JPH02197981A - Portable electronic device - Google Patents

Abstract

PURPOSE:To prevent the illegal transaction that is carried out with forgery of the same transaction approving information by producing the different data for each transaction and using these data to produce the transaction approving information. CONSTITUTION:The transaction approving information D7 is produced from the account type information D3, the transaction amount D4, and the date/time information T and with operation of a keyboard 5. At the same time, the information D7 is also produced by a communication means which performs the communication with a terminal equipment via a contact part 3 in the same process. In this case, the information T is used to produce the information D7 even in case the transaction is carried out via the same account and the same amount since the dates and the times of transactions are always different. As a result, the different types of information can always be obtained. Thus it is possible to prevent the illigal transaction that is carried out with forgery of the same information.

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention (Field of Industrial Application) The present invention relates to a portable electronic device called an IC card, which is used as a credit card in a shopping system, for example.

(Prior Art) In recent years, as a new portable data storage medium, an IC card has been developed that has a built-in IC chip that has an erasable nonvolatile memory and a control element such as a CPU that controls the nonvolatile memory. This type of IC card is designed to selectively input and output necessary data in response to external requests by accessing the built-in memory using a built-in control element.

Furthermore, recently, battery-powered IC cards have been developed that have a built-in battery, a keyboard, and a display section, and can operate off-line without being connected to a terminal device.

Such an IC card is capable of selecting and executing various functions such as a transaction function using an input means (keyboard or communication means for communicating with the outside). For example, by selecting a transaction function (credit card function) using a keyboard or other communication means that communicates with an external party, and then entering transaction information such as the transaction amount, the transaction information and the transaction stored in the card's memory can be saved. Transaction processing is performed based on account information. Each time a transaction is processed, transaction approval information indicating that the transaction has been successfully completed is generated and displayed on the display section of the IC card or the display section of the terminal device.

However, in the conventional method of generating transaction approval information, the transaction approval information is generated using encryption means based on the selected account type information and the input transaction amount.

Therefore, if transactions for the same amount are processed in the same account, the same transaction approval information will always be generated. Therefore, there is a problem in that fraudulent transactions occur due to forgery of the same transaction approval information.

(Problems to be Solved by the Invention) As described above, in the case of transaction processing for the same amount in the same account, the same transaction approval information is always generated, so the same transaction approval information is generated. This was created to solve the problem that there is a risk of fraudulent transactions occurring due to falsification of information, and it is possible to always generate different transaction approval information for each transaction, even when transactions are processed for the same amount in the same account. An object of the present invention is to provide a portable electronic device that can prevent fraudulent transactions due to forgery of the same transaction approval information.

[Structure of the Invention] (Means for Solving the Problems) A portable electronic device of the present invention comprises: an input means for inputting information; a transaction means for performing transaction processing based on the information input by the input means; a data generation means that generates different data each time a transaction is made by the transaction means; and a transaction approval information generation means that uses the data generated by the data generation means to generate transaction approval information indicating that the transaction has been successfully completed. , and output means for outputting the transaction approval information generated by the transaction approval information generation means.

(Operation) When generating transaction approval information, different data is generated for each transaction, and by using that data to generate transaction approval information, even when transactions are processed in the same account and for the same amount, each transaction is always different. transaction approval information can be generated.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 5 shows an example of a portable electronic device according to the present invention.
For example, it shows the appearance of a multifunctional IC card used as a credit card. That is, 1 is a card body, which is made of, for example, a rectangular thin plastic plate. A predetermined portion on the surface of the card body 1 is electrically connected to an integrated circuit (IC) 2 embedded in the card body 1, and is used to electrically communicate with an external device (for example, a terminal device) not shown during online use. A contact section 3, a liquid crystal display section (output means) 4 for displaying input/output data, date and time data, and a keyboard (input means) 5 for inputting information are provided. The keyboard 5 is provided with account keys 51 to 53, a numeric keypad, and other function keys. Furthermore, a crystal oscillator 6 and a battery 7 for power supply are embedded within the card body 1.

FIG. 4 shows the circuit configuration of the above-mentioned IC card. That is, a control element (control unit) 21 such as a CPU is in charge of overall control, and the contact unit 3, liquid crystal display unit 4, and keyboard 5 are connected to this control element 21, and it also transmits data. A data memory (first memory section) 22 for storing data, a program memory (second memory section) 2 for storing processing programs for the control cable 21, etc.
3, a clock circuit 24, etc. are connected, and among these, a control element 21, a data memory 22, a program memory 23, and a clock circuit 24 are formed of one chip (or a plurality of chips) as an integrated circuit 2, The integrated circuit 2 is supplied with operating power by a battery 7.

The data memory 22 is composed of an erasable nonvolatile memory such as an EEFROM, and as shown in FIG. 3, an area 11 in which the transaction limit D1 is stored and transaction expiration date information D2 are stored. area 12, area 13 where account type information D3 of the selected account is stored, and transaction amount D entered by keyboard 5 or communication means.
4 is stored, an area 15 where encrypted information D5 which is information used in the encryption process is stored, and an area 16 where encryption key information D6 necessary for the encryption process is stored.
It consists of an area 17 in which transaction approval information D7, which is the output of the encryption process, is stored, and transaction limit amount D1, transaction expiration date information D2, and encryption key information D6 are information stored in advance.

