JPH0416834B2 - - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a portable medium, for example, a so-called IC card, which has a built-in integrated circuit.

[Technical background of the invention and its problems] Generally, a so-called ID card is used as a transaction medium in, for example, a currency transaction device. Verification of a personal identification number is generally widely used as a means of verifying the identity of this type of ID card. However, it is known that the personal identification number can be easily read out from magnetic cards, which are commonly used as ID cards. On the other hand, recently, as this type of ID card, a so-called IC card has been developed and is being put into practical use. This IC card is
A microcomputer (hereinafter referred to as a microcomputer) that performs calculations, etc.
It contains an integrated circuit consisting of a microcomputer (simply referred to as a microcomputer), a data memory (PROM) that stores personal identification numbers and transaction information, and an interface circuit that exchanges information with the outside of the card.
Information is exchanged with external equipment outside the card via the interface circuit and terminal section. Each function such as inputting, outputting, storing, and calculating information provided by the integrated circuit can be selectively executed by applying a command signal from outside the card via the terminal section.

By the way, with such IC cards, it is possible to completely prohibit the reading of the PIN number, but since cases may actually occur where the card user forgets the PIN number, it is necessary to ensure that it is properly managed. It is necessary to make it possible to read out the PIN number only in the state. Furthermore, the same applies not only to reading out a password, but also to writing a password, writing or reading stored transaction information, and specific calculations.

[Object of the Invention] The present invention has been made in view of the above circumstances, and its purpose is to:
The object of the present invention is to provide a portable medium in which the severity of permission conditions for execution of functions such as input, output, storage, and calculation can be set, thereby safely protecting information.

[Summary of the Invention] In order to achieve the above object, the present invention provides a storage means for storing a plurality of pieces of password information, and a verification means for comparing the password information inputted from the outside with the password information stored in the storage means. and a control means for controlling whether or not information can be written into or read from a specific area or a specific function can be executed based on the verification result of the verification device.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In Figure 1, 1 is a portable medium.
It is an IC card and has an integrated circuit 2 built-in.
In addition, a terminal portion 3 is provided at a predetermined portion on the surface of the IC card 1.
This terminal section 3 is electrically connected to the internal integrated circuit 2, and information is exchanged with external equipment outside the card via this terminal section 3. . The functions provided by the integrated circuit 2, such as inputting, outputting, storing, and calculating information, are performed by providing a command signal in the form of a message from outside the card via the terminal section 3, or by providing a command signal to a specific terminal. This makes it possible to implement it selectively.

FIG. 2 shows the configuration of the integrated circuit 2, in which a control circuit 4 as a collation means mainly composed of a microcomputer for performing calculations, etc., and a control circuit 4 as a first storage means connected to the control circuit 4, respectively. 1 memory (for example, PROM) 5, a second memory (for example, PROM) 6 as a second storage means, and an interface circuit 7. When exchanging information with the outside of the card, the control circuit 4 One of the first and second memories 5 and 6 is selected, and information is written or read via the interface circuit 7 and the control circuit 4.

The first memory 5 stores a plurality of pieces of PIN information, such as a manufacturer PIN number of a card manufacturer, an issuer PIN number of a card issuer, and a user PIN number of a card user. 6 stores other information such as transaction information.

The first memory 5 and second memory 6 described above constitute an information storage means, and the terminal section 3 and interface circuit 7 constitute an information exchange means.

As mentioned above, for example, if the user forgets the user PIN number, it is necessary to read the user PIN number stored in the first memory 5, but the conditions for allowing this reading must be strict. Must be. In this embodiment, for example, as a condition for permission, it is required that both the issuer's PIN and the manufacturer's PIN have been verified (matched). Further, reading the transaction information stored in the second memory 6 requires that either the user's PIN or the issuer's PIN has been verified (matched).

