JP4686032B2 - Vehicle ticket purchase system using the IC card via the Internet - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a vehicle ticket purchasing system using the Internet using an IC card. For details, use a contact-type non-contact type IC card, record and settle the ticket information on the IC card using the Internet on a personal computer compatible with contact type IC cards at home or at home, and contact-less IC The present invention relates to a system used as a card.
[0002]
[Prior art]
Conventionally, when a user purchases a seat reservation ticket / limited express ticket, airline ticket, etc. (hereinafter referred to as “KIP”) on the Shinkansen and conventional lines, he / she goes to the station of the relevant transportation company to make a reservation / purchase.
In many cases, there was a lot of uselessness such as being sold out when trying to purchase on the day of boarding.
In recent years, systems that can purchase tickets on the Internet have begun to appear, but it is currently the case that they bring evidence to prove that they have purchased, and exchange, exchange, and board the actual ticket is there.
This takes time as before, and the cost of the material for the KIP is not changed, so there is not much merit.
On the other hand, at stations such as railways, when a commuter pass, ticket, or prepaid card provided with a magnetic recording unit is inserted into a gate device, a system for reading magnetic recording data and opening and closing the gate has become widespread.
Recently, a system for opening and closing a gate by reading IC card data in a non-contact manner has begun to be introduced.
[0003]
[Problems to be solved by the invention]
An object of the present invention is to provide a system that can download reservation data to an IC card using the Internet and pass the IC card only by holding it over a gate device in such an era.
[0004]
[Means for Solving the Problems]
In order to achieve the purpose of the present invention, a vehicle ticket purchasing system using the IC card of the present invention includes a customer contact / non-contact IC card having an antenna inside and an external connection terminal on the surface. A contact type IC card compatible device connected to a customer-owned Internet terminal, an Internet connection device of a transportation company that provides transportation services, a server in a transportation company such as an airport or a station, and a dedicated line connected to the server A system comprising a non-contact IC card compatible check device , wherein the Internet connection device accesses the Internet connection device, and the Internet connection device with respect to the contact type IC card compatible device for which the purchase procedure of vehicle use information has been completed. After sending the ciphertext of the random number encrypted with the secret key of the connection device, the contact type I The encrypted text of the generated encryption key received from the card compatible device is decrypted with the private key of the Internet connection device, and the encrypted text of the transmission data received from the contact type IC card compatible device is decrypted with the generated generated encryption key. When the obtained authentication result of the IC card is successful and the random number obtained from the transmission data matches the random number transmitted to the Internet connection device, it is determined that the authentication of the contact IC card compatible device is successful. Then, using the public key of the IC card received from the contact-type IC card compatible device that has been successfully authenticated, the vehicle use information that has been purchased is encrypted, and the encrypted vehicle use information is successfully authenticated. To the contact type IC card compatible device, the contact type IC card compatible device authenticates the IC card, and -When receiving the ciphertext of the random number encrypted with the private key of the internet connection device, after decrypting the ciphertext of the random number received from the internet connection device with the public key of the internet connection device, the contact type IC card compatible device The generated encryption key is encrypted by using the generated encryption key to encrypt the transmission data including the authentication result of the IC card and the random number received from the Internet connection device, and the public key of the Internet connection device. After the encrypted ciphertext is transmitted to the Internet connection device, the vehicle usage information received from the Internet connection device is transmitted to the IC card via the external connection terminal. Write usage information to the IC card and check device for non-contact IC card By data communication via the antenna from the IC card held over the said check unit reads the vehicle information from the IC card, and is characterized in that to check the vehicle information. In addition, the check device is a portable device or a gate device.
[0005]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, a vehicle ticket purchasing system using the IC card of the present invention will be described with reference to the drawings.
[0006]
FIG. 1 is a conceptual diagram for explaining an internet vehicle ticket purchasing system using an IC card of the present invention. FIG. 2 is a contact type non-contact system used for an internet vehicle ticket purchasing system using an IC card of the present invention. FIG. 3 is a diagram for explaining a contact type dual-use IC card, FIG. 3 is a diagram for explaining an encryption key managed by each device including the IC card, and FIG. 4 is a top of an Internet homepage of a company providing a transportation service. FIG. 5 is a diagram for explaining an example of a page, FIG. 5 is a diagram for explaining authentication of a reader / writer of a customer PC using an encryption key, and FIG. 6 is a diagram for explaining a procedure for writing ticket information on an IC card. It is a figure of.
