JPH01214991A - Portable electronic equipment - Google Patents

Abstract

PURPOSE:To prevent the increase in a memory area holding collation affirmative result information and to facilitate the referring of the same information by operation in the succeeding IC card by sharing inherent collation affirmative result information possessed by plural registered personal identification numbers. CONSTITUTION:It is collated whether or not a prescribed relation exists between both for a second data string (personal identification number) inputted from an external part and one first data string selectively out of plural first data strings stored in a memory part and when the collation result is affirmative, the first data inherent collation affirmative result information is held. In this case, at least two first data strings out of plural first data strings share the collation affirmative result information. Thus, the increase in the memory area to hold the collation affirmative result information is prevented and the complication of the referring of the same information at the operation in the succeeding present equipment can be prevented.

Description

DETAILED DESCRIPTION OF THE INVENTION [Objective of the Invention (Field of Industrial Application) The present invention relates to a portable electronic device called an IC card, which is used, for example, as a credit card or a cash card.

(Prior Art) In recent years, as cards with magnetic stripes such as credit cards and cash cards, so-called magnetic cards, have become popular, erasable non-volatile memories with newly expanded storage capacity and CP that controls these
2. Description of the Related Art A so-called IC card incorporating an IC chip having a control element such as a U is attracting attention.

With such IC cards, transactions are performed based on transaction account information stored in memory, and when performing such transactions, a PIN number is verified to verify the identity of the cardholder. There is.

That is, a single or multiple password numbers are registered in the memory within the IC card, and the password entered from the outside is compared with the specified registered password number within the card. The number of PIN numbers depends on the system in which the IC card is operated, but considering the diversity of systems and security, multiple PIN numbers are required.

When a conventional IC card successfully verifies a PIN, it stores identification information in its internal RAM, etc. that allows the card itself to confirm which PIN was verified in subsequent operations, i.e. verification positive result information. are doing.

This verification positive result information is unique to each PIN number.

Nowadays, for example, more than one personal identification number of a card holder has been registered, and an IC card system is being considered in which different personal identification numbers are used for different applications. At this time, with conventional IC cards, although it is possible to use these cards properly, since the verification result information is different for each,
This results in an increase in the memory area for holding the verification positive result information, and also complicates reference to the same information in subsequent operations within the IC card.

(Problems to be Solved by the Invention) As described above, for example, when a plurality of PIN numbers are registered, each PIN has different unique verification positive result information. This was done to solve the problem of increasing the memory area for holding information and complicating the reference of the same information in subsequent operations within the device.
To provide a portable electronic device that prevents an increase in memory area for holding verification positive result information unique to each password, and that facilitates reference to the same information in subsequent operations within the device. With the goal.

[Structure of the Invention] (Means for Solving the Problems) The present invention includes a memory section and a control section for reading and writing data to the memory section, and selectively allows external input. A portable electronic device comprising means for outputting a plurality of first data strings (for example, a password) stored in the memory section and a second data string (for example, a password) inputted from the outside. collation means for selectively collating one first data string among the plurality of first data strings stored in the memory unit to determine whether there is a predetermined relationship between the two; , a storage means for holding verification positive result information specific to the first data string when the verification result of the verification means is positive, The first data string is characterized in that the verification positive result information is shared.

(Function) By sharing the verification positive result information unique to each PIN number, it is possible to prevent the memory area from increasing to hold the verification positive result information, and to use the same information in subsequent operations within this device. References are not complicated either. Furthermore, a wide range of systems can be constructed using, for example, an IC card.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 20 shows an IC as a portable electronic device according to the present invention.
This figure shows an example of the configuration of a terminal device that handles cards. That is, this terminal device enables an IC card 1 to be connected to a control section 3 consisting of a CPU, etc. via a card reader/writer 2, and also connects the control section 3 with a keyboard 4, a CRT, etc.
It is constructed by connecting a display device 5, a printer 6, and a floppy disk device 7.

The IC card 1 is held by the user and is used to refer to a personal identification number known only to the user when purchasing products, etc., and to store necessary data. For example, FIG. 18 shows the functional blocks of the IC card 1. As such, read/write section 1
1, a password setting/password verification section 12, an encryption/decryption section 13, and other sections that execute basic functions, and a supervisor 14 that manages these basic functions.

