JPH01131987A - System utilizing identification card - Google Patents

Abstract

PURPOSE: To simplify an input operation to a card processor, to prevent the embezzlement of identification data at the time of the input operation and to precisely prevent the unauthorized use of a card by providing a collation processing omitting function in the collation means of the card processor. CONSTITUTION: The control part 16 of an identifiation card collates the matching/unmatching of the identification data, monitors time lapse from the matching time, counts the number of times of non-matching and stores the respective pieces of information in a memory 19 and the collation means 37 of the card processor judges whether or not the respective pieces of the information inside the memory 38 read through a data read means satisfy prescribed conditions and functions so as to omit a collation processing when all the conditions are satisfied. Thus, the input operation in the card processor is simplkified, the embezzlement of the identification data at the time of the input operation is prevented and the unauthorized use accompanying the increase of collation conditions in the collation means is prevented further.

Description

Detailed Description of the Invention (Field of Industrial Application) The present invention provides an identification card using an identification card such as an IC card in an automatic teller machine (hereinafter referred to as an ATM) used in financial institutions, etc. The present invention relates to a usage system, particularly an identification card usage system for verifying identification data such as a password.

(Conventional technology) Conventionally, systems that require identity verification and usage qualifications, such as automatic deposit payment systems operated by banks and other financial institutions, and credit systems operated by retailers, etc., do not require identification. Magnetic cards are generally used as cards. However, magnetic cards have a small storage data capacity, and a person skilled in the technology can read the identification data such as the holder's personal identification number, which poses a security problem.

Therefore, in recent years, as an alternative to magnetic cards, IC cards in which a central processing unit (hereinafter referred to as CPU), memory, etc. are embedded in a card base material have been proposed. Since the IC card itself has a built-in CPU, it has data processing and arithmetic functions, and also has a large data storage capacity of, for example, 16 bits or more. Read data from memory using CP
This is done under the control of U, so it is quite difficult to read the data from outside, and furthermore, the CP tJ can have a security function to prevent forgery and unauthorized reading.

Conventionally, as an identification card usage system using this type of identification card such as an IC card, for example, an identification card and an AT
A system has been proposed which is equipped with a card processing device such as M, and when an identification card is used, the card processing device performs processing such as deposits and withdrawals after confirming the identity of the user. That is, after the card user inserts the identification card, which has identification data such as a PIN number stored in the built-in memory, into the card processing device,
Identification data is input using an input device such as a keyboard provided in the card processing device. Then, in the card processing device, the identification data inputted by the input device and
The identification data read from the identification card is compared, and if the two match, processing such as deposits and withdrawals is performed. If the two do not match, the user is prompted to enter the identification data again, and the number of times of mismatch or a predetermined number of times is entered. When this is reached, the identification card is ejected.

(Problems to be Solved by the Invention) However, the identification card usage system having the above configuration has the following problems.

■ Since card users are required to enter identification data from card processing devices such as ATMs, the operation time per person increases, resulting in longer waiting times for other customers, etc., which reduces the efficiency of card processing device usage. is low.

■ Since card users enter identification data at card processing equipment such as ATMs, there is a risk that the identification data will be known to other customers during the input operation, and there is a risk of confidentiality (security). Not only is there a problem, but there is also a security problem due to unauthorized use by someone who is not the legal holder of the card.

The present invention provides an identification card usage system that solves the problems of the prior art, such as low usage efficiency of the card processing device and problems in terms of confidentiality and security.

(Means for Solving the Problems) In order to solve the above-mentioned problems, the present invention provides a memory for storing data including identification data, a first data input section for inputting the identification data, and a first data input unit for inputting identification data, and a first data input unit for inputting identification data. an identification card having a control section that compares the identification data entered by the data input section with the identification data inputted by the data input section and stores matching/mismatch information in the memory; a second data input section for inputting the identification data; data reading means for reading the contents of the memory; and identification data in the memory read by the data reading means and a second data input section when there is mismatch information based on the match/mismatch information read by the data reading means; an identification card usage system comprising: a card processing device having a verification means that performs verification processing with identification data inputted by a user, and omits the verification processing in the case of matching information; A function to monitor the elapse of a predetermined time after obtaining information and store the elapsed time information in the memory, and a function to count the number of mismatches and store the mismatch count information in the memory when discrepancy information is obtained. and the matching means, the matching/mismatching information in the memory read by the data reading means is matching information, the time elapsed information is a state in which a predetermined time has not elapsed, and the mismatch count information is a predetermined number of times. A function is provided to omit the verification process when it is determined that the condition does not exceed .

