JPH0417542B2 - - Google Patents

Description

[Detailed Description of the Invention] [Technical Field of the Invention] The present invention relates to, for example, data memory and
Relates to IC card handling machines that handle IC cards, including CPUs.

[Technical background of the invention and its problems] Recently, automatic transaction devices or home banking systems in financial institutions have been using IC cards (portable Possible media) have been developed.

Conventionally, in systems that use IC cards and terminals to confirm the user's personal identification number,
The following password verification system is known and will be explained using FIG. 9. That is, IC card 6
A password is stored in the memory 62 of No. 1. The user then inputs the password using the keyboard 64 of the terminal 63. Then, the password is supplied to the CPU 68 via the control unit 65, interface 66, and interface 67.
Thereby, the CPU 68 compares whether the password in the memory 62 and the supplied password match, and if they match, outputs a match signal to the terminal 63. The terminal device 63 is designed to perform various processes depending on this match.

In the above method, the number of digits of the password was fixed, so there was a limit to the number of passwords that could be entered, and there was a problem with the security of the password.

[Object of the invention] This invention was made in view of the above circumstances,
The purpose is to provide an IC card handling machine that can set the PIN used with an IC card to any number of digits input by the user, thereby improving the security of the PIN used with the IC card. It is in.

[Summary of the invention] This invention has a control means and a storage means.
An IC card is accepted by an acceptance means, and this accepted IC
A determination means determines whether the card is being used for the first time or for the second or subsequent time, and when the determination means determines that the card is being used for the first time, the PIN data of any number of digits input by the user and the PIN The number of digits data is stored in the storage means in the IC card, and when the determination means determines that the card is to be used for the second time or later, the password entered by the user and the password are stored in the IC card. The number of digits is compared with the password data stored in the storage means in the IC card and the number of digits data to determine whether or not they match.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In Figure 1, 1 is a portable medium.
It is an IC card. A connecting portion 2 is provided on the surface of this IC card 1, and is composed of, for example, a plurality of terminals 2a, . . . 2h. The above terminal 2a is for the power supply voltage (+5V) for operation, terminal 2
b is for grounding, terminal 2c is for clock signal, terminal 2
d is for a reset signal, terminals 2e to 2g are for data input/output, and terminal 2h is for a power supply voltage (+21V) for data writing.

Furthermore, as shown in FIG. 2, inside the IC card 1, a control CPU (central processing unit) 3, a control program, a password (for example, up to 10 digits), data, etc. are recorded. It is composed of a data memory 4 composed of EEPROM or PROM, an interface circuit 5, a RAM 6 for data processing, and a password verification section 7. The data memory 4 is provided with a password storage area 4a in which a password is stored, and this password storage area 4a stores the number of digits (length data) of the password as shown in FIG. It consists of a number of digits area a and a data area b for storing a password. The digit area a consists of 1 byte, and the data area b consists of L bytes. Also, data area b
When storing a password c ₁ , c _{2 .} . . cm consisting of m-digit characters, the password data is stored in the first m bytes, and the character Er indicating unused is stored in the L-m bytes. ing. In this case, since the number of digits in the PIN is arbitrary, the separation between the last character Cm of the PIN and the following characters Er is unknown, but by specifying it with the digit number data in the digit number area a,
Password verification is becoming possible.

Each of the above parts is composed of an IC chip and is provided on one substrate. Further, the interface circuit 5 and the connector section 2 are wired. The password verification section 7 verifies whether the password supplied from the outside and the password in the data memory 4 match.

4 and 5 show the configuration of the IC card handling machine 10 of the present invention. This IC card handling machine 10 is installed, for example, in a general store. In other words, 11 is a CPU (central processing unit) that controls the entire system, 12 is a keyboard for inputting data, and 13 is a keyboard for inputting data.
14 is a CRT display device, 14 is a ROM (read only memory) in which a control program is stored, 15 is a RAM (random access memory) in which data is stored, and 16 is a dot printer that outputs various print data. , 17 is a floppy disk device for storing and reproducing data on the floppy disk 19 inserted from the floppy disk insertion slot 18, 20 is an IC card reading/writing unit, and 41 is for the customer to input a password. This is the PIN input section. The IC card reading/writing section 20 and the password input section 41 are for operation by the customer, and the other sections are for operation by the store, for example.

