JP5521956B2 - One-time password generator manufacturing method, one-time password generator manufacturing system - Google Patents

Description

  The present invention relates to a method for manufacturing a one-time password generator and a system for manufacturing a one-time password generator.

  One-time password generators may be used for identity authentication such as net banking. For example, the one-time password generator displays a one-time password used for net banking, and can input the password for net banking and use it for personal authentication. Since the password is used only once, a high level of security can be maintained in net banking. Patent Document 1 describes such a one-time password generator.

  By the way, when manufacturing a one-time password generator, for example, identification information unique to each customer used as a seed for generating a one-time password and information such as encryption key information used when connecting to a server related to a net banking service Must be entered into the memory of the one-time password generator.

  Conventionally, in the manufacturing process of a one-time password generator, these pieces of information are stored in advance in an EEPROM or the like which is a volatile storage area of an IC chip, and thereafter card processing such as assembling the IC chip or the like on a base material is performed. It was.

JP 2007-317091 A

  However, in such a manufacturing process, if a defect occurs in the card processing process after the identification information and key information are input and issued to the IC chip or the like, the one-time password generator may be missing or processed. There was a problem that inconveniences such as out of order in the process were likely to occur.

  The present invention has been made in view of the above-described problems. A method for manufacturing a one-time password generator capable of reducing the burden of manufacturing without causing any inconvenience even when a defect occurs during card processing. Etc. are provided.

  A first invention for achieving the above object is a method for manufacturing a one-time password generator, the step (a) of performing card processing of a one-time password generator including an infrared receiver module, and the infrared receiver module. Comprising: a step (b) of inputting predetermined information to the one-time password generator by infrared communication via a network; and a step (c) of destroying and invalidating the infrared reception module. It is a manufacturing method of a time password generator.

  A second invention for achieving the above-described object is a method for manufacturing a one-time password generator, which is a step of processing a card of a one-time password generator including a signal line for connection with an infrared receiving module (a '), A step (b') of inputting predetermined information to the one-time password generator by infrared communication via an infrared receiving module connected to the signal line, and a step (c ') of cutting the signal line And a manufacturing method for a one-time password generator.

In the method for manufacturing a one-time password generator according to the first aspect of the present invention, in the step (a), a passing portion for allowing infrared rays to pass is formed in a part of the card-processed one-time password generator. .
In addition, in the first and second inventions, the one-time password generator manufacturing method is the predetermined method displayed on the display unit of the one-time password generator after the step (b) or the step (b ′). The method may further include a step (d) of determining whether the predetermined information is correctly input to the one-time password generator based on the information.

  A third invention for achieving the above object is a one-time password generator manufacturing system, which includes a storage device for storing predetermined information input to the one-time password generator, and an infrared receiver module. A card processing device for processing a card of a password generator, an infrared input device for inputting the predetermined information to the one-time password generator by infrared communication via the infrared reception module, and an invalidation by destroying the infrared reception module An infrared reception communication invalidating device for generating a one-time password generator.

  A fourth invention for achieving the above object is a one-time password generator manufacturing system for connecting a storage device for storing predetermined information to be input to the one-time password generator and an infrared receiving module. An infrared for inputting the predetermined information to the one-time password generator by infrared communication via an infrared receiving module connected to the signal line, and a card processing device for card processing of the one-time password generator including the signal line A manufacturing system for a one-time password generator, comprising: an input device; and an infrared communication invalidation device that disconnects the signal line.

In the one-time password generator manufacturing system according to a third aspect of the invention, the card processing device processes and manufactures the one-time password generator having a passage part for allowing infrared rays to pass through a part thereof.
The one-time password generator manufacturing system according to the third and fourth inventions displays the one-time password generator in order to determine whether the predetermined information has been correctly input to the one-time password generator. It is also desirable to further include an input determination device that captures predetermined information displayed on the unit.