The read/write unit 11 has a function of reading, writing, or erasing data from a data memory or the like. The password setting/password verification unit 12 has a function of storing the password set by the user and prohibiting reading of the password, as well as verifying the password after setting the password and granting permission for subsequent processing. Encryption/decryption section 13
, for example, performs encryption and decryption of encrypted data to prevent leakage and forgery of communication data when data is transmitted from the control unit 3 to another terminal device via a communication line. , for example DES (Data En
This function performs data processing according to an encryption algorithm with sufficient cryptographic strength, such as encryption (5 standard). The supervisor 14 has the function of decoding a function code manually input from the card reader/writer 2 or a function code to which data is added, and selecting and executing a necessary function among the basic functions.

In order to demonstrate these various functions, the IC card 1:
For example, as shown in FIG. 17, a control element (control section) 15 such as a CPU, a data memory (memory section) 16, a program memory 17, and a contact section 18 for making electrical contact with the card reader/writer 2. Of these, the control element 15, data memory 16, and program memory 17 are composed of one IC chip (or a plurality of IC chips) and are embedded within the IC card body. The program memory 17 is composed of, for example, a mask ROM, and stores a control program for the control element 15 including subroutines for realizing each of the basic functions described above. Data memory 16
is used to store various data, for example EEFRO
It is composed of erasable non-volatile memory such as M.

The card reader/writer 2 sends and receives function codes and data between the IC card 1 and the control unit 3.
It also has a function of performing one command, one response operation to the IC card 1 based on macro commands from the control unit 3. Specifically, as shown in FIG. 19, for example, a transport mechanism 21 that transports an IC card 1 inserted into a card insertion slot (not shown) to a predetermined position, an IC set at a predetermined position,
A contact section 22 electrically contacts the contact section 18 of the C card 1, a control section 23 consisting of a CPU that controls the entire system, and a control section 23 that exchanges command data and response data between the control section 23 and the control section 3. an input/output interface circuit 24 for performing data processing, and a data memory 25 for storing data.
It is composed of etc.

The data memory 16 includes, for example, an area definition table 161 and a password information table 162, as shown in FIG.
, and a data area 163. In particular, the area definition table 161 includes a password information area definition table 164 and a transaction data area definition table 165.

The password information area definition table 164 is data area 1
63 stores definition information that defines a password information area, and this definition information is, for example, a collection of a series of data strings consisting of an area number, area start address, and area size, as shown in FIG. It is.

The transaction data area definition table 165 is
Definition information that defines a transaction data area is stored in the data area 163, and this definition information is, for example, a series of area numbers, area start addresses, area sizes, and access condition information, as shown in FIG. is a collection of data strings.

The data area 163 is the password information area definition table 1
The area is defined by 64 and transaction data area definition table 165, and various data are stored therein, and a specific example thereof is shown in FIG.

For example, as shown in FIG. 1, the PIN information table 162 includes an index section, an area number section of the PIN area,
This is a collection of a series of data strings consisting of the area number part of the error counter area, the area number part of the error limit area, and the area number part of the password verification status area.

The index section contains password verification command data (first
It operates in association with the index designation information in (see Figure 4). In other words, if the same index as the index designation information in the password verification command data is found, the corresponding password becomes the target of verification.

The area number part of the password area is the area number of the password area in the data area 163 in which the password specified as the verification target is stored.

The area number part of the error counter area is the control element 15.
This specifies the first error counter (see FIG. 6) on the RAM in the data area 163, and also specifies the area number of the second error counter area in the data area 163.

The area number part of the error limit area is the area number of the error limit area in the data area 163 in which the limit values of the first and second error counters are stored. This error limit area is a 1-byte area, and as shown in the format shown in Figure 7, the upper 4 bits indicate the limit value of the first error counter, and the lower 4 bits indicate the limit value of the second error counter. Indicates the limit value.

The area number portion of the password verification status area is a data area 163 in which information identifying which bit of the verification status bits (see FIG. 8) on the RAM in the control element 15 is to be used as the verification status flag is stored. This is the area number of the password verification status area within the area.

