JPH04291487A - Money reception system for prepaid card - Google Patents

Abstract

PURPOSE:To improve the safety of a prepaid card system by preventing money receipt. CONSTITUTION:The money reception system for prepaid card porvided with an IC card 1, a money reception terminal 2, and an IC card issue center 3 consists of a card-side ciphering and deciphering means 7 which ciphers data sent from the IC card 1 to the issue center 3 and deciphers data sent from the issue center to the IC card 1, a center-side ciphering and deciphering means 6 which ciphers data sent from the issue center 3 to the IC card 1 and deciphers data transferred from the IC card 1 to the issue center 3, a balance update means 8 which adds the amount of supplied money to balance data stored in a balance storage register 4 in the IC card 1 to update contents of this register 4, a card-side center authenticating means 9 which discriminates whether the issue center 3 connected to the IC card 1 is true or not and permits update of contents of the balance storage register 4 only in the case of the true center, and a center-side center authenticating means 10 which informs that the issue center 3 is true.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for depositing money into a prepaid card. More specifically, the present invention relates to a prepaid card deposit method that improves security in the IC card deposit process of a prepaid card system using an IC card.

0002

BACKGROUND OF THE INVENTION Currently, various cashless systems such as prepaid card systems and credit card systems are in widespread use. On the other hand, various fraudulent acts are being carried out in these cashless systems, and the demand for highly secure cashless systems is increasing. In response to these demands, systems have been developed that have increased safety by using IC cards, which are more secure than media such as magnetic cards.

FIG. 5 is a system configuration diagram of a conventional deposit processing in a prepaid card system using an IC card. An IC card 51, a deposit terminal 52 (CD: cash dispenser device) such as an ATM, and an IC
It is comprised of an issuing center 53, exemplified by the bank that issued the card 51.

[0004] When the user of the IC card 51 wants to deposit money into the IC card, he or she first inserts the IC card into the ATM 52 and activates the IC card by inputting the IC card's password. As a result, IC card 5
A communication path between 1-ATM 52 and issuing center 53 is established. Next, the user inputs the replenishment amount 54 from the keyboard of the ATM 52 or the like. The ATM 52 reads the balance data stored in the IC card 51, sends this balance data and the replenishment amount 54 to the issuing center 53, and requests a deposit. The issuance center 53 determines whether replenishment is possible, adds the replenishment amount 54 and the balance data to calculate a new balance amount, returns the amount to the ATM 52, and sends it to the ATM.
52 sends a new balance amount to the IC card 51. As a result, a new balance amount is set in the IC card 51, and the deposit is completed.

[0005] At this time, conventionally, the IC card 51 and the ATM
52 owns the same key KEY-A55 for encryption,
The communication between the IC card 51 and the ATM 52 is encrypted and
The deposit protocol in the C card 51 is kept secret. Communication between the ATM 52 and the issuing center 53 is often not encrypted, and if it is encrypted, the issuing center 53 and the ATM 52 are encrypted using the same key.

[0006]

[Problems to be Solved by the Invention] However, in the conventional system, it is possible to make fraudulent deposits through eavesdropping, etc., and there is a problem with security. In other words, if the communication between the ATM and the issuing center is not encrypted, it is possible to detect the flow of data between the ATM and the issuing center by eavesdropping on the communication between the ATM and the issuing center, and to perform unauthorized deposit processing by transmitting the same data. It becomes. Further, even if the connection between the ATM and the issuing center is encrypted, if the key held in the ATM is read out, unauthorized deposit processing becomes possible. In such a case, it is necessary to change the key each time.

An object of the present invention is to prevent fraud in the process of depositing money into an IC card and to improve the security of the process of depositing money in a prepaid card system.

[0008]

Means for Solving the Problems FIG. 1 is a functional block diagram of the present invention. The present invention is based on an IC card 1, a deposit terminal 2, and an issuing center 3 that issues the IC card 1 and where the IC card user's account exists. Also, IC
The card 1 has a balance storage register 4 which indicates the amount of money that can be used with the card at the time. IC card user
When depositing money into C Card 1, insert IC Card 1 into Deposit Terminal 2, activate IC Card 1 by entering the PIN of IC Card 1, and input the replenishment amount 5 from the keyboard of Deposit Terminal 2. Enter.