  With the above configuration, identification information and the like are input after card processing. Therefore, even if a defect occurs during card processing, it is only necessary to input identification information or the like for a card having no defect. Inconveniences such as disturbance do not occur, and the burden on manufacturing can be reduced. The input of identification information, etc. can be reduced by using an infrared receiving module such as infrared communication through a passing portion formed on the card, and the infrared receiving module can be used for identifying information etc. Since it will be destroyed after input or the signal used to connect to the infrared receiver module will be disconnected, it will no longer be possible to input via the infrared receiver module, maintaining tamper resistance, and tampering with identification numbers and key information. , Can prevent snooping.

  According to the present invention, it is possible to provide a manufacturing method of a one-time password generator that does not cause any inconvenience even if a defect occurs during card processing, and that can reduce the burden of manufacturing.

Diagram showing schematic configuration of one-time password generator Diagram showing manufacturing system of one-time password generator The figure which shows the manufacturing method of the one time password generator Diagram showing schematic configuration of one-time password generator Diagram showing schematic configuration of one-time password generator The figure which shows the manufacturing method of the one time password generator Diagram showing schematic configuration of one-time password generator

  Embodiments of a method for manufacturing a one-time password generator of the present invention will be described below with reference to the drawings.

  First, the configuration of the one-time password generator manufactured by the one-time password generator manufacturing method of the present embodiment will be described. FIG. 1 is a diagram showing a schematic configuration of a one-time password generator 1 after card processing in the one-time password generator manufacturing method of the present embodiment.

  The one-time password generator 1 includes an IC chip 3, a power supply 5, a display unit 7, and a switch 9, and an infrared receiving module 11. However, the infrared receiving module 11 is invalidated in a later manufacturing process. The above components are sandwiched between or disposed on a base material (not shown), and the one-time password generator 1 has a card-like shape as a whole.

  The IC chip 3 is mounted with a control unit such as a CPU, RAM, ROM, EEPROM, etc., an input / output unit, etc. connected by a bus or the like. The operation of each part of the password generator 1 is controlled. In a later manufacturing process, identification information such as a unique identification number for each customer used for one-time password generation and predetermined information such as key information used for encryption / decryption during communication is a volatile storage area. Input and stored in EEPROM. The ROM or the like stores a program for controlling the operation of the entire one-time password generator 1 as well as a program for generating a one-time password using the identification information as a seed.

  The power source 5 is a thin battery, for example, and is a power source that can supply power to the IC chip 3 and the display unit 7 during the expiration date of the one-time password generator 1 and operates the infrared receiving module 11 during the manufacturing process. is there. As the power source 5, a power source having a thickness suitable for the card-like one-time password generator 1 can be used.

  The display unit 7 is, for example, a liquid crystal display, and displays the one-time password generated by the control unit of the IC chip 3. A thin liquid crystal display matched to the thickness of the card-like one-time password generator 1 can be used.

  The switch 9 is pressed by a predetermined method to display an identification number or a one-time password on the display unit 7 or to shift to a mode for storing key information or identification information in the EEPROM of the IC chip 3. be able to.

  The infrared receiving module 11 includes a light receiving unit, a communication unit, and the like. The infrared receiving module 11 is connected to the IC chip 3 through a signal line, and based on a predetermined infrared irradiation pattern, identification information and key information for each customer are stored in the EEPROM of the IC chip 3. To input and store. However, the infrared receiving module 11 is invalidated in the manufacturing process, and cannot be used in the manufactured card.

  Next, a manufacturing system of the one-time password generator 1 will be described with reference to FIG. FIG. 2 is a diagram illustrating a manufacturing system 100 of the one-time password generator 1.

  The manufacturing system 100 of the one-time password generator 1 includes a control device 101, a card processing device 103, a printing device 104, an infrared input device 105, an input determination device 107, an infrared communication invalidation device 109, a transport device 111, and the like.

  The control device 101 includes a control unit such as a CPU, RAM, and ROM, an input / output unit, and the like, and is connected to the server 200 (storage device). The control device 101 is connected to each device of the manufacturing system 100 to control them, and inputs the identification information 201 and key information 203 stored in the server 200 in advance for each customer who issues the card to the one-time password generator 1. The manufacturing process of the one-time password generator 1 is controlled by each device of the manufacturing system 100.