For example, if you specify the index "31", the area number of the corresponding PIN number area will be "0" as shown in Figure 1.
1”. This is searched from the password information area definition table 164 shown in FIG. 3, and from the corresponding area start address "TAol" and area size "10 bytes",
Referring to the data area 163 shown in FIG. 5, enter the password r.
l 1111111J is obtained. Here, the PIN area consists of a length section indicating the number of bytes of a 1-byte PIN number and a variable length PIN section.

When the length part is FF"Hex, it is recognized that no password is stored.

Next, the area number of the corresponding error counter area is
Since it is "11" according to FIG. 1, similarly refer to the data area 163 shown in FIG. 5 from the area start address TA11 and the area size "1 byte",
Obtain the value "00" of the second error counter.

In the same way, the PIN specified by index "31" is 8-byte data rl 1111111J
, and the value of the second error counter is "00",
The error limit value is "3" as the first error counter.
, the second error counter is "5", and the control element 15 of the IC card 1 recognizes that the verification status bit corresponds to the 0th bit in FIG.

Next, the operation in such a configuration will be explained.

First, the card reader/writer 2 operates according to the flowchart shown in FIG. That is, in the steady state, it is in a state of waiting for command data from the control section 3. In this state, when command data is input from the control unit 3, the control unit 23 determines whether or not the IC card 1 is being executed, and if it is, it indicates a multiple command data error. The response data is output to the control unit 3, and the state returns to the command data waiting state. If the IC card 1 is not in execution, the control unit 23 outputs command data to the IC card 1 and waits for response data from the IC card 1. When there is response data from the IC card 1, the control unit 23
If the instruction is a macro instruction, the IC card 1
If not, it outputs response data to the control unit 3 and returns to the command data waiting state.

The command data output from the card reader/writer 2 to the IC card 1 has a format as shown in FIG. 10, for example, and may be in the form of only a function code as shown in FIG. As shown in b), there is a form in which data is added to the function code.

The IC card 1 operates according to the flowchart shown in FIG. That is, in the steady state, it is in a state of waiting for command data from the card league writer 2. In this state, when command data is input from the card league writer 2, the control element 15 executes basic functions according to the command data, and
It outputs response data indicating the processing result to the writer 2 and returns to the command data waiting state.

The response data in this case is, for example, in the format shown in FIG. Take protective measures in case of disturbance.

Next, the password verification operation will be explained with reference to the flowchart shown in FIG. 13. When the command data is input, the control element 15 determines that the command data is, for example, the 14th
It is determined whether the password verification function code has the format shown in the figure. Here, the password verification command data is composed of a password verification function code, index designation information, and password information (consisting of a password length and a password). As a result of the above judgment, if it is not the password verification command data, the control element 15 decodes the function code in the command data, executes the corresponding processing, outputs response data for the processing result, and enters the command data waiting state. Return to

As a result of the determination of the command data, if it is password verification command data, the control element 15 stores an index that matches the index designation information in the command data in the data memory 16.
The search is performed from the index section of the password information table 162 in . As a result of this search, if it is not found, the control cable 1
5 outputs response data indicating that execution is not possible, and returns to the command data waiting state. If the index is found as a result of the above search, the control element 15 refers to the password area corresponding to the index. Here, if the length part of the PIN number area is 'FF'Hex, the control module 15 recognizes that the PIN number is not stored and outputs response data indicating that the PIN number has not been set. , returns to the instruction data waiting state.

If the length part of the password area is other than "FF" Hex, the control element 15 recognizes that the password is stored, and then calculates the corresponding second error counter value and its limit value. is read out and compared and verified. As a result of this comparison, if the limit value is larger than the value of the second error counter, the control element 15
Performs PIN verification processing. As a result of the comparison and verification, if the limit value is not greater than the value of the second error counter, the control element 15 refers to the password verification status area corresponding to the index and reads the contents of that area, thereby The corresponding verification status bit is set to "0", response data indicating that the password cannot be used is output, and the state returns to the instruction data waiting state.