[0007]
With reference to FIG. 1, an example of an embodiment of a railway company that is a representative of a transportation company will be described.
A customer-side Internet terminal (customer PC) 1 to be used is connected to the Internet 2.
In addition, one customer PC R / W 11 connected to the customer PC 1 is connected to one customer PC, and at least one customer card 10 that is a contact-type non-contact type IC card is provided for each customer PC 1. One is prepared. A set of such customer PCs, R / Ws, and customer cards is connected to the Internet and operated.
[0008]
On the other hand, a railway company device that supplies customer purchase information is connected to the Internet 2.
First, a customer company PC 1 and a railway company Internet server 3 that receives and transmits information about the customer PC 1 as a window are connected to the Internet.
The railway company Internet server 3 is connected to the railway company host computer 31 via a dedicated line, and further connected to a station server 32 of a railway station operated by the railway company via a dedicated line. A station gate device 33 with a built-in or external contact IC card R / W 34 is also connected by a dedicated line.
[0009]
FIG. 2 is a plan view of the card viewed from the external terminal surface of the contact-type non-contact type dual-use IC card, and an example of the shape of the antenna embedded in the card base is indicated by a dotted line.
The contact-type non-contact type IC card 10 has a function for writing / reading data by contacting a contact of the device with an external device connection terminal (external terminal) 120 formed on the card surface, The card has a function of receiving power from the embedded antenna 130 and receiving and writing data wirelessly and writing / reading data in the same manner.
The contact type IC card and the non-contact type IC card share a memory for recording and storing data with a CPU of a chip mounted in the IC module.
[0010]
Such a contact-type non-contact type card is called a combination card, and is used in combination with a financial card and other uses.
Non-contact card checking functions are used for railway gate devices and doors at the entrances and exits of buildings, and are connected to external connection terminals for bank cash dispensers, ATMs, credit inquiry terminals of credit member stores, etc. A contact function is used to check the content recorded on the IC.
[0011]
Such an IC card has a high price of the card, so that a plurality of applications are often covered by a single card.
[0012]
In the case of a carpool card with a credit company, a material such as thermoplastic polyvinyl chloride or polyester is used for the substrate in order to imprint display data by embossing on the card.
In many cases, a plurality of materials are laminated on the base body, and an antenna is embedded between them. Naturally, the antenna shown in FIG. 2 is arranged avoiding the embossed area (unified by the international standard).
[0013]
In the system of the present invention, the user firstly has a software for writing data to a contact non-contact IC card, R / W, IC card that can be used in common by railway companies and can be used as a credit card. We purchase by station or the Internet.
After connecting the R / W to the customer PC and inserting the IC card, the customer PC once downloads software for writing to the IC card from the homepage of the railway company on the Internet.
At this time, if the IC card is not inserted, downloading cannot be performed, and writing software cannot be installed.
[0014]
First, the customer IC card is inserted into an IC card reader / writer (R / W) connected to the customer PC, and the user side device is authenticated. For that purpose, the homepage of the railway company is accessed via the Internet, and the necessary information is entered in the format of a predetermined application form displayed on the homepage.
Among them, there is a field for inputting a password, and it is instructed to input an 8-digit to 12-digit code mixed with numerals and English characters.
When all the items have been entered, click “Finish” to complete the customer registration process.
[0015]
An encryption key managed by each device including an IC card will be described with reference to FIG.
Three types of keys are recorded on the IC chip of the IC card (10).
One is a card issuer (also called issuer) key (101), which is composed of a public key (Pi) and a secret key (Si).
The second is a railway company key (102), which is a secret key (Scu).
The third is an IC card unique key (103), which is composed of a public key (Pic) and a secret key (Sic).
Keys include fixed keys and change keys whose contents change with each use, but all keys recorded on an IC card are fixed keys.
When the IC card is loaned to the customer, it is already written and cannot be read from the outside.
[0016]
Three types of keys are recorded in the R / W (reader / writer 104) connected to the customer PC.
One is an R / W authentication key (105), which is a secret key (Krw).
The second is a railway company key (106), which is a public key (Pcu).
The R / W authentication key (105) is a change key and changes every time. The railway company key (106) is a fixed key.
When the R / W is purchased, the key is in a written state.
[0017]
The railway company internet server (3) has two types of keys, one is the R / W authentication key (301) and the other is the railway company key (302). The R / W authentication key (301) is a secret key (Krw), and the railway company key (302) is a secret key (Scu).