First, the issuing center 3 has center-side encryption/decryption means 6 . The center-side encryption/decryption means 6 has one key, and uses the key to encrypt data transmitted from the issuing center 3 to the IC card 1 via the deposit terminal 2. Also, IC
Data sent from the card 1 to the issuing center 3 via the deposit terminal 2 is decrypted using the key.

On the other hand, the IC card 1 has a card side encryption/decryption means 7. The card side encryption/decryption means 7 has the same key as the center side encryption/decryption means 6, and
The data sent from the bank via the deposit terminal 2 is decrypted using the key. Furthermore, data sent from the IC card 1 to the issuing center 3 via the deposit terminal 2 is encrypted using the key.

[0011] The issuing center 3 also has a balance updating means 8. The balance updating means 8 receives the replenishment amount 5 input by the user of the IC card 1 from the deposit terminal 2, and when the amount 5 can be paid out from the user's account, the balance updating means 8 updates the IC card 1.
The balance data stored in the balance storage register 4 is read out, and a new balance amount is calculated by adding the read amount and the replenishment amount 5.

The IC card 1 also has a card-side center authentication means 9. The card-side center authentication means 9 determines whether or not the issuing center 3 connected via the deposit terminal 2 is a true issuing center, and updates the balance data in the balance storage register 4 only if it is a true issuing center. do it like this.

On the other hand, the issuing center 3 includes a center authentication means 10 on the center side. The center-side center authentication means 10 executes a process to indicate that the center is a real issuing center in response to the processing performed by the card-side center authentication means 9 to determine whether or not it is a real issuing center.

[0014]

[Operation] When making a deposit to IC card 1 in a prepaid card system using IC card 1, the user first inserts IC card 1 into deposit terminal 2, enters the pin code of IC card 1, and activates IC card 1. become Thereafter, the replenishment amount 5 is inputted from an input device such as a keyboard provided on the deposit terminal 2.

[0015] When the IC card 1 is inserted into the input terminal 2 and activated, a communication path between the IC card 1, the deposit terminal 2, and the issuing center 3 is established. When the communication path is established, first, the center side encryption/decryption means 6 is activated, and uses the key held by the center side encryption/decryption means 6 to create a session key unique to the communication session. This session key can be created using, for example, a random number. The center-side encryption/decryption means 6 sends a key for creating this session key (for example, a generated random number) to the IC card 1. Here, the card-side encryption/decryption means 7 in the IC card 1 is activated, and based on the held key and the sent key,
The center side encryption/decryption means 6 creates a session key similar to the one generated. Below, IC card 1-Issuing center 3
The communication data between them is encrypted using this session key.

Next, the balance updating means 8 is activated. The balance updating means 8 takes the replenishment amount 5 input by the user from the deposit terminal 2 as one input. Further, the balance data stored in the balance storage register 4 is read from the IC card 1. At this time, the data stored in the balance storage register 4 is encrypted with the session key by the card side encryption/decryption means 7 and sent to the issuing center 3 via the deposit terminal 2. The center-side encryption/decryption means 6 of the issuing center 3 decrypts this data using the session key and inputs it to the balance update means 8. The balance updating means 8 calculates a new balance amount by adding the previous replenishment amount 5 and the decrypted balance amount, and sends it to the center side encryption/decryption means 6. The center side encryption/decryption means 6 encrypts the balance update data with the session key,
It is sent to the IC card 1 via the deposit terminal 2. IC card 1
The card side encryption/decryption means 7 decrypts this data using the session key and stores it in the balance storage register 4. With the above process, the process of depositing money into the IC card 1 is completed.

In the above process, if the key data for creating a session key to be sent to the IC card 1 by the center-side encryption/decryption means 6 is intercepted, fraudulent deposits become possible. If the key data can be intercepted, a card-side center authentication means 9 and a center-side center authentication means 10 are added.

In the above-mentioned operation, the balance storage register 4
Before writing the updated balance data, the card-side center authentication means 9 is first activated. Card side center authentication means 9
sends data to the issuing center 3 for checking whether the issuing center 3 is a true issuing center. Upon receiving this, the center-side center authentication means 10 of the issuing center 3 sends data to the card-side center authentication means 9 of the IC card 1, informing that it is the true issuing center. The card-side center authentication means 9 determines whether the data sent from the center-side center authentication means 10 is data indicating the true issuing center 3, and only if the data is stored as the true issuing center 3, the balance is Allows writing of updated balance data into storage register 4. If it cannot be determined that it is a true issuing center, use balance storage register 4.
Do not allow writing to.