(Function) According to the present invention, since the identification card usage system is configured as described above, the control unit of the identification card can check whether the identification data matches or does not match, monitor the passage of time from the time of matching, and the number of mismatches. The checking means of the card processing device determines whether each piece of information in the memory read through the data reading means satisfies a predetermined condition. and when all conditions are met, the matching process is omitted.

This simplifies the input operation in the card processing device, prevents the identification data from being stolen during the input operation, and prevents unauthorized use due to an increase in the number of verification conditions in the verification means. Therefore, the above-mentioned problem can be eliminated.

(Example) An identification card usage system according to an example of the present invention is an IC
It is equipped with an identification card consisting of a card and a card processing device consisting of an ATM.

The external appearance of the identification card is shown in FIG. 2, and the circuit configuration diagram is shown in FIG. 3.

As shown in FIG. 2, this identification card 10 includes a card base material 11. On the surface of the card base material 11, a data input section 12 consisting of a keyboard and a liquid crystal display device (LCD) are provided.
), etc., and a solar cell 14 for supplying power are provided, and furthermore, an external connection terminal 15 shown in FIG. 3 is provided on the back surface of the card base material 11. The data input unit 12 has a numeric keypad 12a with codes 0 to 9 and a plurality of function keys 12b.

As shown in FIG. 3, inside the identification card 10, there is a CPtT 16 which is a control unit for controlling the entire card, a memory (hereinafter referred to as RAM) 17 that can be read and written at any time for recording working data, etc., and a program. There is a read-only memory (hereinafter referred to as ROM) 18 that stores personal identification data such as a password and highly confidential data, and an electrically rewritable programmable ROM (hereinafter referred to as EE
PROM) 19, a predetermined time (for example, about 3 to 5 minutes)
A timer 20 and the like are provided to measure the RAM1.
7, ROM 18, EEPROM 19, timer 20, etc. are connected to CPU 16 along with data input section 12, display device 13, solar cell 14, and external connection terminal 15.

The ROM 18 and the EEPROM 19 are nonvolatile memories whose stored contents are not erased even when power supply voltage is not applied.

An external view of the diagonal card processing device for processing the identification card 10 is shown in FIG. 4, and a circuit diagram thereof is shown in FIG. 5.

As shown in FIG. 4, this card processing device 30 includes a data input section 31 consisting of a keyboard or the like, a display device 32 for displaying data such as a CRT, a card control section 33 that controls insertion and ejection of the identification card 10, Read the contents of your passbook,
A passbook reading/printing section 34 for making entries in the passbook, a cash withdrawal section 35 for depositing and withdrawing banknotes, etc., and a card control section 3
3 is provided with a receipt printing section 36 for printing the details of deposit/withdrawal processing on a receipt.

Inside the card processing device 30, as shown in FIG.
CPU 37 that controls the entire device, R for program storage
Memory 38 consisting of OM, RAM for data storage, etc.
, and an auxiliary memory 39 such as a magnetic disk,
The memory 38, auxiliary memory 39, etc. are the data input section 3.
1. Display device 32, card control section 33, passbook reading/printing section 34, cash withdrawal section 35, receipt printing section 36, etc. are connected to PU 37.
The CPTI 37 is connected to a host device via a communication line 40. Here, the CPU 37 and the card control section 33 have a function as a data reading means for reading the contents of the EEPROM 19 in the identification card 10, and the CPU 37 has a function as a collation means. (2> shows the operation of the identification card usage system according to the present embodiment, in which (1) is a flowchart on the identification card 10 side, and (2) is a flowchart on the card processing device 30 side.

Further, FIG. 6 is a diagram showing an example of the flow of information between the identification card 10 and the card processing device 30. The operation of the identification card usage system will be described below with reference to these figures.

First, the processing operations within the identification card 10 will be explained. CPU in identification card 10
16 is R, 0M18 according to the program in numeric keypad 1
2a or the function key 12b (step 100); if the key is pressed, it is determined whether the key is the numeric keypad 12a (step 101). In step 101, the CPU 16 disables the key input if it is not the numeric keypad 12a, and if it is the numeric keypad 2a, the CPU 16 temporarily stores the numerical value input from the numeric keypad 12a in the RAM 17 and assembles it as a password (step 102). ). C.P.
When the number entered from the numeric keypad 12a reaches a predetermined number of digits (step 103), U16 checks the password against the password stored in advance in the EEPROM 19, and if the two match. Then, the matching information is stored in the EEPROM 19 (step 105), and at the same time, the timer 20 is activated (step 106).

