JPH0289169A - Ic card data processing system - Google Patents

Abstract

PURPOSE:To improve the security of data by storing a part of information to be stored in an IC card in the internal memory of a terminal equipment or in a memory card. CONSTITUTION:The title system is constituted so that a part of the information to be stored in the IC card 24 is stored previously in the internal memory 6 of the terminal equipment 1 or in the memory card 23, and the information to be transmitted to a center computer 32 can be built up by designating or making access to this information by the IC card 24. Thus, even though the internal information of the IC card in known by an unauthorized user, the information in the internal memory of the terminal equipment is not known, and therefore even, if the unauthorized user intends to obtain necessary information or to perform data processing from the terminal equipment through a line by using the unauthorized IC card, since data transmission to the center computer becomes impossible, the security of the data to be processed by the IC card and the terminal equipment can be improved.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] This invention relates to an IC card data processing system, and more specifically, when a central computer of a financial institution and a terminal device exchange data, the terminal device side processes the data. The present invention relates to an IC card data processing system that can perform highly secure data processing on data.

[Prior Art] Financial institutions, such as banks, install many terminal devices in their stores and connect them to a central computer through dedicated lines to collect data on transfers, transfers, withdrawals, deposits, etc. Conventionally, the processing is done separately.

In this case, the terminal device is installed inside the financial institution's store,
It is operated by an employee and is generally a general-purpose terminal device that can be used as a substitute for a personal computer.

[Problem to be solved] In recent years, customers have been able to directly operate terminal devices at home or at financial institution stores using their own IC cards to transfer funds, transfer funds, transfer funds, etc. automatic payment processing;
Computer processing systems that perform balance inquiries, etc. have been proposed and developed.

In this case, if the terminal device placed in the home or storefront is a general-purpose terminal device as mentioned above, which can be used as a substitute for a computer, anyone can access it, and data can be destroyed or important data can be read and used illegally. There is a high possibility that

The present invention solves the problems of the prior art, and provides an IC card data processing system that can improve data security when operating a terminal device using an IC card. to [-1
target

[To solve the problem] To achieve the above object, the IC card data processing system of the present invention has a configuration including a terminal device connected to a line, and a terminal device attached to the terminal device that transmits confirmation information. IC to hit
transaction information to be stored in the IC card is stored in the internal memory of the terminal device, and the transaction information to be stored in the IC card is stored in the internal memory of the terminal device,
Specify some of the transaction information that the C card has in its internal memory,
The terminal device allows access to the IC card according to the match between the input confirmation information or corresponding information and the confirmation information on the IC card, and allows access to the IC card based on the information in the internal memory determined by the IC card and the information from the IC card. This generates transfer information based on the information and sends it to the line in a predetermined format.

[Operation] In this way, a part of the information to be stored in the IC card is stored in the internal memory of the terminal device or in the memory card, and the IC card specifies or accesses this information and sends it to the center computer. Since the information to be sent is assembled, even if the internal information of the IC card is known to the unauthorized user, the information in the internal memory of the terminal device will not be known, so it is difficult to use the unauthorized IC card. Since it is no longer possible to obtain necessary information or process data from the terminal device through the line, the data cannot be transmitted to the center computer, so the security of data processed between the IC card and the terminal device can be improved.

In particular, if a part of the data of the IC card stored in the internal memory of the terminal device is stored in the memory card, unless the combination of the memory card and the IC card match, the data will be sent to the center via the terminal device. Since data can only be exchanged with a computer, data security can be further improved.

[Embodiment F1 Please refer to the drawings for an embodiment of this invention! ! (This will be explained in detail.

FIG. 1 is a block diagram of an IC card data processing system according to an embodiment to which the present invention is applied, FIG. 2 is an external view of the terminal device, and FIG. 3 is an internal view of the IC card and memory card. This is a memory map for explaining information stored in the memory.

In FIGS. 1 and 2, l is a terminal device with a telephone set, and the telephone set 2 is selectively connected to a line 30 via a changeover switch 3 which can be operated from the telephone set 2 or from the outside.

