JPH01126791A - Ic card - Google Patents

Abstract

PURPOSE:To prevent the illegal use of secret information by storing the secret information in an unreadable special area in the memory of the title IC card, and rewriting the secret information only when stored data in the special area is correctly given from the outside. CONSTITUTION:Unreadable special areas 41-43 are provided in the memory of the IC card, and the secret information (PIN and AC codes) of the IC card is stored. When the data is not written, the special area checks writing authority, and makes the new secret information writable, thereafter, the rewriting authority is checked by the collation between the authority data given from the outside and the authority information in the special area, and the data can be rewritten to the new data by a person who can correctly give the data written in the special area.

Description

[Detailed Description of the Invention] [Summary] An IC card that allows you to receive multiple types of services with one card, especially regarding the processing of confidential information such as the PIN, so that the confidential information is not read out of the card. So,
It has a function that compares the data given from the outside with confidential information and only informs the outside of the result if it matches or does not match.If it is confirmed that there is a rewriting authority, the card can be continued by allowing the rewriting. In an IC card that is intended to enable use of the IC card and includes a processor, a first memory for storing its processing program, and a second memory for storing data, the second memory has a non-readable memory. A possible special area is set, and the secret information of the IC card is stored in this special area. The IC card is provided with a means for comparing data with access rights to the data in the special area with authority information in the special area, and a means for writing and rewriting data in the special area,
Initially (when no data has been written to the special area), data can be written only by those who are recognized as having write authority by checking the authority data and the authority information, and thereafter. , A person who is correctly given the same data as the data written in the special area from the outside (verification of external data and internal data), and rewrites the result of matching the authority data given from the outside with the authority information within the area. The structure is such that it can be rewritten with new confidential information any number of times only by authorized persons.

[Industrial application field]

TECHNICAL FIELD The present invention relates to an IC card that allows multiple types of services to be received with a single card, and particularly to processing of secret information such as a pin code.

As shown in FIG. 4, an IC (integrated circuit) card includes a processor 12, a read-only memory (ROM) 14 for storing its program, an electrically erasable and writable memory 16, and signal input/output. Contacts 18 for use are exposed. In this example, there are eight contacts, and signals (data) are transferred in a bit serial manner. The processor 12 and memory 14 and 16, which are composed of semiconductor elements, are minute and capable of complex functions and large-capacity storage, so they are not capable of a single function like a magnetic card, but can be used for deposits, credits, hospitals, etc. Many service functions such as various clubs can be performed with one card. The IC card 10 is inserted into the terminal device 20 to receive a predetermined service.

For example, if the terminal device 20 is a financial terminal, services such as deposits and payments can be received.

[Conventional technology]

This type of card requires a PIN (Pers) to prevent unauthorized use.
onalIdentificationNum
ber (holder's personal identification number), the customer enters the PIN to authenticate himself when receiving a service, for example, when withdrawing a deposit. Also, since you can receive multiple services with an IC card and there are various card issuers, it is necessary to check whether the IC card can be used on a certain terminal or not.
ation code; validity confirmation code of the processing terminal program). These check mechanisms are shown in FIG.

As shown in this figure, the PIN and AC
There are codes, and these verification means 22 and 24 are the terminal 20
It's on the side. The customer inserts the IC card 10 into a terminal device, more precisely, an IC card device 20 connected to the terminal device,
When you enter your PIN using the terminal keyboard,
The collation means 22 collates the manual PIN and the PIN stored in the IC card to determine whether they match or do not match. Further, the collation means 24 collates the input A and C codes sent from the terminal and the AC code stored in the IC card to determine whether they match or do not match. Of course, if there is a match, the card' can be used at the terminal, and if there is a mismatch, it cannot be used.

One IC card can support multiple services, but 3
1 to 33 are data fields for each service, 36
~38 is the data field ID (Identifica
tion). The terminal side is also provided with means 26 for determining (selecting) one of these data fields by the input data field ID, and means 28 for accessing it in accordance with an access request.