If there is a mismatch in step 104, the CPU 16
1 is added to a counter in the EPROM 19 indicating the number of times the password does not match (step 107). If the content of the counter is within the predetermined number of times, the process returns to step 100, and if it exceeds the predetermined number of times, password input from the numeric keypad 12a is prohibited from now on (step 108).

On the other hand, the elapsed time is measured by each of the timers 106 started in step 106, and if the elapsed time has exceeded a predetermined time (for example, about 3 to 5 minutes), C is (step 10
9), the CPU 16 stores the time elapsed information in the EEPROM 1.
9 (Step 1] 0).

Next (1,°), processing operations on the card processing device 30 side will be explained.

When the card user inserts the identification card ] 0 into the card control unit 33 of the card processing device 30 shown in FIGS. 4 and 5, the card control unit 33 sucks the identification card 10 (step 200 > CPU 3 in the processing device 30
7 sends an information read command signal requesting information transmission to the identification card 10 as shown in FIG. 6 through the external connection terminal 15 of the identification card 10 in FIG. 3 in accordance with the program in the memory 38 (step 201)
. Then, the CPU 16 of the identification card 10
As shown in FIG. 6, the CPU 37 of the card processing device 30 sequentially sends out the match/mismatch information of the PIN numbers, the elapsed time information, and the mismatch count information stored in the PIN number 19 in response to the command signal, as shown in FIG. Each response signal (
The response signal) is received 111 times and stored in the memory 38 (steps 202, 204).

The CPU 37 of the card processing device 30 then uses the memory 38
Step 204) to determine whether the PIN numbers match, step 205) to determine whether a predetermined time has elapsed, and step 206 to determine whether the number of mismatched PIN numbers is within a predetermined number of times. >, and if any one of the three conditions of PIN matching, within a predetermined time, and within a predetermined number of times is not satisfied, a message to that effect is displayed on the display device 32 and the key is pressed manually. Part 31
prompt you to enter your PIN. When a password is input from the key operator 31, the CPU 37 stores the password in the memory 38, and then stores it in the EEPROM of the identification card 10.
19 against the pre-stored PIN number (Step 2)
07). If the verification result does not match a predetermined number of times (for example, 3 times), invalidation processing is performed, and if they match, transaction processing such as deposits and withdrawals is performed (step 208). On the other hand, if all three conditions are satisfied in steps 204 to 206, the CF)tJ37 skips the password verification process in step 207 and immediately proceeds to the transaction process in step 208.

After the CPU 37 of the card processing device 30 performs the transaction processing in step 208, the CPU 37 of the card processing device 30 executes the matching
An initialization command signal for initializing the mismatch information, time elapsed information, and mismatch/match count information is sent and given to the identification card 10 (step 209). As a result, the CPU 16 of the identification card user uses the EEPROM 19.
The information stored in steps 105, 108, and 110 is erased 7, and a response signal indicating the completion of the erasure is sent back to the card processing device 30 as shown in FIG.

Therefore, the CPU 37 of the card processing device 30 causes the card control unit 33 to eject the identification card 10 (step 21).
0), the processing operation ends.

Note that the identification card 10 includes a data input section 12 and a display device 1.
3. Solar cell 14, CPU 16, RΔM17. ROM1
8. and EEPROM 19 zero, it becomes operational by power supply from the solar cell 14, and the RO
By storing a program for each scale in the M18, you can operate the data input section 12 to display transaction history information on the transaction balance stored in the EEPROM 19 on the display device ]3, or operate the data input section 12. It can be used for trivial purposes such as operating the CPU 16 to perform four arithmetic operations and displaying the results of the arithmetic operations on the display device 13.

The identification card usage system of this embodiment has the following advantages.

(a) The card user operates the data input section 12 of the identification card 10 to input the PIN number in advance, and if the conditions such as matching of the PIN numbers are satisfied, the card processing device 3
Since the password input operation at 0 becomes uneasy, the operating time at the card processing device 30 is shortened, and the waiting time for other customers is thereby shortened, thereby improving the usage efficiency of the card processing device 30.

(b) Since the password input operation at the card processing device 30 is not necessary, it is not necessary for others to see the password, thereby improving confidentiality.

(C) In order to eliminate the need for the password input operation on the card processing device 30, in addition to the condition that the passwords match, two conditions are required: the password must be within a predetermined time, and the incorrect input must be within a predetermined number of times. Therefore, unauthorized use by a person who is not the legal holder of the card can be accurately prevented, thereby significantly improving security.