The switching switch 3 is normally connected to the telephone 2 side, and is connected to the center computer 3 via the public telephone line 31.
It is connected to the 2nd class. Therefore, the telephone 2 can access the center computer 32 via the public telephone line 31, the public telephone line 31, and other computers 34 etc. via the answer sensor 33. In addition, the center computer 32 and other computers 934
4;! , are capable of providing guidance and responses using the telephone 2 and voice.

Here, the telephone 2 is operated by a subscriber with an IC card, and in response to the operation, the changeover switch 3 is operated to switch the connection from the telephone 2 side to the terminal device 1 side.

The terminal device 1 is used by being connected to the line 3 by a changeover switch 3, and has a microprocessor inside it (CPU
) 5 and tee. The CPU 5 performs predetermined data processing based on the information received from the IC card or the information in the internal memory, and exchanges data with the center computer 32 via the modem 49 line 30° and public telephone line 31.

This terminal device l has a CPU5. In addition to modem 4, CPU
Battery backed RA accessed by 5
MP and R that stores the processing program of CPU5.
OM? , a memory card connector 8 to which a memory card is connected, a keyboard 9, an LCD display device 10 that displays guidance and results such as the order of operations, a printer 111 for journal output, and an IC card reader/writer 1.
It consists of 2nd class.

The processing programs stored in ROM7 include programs and data that are transferred from the installed memory card to RAM.
8 and stores it in a predetermined address space, a processing program that exchanges data with the memory card, a processing program that exchanges data with the IC card via the IC card reader/writer 12, and an LC display device. There are processing programs for display processing of 10, processing programs for output processing for printer 11, and the like.

The program cards 21 and 22 are memory cards in which the progera 12 is stored, and the data card 23 is a memory card in which data is stored.

These program cards 21, 22. The data card 23 is attached to the terminal device 1 via the memory card connector 8. When one of these cards is installed and a specific function key or code specified in advance is input on the keyboard 9, a specific processing program or data stored in the card is executed by the CPU 5. The data stored on the card is read and loaded into a predetermined area of the RAM 8 of the terminal device 1.

Here, the processing program t1 stored in the program card 21 or 22 is originally the center computer 32.
This is a program that processes information obtained from the IC card 24 in the LCl), which is selected from the program card 21 or 22 and installed in accordance with the input key information input from the keyboard 9 according to the guidance of the display device 10. A necessary processing program is read into a predetermined area of the RAM 6 of the device 1. The loaded processing program executes some or all of the processing to be performed by the center computer 32 on the information obtained from the IC card 24, and generates information as a result.

Here, the IC card 24 contains confirmation information such as a PIN code indicating the issuer of the card, the owner, etc., as well as the owner's address, name, expiration date, number of errors, business identification information, etc.
This is a card that stores D).

This IC card 24 contains the account number and balance that are normally stored as an IC card (the balance is stored in the IC card 24).
It may be stored redundantly on the IC card 24 side, or it may be stored only on the IC card 24 side. ) or various business data (or various business data; in this specification, transaction data is treated as including various business data), and these information is used instead. Possess the access information to access it. 1 to be stored in this IC card 24.
The account number, balance, and other transaction data are stored and managed in the data card 23 shown in 11; f, and these data are transferred to and stored in the RAM 6 mentioned above.

When the IC card 24 is inserted into the IC card reader/writer 12 of the terminal device 1 and confirmation information (for example, the password of the user using the terminal device) is input from the keyboard 9, it is processed by the CPU 5. , confirmation information is sent to the IC card 24 via the IC card reader/writer 12. The IC card 24 internally checks the confirmation information, and as a result, the CPU 5 receives a response signal corresponding to the match or mismatch. When the result is a match, the terminal device 1 (CPU 5) The IC card 24 is permitted to access the information in RAMe, the accessed information is sent to the IC card 24, and the IC card 24
The information is combined with the internal information, and the combined information is sent to the terminal device 1.

In this case, the information accessed by the IC card 24 does not need to be processed by the IC card 24, and
If the information does not need to be held in the IC card 24, the IC card 24 can simply specify the information without accessing the RAM 6. In such a case, the terminal device does not return the information specified in the IC card 24. This information designated by the IC card 24 is used as data for internal data processing in the terminal device 1.