The R / W authentication key (301) is a change key and changes every time. The railway company key (302) is a fixed key.
[0018]
With reference to FIG. 4, a procedure for purchasing a ticket of a railway company via the Internet will be described.
Open the railway company's homepage by "search" on the Internet The first screen is as shown in FIG. 4. When the railway company home page 401 is opened, information about the outline of the railway company can be seen.
Clicking on general ticket / limited express ticket (non-reserved seat) sales 402 asks about the purchase of the ticket / limited express ticket.
When the purchase request is selected, the membership number (ID) and password input format are displayed. Insert the previously described customer card (10 in FIG. 1) into the R / W (11 in FIG. 1) connected to the customer PC (1 in FIG. 1), and enter the ID code and password registered earlier To do.
You will be guided on the screen to specify the station name from the station name. If you follow the instructions, “Complete” will be displayed, and the procedure for purchasing general and limited express tickets will end.
[0019]
Also, when the reserved seat reservation status / designated seat sales item 403 is opened, the train departure time table and vacant seat information are displayed together with the date. When you select the train you want and reserve a seat, you are instructed to ask for a ticket and specify the "Both ticket and both" field.
In addition, “discounted ticket sales” information 404, “seasonal route search information” 405, “train departure timetable by station” 406, etc., which are fare discount campaign information according to the period, can be browsed.
[0020]
The authentication of R / W connected to the customer PC will be described with reference to FIG.
The Internet screen confirms that the R / W is connected to the customer PC and the customer card is inserted.
When confirmed, the R / W authentication operation is started.
[0021]
When the R / W 11 is connected to the customer PC 1 and a customer card is inserted into the R / W 11, the R / W 11 records in advance on the customer (IC) card, R / W whether the customer card 1 is a regular card. Authenticate with the specified encryption key.
The authentication method follows EMV (Euro, Master, Visa) dynamic authentication DDA (Dynamic Data Authentication).
[0022]
Next, the R / W 11 is authenticated by the railway company internet server 3.
First, for access from a customer PC to which the R / W 11 is connected, the railway company internet server 3 generates a random number R1 and encrypts it with an encryption key (secret key) Scu (step 501).
The customer PC side R / W 11 receives this encrypted random number R1 and decrypts it with the composite key Pcu (step 502).
[0023]
Next, the customer PC R / W 11 generates a random number R2, generates an encryption key Krw using the random number R2, and encrypts Krw with the public key Pcu (step 503).
The R / W 11 creates transmission data 1 obtained by adding the customer card authentication result to the combined random number R1 (step 504). The transmission data is encrypted with the encryption key Krw (step 505).
The customer PC 1 transmits the encrypted encryption key Krw and the encrypted data 1 to the railway company Internet server 3 (step 506).
[0024]
The railway company Internet server 3 decrypts the received encrypted Krw with the secret key Scu, and also decrypts the received data 1 using the decrypted composite key Krw.
[0025]
The random number portion is extracted from the combined reception data 1 (customer PC transmission data 1) and compared with the random number R1 transmitted to the R / W.
If the random numbers match, the railway company Internet server 3 determines that the R / W is normal, and if the customer card authentication result is confirmed normal (step 507), Proceed to the next step.
[0026]
Next, settlement of the purchase price will be described.
In this embodiment, the purchase price is paid by a credit method.
That is, the customer card is a shared card with the credit company from the beginning, and when the amount is generated, one file of the IC card data file of the customer card is lent to the credit company.
In this file, the name of the credit company, company code, member code, member name, expiration date, etc. are recorded, and it is easy for the customer to select the payment conditions with the customer card attached to the R / W. You can pay for it. Of course, the personal identification number set in the IC chip can be collated with the personal identification number inputted from the customer PC.
[0027]
Next, a procedure for inputting the ticket information to the customer card will be described with reference to FIG.
The customer PC encrypts the R / W public key Pic with Pcu and transmits it to the railway company (step 611). The railway company Internet server decrypts the encrypted Pic with Scu.
The railway company Internet server encrypts the ticket purchase information purchased by the customer PC, for example, the boarding station, the getting-off station, the expiration date, the ticketing number, the amount, etc. with the aforementioned Pic and transmits it to the customer PC (step 603).
The customer PC records the received ticket information on the customer card via R / W.
[0028]
The customer card combines the recorded encrypted ticket information with Sic and stores it on the IC chip of the customer card.