  The card processing device 103 performs card processing by placing an IC chip 3, a power source 5, a display unit 7, a switch 9, an infrared receiving module 11 and the like between substrates, and a known device can be used or applied. it can.

  The printing device 104 prints patterns, characters, symbols, and the like on the outer surface of the card-processed one-time password generator 1, and various known devices can be used as appropriate. It is also possible to print customer identification information as necessary. In this case, the printing process is performed by referring to and obtaining the identification information 201 for each customer stored in the server 200.

  The infrared input device 105 includes an infrared transmitter and the like, and inputs identification information 201 and key information 203 for each customer to the one-time password generator 1 by infrared communication via the infrared reception module 11. The input is performed in a predetermined data order (customer order).

  The input determination device 107 includes, for example, an imaging device such as a control unit or a camera device, captures the identification information 201 displayed on the display unit 7 of the one-time password generator 1, and acquires it as image data. The image data is used to determine whether the identification information 201 or the like has been correctly input. For example, the control unit of the input determination device 107 performs image analysis on the image data to obtain the identification information 201, and the corresponding identification information in the server 200. The determination can be made automatically by comparison with 201, or the operator can make the determination based on the image of the image data. Note that the input determination device 107 is provided as necessary.

  The infrared communication invalidation device 109 invalidates the infrared reception module 11 of the one-time password generator 1 and includes, for example, a laser irradiation device and the like, and the light receiving unit of the infrared reception module 11 of the one-time password generator 1 is a yag laser. Destroy with a laser.

  The conveyance device 111 conveys the one-time password generator 1 being processed, and is, for example, a conveyor.

  Next, a manufacturing method of the one-time password generator 1 will be described with reference to FIGS.

  First, in the card processing apparatus 103 of the manufacturing system 100 shown in FIG. 2, as shown in FIG. 1, the IC chip 3, the power source 5, the display unit 7, and the switch between or on base materials (not shown). 9. Arrange the infrared receiving module 11 to perform card processing. Note that printing by the printing device 104 is also performed on the outer surface of the card. When printing, customer information such as identification information 201 may be printed. Note that the identification information 201 and the like may be printed by sticking a sticker on which these are printed. It is also possible to check whether the card processing or the like has been correctly performed by an inspection device (not shown) automatically or manually to eliminate defective products during card processing or printing.

  Here, as shown in FIG. 3 (a), the infrared receiving module 11 is covered, and the infrared ray or laser is present at the position corresponding to the light receiving portion of the base 13 on the side corresponding to the direction of the light receiving portion. A passing portion 15 that can pass is provided. The passage portion 15 is made of a transparent member that transmits infrared light or a laser, for example. The material can be determined as appropriate so as not to prevent the transmission of infrared rays or laser. In addition, the passage part 15 may be a hole. Note that, for example, printing with a color material that transmits infrared rays and lasers to be described later is performed at the position of the passage portion 15.

  Then, the infrared input device 105 shifts to a mode for inputting identification information and encryption key information by, for example, pressing the switch 9 by a predetermined method using a pressing device (not shown), and the infrared transmitter 21 passes the passing unit. 15, infrared communication is performed by irradiating the light receiving unit of the infrared reception module 11 with infrared rays in a predetermined pattern via the infrared reception module 11. Enter and store. Information common to each one-time password generator 1, such as a password generation algorithm, may be input separately before card processing.

  Thereafter, as shown in FIG. 3B, the input determination device 107 displays the identification information 201 and the like on the display unit 7 by, for example, pressing the switch 9 in a predetermined manner by a pressing device (not shown). . This is imaged by the imaging device 22 or the like, and based on this image information, it is determined and confirmed whether or not an input has been performed correctly. This may be automatically performed by the input determination device 107 as described above, or may be performed by an operator. It is also possible to omit the input determination device 107 and perform all the above processes manually. When the identification information 201 or the like is not correctly input, for example, input by infrared communication can be performed again.

