JPH057651Y2 - - Google Patents

Description

[Detailed description of the invention] [Technical field of the invention] This invention relates to an IC card that is capable of storing the success or failure of verification during card authentication.

[Prior art and its problems] In recent years, it has become known as the cashless era, and by using cards issued by credit card companies, it has become possible to purchase products without handling cash.

Conventionally, cards used include plastic cards, embossed cards, and magnetic stripe cards, but these cards are easy to forge due to their structure, so unauthorized use has become a problem.

Therefore, in order to solve this problem, information cards, so-called IC cards, have been developed that incorporate an IC circuit that stores a PIN number etc. inside the card so that the PIN number cannot be read easily from the outside. An IC card system that combines such an IC card and a terminal has been developed.

By the way, in order to maintain the confidentiality of these IC cards, different pin numbers are prepared for each stage of manufacture, issuance, and use.
On the other hand, inside the IC card that manages these,
A management area is provided corresponding to each PIN number. Verification based on the password is performed at each stage, and if verification fails, the management information stored in each management area is integrated and output.

However, recently, it has become possible to use digital signatures, fingerprints, alternative (personal information, date of birth, etc.) IDs, etc. in addition to PIN numbers as verification data for card authentication, and it is becoming increasingly common to use information such as digital signatures, fingerprints, and alternative IDs (personal information, date of birth, etc.) Information management is becoming more complex. Moreover, when multiple pieces of matching data are created in this way, materials are also needed to determine what caused the matching failure, and when the number of matching failures exceeds a specified value, it becomes necessary to By storing information in a dedicated area, and depending on the application, even once this situation occurs,
When authentication is canceled using a verification method with a higher priority, the content written in the dedicated area must be invalidated to secure a reserve area in case it occurs again, and for this reason, the management area This has the drawback that not only does the scale of the system become large, but also that the control means for comprehensively controlling them becomes extremely complex.

[Purpose of the invention] This invention was created in view of the above circumstances, and it not only simplifies the management of the success or failure of verification related to card authentication, but also makes it possible to clearly identify the cause of verification failures, and to prevent verification failures from occurring. The purpose is to provide an IC card that allows easy recovery.

[Key points of the invention] According to the IC card according to this invention, the verification data input when the card is used is compared with the verification data stored in the card in advance to determine the success or failure of verification. The bit content of each bit is set to "1" and has a storage means for storing the success or failure of verification, and upon success of verification, the contents of the storage means are sequentially rewritten from the first bit to "0" bit,
On the other hand, due to a verification failure, starting from the first "1" bit in the storage means, the subsequent "1" bits are rewritten to "0" bits, and rewriting to "0" bits continues for the number of times the verification fails, and the consecutive "0" bits are After the bit, a predetermined number of bits of identification data according to the type of verification data is added, and the card is invalidated by detecting a predetermined number of consecutive "0" bits following the base point of the storage means. There is.

[Embodiment of the invention] An embodiment of the invention will be described below with reference to the drawings.

FIG. 1 shows the circuit configuration of the same embodiment. In the figure, 11 is a system bus, and this system bus 11 carries answer-to-reset data.
ROM12, application ROM13, test program ROM14, system program
A ROM 15, a working RAM 16, a central control 17, a storage memory read/write controller 18, a decryptor 19, an input controller 21 via an input buffer 20, and an output controller 23 via an output buffer 22 are connected, respectively. In addition, the input controller 21 and the output controller 23 have data input/output terminals I/O.
O is connected.

Here, answer to reset data
The ROM 12 stores all operating conditions for the IC card itself (for example, data writing, applied voltage, current permissible value and maximum applied voltage, maximum data transmission amount, maximum response time), and these condition data are stored in the card itself. When the internal initial is finished,
Answers in a predetermined format
Send as two-reset data.

The application ROM 13 stores card type data "APN" indicating what kind of IC card it is. This card identification data is set after initial parameter setting based on the above answer-to-reset data. When exchanging, send it out in a predetermined format.

The test program ROM 14 stores programs for various tests of the card.

The system program ROM 15 has a code signal "ACK" or "NAC" indicating whether the signals transmitted and supplied together with various system programs are correct or not.

The working RAM 16 is designed to store various processing data within the card.

The central controller 17 is an input buffer 2
An operation command is output to each circuit according to the data and operation status supplied through the circuit.

The storage memory read/write controller 18 controls writing and reading of data to and from the storage memory 24 in response to commands from the central controller 17. This read/write controller 18 has a counter 181 that counts the number of failed verifications.

The storage memory 24 is an EP-ROM (Erasable
Programmable ROM), etc., and a secret area 2 that stores digital signatures, so-called signatures, fingerprints, etc. in addition to the personal identification number "PIN" as verification data for card authentication.
41, a transaction area 242 for storing various historical data related to card transactions, and a management area 243 for storing data regarding the success or failure of verification during card authentication. Here, in the management area 243, all bit contents are set to "1" in advance.