The terminal device 1 processes the information sent from the IC card 24 along with other information in the RAM 8 by its CPU 5 according to the processing program selected from the program card 21 or 22, transferred, and stored in the RAM 6 of the internal memory. Execute the processing performed by the center computer 32,
The resulting information is assembled into information in a predetermined transfer former 7) and sent to the center computer 32, and data is exchanged with the center computer 32.

The result information assembled by the terminal device l in this way is sent to the modem 4, the line 30. When it is sent to the center computer 32 via the public telephone line 31, the center computer 32 receives it and the center computer 32
It performs predetermined processing according to the received information and sends the results to the terminal device 1.

In addition, although the verification information is performed on the IC card side in the above, it may also be performed on the terminal device 1 side by obtaining the corresponding verification information from the IC card 24. Of course. In addition, the information confirmed manually is
The information may be converted into other corresponding information by scramble conversion or the like and sent to the IC card 24.

The information accessed or designated by the IC card 24 is stored in the RAM 8 by the data card 23.
The information needed at that time, such as the number of seats, the balance, and other transaction data, may be stored in the program card 21, 22 as internal information of the program, and read from this card.

FIG. 3(a) shows internal information stored in the IC card 24, and the IC card 24 has storage areas for attribute information, directory, cardholder attribute information, and data section. IC is in the attribute information area.
Card identification information 24a such as the identification number (each ID) of the card manufacturer, issuer, etc., and its password are stored. In addition, the storage area of the IJ includes business definition information 24b, which is information necessary to access information on the memory card, such as information identifying the business, the start address of the business information, and the user's identification number. be remembered. The storage area of cardholder attribute information includes confirmation information such as relatives, accountants, etc., indicating the range of people who can use the IC card. Cardholder confirmation information 24c such as identification information (personal ID), expiration date, number of errors, etc., and identification information (ID) of the original cardholder, address, name, telephone number, etc. Cardholder attribute information 24d such as expiration date is stored, and data 24e unique to each business corresponding to the type of business that can be selected is stored in the storage area of the last data section.

Furthermore, among the memory cards, the data card 23 has 11 registered locations to be stored in the IC card 24, as shown in FIG. The history storage area 23d1, the funds transfer history storage area 23e, which is recorded according to each transaction, the general transfer history storage area 23f1, and the salary transfer history area 23g are used not only for the owner of the IC card 24 but also for the users who can use the IC card 24. Access addresses for each user stored on the IC card 24 side for all (for example, the start address child data length)
They are arranged and stored in correspondence.

Since each card has the above configuration, the IC card 24 stores the confirmation information input into the terminal device 1, the code information to be processed at that time, the business definition information, and the business specific information.
The RAM 6 can be accessed or specified for a necessary item [1 data] of the information stored in the data card 23, and the accessed information is obtained from the terminal device l on the IC card 24 side and processed, Predetermined data to be transferred to the center computer 32 via the terminal device 1 can be created.

In this way, since part of the information that the IC card 24 should originally have is stored in the memory card 23, even if an unauthorized IC card is
Even if a card or a valid IC card 24 is inserted and used, the center computer 3 by the terminal device 1
This means that the data transfer operation to 2 cannot be performed. Therefore, data security can be improved.

In addition, the IC is separated into the memory card 23 in this way.
Even if you do not store some of the data that should be stored on the card, you can directly store some of the information required by the IC card in the internal memory IJ (RAM6) of the terminal device. Since the configuration is such that information is constructed by accessing or specifying information, data security can be increased to li+Jl. That is, I.C.
Even if the identification number such as the PIN number on the card side is stolen, the terminal device cannot be used unless the internal memory of the terminal device is accessed or a processing program and information are obtained by specifying the necessary information. be.

As explained above, in the embodiment, the I/O from the memory card is
The access information of the C card is once read into the internal memory of the terminal device, but the terminal device (its CPU) directly accesses the data card installed each time.
Or specify and read the data requested by the IC card,
Processing such as transferring the data to the C card side may also be performed.