As shown in FIG. 6, the PIN input section 41 includes a numeric keypad 42 for inputting a PIN, a correction key 43 that is pressed when making a correction while inputting a PIN, an input completion key 44 that is pressed when inputting a PIN is completed, and a numeric keypad 41. The input digit number display section 45 displays the number of digits (of the password) input by the user, the password input display 46 indicates when the password is input, and the wrong password display 47 reports an error in the password. and
It is connected to the IC card reading/writing section 20 by a cable 23. The input digit number display section 45 is composed of, for example, 10 LEDs, and the LEDs are turned on according to the input digit number.

The IC card reading/writing unit 20 reads data in the memory of the IC card 1 inserted from the card insertion slot 21 or writes data into the memory, and is connected to the main body of the card handling machine 10 and the cable 22. They are becoming increasingly connected. That is, as shown in FIG. 7, a transport path 31 is provided for transporting the IC card 1 inserted through the card insertion slot 21. This conveyance path 31
is provided with a plurality of pairs of rotatable transport rollers 32, which are positioned so as to sandwich the IC card 1 from above and below when transporting it. The pair of conveyance rollers 32 are provided along the conveyance path 31 at equal intervals. Adjacent transport rollers 3 from the center of each of these transport rollers 32
The distance to the center of 2 has the width dimension in the card conveyance direction. Therefore, IC card 1
It is defined by a transport path 31 and a transport guide 33.

Also, an IC card 1 is placed on the transport guide 33.
A reader/writer 3 that exchanges data with the internal CPU 3
4 is placed. This reading/writing device 34 is designed to be electrically connected to the connecting section 2.

Next, in such a configuration, IC card 1
Regarding cases where users (customers) handle
This will be explained with reference to the flowchart shown in the figure.
That is, the customer inserts the IC card 1 into the card insertion slot 21 of the IC card handling machine 10 (ST1).
Then, the IC card 1 is electrically connected to the reading/writing device 34 by the connecting section 2. This results in
The CPU 11 determines whether or not the IC card 1 is set in the handling machine for the first time, according to a signal from the CPU 3 (ST2). If the result of this judgment is that it is not the first use, the process advances to step 11, which will be described later.

Also, if you are using it for the first time, CPU 11 should be set to CRT.
The display device 13 displays the message ``Your password will be registered, so please enter it'' and the password input display 46 is turned on (ST3).
Following this guidance, the customer inputs his/her password using the numeric keypad 42 of the password input section 41 (ST4).
In response to this input, the CPU 11 lights up the LED of the manual digit number display section 42 corresponding to the input digit number.
Thereby, the customer confirms the number of digits of the password being inputted on the input digit number display section 42. Furthermore, at this time, the number of digits of the password set by the customer may be anywhere between 1 and 10 digits.
After the customer has finished inputting the password of any number of digits, the customer presses the input completion key 43 (ST5). Then, a signal corresponding to the input password is supplied from the CPU 11 to the CPU 3. As a result, the CPU 3 causes the RAM 5 to temporarily store the supplied customer's password. Next, the CPU
3 determines the number of digits of the password stored in the RAM 5, and stores this digit number data in the number of digits area a in the password storage area 4a in the data memory 4. Further, the CPU 3 causes the password stored in the RAM 5 to be stored in the data area b of the password storage area 4a in the data memory 4.
(ST6).

After registering the above-mentioned PIN number, the transaction may be carried out as is, or the IC card 1 may be returned to the customer.