The decryptor 19 is adapted to decrypt input data supplied via the input buffer 20 based on a predetermined algorithm. A timer 25 is connected to the central controller 17. This timer 24 is used to set the time required for the authentication process to a predetermined time in advance. For example, it is set by a command from the central controller 17 before the input of the personal identification number "PIN" begins, and it is counted when the personal identification number "PIN" is inputted. starts, and after a predetermined time elapses, the central controller 1
7 is multiplied by an interrupt.

Storage memory read/write controller 1
The contents of storage memory 24 read at 8 are applied to one input terminal of comparator 26. Comparator 2
6 receives input data decrypted by the decryptor 19, data stored in the working RAM 16, etc. to the other input terminal. The comparison output of this comparator 26 is then output to the central controller 17.
sent to.

Note that such an IC card is designed to be installed in a terminal (not shown), and in this installed state, the reset signal Reset and the system clock are output.
Clock is supplied, and Vcc power supply and Vpp power supply are connected. Here, the Vcc power supply is a power supply for driving the system, and the Vpp power supply is a power supply for writing to the storage memory 24, and the voltage thereof is set by the answer-to-reset data written in the answer-to-reset data ROM 12. Ru. Further, a signal from the system clock clock is supplied to each circuit via a frequency divider 27 as a drive signal Φ.

Next, the operation of the embodiment configured as described above will be explained.

First, a brief explanation will be given of the steps from attaching such an IC card to a terminal (not shown) to inputting verification data for card authentication in this state. In this case, when you insert the IC card into the terminal,
An initial setting signal set in advance on the terminal side is transmitted. Then, the IC card is operated according to the operating conditions based on this signal. In other words, under the control of the central controller 17, the answer
The answer-to-reset data stored in the two-reset data ROM 12 is read out,
It is sent to the terminal from the I/O terminal via the output controller 23.

Then, the answer to the terminal was sent to the terminal.
If the reset data is determined to be correct,
The card-specific operating conditions will be set and an "ENQ" (inquiry) code will be sent back to you.
This code is written to working RAM 16. In this state, the central controller 17 determines whether or not the "ENQ" code can be properly received in normal operation, and the system program ROM 15 indicates "ACK" if YES and "NAC" if NO. The signal is extracted and sent to the terminal side via the output buffer 22 and output controller 23. When the ACK signal is confirmed on the terminal side, a terminal code TC, which varies depending on the type of terminal, is returned. On the other hand, if the "NAC" signal is confirmed, the connection with the terminal will be severed. When the terminal code "TC" is sent from the terminal side, the central controller 17 extracts the application name "APN" which differs depending on the type of card stored in the application ROM 13 from the IC card, and outputs the output buffer. 22 and then returns it to the terminal side. After that, when the terminal side determines whether the usage types are compatible based on the "APN", an instruction code is sent back. On the other hand, if it is determined that they do not match, the connection with the terminal is severed.

By receiving such an instruction code, input of verification data for card authentication from the terminal is permitted.

In this state, proceed to step A1 of the flowchart shown in FIG. That is, in step A1, verification data for card authentication, in this case, a personal identification number "PIN", a signature, or a fingerprint is input.

This data is applied from the I/O terminal to the input buffer 20 via the input controller 21. Then proceed to step A2.

In this step A2, when the central controller 17 confirms that verification data has been input, the verification data in the input buffer 20 is given to the comparator 26, and at the same time, the data is sent to the storage memory read/write controller 18. A command to read the verification data of the secret area 241 of No. 24 is given, the corresponding data is read, and this is given to the comparator 26. The comparator 26 compares the verification data sent from the terminal side with the verification data read from the storage memory 24, and sends the result to the central controller 17.

In this case, if the two match, the contents of the management area 243 of the storage memory 24 are searched from the top position, assuming that the comparison was successful, and the first "1" bit found is rewritten to a "0" bit. The process then proceeds to step A3, where transaction processing such as monetary transactions is executed. On the other hand, if a mismatch is determined in step A2, the process proceeds to step A4.

In this step A4, the management area 2 of the storage memory 24 is assumed to have not been successfully verified.
The contents of 43 are searched from the top position, the first "1" bit found is left as is as a base point, and the first "1" bit following it is rewritten to "0". Then, the process advances to step A9, and the content "RTN" of the counter 181 of the storage memory read/write controller 18 is counted up by +1. At this time, the counter 181 counts the number of "0"s from the base point, and it is determined whether "RTN" has reached a predetermined number of times, for example, three times.
Here, if the content "RTN" of the counter 181 is within three times, the process returns to step A1 and prompts for re-input of verification data.

Thereafter, if verification data is re-input at step A1, the process proceeds to step A2 and subsequent steps. In this case, if the match is still not successful, the step
Proceed to A4 and rewrite the first "1" bit following the "1" bit previously set as the base point to "0". Then, proceed to step A5.

