JPH0193877A - Ic card - Google Patents

Abstract

PURPOSE:To properly lock/unlock a function by storing a program having a function for locking for a service unit, a function for mechanically locking as well as locking according to an instruction and a function for releasing the lock. CONSTITUTION:An IC card 10 is inserted into a terminal equipment 20 and connected to the terminal equipment 20 through a contact 18. A processor 12 in the IC card 10 collates the PIN (personal identification) of selected management information to an input PIN. When the PIN collated results do not coincide, a PIN counter is added by one, the result is compared with the allowable number of the PIN counter, if it is the allowable number or below, an error processing is executed and the inputted PIN is an error, so that a reentry is urged. When the collation with the reinputted PIN shows also discrepancy, PIN counter is again added with '1'. When the counted value exceeds the number of times of permission, automatic lock due to the discrepancy of PIN is set to the status flag and IC card 10 is discharged.

Description

[Detailed Description of the Invention] [Summary] Regarding an IC card that allows multiple types of services to be received with one card, it is possible to lock it for each service, and in addition to automatically locking it, it can also be locked by a command. The IC is intended to enable the card to be locked and to unlock the locked object, and includes a processor in the card, a first memory for storing its processing program, and a second memory for storing data. In the card, the second
The first memory stores files, their management information, and file creation management information for each service, and the first memory stores file designation information of external input data, card holder's PIN number, and terminal confirmation code. Select the relevant file and enter the management information PIN of the selected file.
, a function to check the PIN and AC code, a function to count the number of discrepancies in the PIN and AC code check, and set a flag to prohibit access to the file if each exceeds the allowable number of times, and a function to set a flag to prohibit access to the file in external input data. When there is a lock command for a file, it is checked whether the command has write permission to the file, and if so, a flag is set to prohibit access to the file. When there is a PIN of management information, the same AC code, and an unlofting command for a file, select the relevant file and enter the PIN and A of the management information of the file at the time of file creation.
It stores and configures a program that has the function of checking against the C code, checking whether or not there is the right to create the file, and resetting the flag that locks the file if found.

[Industrial application field]

The present invention relates to an IC card that allows multiple types of services to be received with one card.

[Conventional technology]

As shown in FIG. 4, the Ic<s product circuit) card includes a processor 12, a read-only memory (ROM) 14 for storing its program, an electrically erasable and programmable ROM 16, and a signal input/output circuit. The contacts 18 are exposed. In this example, there are eight contacts, and signals (data) are transferred in a bit serial manner. The processor 12 and memory 14 and 16, which are composed of semiconductor elements, are minute and capable of complex functions and large-capacity storage, so they are not capable of a single function like a magnetic card, but can be used for deposits, credits, hospitals, etc. Many service functions such as various clubs can be performed with one card. The IC card 10 is inserted into the terminal device 20 to receive a predetermined service.

For example, if the terminal device 20 is a financial terminal, services such as deposits and payments can be received.

It is sometimes desirable to prohibit the use of this type of card to prevent theft, but because it poses a problem for the card holder in terms of payment. When withdrawing money, there is a step in which the customer enters a PIN code and checks to see if it matches the PIN code on the card, but if the customer uses a stolen card and does not know the PIN code and enters the PIN code at random. Inconsistencies occur many times, and in such cases, the card is flagged as invalid and its future use is prohibited. Even if a card is inserted, it is ejected as an invalid card).

[Problem that the invention seeks to solve]

As described above, conventional cards also have a lock function that prohibits access to the data area, but this has the following problems.

■The lock is for the entire card, so if you apply such a method to something that includes multiple services, such as an IC card, a lock will occur for one service, but not for other services. Even if you don't have one, your entire card will be locked and you will no longer be able to receive all services.

■ Locking is automatic and fixed, such as locking the card immediately if you enter an incorrect PIN code a predetermined number of times.
Voluntary, conscious lock cannot be applied.

■Once a card is locked, there is no way to release it, and even if the cause of the lock disappears, the card is invalid, and if desired, a new card will be issued, making it impossible to lock and release the card on an ad hoc basis.

The present invention improves the above points, and enables locks to be applied on a service-by-service basis, in addition to being mechanically applied, locks can also be applied by command, and furthermore, locked items can be released. The purpose is to

[Means for solving problems]

The above object is an IC card that includes a processor (12), a first memory (14) for storing its processing program, and a second memory (16) for storing data. , files (31, 32,...) and their management information (
41, 42, ...) and file creation management information (51, 52, ...), and the first memory stores file designation information of external input data, card After receiving the owner's personal identification number (PIN) and terminal confirmation code (AC code), select the relevant file and receive the PIN of the management information of the selected file.