Note that if the information to be accessed on the IC card side is stored in the internal memory of the terminal device from the beginning, there is no need to load data into the internal memory using the memory card, and in this case, the memory card is unnecessary. Further, the information accessed by the IC card or the processing program of the memory card may be loaded from a computer at the center to the internal memory of the terminal device. Furthermore, when managing with a program card or a data card cap, it goes without saying that these cards can be removed from the terminal device and managed independently, which also improves security.

[Effects of the Invention] As can be understood from the explanation in 1-1, in this invention, part of the information to be stored in the IC card is stored in the internal memory of the terminal device or in the memory card; Since the information to be transmitted to the center computer is assembled by specifying or accessing information from the IC card, even if the internal information of the IC card is known to an unauthorized user, the internal memory of the terminal device will not be lost. Since the information on the terminal device is not known, when trying to obtain the necessary information from the terminal device through the line using a fraudulent IC card, or to process the data, the data cannot be transmitted to the center computer, so the connection between the IC card and the terminal device The security of data processed can be improved.

In particular, if a part of the data of the IC card stored in the internal memory of the terminal device is stored in the memory card, the combination of the memory card and the IC card can be...
Since data cannot be exchanged with the center computer via the terminal device unless the data is exchanged with the center computer, data security can be further improved.

[Brief explanation of drawings]

FIG. 1 is a block diagram of an IC card data processing system according to an embodiment to which the present invention is applied, FIG. 2 is an external view of the terminal device, and FIG. 3 is an internal view of the IC card and memory card. This is a memory map for explaining information stored in the memory. 1...Terminal device with telephone, 2...Telephone, 3...
・Selector switch, 4...Modem, 5...Microprocessor (CPU), 6...RAM17...ROM
, 8...Memory card connector, 9...Keyboard, lO...LCD display device, 11...Printer, 1
2... IC card reader writer, 30... Public telephone line, 32... Center computer.

Claims (5)

[Claims] (1) comprising a terminal device connected to a line and an IC card attached to the terminal device and having confirmation information;
A part of the transaction information to be stored in the IC card is stored in the internal memory of the terminal device, the IC card specifies the part of the transaction information that is in the internal memory, and the terminal device access of the IC card is permitted according to the match between the confirmation information or the information corresponding thereto and the confirmation information of the IC card, and the information in the internal memory specified by the IC card and the information from the IC card are An IC card data processing system that generates transfer information based on the information and sends it to the line in a predetermined format. (2) comprising a terminal device connected to the line and an IC card attached to the terminal device and having confirmation information;
Part of the transaction information to be stored in the C card is stored in the internal memory of the terminal device, and the IC card accesses the part of the transaction information in the internal memory to obtain information and store predetermined information. The terminal device allows access to the IC card according to the match between the input confirmation information or information corresponding thereto and the confirmation information of the IC card, and reads the information in the internal memory and the IC card. An IC card data processing system characterized by generating transfer information based on information from and sending it to the line in a predetermined format. (3) A terminal device connected to a line, a memory card attached to the terminal device, and an IC card attached to the terminal device and having confirmation information, transaction information to be stored in the IC card. a part of the transaction information is stored in the memory card, and the IC card can access the part of the transaction information transferred from the memory card to the internal memory, or access the part of the transaction information that is in the memory card via the terminal device. The terminal device accesses a part of the transaction information to obtain the information and performs predetermined information processing. An IC card data processing system that permits access to a card, generates transfer information based on information in the internal memory and information from the IC card, and sends it to the line in a predetermined format. (4) A second memory card is provided that stores a processing program for assembling information in a predetermined format by combining information in the internal memory and information in the IC card, and this second memory card is attached to the terminal device. 4. The IC card data processing system according to claim 3, wherein the processing program is loaded into an internal memory of the terminal device. (5) The IC card includes a second memory card storing a processing program for accessing information on the memory card, and when the second memory card is installed in a terminal device, the processing program is transferred to the terminal device. 4. The IC card data processing system according to claim 3, wherein the IC card data processing system is loaded into an internal memory of the IC card data processing system.