In addition, if it is determined in step 2 above that the IC card 1 is not being used for the first time in the handling machine, the CPU 1
1 gives the instruction "Please enter your password" on the CRT display device 13 (ST11). In response to this guidance, the operator inputs the password using the numeric keypad 42 (ST12). depending on this input
The CPU 11 lights up the LED of the input digit number display section 42 corresponding to the input digit number. Thereby, the customer confirms the number of digits of the password being inputted on the input digit number display section 42. After the customer has finished inputting the password of any number of digits, the customer presses the input completion key 43 (ST13). Then, a signal corresponding to the input password and a signal indicating the handling machine are supplied from the CPU 11 to the CPU 3. As a result, CPU3 receives the supplied customer's PIN number.
Store in RAM5. Next, CPU3 is RAM5
The number of digits of the entered PIN and the number of digits area a in the PIN storage area 4a in the data memory 4
(ST14). As a result, if the number of digits matches, the password verification section 7 compares the password stored in the RAM 5 with the password stored in the data area b of the password storage area 4a in the data memory 4. Verify in step 7 (ST15). Thereby, the password verification unit 7 outputs a match signal to the CPU 3 when the numbers (contents) match, and outputs a mismatch signal to the CPU 3 when the numbers do not match.

Next, if the verification result from the password verification unit 7 is a match, the CPU 3 outputs a match signal to the CPU 11 (ST17). A discrepancy counter (not shown) provided in the memory 4 is counted up, and when this count value is within a predetermined number (3 times), a discrepancy signal that allows re-input is generated.
When the above count value reaches a predetermined value, the IC card 1 outputs an invalid mismatch signal to the CPU 11.
Output to CPU11 (ST18). As a result, when a matching signal is supplied, the CPU 11 determines that a transaction using the IC card handling machine 10 is possible, and executes the corresponding transaction (ST19). Moreover, when a mismatch signal is supplied, the CPU 11 inputs the PIN again or
It is determined that transactions using the IC card handling machine 10 are not possible,
Notify customers to that effect (ST20).

Note that the operation guidance for inputting the password in the IC card handling machine 10 may be performed by another display or a staff member.

As mentioned above, a customer's PIN number is not known to anyone other than the person who registered it, and it can have any number of digits, so even if a part of the customer's birthday is used as the PIN number. The number of digits is not limited to four digits and can be any number of digits, making the PIN more flexible and preventing a third party from easily knowing the PIN, making it an excellent security measure. It's summery. Additionally, since the number of digits in the password is checked, security is improved.

In the above embodiment, the number of input digits of the password to be input is displayed on the input digit number display section, but the present invention is not limited to this, and it may be displayed on a CRT display device.

[Effects of the Invention] As detailed above, according to the present invention, the password used in the IC card can be set to any number of digits input by the user, and the security of the password used in the IC card is improved. We can provide an IC card handling machine that can handle

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention, and FIG. 1 is an external perspective view of an IC card, FIG. 2 is a block diagram schematically showing the configuration of the electric circuit of the IC card, and FIG. A diagram showing the configuration of the PIN number storage area, FIG. 4 is an external perspective view of the card handling machine, FIG. 5 is a schematic block diagram of the card handling machine, and FIG.
The figure is a plan view showing the configuration of the PIN input section, FIG. 7 is a sectional view showing the structure of the IC card reading/writing section, FIG. The figure is a diagram for explaining a conventional password verification system. 1...IC card (portable medium), 2...Connection section, 3...CPU, 4...Data memory, 4
a...Password storage area, a...Number of digits area,
b...Data area, 7...Password verification section, 10...
...IC card handling machine, 11...CPU, 20...IC
Card reading/writing unit, 34...Reading/writing device, 41...
...Password input section, 42...Numeric keypad, 43...
Correction key, 44... Input completion key, 45... Input digit number display section.

Claims (1)

[Scope of Claims] 1. An acceptance means for accepting an IC card having a control means and a storage means, a determination means for determining whether the IC card accepted by the acceptance means is used for the first time or for the second or subsequent time, and utilization. an input means through which a password of any number of digits is input by the person; and when the above determination means determines that the password is to be used for the first time, the password input by the input means and the data on the number of digits of this password are input to the IC. a processing means for storing information in a storage means within the card; and a PIN code entered by the input means in the IC card and the number of digits of the PIN code when the judgment means determines that the card is to be used for the second time or later. an IC card handling machine characterized by comprising: determination means for comparing the password data and the number of digits data stored in the storage means in the IC card and determining whether they match or not.