  Next, as shown in FIG. 3C, the infrared communication invalidation device 109 destroys the light receiving unit of the infrared receiving module 11 by irradiating the laser through the passing unit 15 with the laser device 23, and receives the infrared signal. The module 11 is invalidated and the production is finished. A yag laser or the like can be used as the laser. In addition, the method of destroying the light receiving portion of the infrared receiving module 11 is not limited to laser, and other physical methods may be used. For example, the light receiving portion is cut, pressure is applied, or a hole is formed in the light receiving portion. It is also possible to destroy it. As a device used for these, known devices can be appropriately used.

  In this way, as shown in FIG. 4, the one-time password generator 1 in which the IC chip 3, the power source 5, the display unit 7, and the switch 9 are arranged between or on base materials (not shown) is manufactured. The Further, the infrared receiving module 11 is destroyed and invalidated.

  Thus, since identification information etc. are inputted after card processing, even if a defect occurs during card processing, it is only necessary to input identification information etc. for a card having no defect. Inconveniences such as disturbance do not occur, and the burden on manufacturing can be reduced. The input of identification information etc. is performed using infrared communication through the passage part, so that the manufacturing cost can be reduced, and the infrared receiving module is destroyed after the input of identification information etc., so infrared communication is impossible thereafter. Therefore, tamper resistance can be maintained, and falsification of identification numbers and key information, snooping, etc. can be prevented.

  A second embodiment of the method for manufacturing a one-time password generator of the present invention will be described with reference to FIGS.

  In the manufacturing method of the one-time password generator of this embodiment, the one-time password generator 1a having the IC chip 3, the power source 5, the display unit 7, and the switch 9 is manufactured in the card processing step, as in the first embodiment. Thereafter, identification information and key information for each customer are input to the EEPROM of the IC chip 3 using infrared communication. At this time, the infrared receiving module is in a state outside the one-time password generator 1a. The IC chip 3 is connected to the signal line 12 in advance.

  In addition, as the manufacturing system of the one-time password generator 1a of the second embodiment, the same system as the manufacturing system 100 described above can be used. However, as the infrared communication invalidating device 109, the signal line is disconnected. A cutting device 27 such as a cutter, which will be described later, is provided.

  The manufacturing method of the one-time password generator 1a is the same as that described above, but the one-time password generator 1a is an IC between base materials (not shown) or on the base material during card processing by the card processing device 103. 5 is a state where the chip 3, the power source 5, the display unit 7, and the switch 9 are arranged, and the signal line 12 extending from the IC chip 3 to the outside is in a state. In the present embodiment, it is not necessary to provide the above-described passage portion for performing infrared communication on the base material.

  Then, as shown in FIG. 6A, the infrared input device 105 connects the infrared receiving module 11a supplied with power to the signal line 12, and, as in the first embodiment, a pressing device (not shown) or the like. The switch 9 is pressed by a predetermined method, and the identification information and key information are input using the infrared transmitter 21.

  After that, as in the first embodiment, the input determination device 107 causes the display unit 7 to display identification information and the like by pressing the switch 9 by a predetermined method using a pressing device (not shown), for example. Take a picture with an imaging device. Based on this image information, it is determined and confirmed whether or not the input has been performed correctly.

  Next, as shown in FIG. 6 (b), the infrared communication invalidating device 109 cuts the signal line 12 extending from the one-time password generator 1a to the infrared receiving module by a cutting device 27 such as a cutter. The input via is invalidated and the production is finished. FIG. 7 shows a state in which the manufacturing is finished, and the one-time password generator 1 in which the IC chip 3, the power source 5, the display unit 7, and the switch 9 are arranged between or on base materials (not shown) is manufactured. . Further, the signal line 12 is cut off from the one-time password generator 1a. It is desirable to process the end of the signal line 12 so that it is not exposed to the outside of the card so that it is not connected to the infrared receiving module again.

