of all client terminals.
[0006]
[Means for Solving the Problems]
According to the IC chip drive system of the present invention, the driver function is provided in the chip drive server, and the chip drive server is separated from the client terminal and is generally connected to the client terminal through the network. That is, the chip drive server is commonly used for each client terminal, and the IC chip connected to each client terminal is logically driven by the driver function of the chip drive server.
[0007]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 shows an embodiment of an IC chip drive system according to the present invention, in which parts corresponding to those in FIG. The main driver function is omitted from the client terminal 11, and in this example, a chip drive server 31 is provided connected to the network 12 in this example. The chip drive server 31 is provided with a CPU 32, a driver memory 33, a communication program memory 34, an authentication program memory 35, and a transmission / reception unit 36 connected to each other via a bus 37.
[0008]
As shown in FIG. 2, the IC chip 14 is connected to a microprocessor 41, for example, a memory 42 storing electronic cash, an authentication program memory 43, and an input / output interface 44 with the outside of the IC chip 14 through a bus 45. ing.
The operation of this embodiment will be described with reference to FIG. 3 as an example in which payment is made with electronic cash. The user connects the IC card 15 storing the electronic cash to the client terminal 11 and inputs the payment amount X by, for example, the screen switch of the display 26 connected to the client terminal 11 or is displayed on the screen. By pressing the approved key for the payment amount X, the payment amount X is input (1).
[0009]
The IC chip 14 confirms the validity of the chip drive server 31 by the authentication program in the memory 43 (2), and if necessary, the chip drive server 31 confirms the validity of the IC chip 14 by the authentication program in the memory 35. (3).
The payment amount X is notified from the client terminal 11 to the service server (payee) 13 (4). The service server 13 issues a command (processing request) to subtract the amount X from the electronic cash in the IC chip 14 to the chip drive server 31 (5). The chip drive server 31 generates a command for subtracting the amount X from the electronic cash in the IC chip 14 by the driver program in the memory 33, and transmits the command to the client terminal 11 (6).
[0010]
The client terminal 11 transmits the received command as it is to the chip reader / writer 16 (7). The IC chip 14 executes the command received from the chip reader / writer 16 and reduces the balance of electronic cash in the memory 42 by X. A response indicating that the deduction processing can be performed is generated and returned to the chip reader / writer 16 (8).
The client terminal 11 transmits the response received from the chip reader / writer 16 to the chip drive server 31 as it is (9). The chip drive server 31 converts the received response into data that can be processed by the service server 13 by the driver program in the memory 33 and transmits the data to the service server 13 (10). The service server 13 receives the converted response data and confirms that payment has been completed.
[0011]
In the above processing, transmission from the client terminal 11 to the service server 13 or the chip drive server 31 is transmitted as a packet with a transmission address and an incoming address by the communication program of the memory 18, and the packet from the chip drive server 31 or the like is transmitted. Reception processing is performed by the communication program in the memory 18. Also in the chip drive server 31, transmission to the client terminal 11 and the service server 13 is performed in packets by the communication program in the memory 34, and reception processing of packets from the client terminal 11 and service server 13 is also performed by the communication program. The chip drive server 31 manages transmission / reception with respect to each client terminal and transmission / reception with respect to each service server 13 by using the transmission address and the reception address. In general, after processing necessary for one service is performed for each client terminal, processing for other client terminals is performed.
[0012]
FIG. 4 shows an operation procedure in the chip drive server 31. It waits for a server authentication request to authenticate the validity of the chip drive server 31 from the IC chip 14 connected to any one of the client terminals 11 (S1). When this server authentication request is received, an authentication response is generated, and in this example, a chip authentication request for authenticating the validity of the IC chip is generated, and the authentication response and the chip authentication request are output to the server authentication request. The transmitted IC chip is transmitted to the connected client terminal (S2).
[0013]
As shown in FIG. 5, the IC chip 14 generates a server authentication request and transmits it to the chip drive server 31 (S1). When an authentication response is received from the chip drive server 31 (S2), the authentication response is verified (S3). If it is acceptable, that is, if the chip drive server 31 is found to be valid, if a chip authentication request is also received, the chip authentication response is generated and sent (S4). A failure notice is sent to the chip drive server 31 (S5).
[0014]
In the chip drive server 31, as shown in FIG. 4, if the chip authentication response is received from the IC chip 14 after transmitting the server authentication response, it is determined that the server authentication has passed (S3), and the received chip authentication response is verified. (S4) If it is acceptable, the IC chip 14 is recognized as valid, a notification of acceptance is sent to the client terminal 11 to which the IC chip 14 is connected (S5), and a processing request from the service server 13 is received. (S6).
[0015]
The IC chip 14 sends a chip authentication response to the chip drive server 31 in step S4 in FIG. 5 and then waits for reception of a pass notification in step S5 in FIG. 4 from the chip drive server 31 (S6). If it is received, the reception of the command is awaited (S7). If a failure notification is received, the process ends. The processing necessary for the above authentication is performed by executing an authentication program in the memory 43.
When a processing request is received from the service server 13, a command corresponding to the processing request is created by the driver program in the memory 33, and the command is transmitted to the client terminal 11 designated by the service server 13 (S7). Waiting for reception of a response from the client terminal 11 (S8).
[0016]
When the IC chip 14 receives the command in step S7 in FIG. 5, the command processing is executed (S7), a response indicating the processing result is generated and transmitted to the chip drive server 31 (S9), and thereafter Whether the service has been completed is checked. If it has not been completed, the process returns to step S7, and if it has been completed, the process is terminated (S10).
When a response is received from the client terminal 11, the response is converted into data that can be processed by the service server 13 by the driver program and transmitted to the service server 13 (S9). It is checked whether there is data indicating the end of service in the processing request from the service server 13 processed earlier, that is, whether the service has ended (S10). If the service has not ended, the process returns to step S6 to return to the service server 13 If the service is finished, the process returns to step S1 and waits for the reception of the server authentication request.
[0017]
If an authentication failure notification is received from the client terminal 11 in step S3, that is, if a chip authentication response is not received, the process returns to step S1, and if the verification result of the chip authentication response fails in step S4, that Is transmitted to the client terminal, and the process returns to step S1 (S11). The above authentication processing is performed by executing an authentication program in the memory 35.
The authentication process described above is not necessarily performed. However, for example, in order to prevent the memory in the IC chip 14 from being destroyed, tampered with, or read out by the unauthorized chip drive server 31, at least the chip drive server 31 of the chip drive server 31 can be read by the IC chip 14. It is preferable to verify the validity. Further, for example, the validity of the IC chip may be verified in order to prevent the service server from performing request processing for the wrong IC chip. When performing the authentication process, the authentication process may be performed every time a request is made from the service server 13 or a response is made to the service server 13. In this case, for example, in FIG. 4, step S10 is omitted, and when step S9 is completed, the process returns to step S1.
[0018]
Without moving all of the driver functions to the chip drive server 31, for example, a command for inputting a password to the client terminal 11 and checking the password against the password in the IC chip 14, and the current stored contents in the IC chip 14 For example, the conversion to a command for a processing request that only needs to be performed on the user side (client terminal 14 side), such as a command for reading out and checking the balance of electronic cash, can be performed without sending it to the chip drive server 31. 1 may be performed using a drive program stored in the local driver memory 27.
[0019]
The chip drive server 31 may be used in common for all service servers, or a chip drive server may be provided for each service server. The chip drive server 31 may be provided integrally with the service server 13. The service request may be made directly from the client terminal 11 to the service server 13 or may be made via the chip drive server 31. The service can be applied to various services without the above-mentioned electronic cash settlement service, payment by prepaid card, verification of identification card at the beginning of a company, government office, etc. Further, the command for the IC chip 14 reads the stored contents, Update, delete, etc. can be considered. Further, the IC chip 14 may be directly mounted in the client terminal 11.
[0020]
【The invention's effect】
As described above, according to the present invention, the client terminal is provided with driver functions such as conversion of processing requests from the service server into commands and conversion of responses from the IC chip into processable data at the service server. Therefore, since the chip drive server 31 performs the function together with a plurality of client terminals, the client terminal conventionally requires high performance such as a personal computer and high performance such as a large-capacity storage memory. However, according to the present invention, the client terminal can be configured with a processing performance as low as a PDA such as an electronic notebook and a small-capacity storage memory, and can be made inexpensive and small.
[0021]
In addition, since the driver function can be centrally managed by the chip drive server, when the driver function is improved or changed, it may be performed on the chip drive server, and the driver function is changed for all the client terminals. There is no need, it can be done easily and maintenance is also easy.
When the authentication function is provided as described above, it is possible to prevent reading, destruction, change, etc. of the memory in the IC chip by an unauthorized chip drive server.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a functional configuration of an embodiment of the present invention.
FIG. 2 is a block diagram showing a functional configuration example of an IC chip 14;
FIG. 3 is a diagram showing a processing procedure of a system when the present invention is applied to a settlement service.
FIG. 4 is a flowchart showing an example of an operation procedure of the chip drive server 31;
FIG. 5 is a flowchart showing an example of an operation procedure of the IC chip 14;
FIG. 6 is a block diagram showing a conventional system.

