JPH02214993A - Ic card equipment - Google Patents

Abstract

PURPOSE:To detect an unjust transaction caused by the forgery of a device, and to improved safety by providing signing means in an IC card device and a terminal device, and applying mutual signatures in transaction data stored in the storing means of the both devices. CONSTITUTION:A data processing means 114 applies related data such as a terminal number and a transaction date and time to input data, generates the transaction data, a second signing means 112 prepares the signature sentence of a terminal device 110 based on the inputted transaction data, applies the sentence to the transaction data, and transmits them to a first IC card device 100. A first signing means 102 prepares the signature sentence of the IC card device 100 based on the transaction data, applies the sentence to the transaction data, transmits them to the terminal device, and the transaction data are stored into a second storing means 113. Thus, since the signature sentences, which can be prepared only in the just IC card device and terminal device, are applied to the transaction data stored in the first and second storing means, unjust behavior by means of the unjust IC card device and terminal device can be detected.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of Industrial Application The present invention mainly consists of an IC card device in which an integrated circuit for storing information is built into the card, and a terminal device that exchanges information with the IC card device. The present invention relates to IC card equipment used in this field.

BACKGROUND ART FIG. 3 shows a conventional example of an IC card device.

In FIG. 3, an IC card device 300 has a first communication means 3 that transmits and receives data to and from an end 3 page floor device 310.
01, a first memory means 303 for recording data input from the terminal device 310, and a signature means 302 for generating a signature text from the data input from the terminal device 3''IO. 310 is a pig input device 320 for inputting data from the outside, a data processing means 314 for generating transaction data from input data, and a second communication means 3 for transmitting and receiving data to and from the IC card device 300.
11, and a second memory means 313 for recording data input from the IC card device 300.

Regarding the conventional IC card device configured in this way,
Its operation will be explained below.

When the IC card device 300 is inserted into the terminal device 310 and input data is input from the data input device 320, the data processing means 314 adds transaction-related data to the input data to generate a transaction pig. The communication means 311 transmits transaction data obtained from the data processing means 314 to the IC card device 300. First communication means 3
01 receives transaction data transmitted from the terminal device 310, stores it in the first memory means 303, and inputs it to the signature means 302. The signature means 302 creates a signature text from the input transaction data, adds it to the captured data, and sends it to the first transaction data.
input to the communication means 301 of. The first communication means 301 transmits the signature-attached transaction data obtained from the signature means 302 to the terminal device 310 .

The signed transaction data transmitted from the IC card device 300 is received by the second communication means 311 and stored in the second memory means 313.

The transaction data stored in the second memory means 313 includes:
Since a signature sentence that can only be generated by a legitimate IC card device is added, fraudulent acts such as transactions using an unauthorized IC card device or forgery or duplication of transaction data are detected.

Problems to be Solved by the Invention However, in such a conventional configuration, the signature text of the terminal device 310 is not added to the five pages of transaction data stored in the first memory means 303 in the IC card device 300. This method had a problem in that fraudulent transactions due to counterfeit devices could not be detected.

Generally, it is technically easier to counterfeit a terminal device than to counterfeit an IC card device, so this may pose a big problem.

The present invention solves the above-mentioned conventional problems, and aims to provide an IC card device that can detect fraudulent transactions by adding a signature from a terminal device to transaction data.

Means for Solving the Problems In order to solve the above problems, the present invention includes a first IC card device and a terminal device that communicates with the first re card device, the first IC card device comprising: , a first signature means for generating a signature from data input from the terminal device, and the terminal device includes a pig input device for inputting data from the outside, and a first signature means for generating a signature from data input from the data input device. The present invention has a second signature means for generating a signature text from data.

615,-2 Effect With this configuration, when the first IC card device is inserted into the terminal device and input data is input from the data input device, the terminal device and the first IC card device are connected according to the following processing flow. Transaction data with each signature added is recorded in the memory means.

First, input data is input from the data input device.

When the input data is entered, the data processing means adds related data such as the terminal number and transaction date and time to the input data to generate transaction data, and inputs the transaction data to the second signature means. The second signature means creates a signature text of the terminal device from the input transaction data, adds it to the transaction data and inputs it to the second communication means, and
The communication means sends the transaction data with the signature added to the first I.
Send to C card device.

Transaction data transmitted from the terminal device is received by the first communication means, stored in the first memory means and inputted into the first signature means.

The first signature means creates a signature for the first IC card device from the transaction data, adds it to the transaction data, and inputs it to the first communication means. Send the added transaction data to the terminal device.

The transaction data sent from the first IC card device is transferred to the second IC card device.
and stored in the second memory means.

In this way, the transaction data stored in the first and second memory means are each appended with a signature text that can only be created by legitimate IC card devices and terminal devices, so that unauthorized IC card devices and terminal devices can Fraudulent acts by the device can be detected.

EXAMPLE Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an IC card device in an embodiment of the present invention.

In FIG. 1, 101 is a first communication means for transmitting and receiving data to and from the terminal device 110, and 1o3 is a first memory means for recording data input from the terminal device 110.

102 is the first data transmitted from the terminal device 110.
As described above, the first IC card device 100 is constituted by the first signature means for generating a signature sentence of the IC card device 100.

Further, 120 is a data input device for inputting data from the outside, 114 is a data processing means for processing input data from the outside and generating transaction data, and 112 is a data processing means for generating a signature of the terminal device 110 from transaction data. This is the second signature means. 111 is a second communication means for transmitting and receiving data with the first IC card device 100; 113 is a second memory means for recording data input from the first IC card device 100; from the above, the terminal device 110 is configured.

Note that the second signature means 112 is configured within a second IC card device 115 attached to the terminal device 110 and functions as a part of the terminal device 110.