Thereafter, in the same way, step A1, A2, A4,
The action of A5 is repeated, but in this case the step
If it is determined at A2 that the verification is not successful, at step A4, the first "1" bit following the "1" bit previously set as the base point is further rewritten to "0". Of course, if the verification is successful at this point, the "1" set as the base point in step A4 will be
Since the bit is immediately rewritten to a "0" bit, the number of verification failures becomes "0" and is invalidated at this point. On the other hand, if it is determined in step A5 that the content "RAN" of the counter 181 has reached three times, the process advances to step A6.

In step A6, it is determined whether the verification data is a personal identification number "PIN". If the password is ``PIN'', select YES and proceed to the step.
Proceed to A7 and invalidate the card. In this case, the management area 24 of the storage memory 24
The contents of 3 are shown in Figure 3(a). here,
In the figure, A represents a base point, B represents a continuous "0" bit period corresponding to verification failure, and C represents identification data of 2-bit verification data "PIN".

Also, in step A6, enter your personal identification number "PIN".
If it is determined that this is not the case, the answer is NO and the process proceeds to step A8, where it is then determined whether or not the verification data is a signature. Here, if it is a sign, select YES and proceed to step A9. In this step A9,
Among the contents of the management area 243 of the storage memory 24, the first "1" bit from the "1" bit previously set as the base point is further rewritten to "0".
The process then proceeds to step A7, where card invalidation processing is executed. In this case, the storage memory 24
The contents of the management area 243 are as shown in FIG. 3(b).

Also, if it is determined in step A8 that it is not a sign, the process proceeds to step A10 as NO.
This time, it is determined whether the verification data is a fingerprint. Here, if it is a fingerprint, select YES and proceed to step A11. In this step A11, the content of the management area 243 of the storage memory 24 starts from the first bit "1" which was previously set as the base point.
The 1st and 2nd "1" bits are respectively rewritten to "0". The process then proceeds to step A7, where card invalidation processing is executed. In this case, the contents of the management area 243 of the storage memory 24 are as shown in FIG. 3(c).
It becomes as shown in .

If it is determined in step A10 that it is not a fingerprint, the determination is NO and the process proceeds to step A12. In this step A12, the input data is assumed to be other than the predetermined collation data and is transferred to other processing.

Therefore, in this way, if verification is successful through card authentication, the "1" bits in the management area will be rewritten to "0" bits in order from the first one, whereas if verification fails, the management area will be rewritten to "0" bits. Using the first "1" bit as the base point, the following "1" bits are rewritten as "0" bits, and if failures continue from then on, "0" bits will continue for the number of failures. It is possible to easily manage the success or failure of verification, such as the continuous state of "0" bits at this time, that is, if "0" bits occur a predetermined number of times, for example, three times in a row, processing such as invalidating the card can be performed. . Additionally, by using the two bits following the consecutive "0" bits that determine card invalidation as identification data, the type of verification data can be identified, making it possible to clearly identify the cause of verification failure. You can also do it. Furthermore, if you want to cancel the verification failure state, you can do so simply by forcibly rewriting the "1" bit left as the base point to a "0" bit, which simplifies the procedure for recovering from a verification failure. can.

Note that this invention is not limited to the above-mentioned embodiments, and can be implemented with appropriate modifications within the scope of the invention. For example, in the above embodiment, 2 bits of identification data are added after consecutive "0" bits due to verification failure, but this identification data may of course be other than 2 bits depending on the type of verification data. It is.

[Effects of the invention] According to this invention, it is possible to easily manage the success or failure of verification related to card authentication, to clearly identify the cause of verification failure, and to easily recover from verification failure.

[Brief explanation of the drawing]

Fig. 1 is a block diagram showing the circuit configuration of an embodiment of this invention, Fig. 2 is a flowchart to explain the operation of the embodiment, and Fig. 3 explains the contents of the management area of the embodiment. This is a diagram for 13...Answer to reset data
ROM, 15...System program ROM, 1
6... Working RAM, 17... Central controller, 18... Storage memory read/write controller, 24... Storage memory,
241...Secret area, 242...Transaction area, 243...Management area, 2
6... Comparator.

Claims (1)

[Scope of utility model registration request] In an IC card that compares the verification data entered when using the card with the verification data stored in the card in advance to determine whether the verification is successful, all bit contents are set to "1" in advance and the verification data is pre-stored on the card. A storage means for storing the success or failure of the above-mentioned storage means, and a storage means for rewriting the contents of the storage means to bits "0" starting from the first one if the verification is successful, and rewriting the contents of the storage means starting from the first "1" bit of the storage means if the verification fails, Control to continue rewriting ``1'' bits to ``0'' bits and continue rewriting them to ``0'' bits for the number of verification failures, and to add identification data of a predetermined number of bits according to the type of verification data after the continuous ``0'' bits. and means for detecting a predetermined number of consecutive "0" bits following the base point of the storage means and invalidating the card.
card.