[0029]
When the customer passes the card over the station gate to use the target train, the gate device opens the gate if the data read from the IC card is correct.
Similarly, when the customer gets off, the gate is opened by holding the customer card, and an unusable flag is set in the boarding information on the customer card or the data is erased.
When a point system is introduced, only point information is left at a predetermined position in the data file column.
In addition, assuming that the boarding information is not used or canceled, it is stored in the host computer or the station server as customer data for a certain period.
[0030]
The boarding ticket information can be applied to any data such as a designated ticket, a commuter pass, a boarding ticket, a tour ticket, and may be other than a target used as a contactless card. In this embodiment, payment is made with credit, but debit or electronic cash may be used.
[0031]
【The invention's effect】
According to the present invention, there is an advantage that a user can purchase a ticket without going to a station, and there is an advantage that a labor cost can be saved for a railway company.
Also, by using a contact / non-contact IC card, security can be increased by writing on the contact terminal when writing purchase data, and it is convenient because it can be used without contact when using the card. Will increase.
[Brief description of the drawings]
FIG. 1 is a conceptual diagram for explaining an internet vehicle ticket purchasing system using an IC card of the present invention. FIG. 2 is a contact-type non-use system used for an internet vehicle ticket purchasing system using an IC card of the present invention. Fig. 3 is a diagram for explaining a contact type dual-use IC card. Fig. 3 is a diagram for explaining an encryption key managed by each device including the IC card. Fig. 4 is a top page of an Internet homepage of a company providing a transport service. Fig. 5 is a diagram for explaining an example. Fig. 5 is a diagram for explaining authentication of a reader / writer of a customer PC using an encryption key. Fig. 6 is a diagram for explaining a procedure for writing ticket information to an IC card. Explanation of]
1 Customer PC
2 Internet 3 Railway company Internet server 10 Customer card (contact type non-contact type IC card)
11 R / W (contact IC card compatible)
31 Railway company host and computer 32 Station server 33 Station gate device 34 R / W (supports non-contact type IC cards)
120 IC module (external connection terminal)
130 Antenna

Claims (3)

A contact company that has an antenna inside and an external connection terminal on the surface for both contact type and non-contact type IC cards for customers, contact type IC card compatible devices connected to customer-owned Internet terminals, and a transportation company that provides transportation services An internet connection device, a server in a transportation company such as an airport or a station, and a non-contact IC card compatible check device connected to the server via a dedicated line,
The internet connection device accesses the internet connection device and sends a ciphertext of a random number encrypted with the secret key of the internet connection device to the contact type IC card compatible device for which the vehicle usage information purchase procedure has been completed. After transmission, the ciphertext of the generated encryption key received from the contact type IC card compatible device is decrypted with the secret key of the Internet connection device, and the transmission received from the contact type IC card compatible device with the decrypted generated encryption key If the authentication result of the IC card obtained by decrypting the ciphertext of data is successful, and the random number obtained from the transmission data matches the random number transmitted to the Internet connection device, the contact IC card is supported. It is determined that the device has been successfully authenticated, and the I received from the contact type IC card compatible device that has been successfully authenticated. By using the card's public key, the vehicle use information that the purchase procedure has been completed and encryption, the vehicle use information that was encrypted transmitted to the contact type IC card-enabled device that has succeeded in authentication,
When the contact-type IC card compatible device receives the random number ciphertext encrypted with the secret key of the Internet connection device after authenticating the IC card, the contact type IC card compatible device receives the random number ciphertext received from the Internet connection device. After decrypting with the public key of the Internet connection device, the transmission data including the authentication result of the IC card and the random number received from the Internet connection device is encrypted with the generated encryption key generated by the contact IC card compatible device. And the ciphertext of the vehicle use information received from the Internet connection device after transmitting the ciphertext obtained by encrypting the generated encryption key with the public key of the Internet connection device to the Internet connection device. Is transmitted to the IC card via the external connection terminal, Ri products write the use information to the IC card,
The non-contact IC card compatible check device reads the vehicle information from the IC card and confirms the vehicle information by exchanging data from the IC card held over the check device via an antenna. The feature is a ticket purchase system via the Internet using an IC card. 2. The vehicle ticket purchasing system using the IC card according to claim 1, wherein the check device is a portable device. The system for purchasing a voucher using the IC card according to claim 1, wherein the check device is a gate device.

Images