Now, in the password verification process, the password information in the input command data is compared and verified with the specified password. As a result of this comparison, if the two match,
The control element 15 sets the first and second error counters to "
00", then refers to the password verification status area corresponding to the index, reads the contents of that area, sets the corresponding verification status bit to "1", and outputs response data indicating verification completion, Return to instruction data waiting state.

As a result of the comparison and verification of the above-mentioned PIN numbers, if they do not match, the control element 15 refers to the error limit area corresponding to the index and reads out the contents of that area, thereby reading out the lower 4 bits. It is determined whether the value (limit value of the second error counter) is "0". If the result of this judgment is "0", the control element 15 refers to the password verification status area corresponding to the index and reads out the contents of that area.
The corresponding verification status bit is set to "0", response data indicating that the PIN number does not match is output, and the state returns to the command data waiting state.

As a result of the judgment of the value of the lower 4 bits of the error limit area, if it is not "0", the control element 15 sets the value of the upper 4 bits of the error limit area (limit value of the first error counter). The value of the first error counter is compared and verified.

As a result of this comparison, if the former is larger than the latter, the control element 15 increases the value of the corresponding first error counter by one. Then, the control element 15 refers to the password verification status area corresponding to the index, reads the contents of that area, sets the corresponding verification status bit to "0", and outputs response data indicating that the password does not match. and returns to the instruction data waiting state.

As a result of comparing the value of the upper 4 bits of the error limit area with the value of the first error counter, if the former is not larger than the latter, the control element 15 controls the second error counter area corresponding to the index. By referring to and reading the contents of the area, the value of the second error counter and the corresponding limit value (value of the lower 4 bits) are compared and verified. As a result of this comparison, if the latter is larger than the former, the control element 15 increases the value of the corresponding second error counter by one. Then, the control element 15 refers to the password verification status area corresponding to the index, reads the contents of that area, sets the corresponding verification status bit to "0", and outputs response data indicating that the password does not match. and returns to the instruction data waiting state.

As a result of the comparison between the value of the second error counter and the corresponding limit value, if the latter is not larger than the former, the control element 15 refers to the password verification status area corresponding to the index and By reading the contents of the area, the corresponding verification status bit is set to "0", response data indicating that the password cannot be used is output, and the process returns to the instruction data waiting state.

As shown in FIG. 1, area numbers "12" and "13" of the error counter area are index "3".
2" and "33" and "34" and "35", respectively. This means that the same error counter is used as the password corresponding to the index "32" and the password "33" as the verification command target. Also, indexes "34" and "35"
' has a similar relationship. Furthermore, especially the index “3
For "4" and "35", the error limit value is also shared (
"24" is commonly used as the area number). As a result, if the second error counter reaches the limit value when, for example, a password is verified using the index "34", it becomes impossible to simultaneously verify the password using the index "35".

Also, as shown in Figure 1, the indexes "32" and "
The area number of the password verification status area corresponding to "33" also shows the same area number "42". Therefore, no matter which password is used for verification, the first bit of the verification status flag in FIG. 8 will be "1". That is, the verification status flag shown in FIG. 8 constitutes a holding means that holds verification positive result information (verification status bit) unique to each password. In this example, the PIN numbers with indexes "32" and "33" share one verification status bit (1st bit).

Next, the transaction data write operation will be explained with reference to the flowchart shown in FIG. 15. In FIG. 13, if the input command data is not the password verification command data, the control element 15 determines that the next input command data is transaction data write command data having the format shown in FIG. Determine whether or not.

Here, the transaction data write command data is
It consists of a transaction data write function code, area designation information, and write data. As a result of the above judgment, if the transaction data is not write command data, the control element 15 decodes the function code in the command data, executes the corresponding processing, outputs response data for the processing result, and waits for the command data. Return to state.

If the above instruction data is determined to be transaction data write instruction data, the control element 15 searches the transaction data area definition table 165 in the data memory 16 for an area number that matches the area designation information in the instruction data. . As a result of this search, if no area is found, the control element 15 outputs response data indicating that the area is undefined, and returns to the command data waiting state.