Claims (6)

The driver converts the processing request from the service server into a command for logically driving the IC chip corresponding to the content of the processing request, and logically converts the IC chip connected to the client terminal by the command. In the IC chip drive system that drives
An IC chip drive system, wherein a chip drive server including the driver is provided from the client terminal via a network . The system of claim 1, wherein
The IC chip has means for authenticating the validity of the chip drive server,
An IC chip drive system comprising means for performing processing in accordance with the command from the chip drive server when the authentication by the authentication means is passed. Means for converting a processing request from a service server into a command for logically driving an IC chip corresponding to the content of the processing request ;
A chip driver server comprising: means for transmitting the command via a network to a client terminal to which an IC chip to be driven is connected. The chip drive server according to claim 3,
Means for receiving a response to the command from the IC chip from the client terminal;
Means for converting the response into a data format that can be processed by the service server;
A chip drive server comprising: means for transmitting the converted response to the service server. In the server according to claim 3 or 4,
A chip drive server comprising means for generating an authentication response when receiving an authentication request from the IC chip via the client terminal and transmitting the authentication response to the IC chip via the client terminal. The server according to any one of claims 3 to 5,
A means for issuing an authentication request to the IC chip via the client terminal, a means for verifying the validity of the IC chip by the authentication response upon receipt of an authentication response from the IC chip, and passing the verification, A chip drive server comprising means for transmitting a command to an IC chip.

Images