  In the infrared communication, the power of the infrared receiving module 11a may be taken from the power source 5. In this case, a power line extending from the power source 5 to the outside is further provided when the card is processed. The infrared receiving module 11a is connected to the power line. After confirming the input, the power line is cut in addition to the signal line 12.

  Also in this embodiment, the same effect as the first embodiment can be obtained. That is, since the identification information and the like are input after the card processing, even if a defect occurs during the card processing, the identification information and the like may be input for a card that does not have a defect. Thus, it is possible to reduce the manufacturing burden. Since the input of identification information etc. is performed using an infrared receiving module, the manufacturing cost can be reduced, and after the input of identification information etc., the signal line used for connection with the infrared receiving module is disconnected. Input via the infrared receiving module becomes impossible, tamper resistance is maintained, and alteration of identification number and key information, snooping, etc. can be prevented.

  The preferred embodiments of the method for manufacturing a one-time password generator according to the present invention have been described above with reference to the accompanying drawings, but the present invention is not limited to such examples. It will be apparent to those skilled in the art that various changes or modifications can be conceived within the scope of the technical idea disclosed in the present application, and these naturally belong to the technical scope of the present invention. Understood.

DESCRIPTION OF SYMBOLS 1, 1a ......... One-time password generator 3 ......... IC chip 5 ......... Power supply 7 ......... Display unit 9 ......... Switch 11, 11a ......... Infrared receiving module 12 ......... Signal line 100 ... …… Manufacturing system 103 ...... Card processing device 104 ...... Printing device 105 ...... Infrared input device 107 ...... Input determination device 109 ...... Infrared communication invalidation device 201 ...... Identification information 203 ...... Key information

Claims (8)

A method of manufacturing a one-time password generator,
(A) performing card processing of a one-time password generator including an infrared receiving module;
(B) inputting predetermined information into the one-time password generator by infrared communication via the infrared receiving module;
Destroying and invalidating the infrared receiving module (c);
A method for manufacturing a one-time password generator. A method of manufacturing a one-time password generator,
A step (a ′) for card processing of a one-time password generator including a signal line for connection with an infrared receiving module;
A step (b ′) of inputting predetermined information to the one-time password generator by infrared communication through an infrared receiving module connected to the signal line;
Cutting the signal line (c ′);
A method for manufacturing a one-time password generator.   2. The one-time password generator according to claim 1, wherein in the step (a), a pass portion for allowing infrared rays to pass is formed in a part of the one-time password generator that has been carded. Manufacturing method.   After the step (b) or the step (b ′), the predetermined information is correctly input to the one-time password generator based on the predetermined information displayed on the display unit of the one-time password generator. The method of manufacturing a one-time password generator according to any one of claims 1 to 3, further comprising a step (d) of determining whether or not the password has been received. A one-time password generator manufacturing system,
A storage device for storing predetermined information to be input to the one-time password generator;
A card processing device for processing a card of a one-time password generator including an infrared receiving module;
An infrared input device for inputting the predetermined information to the one-time password generator by infrared communication via the infrared receiving module;
An infrared communication invalidating device that destroys and invalidates the infrared receiving module;
A system for producing a one-time password generator. A one-time password generator manufacturing system,
A storage device for storing predetermined information to be input to the one-time password generator;
A card processing device for processing a card of a one-time password generator including a signal line for connection with an infrared receiving module;
An infrared input device for inputting the predetermined information to the one-time password generator by infrared communication through an infrared receiving module connected to the signal line;
An infrared communication invalidating device for cutting the signal line;
A system for producing a one-time password generator.   6. The manufacturing of a one-time password generator according to claim 5, wherein the card processing device processes and manufactures the one-time password generator having a passage part for allowing infrared rays to pass in part. system.   In order to determine whether or not the predetermined information has been correctly input to the one-time password generator, the apparatus further includes an input determination device that captures predetermined information displayed on the display unit of the one-time password generator. The manufacturing system of the one-time password generator in any one of Claims 5-7 characterized by the above-mentioned.

Images