If the area number is found as a result of the above search, the control element 15 refers to the access condition information corresponding to the area number and checks whether the collation status bit indicated by the access condition information is "1" or not. to judge. If the result of this judgment is "0", the control element 15 outputs response data indicating that access is not possible, and returns to the command data waiting state. If the result of the above judgment is "1", the control module 15 performs transaction data write processing, outputs response data corresponding to the processing result, and returns to the instruction data waiting state.

For example, referring to Figure 4, the access condition information is "04" for area number "80", so if the second bit of the verification status bit is "1", the transaction data It is possible to write. Therefore, if the verification of the PIN number using the index "34" is successfully completed, the area "
Data can be written to "80". Also, since the area number "81" is related to the first bit of the verification status bit, if the verification of the PIN using the index "32" or "33" is successfully completed, the area in the data area 163 Data can now be written to "81".

In this way, by sharing the unique verification positive result information (verification status bit) of multiple registered PIN numbers, it is possible to prevent an increase in the memory area for holding the verification positive result information, and Referencing the same information in subsequent operations within the IC card does not become complicated. Furthermore, a wide range of systems can be constructed as an IC card.

In the above embodiments, an IC card is used as an example of a portable electronic device, but the present invention is not limited to a card-shaped device, and may be a block-shaped or rod-shaped device, for example. In addition, the hardware configuration of portable electronic devices
Various modifications can be made without departing from the gist of the invention.

[Effects of the Invention] As described in detail above, according to the present invention, it is possible to prevent an increase in the memory area for holding the verification positive result information unique to each PIN number, and to prevent the increase in the memory area for holding the verification positive result information unique to each PIN number, and to It is possible to provide a portable electronic device that makes it easy to refer to the same information.

[Brief explanation of the drawing]

The figures are for explaining one embodiment of the present invention, and FIG. 1 is a diagram showing a specific example of the password information table, FIG. 2 is a diagram showing an example of the format of the data memory, and FIG. 3 is a diagram showing the password information table. FIG. 4 is a diagram showing a specific example of the area definition table. FIG. 4 is a diagram showing a specific example of the transaction data area definition table. FIG. 5 is a diagram showing a specific example of data stored in the data area. Figure 7 shows an example of the format of the limit value stored in the error counter area. Figure 8 shows an example of the format of the collation status bit. Figure 9 shows the format of the card reader/writer. Flowchart, explaining the operation of! J10 diagram is I
FIG. 11 is a flowchart explaining the operation of the IC card; FIG. 12 is a diagram showing an example of the format of general response data output from the IC card; FIG. 13 is a flowchart explaining the PIN verification operation, FIG. 14 is a diagram showing an example of the format of PIN verification command data, and FIG.
FIG. 16 is a flowchart explaining the transaction data write operation, FIG. 16 is a diagram showing an example of the format of transaction data write command data, and FIG. 17 is an I
A block diagram showing the configuration of the C card, FIG. 18 is a diagram showing the functional blocks of the IC card, and FIG. 19 is a block diagram showing the configuration of the IC card.
FIG. 20 is a block diagram showing the configuration of the writer, and FIG. 20 is a block diagram showing the configuration of the terminal device. 1...IC card (portable electronic device), 15
...Control element (control unit), 16...Data memory (memory part), 17...Program memory, 161...Area definition table, 16
2...Password information table, 163...
Data area, 164...Password information area definition table, 165...Transaction data area definition table. Applicant's Representative Patent Attorney Takehiko Suzue 2nd Art Figure 3 Figure 4 Figure 6 Figure 7 Figure 9 (a) = Figure 10 Figure 12 Figure 13 (a) Figure 13 (C ) Fig. 15 - Fig. 160 (b) Figure 14 Procedural Amendment Shobo Ceremony) July 19, 1988

Claims (1)

[Scope of Claims] A portable electronic device comprising a memory section, a control section for reading and writing data to the memory section, and means for selectively inputting and outputting data from the outside. a plurality of first data strings stored in the memory section; a second data string input from the outside; and a selection of the plurality of first data strings stored in the memory section. collation means for collating one first data string to determine whether there is a predetermined relationship between the two; and when the collation result of the collation means is positive, a holding means for holding verification positive result information of at least two first data strings of the plurality of first data strings.
A portable electronic device characterized in that the data strings share the verification positive result information.