[0019]

Embodiment FIG. 2 is a system configuration diagram of an embodiment of the present invention. IC card 1 and deposit terminal 2 (AT
M), consisting of a publishing center 3. Then, the same key (KEY-A) 20 for encryption is placed in the IC card 1 and the issuing center 3. As a result, communication data between the IC card 1 and the issuing center 3 is encrypted using KEY-A, and the ATM 3 becomes nothing more than a communication path of this communication network.

FIG. 3 is an explanatory diagram of the operation of one embodiment. First, the user inserts the IC card 1 into the ATM 2, inputs the password 30 (PIN number) of the IC card 1, and activates the IC card 1 (31). As a result, a communication path between the IC card 1, ATM 2, and issuing center 3 is established. The user then inputs the replenishment amount 5 from an input device such as a keyboard of the ATM 2.

[0021] When the communication path is established, the issuing center 3 generates a random number 32 and uses this random number as KEY-A (20-
1) (encryption a33) and session key 34-
Create 1. The random number 32 generated by the issuing center 3 is AT
It is sent to IC card 1 via M2. In IC card 1, this random number 32 is encrypted with KEY-A (20-2) (
Encryption b35) and create a session key 34-2.

Next, the IC card 1 transfers the balance data stored in the internal balance storage register 4 to the session key 3.
4-2 (encryption c36) and send it to the issuing center 3 via the ATM 2. The issuance center 3 decrypts this encrypted data using the session key 34-1 (decryption a37), adds it to the replenishment amount 5 input by the user from the ATM 2 and sent to the issuance center 3 (38), and creates a new balance amount. seek. The obtained new balance amount is encrypted using the session key 34-1 (encryption d39) and sent to the IC card 1 via the ATM 2. The IC card 1 decrypts the received encrypted new balance amount using the session key 34-2 (decryption b40), and rewrites the contents of the balance storage register 4 with the decrypted balance data.

[0023] Through the above process, the process of depositing money into the IC card 1 is completed. As a result, the ATM 2 becomes a mere connection point of the transmission path, and a different session key is generated for each deposit process, and the data transferred between the IC card 1 and the issuing center 3 is encrypted. Even if you do so, the possibility of fraudulent deposit processing is reduced.

However, the random number 3 generated at the issuing center 3
If 2 is intercepted, fraudulent deposits can be made by connecting the counterfeit issuing center 3 and sending the same random number and updated balance amount.

FIG. 4 is an explanatory diagram of the operation of the second embodiment for preventing such fraud. As in the first embodiment, the user first inserts the IC card 1 into the ATM 2, inputs the password 30 (PIN number) of the IC card 1, and activates the IC card 1 (31). As a result, a communication path between the IC card 1, ATM 2, and issuing center 3 is established. The user then inputs the replenishment amount 5 from an input device such as a keyboard of the ATM 2.

When the communication path is established, the issuance center 3 generates a random number 32 and uses this random number as KEY-A (20-
1) (encryption a33) and session key 34-
Create 1. The random number 32 generated by the issuing center 3 is AT
It is sent to IC card 1 via M2. In IC card 1, this random number 32 is encrypted with KEY-A (20-2) (
Encryption b35) and create a session key 34-2. The processing up to this point is the same as in the first embodiment.

Next, a random number 41 is generated in the IC card 1 and encrypted using the session key 34-2 (encryption e42).
), and sends it to the issuing center 3 via the ATM 2. Issuance center 3 receives this data, decrypts it with session key 34-1 (decryption c43), encrypts it with KEY-1 (20-1) (encryption f44), and sends it to IC via ATM2.
Send to card 1. For IC card 1, key the random number 41
-A (20-2) (encryption g45) and compare it with the output of encryption f44 sent from the issuing center 3 (4
6). If the encrypted cipher text of g45 and the encrypted cipher text of f44 match, it is determined that the connection is with the real issuing center 3. If they do not match, it is determined that the connected center is not the true issuing center, and the deposit processing is interrupted.