FIG. 6 shows an example of processing when an IC card is inserted into a terminal device. As shown in the figure, first the type of service is determined. That is, data field ID36, 37 of the IC card.
．． Search for ...... and enter the input data field ID
(This can be entered by operating the terminal's keyboard, or by inputting what the terminal itself has). If all of them do not match and there is no match, the process ends with an error. In the former case, the special area corresponding to the data field ID of the IC card contains the PIN of the data field.
(Usually, the PIN is different for each service), so check it with the input PIN in the IC card,
If they do not match, it is an error, and if they match, proceed to the next step. In the next step, the AC code is checked in the IC card, and if they match, the next step is to determine the access rights (read rights, write rights, etc.), and access the data in the data field within the range of the determined access rights. .

[Problem that the invention seeks to solve]

In the conventional method, once confidential data in an IC card is written in a read-only area, it cannot be rewritten after that. The data is written, and control information is used to determine which area currently has the newest information written in. In this case, each time a change requires an area to write secret information, , the area was reduced and therefore the number of changes was also limited. Control information about which areas are currently being used was also required.

Therefore, when the number of changes reaches the limit, the secret information cannot be changed any more.

The present invention improves these points, prevents confidential information from being read out of the card, and allows continued use of the card by allowing it to be rewritten as many times as necessary if it is confirmed that the card has rewriting authority. The purpose is to make it possible.

[Means for solving problems]

The above object is an IC card that includes a processor (12), a first memory (14) for storing its processing program, and a second memory (16) for storing data. , set a special area (30, 41 to 43) that cannot be read and store the secret information (PIN, AC code) of the IC card in this special area,
The special area allows new secret information to be written when the result of the first write permission check (when no data has been written to the special area) is authorized, and from then on, writing to the special area becomes possible. A person who is properly given the stored data from the outside, checks the rewriting authority by comparing the authority data given from the outside with the authority information in the special area, and if the check result shows that the authority is valid, the person can write the new data as many times as necessary. This is achieved by making the configuration rewritable.

[Effect]

In this way, if the secret information is stored in a special area that cannot be read out from the card, the secret information will not be known from the card to a third party and the card will not be used fraudulently. Furthermore, by making the special area conditionally writable, if secret information leaks to the outside, it can be replaced with new secret information, thereby preventing unauthorized use. Furthermore, no new area is required when rewriting secret information.

〔Example〕

As shown in FIG. 1, in the present invention, the cardholder's personal identification number
Collation means 22 and 24 for IN and terminal suitability confirmation AC code are provided in the IC card 10. Since the IC card has a processor, verification processing is easy and can be done by adding a simple processing program. Data field determination means 26 and data field access means 28 are also provided within the IC card 10.

In this way, when comparing the PIN and AC code, the PIN and AC code in the IC card will not be read out to the terminal side (outside the card), and the verification will be completed within the IC card, and the verification result will only be displayed. Since the notification is only sent to the terminal side, it is possible to prevent the PIN and AC code in the IC card from being known to others (the PIN and AC code in the IC card are not notified to the terminal side).
When the N.AC code is read, the PIN and AC code can be known by reading the terminal register etc. with a debug tool).

The storage area for the PIN and AC code is the same memory (EEFROM16) as data fields 31 to 33, and the data in the data field needs to be read out to the terminal side when providing services, so this route is used to store the PIN in the IC card. , the AC code may be read out to the terminal side. Therefore, conditions are attached to access to the storage area 30 for PIN and AC codes, such as prohibiting reading and permitting rewriting with conditions. If the memory access address is within the storage area 30, the read operation may be canceled or the read operation may be performed but the gate is closed to prevent the read data from being output outside the memory. For memory rewriting, the rewriting operation may not begin unless the conditions are satisfied. Note that writing of the PIN and AC code is possible only when creating a data field, and rewriting is necessary when changing the code.

FIG. 2 is a diagram explaining this. System (card)
At the time of creation, determine the PIN in consultation with the customer, and
IN, access permission information for various services that the customer subscribes to (AC code, etc.), and other confidential information to EE.
Write to the non-readable area 30 of the PROM 16. This writing can be done only once.