Figure 3 shows the first memory 5 or the second memory under the above conditions.
A circuit for controlling access to the memory 6 is shown, and this circuit is, for example, the control circuit 4.
located within. In the figure, a temporary memory 11 serving as a temporary storage means stores the verification results of a plurality of (three in this embodiment as described above) PIN numbers in the form of bit patterns (for example, bit patterns corresponding to matched PIN numbers). The position is temporarily stored (as a "1" signal and other "0" signals). That is,
For example, when reading a user's PIN number or transaction information, by inputting a verification command signal from outside the card via the terminal section 3 and also inputting the PIN number to be verified, the control circuit 4 accepts it, and the first
It compares and verifies the password with the password in the memory 5 and temporarily stores the verification result in the temporary memory 11. Note that the verification command signal and the password are input using, for example, a card manufacturing machine, a card issuing machine, a card handling machine, or the like. Further, in the permanent memory 12 as a third storage means, a PIN number as specified information necessary for reading out the first memory 5 is stored in the form of a bit pattern (a necessary PIN number, in this embodiment, a manufacturer's PIN number). The bit positions corresponding to the issuer's personal identification number and the issuer's personal identification number are stored in advance as a "1" signal, and the bit positions corresponding to other personal identification numbers (in this embodiment, the user's personal identification number) are stored as a "0" signal). Further, in the permanent memory 13 as a fourth storage means, a PIN number as specified information necessary for reading the second memory 6 is stored in the form of a bit pattern (a necessary PIN number, in this embodiment, an issuer PIN number). The bit positions corresponding to the user's password and the user's password are stored in advance as a "1" signal, and the bit positions corresponding to the other password, in this embodiment the manufacturer's password, are stored as a "0" signal). Further, the logic circuit 14 is a circuit that takes the exclusive OR of the bit patterns from the temporary memory 11 and the permanent memory 12, and outputs a "1" signal when all the results are "0" signals. Further, the logic circuit 15 is a circuit that takes the logical sum of the bit patterns from the temporary memory 11 and the permanent memory 13, and outputs a "1" signal when the result includes a "1" signal. These logic circuits 14 and 15 constitute a determining means. Then, the AND circuit 16 performs an AND operation between the output of the logic circuit 14 and the read command signal R ₅₁ for the first memory 5 output from the control circuit 4, and
A read control signal _R52 for the memory 5 is output.
Further, the AND circuit 17 performs an AND operation between the output of the logic circuit 15 and the read command signal R ₆₁ for the second memory 6 output from the control circuit 4, and outputs the read control signal R ₆₂ for the second memory 6. . These AND circuits 16 and 17 constitute a control means.

In such a configuration, the first
When the read command signal R ₅₁ to the memory 5 is output, the first read command signal R 51 is output only when the bit patterns of the temporary memory 12 and the permanent memory 12 completely match each other.
A read control signal _R52 for the memory 5 can be generated. Furthermore, when the read command signal R ₆₁ for the second memory 6 is output, the permanent memory 1
The read control signal _R62 for the second memory can be generated only when one or more bits in the bit pattern of the temporary memory 11 corresponding to the bit pattern of 3 match with the "1" signal. The read command signals R ₅₁ and R ₆₁ can be received by the control circuit 4 by inputting the read command signal from outside the card via the terminal section 3, for example, when reading the user's PIN number or transaction information. , is now output. In this way, the first memory 5
The memory contents of the second memory 6 can be read only when the plurality of passwords specified in the permanent memory 12 have been verified and match. If one of the PIN numbers has been verified and they match, reading can be made possible.

With the configuration described above, it is possible to set the severity of permission conditions for execution of functions such as input, output, storage, and calculation, depending on the importance of the information. For example, according to the embodiment,
It is possible to make it so that the issuer cannot read out the user's personal identification number by himself or herself, but only in collaboration with the card manufacturer. Further, the transaction information can be read out by the user or the card issuer. This makes it possible to create an IC card with varying protection levels depending on the importance of the information, making it possible to build application systems flexibly and safely.

In the above embodiment, a case has been described in which control is performed on whether or not information can be read from the first and second memories. It is also possible to similarly control whether or not a calculation can be executed.

Further, in the above embodiment, the case where the application is applied to an IC card used as an ID card of a currency transaction device has been described, but the invention is not limited to this, and other memory devices such as a shopping card, a cash card, a telephone bill card, etc. used as a card
It can also be applied to IC cards, etc.

[Effects of the Invention] As detailed above, according to the present invention, it is possible to set the severity of permission conditions for execution of functions such as input, output, storage, and calculation, depending on the importance of information. This provides a portable medium in which information can be securely protected.

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention; FIG. 1 is an external perspective view of an IC card, FIG. 2 is a configuration diagram of an integrated circuit, and FIG. 3 is a configuration diagram of an access control circuit. 1...IC card, 2...Integrated circuit, 3...Terminal section, 4...Control circuit, 5, 6...Memory, 7...
...Interface circuit, 11...Temporary memory, 1
2, 13... Permanent memory, 14, 15... Logic circuit, 16, 17... AND circuit.

Claims (1)

[Scope of Claims] 1. In a portable medium having means for exchanging information with the outside, an information storage means comprising a first storage means for storing a plurality of password information and a second storage means for storing other information. a verification means for verifying the password information inputted from the outside with the password information stored in the storage means; a temporary storage means for storing the verification result of the verification means; the first storage means and the second storage means; third and fourth storage means, each of which is provided corresponding to the storage means, and stores designation information for designating a plurality of password information to be verified at the time of readout; and storage in the temporary storage means. The matching results and
a determination means for determining whether or not the specified password information is verified based on the designation information of the password information to be verified stored in the third and fourth storage means; A portable medium comprising: control means for controlling access to the first storage means or the second storage means based on a determination result. 2. The portable medium according to claim 1, wherein the determination means determines whether or not all of the plurality of password information have been verified based on the verification result of the verification device. . 3. Claim 1, characterized in that the determining means determines whether one or more of the plurality of password information has been verified based on the verification result of the verification means. portable media.