The operation of the IC card device configured as described above will be explained below.

Page 9 Generally, when a transaction is performed using an IC card device, the first IC card device 100 owned by the cardholder is
It is inserted into a terminal device 110 installed in a store etc., input data such as transaction amount is inputted from a data input device 120, and the terminal device 110 and the first IC card device i
It is recorded in the memory means 113, 103 of oo.

First, when the first IC card device 1o○ is inserted into the terminal device 110 and input data is input from the data input device 120, the data processing means 114 adds related data such as the terminal number and transaction date and time to the input data. and generate transaction data.

The transaction data is transmitted to the second I installed in the terminal device 110.
The second signature means 112 in the C card device 116 is inputted. The second signature means 112 creates a signature for the terminal device 110 from the input transaction data, adds it to the transaction data and inputs it to the second communication means 111.
11 transmits the transaction data to which the signature text has been added to the first IC card device 100.

108-/ Transaction data transmitted from the terminal device 110 is received by the first communication means 1o1 and is stored in the first memory means 103.
and input into the first signature means 102. The first signature means 102 collects the transaction data from the first IC.
Create a signature sentence for the card device 100, add it to transaction data, input it to the first communication means 101, and send it to the first communication means 1.
01 sends the transaction data with the signature added to the terminal device 110
Send to. Transaction data transmitted from the first IC card device 1o○ is received by the second communication means 111 and stored in the second memory means 113.

In this way, the transaction data stored in the first and second memory means 103113 are appended with signatures that can only be created by the legitimate first IC card device 100 and the terminal device 110, respectively, thereby preventing unauthorized transactions. Unauthorized transactions by IC card devices and terminal devices can be detected.

FIG. 2 is a block diagram showing an example of the second signature means in this embodiment.

In Fig. 2 on page 11, 201 is an encryption means for encrypting data blocked into n bits (n>○) using a secret key encryption method, and 202 is an n bit encrypted by the encryption means 201. The register means 203 is an exclusive OR means that performs an exclusive OR operation between the encrypted data obtained from the register means 202 and the input data. Further, 204 is a selection means for selecting m-bit data (n2m) o) from the encrypted data of the final block, and 205 is a concatenation means for concatenating the m-bit data obtained from the selection means 204 to the input data.

The operation of the second signature means configured as described above will be explained below.

The transaction data input to the second signature means 112 is divided into blocks (Ml, M2., yK),
Each block is input to exclusive OR means 203.

However, the data length of each block is n bits.

The exclusive OR means 203 performs an exclusive OR operation on the encrypted data obtained from the register means 202 and the input transaction data for each block, and inputs the operation result to the encryption means 201. Encryption means 201 performs encryption processing for each block using a secret key encryption method, and inputs the encrypted data to register means 202 . Register means 2
The encrypted data held in 02 cannot be subjected to an exclusive OR operation with the trading pig one block later, so the exclusive OR means 2
It is fed back to 03.

The selection means 204 selects m bits from the encrypted data Cx corresponding to the final block MK of the transaction data and creates the signature text S.
is taken out and inputted to the connecting means 205. Connecting means 20
6 is input transaction data (Ml + '2, - r
MK ) is concatenated with the m-bit signature S obtained from the selection means 204 to generate transaction data on the signature side.

In this way, a signature text is generated from the input transaction data, and the signature text is added to the original transaction data and outputted from the second signature means 112.

In this embodiment, the second signature means 112 is configured in the paged device 115 of the second IC card 13 attached to the terminal device 11o, which is extremely important for security measures.

Generally, it is possible for the second signature means 1120 function to be executed by the data processing means 114, but since the function of the data processing means 114 is realized by software in the normal terminal device 110, the function can be easily executed. Reproduction,
Can be faked. Therefore, the legitimate terminal device 11
There is a risk that a signature text that can only be created by 0 can be easily forged.

However, when an IC card device is used as a signature means, it is extremely difficult to forge a signature because the IC card device is a safe medium against unauthorized acts from outside.

Effects of the Invention As described above, the present invention provides signature means in each of the IC card device and the terminal device, and adds each other's signature to the transaction data stored in the memory means of both devices, thereby preventing device forgery, etc. It is possible to realize an IC card device that can detect fraudulent transactions and has extremely high safety.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing the configuration of an IC card device according to an embodiment of the present invention, FIG. 2 is a block diagram showing an embodiment of the second signature means in this embodiment, and FIG. 3 is a block diagram showing a conventional IC card device. FIG. 2 is a block diagram showing the configuration of a card device. 100...first IC card device, 101...
First communication means, 1o2-...First signature means, 10
3...First memory means, 110...Terminal device, 111...Second communication means, 112...
...Second signature means, 114...Data processing means, 115...Second IC card device, 120...
・Data input device.

Claims (3)

[Claims] (1) comprising a first IC card device and a terminal device that communicates with the first IC card device;
The card device includes a first communication means for transmitting and receiving data to and from the terminal device, a first memory means for recording data input from the terminal device, and a signature sentence from the data input from the terminal device. The terminal device has a data input device for inputting data from the outside, and a data processing device for processing data input from the data input device to generate transaction data. a second signature means for generating a signature from transaction data obtained by the data processing means; a second communication means for transmitting and receiving data to and from the first IC card device; An IC card device configured to include a second memory means for recording data input from a card device. (2) The second signature means is a second signature device attached to the terminal device.
The IC card device according to claim 1, configured in an IC card device of. (3) The second signature means includes an encryption means using a private key encryption method, a register means for temporarily storing data obtained from the encryption means, and data obtained from the register means and input data. 2. The IC card device according to claim 1, further comprising an exclusive OR means for performing an exclusive OR operation with the IC card device.