During work, a PIN is input from a terminal, and the IC card processor reads the PIN in the read-only area 30 and checks it against the input PIN. If it matches, the process goes to the next step, and if it doesn't match, the PIN is re-entered. requests, and performs processing such as To rewrite confidential information, for example, change the PIN or AC code, input information indicating rewriting authority together with the new PIN or AC code, and the IC card processor checks the authority based on the result of matching the current PIN or AC code. If OK, the PIN and AC code in the unreadable area are rewritten by writing new ones, and if the result of the authority check is NG, the terminal side is notified that rewriting is not possible.

As the rewrite authority, there is one that can confirm the identity of the person in question. For example, when changing the PIN, if the person knows the previous PIN, the person may be regarded as the person in question, so the previous PIN may be used as the rewrite authority information.

Data transfer from the terminal side to the IC card is serial, and when writing, the serially transferred address and data are stored in RAM, and when the transfer is completed, the EEF is stored in bytes, etc.
Write to ROM.

FIG. 3 shows how to access the special area 30 (storage area for PIN, AC code, etc.). Special areas 41-43
There is also data field 31-33 for each service attendant, and management information 46-48 for each special area. The management information includes the special area ID and P as shown in the diagram.
There is IN, AC code, and access rights information.

For example, to explain the flowchart in FIG. 3 regarding rewriting the password PIN for the service handled by the data field 33, the special area for this data field 33 is 43, and the external input data contains information specifying this special area 43. The special area 43 and its management information@
48 and enter the PIN and AC code of the external input data as the PIN in the management information of the special area.

Check with AC code. If they match, then the access right checking function 25 checks whether or not there is a right to rewrite the data. If you have the right to rewrite, proceed to the next step. Next, compare the current data in the special area with the current data in the external input data, and if the comparison result is OK, rewrite the current data in the special area 43 (current PIN) with the replacement data (new PIN) of the external input data. .

Rewriting your PIN is necessary when you want to change your current PIN because it has been known to someone else, and this invention is useful because the PIN cannot be read externally, but it can be rewritten. It is.

〔Effect of the invention〕

As explained above, in the present invention, information (secret information) that you do not want others to know, such as your password and control information, is stored in a special memory area that cannot be read out of the IC card by a memory read operation, and verified. Since this is done within the card and only the verification results are output to the outside, it is possible to prevent theft of confidential information.

In addition, secret information stored in special memory areas can be rewritten only after it is confirmed that the user has the right to do so.
If confidential information has been leaked, you can rewrite the confidential information to replace the current IC card without discarding the IC card itself.
You can continue to use the card as is.

[Brief explanation of the drawing]

Fig. 1 is a block diagram showing the configuration of the IC card of the present invention, Fig. 2 is an explanatory diagram of how to use the card, Fig. 3 is a flowchart showing how to rewrite secret information, and Fig. 4 is an explanatory diagram of the IC card. FIG. 5 is a block diagram showing the configuration of a conventional IC card and the parts added according to the present invention, and FIG. 6 is a flowchart showing procedures for accessing data in the card. In Figures 1, 3, and 4, 10 is an IC card, 12 is a processor, 14 is a ROM, and 16 is an EEPRl) M, 3
0.41 to 43 are special areas, and the PIN and AC code are secret information.

Claims (1)

[Scope of Claims] An IC card comprising a processor (12), a first memory (14) for storing its processing program, and a second memory (16) for storing data, comprising: A special area (30,
41 to 43) to store the secret information of the IC card in this special area, and the special area is used as a means for collating external data with written data in the special area, and as a means for comparing external data with written data in the special area, I is provided with means for comparing access authority data for data in the special area with authority information in the special area, and means for writing and rewriting data in the special area.
In the C card, data can only be written initially (when no data is written in the special area) only by a person who is recognized as having write authority by checking the authority data and authority information. After that, a person who can correctly receive the same data written in the special area from the outside (verification of external data and internal data) can check the authority data given from the outside and the authority within the area. An IC card characterized by allowing data to be rewritten any number of times only by a person who is recognized as having rewriting authority as a result of checking with information.