A function that performs verification with the AC code (verification may involve simply comparing the AC code itself, or by comparing the result of encrypting using a certain algorithm using the AC code as a key). , PIN, and AC code (in which the number of allowed errors in validation can be set separately) is counted, and if each number exceeds the allowed number of times, a flag is set to prohibit access to the file. , when external input data includes a lock command for a file, it checks whether the command has write rights to the file, and if so, sets a flag to prohibit access to the file (depending on the flag set, (a means for identifying the reason for the lock; a means for prohibiting access to the relevant file if the flag is set; and a means for permitting access to the relevant file if the flag is not set), file specification information in external input data, When there is a PIN of file creation management information, the same AC code, and an unlofting command for a file, select the relevant file, compare it with the PIN and AC code of the file creation management information of the file, and Check whether you have the right to create
This can be achieved by storing a program that has the function of resetting the flag that locks the file, if any.

[Effect]

According to this configuration, a lock can be applied automatically (mechanically) or by a command for each service, and the lock can be released by a command, so a single IC card can be used for multiple services. This means that the entire card will not be invalidated due to a defect in the service, and the service provider will be able to stop providing the service based on an order, and furthermore, the card will be unlocked when the prohibited reason is resolved. Can be reused,
There is no waste.

〔Example〕

FIGS. 1 to 3 show a first embodiment of the present invention in flowcharts.
The figure shows the automatic locking process, FIG. 2 shows the locking process by command, and FIG. 3 shows the unlocking process by command. In this example, there are three files 31 to 33, each of which corresponds to one service. Management information 41 to 43 for each file is also stored in the memory 16. The file management information is the file ID, which is the name of the file, as shown in the diagram.
s P I N (Personal Identif)
cationNumber; PIN number of the card holder), AC code (Authentication code; code that confirms the validity of the program in the terminal being processed), access rights (right to read/write files), PIN counter and its permissible number of times, AC It consists of a code counter, its permissible number of times, and a status flag. The processor 12 in the IC card reads data and management information from these files, compares them with external input data, counts, sets flags, etc.

First, to explain the automatic locking process shown in Figure 1, the IC
Insert the card 10 into the terminal device 20 and contact 1
8 to connect to the terminal device.

In this case, the terminal device is an automatic deposit/payment machine, and the file 31 stores data such as account numbers and balances. When the card is inserted, file specification information and AC code are sent from the terminal device, and when the customer enters the PIN number, the customer receives the PIN.
is sent into the IC card 10. The processor in the IC card selects the file 31 based on the file specification information, compares the PIN in the management information 41 with the input PIN,
- If yes (OK), clear the PIN counter of the management information 41. Next, enter the AC code of the management information 41 and input A.
Check the C code, and if they match (this indicates that this card can be used with this terminal device), the AC of the management information 41
Clears the code count and then begins access processing. That is, in the case of a deposit payment, the balance in the file 31 is read out, and if the requested payment amount is within the balance, the requested amount is paid out, and the remaining amount is written in the file 31.

If the PIN verification result does not match (NG), the management information 41
Increase the PIN counter by 1 and send the result to the management information 41.
The PIN counter is compared with the permissible number of times, and if it is less than the permissible number of times, an error process is performed and the entered PIN is incorrect and prompts the user to re-enter it. If the re-entered PIN does not match again, the PIN counter is incremented by 1 again, and if the allowable number of times, for example 3, is exceeded, an automatic lock due to PIN mismatch is set in the status flag of the management information 41. Set the value of the flag to ``Automatic lock due to PIN mismatch'') and eject the IC card (prohibit access to the file in the IC card).

Although not shown, there is a step to check the status flag after the "file selection function", and if the flag is set as above, from then on, even if the card is inserted into the terminal device, the
Until you verify the IN (access to the service will be prohibited).

If the AC code comparison does not match, the AC code counter is incremented by 1, and if this exceeds the allowable number of times, an automatic lock state due to AC code mismatch is set in the status flag of the management information 41, and the IC card is locked for the file 31. Access will be prohibited thereafter.

The same applies to files 32 and 33 for other services. The lock is the management information 1 for each file (service).
This is done by setting the status flags a41, 42, and 43, so even if file 31 is locked, the card is valid for files 32 and 33.

The locking process using commands can be explained using Figure 2.
Now, assume that the terminal device 20 is for credit card use, and the customer is trying to make a purchase and pay for it using an IC card IO. Further, the number of files for credits is 32, and the number of management tables thereof is 42. This management table 42 also has a file ID5PIN.