The program memory 23 is composed of a non-erasable nonvolatile memory such as a mask ROM, and stores therein a program for transaction processing, a program for encryption processing, and the like.

The clock circuit 24 generates date and time information T by counting the reference clock output from the crystal oscillator 6.

Next, in such a configuration, a transaction process is performed by operating the keyboard 5, and a process for generating transaction approval information D7 will be described with reference to the flowchart shown in FIG. 1 and FIG. 2. Here, it is assumed that date and time information T is generated as different data each time a transaction is made.

First, one of the account keys 51 to 53 in the keyboard 5 is pressed to select a transaction account (Sl). At this time, account type information D3 assigned to each account key 51 to 53 is stored in area 13 of data memory 22. The account type information D3 may be, for example, 1'' to 3 degrees for the account keys 51 to 53, respectively.

Next, use the numeric keypad in the keyboard 5 to enter the transaction amount D4.
is input (S2), and the input transaction amount D4 is stored in the area 14 of the data memory 22. The transaction amount D4 stored in the area 14 is stored in advance in the data memory 22.
It is compared with the transaction limit D1 stored in the area 11 (S3), and if it is not less than the transaction limit D1, the transaction process ends and transaction approval information D7 is not generated.

In step S3, the transaction amount D4 is changed to the transaction limit D1.
If it is below, the current date and time information T is read out from the clock circuit 24 (S4), and then this date and time information T is stored in advance in the area 1 of the data memory 22
2 (S5). As a result of this comparison, if the date and time information T exceeds the transaction expiration date information D2, the transaction processing ends and transaction approval information D7 is not generated.

In step S5, if the date and time information T is within the transaction expiration date information D2, the account type information D3 stored in the area 13 in step S1, the transaction amount D4 stored in the area 14 in step S2, Encrypted information D5 is assembled from the date and time information T read from the clock circuit 24 in step S4, and the data memory 22
(S6).

Thereafter, the encrypted information D5 stored in the area 15 in step S6 is encrypted using the encryption key information D6 previously stored in the area 16 of the data memory 22, and the result is stored in the data memory 22 as transaction approval information D7. (S7).

When the transaction approval information D7 is generated, the transaction is considered to be completed normally, and the transaction amount D4 stored in the area 14 is subtracted from the transaction limit D1 stored in the area 11 of the data memory 22. The result becomes the new transaction limit D1 and is stored again in the area 11 (S8).

Finally, the transaction approval information D7 stored in the area 17 of the data memory 22 is displayed on the liquid crystal display section 4 (S9), and the transaction is completed.

As described above, transaction approval information D7 is generated from account type information D3, transaction amount D4, and date and time information T by operating the keyboard 5. Transaction approval information D7 can be generated by means of similar processing. In this case, in steps S1 and S2, the account type information D3 and the transaction amount D4 are input from the terminal device through the communication means, and are respectively input from the area 13 of the data memory 22.
14, and the transaction approval information D is stored in step S9.
7 is output to the terminal device by the communication means.

In this way, even if transactions are processed in the same account and for the same amount, the date and time of the transaction are always different, so by generating transaction approval information using the single tag and time information T, you can always Different transaction authorization information can be generated. Therefore, for example, it is possible to prevent fraudulent transactions due to forgery of the same transaction approval information, resulting in excellent security.

In the above embodiment, a case has been described in which the date and time information T is used as data that differs each time a transaction is made, but the present invention is not limited to this, and for example, a sequential number that changes each time a transaction may be used. That is, for example, as shown by the broken line in FIG. 3, an area 18 for storing a serial number D8 is provided in the data memory 22, and transaction approval information D7 is generated from this serial number D8, account type information D3, and transaction amount D4. , if the transaction approval information D7 is generated, the serial number D8 in the area 18 is updated (for example, incremented by one).

Even if you do this, the transaction approval information D will always be different.
7 can be generated.

[Effects of the Invention] As described in detail above, according to the present invention, it is possible to always generate different transaction approval information for each transaction even when transactions are processed for the same amount in the same account, and it is possible to prevent forgery of the same transaction approval information. It is possible to provide a portable electronic device that can prevent fraudulent transactions by users.

[Brief explanation of the drawing]

The figures are for explaining one embodiment of the present invention, and FIG. 1 is a flowchart explaining the process of generating transaction approval information, FIG. 2 is a diagram explaining the process of generating transaction approval information, and FIG. 4 is a block diagram showing the circuit configuration of the IC card, and FIG. 5 is a perspective view showing the external appearance of the IC card. 2...Integrated circuit, 3...Contact section, 4...Liquid crystal display section (output means), 5...
・Keyboard (input means), 51 to 53...
Account key 21... Control element (control unit), 22
...Data memory (first memory section), 23...
...Program memory (second memory section), 24...
...Clock circuit. Applicant's agent Patent attorney Takehiko Suzue Figure 1

Claims (1)

[Scope of Claims] An input means for inputting information; a transaction means for performing transaction processing based on the information input by the input means; a data generation means for generating different data each time a transaction is made by the transaction means; a transaction approval information generating means for generating transaction approval information indicating that the transaction has been successfully completed using the data generated by the data generating means; and outputting the transaction approval information generated by the transaction approval information generating means. 1. A portable electronic device comprising: an output means.