[0028] If it is determined that the issuing center 3 is the real one through the above processing (comparison 46 shows a match), then the balance amount is updated. That is, the access gate 47 of the balance storage register 4 is turned on. Then, the balance data stored in the balance storage register 4 up to that point is encrypted using the session key 34-2 (encryption c36),
It is sent to the issuing center 3 via the ATM 2, and the issuing center decrypts it using the session key 34-1 (decryption a37).
, the replenishment amount transferred from ATM2 is 5 and the sushi (38
), calculates the new balance amount and uses it as the session key 34-
1 (encryption d39) and send it to IC card 1. The IC card 1 decrypts this using the session key 34-2 (
The data is decrypted (b40) and stored in the balance storage register 4 via the access gate 47 which is in the on state.

With the above processing, the processing of depositing money into the IC card 1 is completed. By processing using the above method,
Safety will further improve.

[0030]

[Effects of the Invention] According to the present invention, a deposit terminal such as an ATM does not have an encryption key, so even if the deposit terminal is stolen, there is no threat to the entire system, and security is improved. This allows deposit terminals to be installed in locations without strong physical protection, allowing prepaid card systems using IC cards to be used more widely. Furthermore, since the possibility of fraudulent deposits due to eavesdropping or the like is extremely low, the security of the system is improved and it becomes possible to issue IC cards that can be exchanged for cash.

[Brief explanation of the drawing]

FIG. 1 is a functional block diagram of the present invention.

FIG. 2 is a system configuration diagram of one embodiment.

FIG. 3 is an explanatory diagram of the operation of one embodiment.

FIG. 4 is an explanatory diagram of the operation of the second embodiment.

FIG. 5 is a system configuration diagram of a conventional system.

[Explanation of symbols]

1 IC card 2 Deposit terminal 3 Issuing center 4 Balance storage register 5 Replenishment amount 6 Center side encryption/decryption means 7
Card side encryption/decryption means 8 Balance update means 9 Card side center authentication means 10 Center side center authentication means

Claims (2)

[Claims] [Claim 1] In a prepaid card system using an IC card (1), money is deposited into the balance storage register (4) in the IC card (1) from the account of the issuing center (3) that issued the IC card (1). When performing a deposit process to increase the available amount by the replenishment amount (5) entered from the terminal (2), if you own the encryption key and send it to the issuance center (3)
The data sent from the IC card (1) to the IC card (1) is encrypted, and the encrypted data sent from the IC card (1) is decrypted.
), the center-side encryption/decryption means (6) improves security by encrypting the transmission path between the center-side encryption/decryption means (6);
6) owns the same key as that owned by the issuance center (
3) to the IC card (1), and also decrypts the encrypted data sent from the IC card (1) to the issuing center (
3) a card-side encryption/decryption means (7) that encrypts the data sent to the IC card (1), the deposit terminal (2), and the issuance center (3) to improve security; ,
Stored in the balance storage register (4) in the IC card (1) obtained by the issuing center (3) through the card side encryption/decryption means (7) and the center side encryption/decryption means (6). New balance data is obtained by adding the replenishment amount (5) input from the deposit terminal (2) to the balance data, and the center-side encryption/decryption means (6) and the card-side encryption/decryption means ( 7) Balance storage register (
4) A balance updating means (8) for updating the balance data. [Claim 2] In a prepaid card system using an IC card (1), money is deposited into the balance storage register (4) in the IC card (1) from the account of the issuing center (3) that issued the IC card (1). When performing a deposit process to increase the available amount by the replenishment amount (5) entered from the terminal (2), if you own the encryption key and send it to the issuance center (3)
The data sent from the IC card (1) to the IC card (1) is encrypted, and the encrypted data sent from the IC card (1) is decrypted.
), the center-side encryption/decryption means (6) improves security by encrypting the transmission path between the center-side encryption/decryption means (6);
6) owns the same key as that owned by the issuance center (
3) to the IC card (1), and also decrypts the encrypted data sent from the IC card (1) to the issuing center (
3) a card-side encryption/decryption means (7) that encrypts the data sent to the IC card (1), the deposit terminal (2), and the issuance center (3) to improve security; ,
When storing the updated balance in the balance storage register (4), the IC card (1) authenticates the issuing center (3) connected via the deposit terminal (2) as the true issuing center (3). A card-side center authentication means (9) that allows writing of an updated balance to the balance storage register (4) only when the card-side center authentication means (9) processes the issuing center authentication process on the issuing center (3) side. 1. A prepaid card depositing method comprising: a center authentication means (10) on a center side;