There are AC codes, etc., but their contents are in management table 4.
It is different from that of 1. That is, although it is natural that the file ID, which is the name of the file, is different, the PIN (card holder's personal identification number) can also be different for deposits and credits. The AC code is, in this case, that of the available terminal.

Insert the IC card 10 into the credit terminal, select the file 32 according to the file specification information of the external input data, check the status flag of the management table 42 (not shown) to see if it is locked, and check the status of the external input data. PIN.

The AC code is compared with the PIN and AC code in the management table 42. Up to this point, the process of purchasing a product using normal credit has been performed, but if the external input data includes a lock command (not shown), the access right of the management table 42 is checked to see if there is write right to the file 32. Check whether or not.

If there is a write right, "lock by command" is set in the status flag of the management table 42.

If the status flag is set to lock by command, when the IC card is inserted into the credit terminal, a file is selected, and the status flag in the management table for that file is checked, the card is considered invalid and access is disabled. It is forbidden. Other files 31.3
The same applies to locking by command for 3. Locking by command must only be possible by those authorized to do so. It is assumed that a person with lock authority (generally a service provider) has write authority to the file.

Next, unlocking will be explained with reference to FIG. - In this case, the lock on the credit file 32 is to be released. The IC card 10 also stores creation management information 51, 52.53 for files 31, 32, and 33, and this file creation management information consists of a file ID5PIN, an AC code, and an access right. The person who unlocks the lock is generally the card issuer, and the PIN and AC code of the management information at the time of file creation are therefore the card issuer's PIN.

This is the AC code of a terminal with an unlock function.

Insert the IC card 10 into a terminal with an unlock function,
When an unlock instruction is given to the file 32, the file specification information of the external input data, the PIN of the management information at the time of file creation, and the same AC code are input, the selection of the file 32, the PIN, and the AC code are verified, and then the external input data Based on the unlock instruction (not shown) and the access right in the file creation management information 52, it is checked whether the creation right (unlock right) for the file in question exists, and if so, the status flag in the management information 42 is reset. be done. The same applies to unlocking other files 31 and 33.

〔Effect of the invention〕

As explained above, according to the present invention, for an IC card capable of processing a plurality of services, (1) locking can be applied to each service, and even if one service is locked, other services can be used with the same card. ■Not only can it be locked automatically, but it can also be locked by command. ■ Fraud by the card holder and fraud by others can be checked and locked separately. ■Cards can be reused because they can be unlocked.

Locks can be applied to the entire card, or can be applied to layers of various services.

A PIN counter will be used to check if the card has been obtained illegally and is used by someone who does not know the PIN, and an AC code counter will be used to check if the card is being used illegally or incorrectly on a terminal that is not intended for insertion.
Further use may be prohibited.

Since the PIN of the legitimate card holder is inside the card and not on the host, and verification is performed within the card and not read out to the terminal for verification, confidentiality is high.

[Brief explanation of the drawing]

1 to 3 show an embodiment of the present invention, in which FIG. 1 is a flowchart of automatic locking processing, FIG. 2 is a flowchart of locking processing by command, and FIG. 3 is a flowchart of automatic locking processing. Flowchart of unlocking process using the command. FIG. 4 is an explanatory diagram of the IC card. 1 and 4, 10 is an IC card, 12 is a processor, 14 is a first memory, 16 is a second memory, 31-
33 is a file, 41 to 43 are file management information, 51
53 is file creation management information.

Claims (1)

[Scope of Claims] An IC card comprising a processor (12), a first memory (14) for storing its processing program, and a second memory (16) for storing data, comprising: In memory, files (31,
32,...) and its management information (41, 42,...)
) and file creation management information (51, 5
2,...), and the first memory receives the file designation information of the external input data, the card holder's personal identification number (PIN), and the terminal confirmation code (AC code). Select the file and
A function that checks the management information of the selected file against the PIN and AC code, and counts the number of discrepancies in the PIN and AC code comparison, and sets a flag that prohibits access to the file if each exceeds the allowable number of times. Function: When external input data includes a lock command for a file, it checks whether the command has write permission to the file, and if so, sets a flag to prohibit access to the file. When there is file specification information, PIN of file creation management information, AC code, and an unlock command for the file, select the relevant file and check with the PIN and AC code of the file creation management information of the file. I is characterized by storing a program that has a function of checking whether the user has the right to create the file and, if so, resets a flag that locks the file.
C card.