Note that the present invention is not limited to the illustrated embodiment, and various modifications are possible. Examples of such modifications include the following.

(i) In step 104 of FIG.
Although the PIN number pre-stored in the ROM 19 is compared with the PIN number to determine whether the two match or do not match, another method of comparison is, for example, when the CPU 16 of the identification card 10 uses a predetermined algorithm (-6). Alternatively, a method may be used in which a calculation is performed on the password inputted by the user, and it is checked whether or not the result is a specific value.

(ii) The data to be input into the identification card 10 in advance is
It may be possible to input not only the PIN number but also other data such as the payment amount to the identification card 10.
Thereby, the input operation to the card processing device 30 can be further simplified.

(iii) In the above embodiments, the personal identification number is made up of a combination of numbers, but of course it may be made of letters, symbols, etc., and the number of digits may be fixed or variable.

Furthermore, the identification data may be personal data other than the password.

(iv) In the identification card 10 of FIGS. 2 and 3, the data input section 12 may be configured with another switch, the display device 13 may be omitted, the solar cell 14 may be configured with another battery, or The connection terminal 15 may be of a non-contact type using optics or electromagnetism, the EEFROM 19 may be constituted by another non-volatile memory, and the timer 20 may be constituted by a counter mounted in the RAM 17 or the like.

(V) The card processing device 30 in FIGS. 4 and 5 is
In addition to ATM'Ms at banks, etc., point-of-services at retail stores, etc.
It may be a sales system (POS) or a qualification inspection device that checks whether or not there is a valid qualification for entering/exiting a certain facility or using an article.

(Effects of the Invention) As described in detail above, according to the present invention, the control unit of the identification card is provided with a time elapse monitoring function and a discrepancy count function in addition to the identification data matching function, and the card processing device The verification means is equipped with a function to skip the verification process, which simplifies the input operation to the card processing device, thereby improving the usage efficiency of the card processing device, and also prevents theft of identification data during the input operation of the card processing device. can be prevented and confidentiality is improved. Furthermore, since three conditions are required for omitting the verification process, unauthorized use of the card can be accurately prevented, thereby significantly improving security.

[Brief explanation of the drawing]

Figure 1 (1) and <2) are diagrams showing the operation of the identification card usage system according to the embodiment of the present invention, in which Figure 1 (1) is a flowchart of the identification card, and Figure 1 (2) is a flowchart of the card processing device. FIG. 2 is an external view of the identification card shown in FIG. 1, FIG. 3 is a circuit configuration diagram of FIG. 2, FIG. 4 is an external view of the card processing device shown in FIG. 1, and FIG. 5 is a flowchart. 4 is a circuit configuration diagram, and FIG. 6 is a diagram showing the flow of information between the identification card and the card processing device in FIG. 1. 10...Identification card, 12...・Data input section, 13...Display device, 14...
Solar cell, 15...External connection terminal, 16...
... CPU, 17... RAM, 18...
...RolVI, 19...-EEPROM, 20
...Timer, 30 ... Card processing device, 31 ... Data input section, 32 ... Display device, 33 ... Card control section , 37...
...CPU, 38...Memory. Applicant's agent Yasushi Kakimoto (1)
Operation flow of the present invention 1 Card processing device 1+Yard Network shown in FIG. 1] i7i+3 card layout FIG. Fig. 1 Card processing equipment C view diagram Fig. 4 Fig. 5 Card processing equipment Identification card XIE No. 11;ij;! );;1 to 1::)'in Figure 6

Claims (1)

[Scope of Claims] A memory for storing data including identification data, a first data input section for inputting the identification data, and a combination of the identification data stored in advance in the memory and the identification data inputted by the data input section. an identification card having a control section for collating information and storing match/mismatch information in the memory; a second data input section for inputting identification data; a data reading means for reading the contents of the memory; Based on the read matching/mismatching information, when there is a mismatch, a matching process is performed between the identification data in the memory read by the data reading means and the identification data input by the second data input section, and matching information is obtained. an identification card usage system comprising: a card processing device having a verification means that omits the verification process when the verification process is performed; A function for storing progress information in the memory, and a function for counting the number of discrepancies and storing the discrepancy count information in the memory when discrepancy information is obtained, further comprising a function for storing the discrepancy count information in the memory, and further, the collation unit includes the data reading unit. When it is determined that the match/mismatch information in the memory read by is a match, the time elapsed information indicates that a predetermined time has not elapsed, and the mismatch count information has not exceeded a predetermined number of times. An identification card usage system characterized by having a function of omitting verification processing.