JPH06243301A - Information processor using data carrier - Google Patents

Abstract

PURPOSE:To easily perform access while omitting the input of a personal password code and to surely protect the personal identification code from illegal use as well. CONSTITUTION:A special code 28A common for plural data carriers is stored in a reader/writer 10, and a control part 14 selectively operates a personal password code reference instruction part 22, which requires the input of a personal password code 25A, or a special code reference instruction part 24, which does not require the input of the personal identification code, corresponding to mode setting. A personal password code 25B and a special code 28B are stored and held in a data carrier 12, reference processing is performed by a personal password code reference part 40 or a special code reference part 44 corresponding to a reference instruction from the reader/writer 10 and when the processing is made successful, access is permitted to one part of the entire part of a memory 38.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus using a data carrier for checking the legitimacy of a data carrier held by a user at the time of access by a reader / writer.

[0002]

2. Description of the Related Art Conventionally, in a facility entrance management system using this type of data carrier and a cashless system using the data carrier as a voucher, the legitimacy of the data carrier and the owner is evaluated. Need to eliminate illegal use. FIG. 4 shows an example of a conventional device having an evaluation function of legitimate use. In FIG. 4, the reader / writer 10 is fixedly installed, for example, at the place of use, and the controller 1
4, an input / output unit 16 including a read / write unit 20, a comparison / collation command unit 48, and a transmission unit 30 and a ten-key pad 18 and the like.
Is connected externally.

A large number of data carriers 12 are prepared and held by the user, and are composed of a transmission section 32, a read / write section 34, a memory 38 and a comparison / verification section 50. Memory 38
Stores and holds a personal identification code 25B, which is, for example, a four-digit number determined by the owner when acquiring the data carrier. Data carrier 12 for reader / writer 10
Is set to be communicable by the respective transmission units 30 and 32, and when a predetermined personal identification code 25A is input from the input unit 16, the control unit 14 activates the comparison and collation command unit 48,
The comparison and collation command and the input personal identification code 25A are sent to the comparison and collation unit 50 of the data carrier 12. Comparison and collation unit 50
Reads the personal identification code 25B from the memory 38 and compares it with the personal identification code 25A sent.

If the two match and the verification is successful, the read / write unit 34 is allowed to access the memory 38, and the read / write unit 20 of the reader / writer 10 can access the memory according to the read command or the write command. Done. If the comparison and collation unit 50 of the data carrier 12 fails to collate the personal identification codes 25A and 25B, access to the memory 38 is not permitted.

FIG. 5 shows another example of the conventional device.
A PIN code reading command unit 24 is provided on the side of the reader / writer 10 so that the PIN code 25 can be read from the memory 38 of the data carrier 12.
B is read out, and the comparison / verification unit 52 also provided in the reader / writer 10 compares and collates the input personal identification code 25A from the input unit 16 and the readout personal identification code 25B from the data carrier 12, and if successful, the reading / writing unit 20. Memory access of the data carrier 12 is permitted.

[0006]

However, in the evaluation of the legitimate use in such a conventional device, when the legitimacy is evaluated or not depending on how one data carrier is used, the legitimacy is evaluated. It was necessary to perform verification by inputting a personal identification code even when not required.

[0007] For example, when one data carrier is used as an identification card for passing through a gate and used as a cash voucher at the same time, input of a personal identification code is omitted to avoid congestion when passing through the gate, and when used as a cash voucher A personal identification code is entered to evaluate the legitimacy of the person and the verification process is performed. However, in the case of the conventional device shown in FIG. 4, there is a problem in that the input of the personal identification code cannot be omitted and it cannot be used to evaluate the validity with one data carrier.

On the other hand, the conventional device shown in FIG.
Since the personal identification code is compared and collated on the 0 side, whether or not the personal identification code is collated can be arbitrarily set by changing the program that realizes the function of the control unit 14. However, in the collation process, the personal identification code 25B held in the data carrier 10 is passed to the reader / writer 10 side, so it is possible to use the illegally obtained reader / writer 10 to check the personal identification code of another person's data carrier. It is possible, and there is a problem that the personal identification code is very easy to leak against unauthorized use.

The present invention has been made in view of such conventional problems, and is a data carrier which can be easily accessed without inputting a personal identification code and can surely protect the personal identification code against unauthorized use. An object is to provide an information processing device using the.

[0010]

SUMMARY OF THE INVENTION First, the present invention is directed to a data carrier 12 having at least a readable memory.
And an information processing device using a data carrier including a reader / writer 12 capable of reading at least the memory of the data carrier 10. In the present invention as such an information processing apparatus, the reader / writer 10 has an input section 16 for inputting a unique personal identification code 25A predetermined for each data carrier, and a special code 28A common to a plurality of data carriers. Special code storage unit 26 that stores and holds
A personal identification code collation command section 22 for instructing the data carrier 12 to collate a personal identification code, and a special code collation instruction section 24 for instructing the data carrier 12 to collate a special code.
And a control unit 14 for selectively operating the personal identification code collation command unit 22 or the special code collation command unit 24.

Further, the data carrier 12 has a memory 38 storing a personal identification code 25B unique to the data carrier,
The special code storage unit 46 storing and holding the special code 28B shared by a plurality of data carriers, and the reader / writer 1
A personal identification code collating unit 40 for collating and collating the personal identification code 25A received when the personal identification code collating command from 0 is received with the personal identification code 25B of the memory 38, and the reader / writer 10.
From the special code 28A received when the special code collation command from the special code 28 is received from the special code storage unit 46.
A special code collating unit 44 for comparing and collating with B and an access permitting unit 36 for permitting access to part or all of the memory 38 when collation by the secret code collating unit 40 or the special code collating unit 44 is successful are provided. .

Here, the control unit 14 of the reader / writer 10
When it is necessary to collate the personal identification code, the personal identification code collation command unit 22 is operated to perform the personal identification code collation processing on the data carrier 12 side, and when the personal identification code collation is not required, the special code collation is performed. The special code can be collated on the data carrier side by operating the command unit 24.

The access permission unit 36 of the data carrier 12 prohibits access to the personal identification code 25B stored and held in the memory 38 even if the special code collation unit 44 successfully collates the special code. Furthermore, when the password comparison unit 40 performs the comparison comparison of the password code once after the power-on start, the access permission unit 36 of the data carrier 12 irrespective of the success or failure of the verification, the subsequent password code verification command. The access to the secret code 25B of the memory 38 based on the above is prohibited.

[0014]

According to the information processing apparatus using the data carrier of the present invention as described above, only by setting the mode of whether or not to perform the identification code verification on the reader / writer side, the identification code by inputting the identification code is set. When the validity of the owner and the data carrier can be evaluated by comparing the codes, and the evaluation by the special code that does not require the input of the secret code can be selected, and one data carrier can be used in two or more different ways. Whether or not the personal identification code is input can be appropriately determined.

Further, even if the access is successful by the collation by the special code which does not require the input of the personal identification code, the access to read and change the personal identification code is completely prohibited, so that the personal identification code cannot be illegally known. . Furthermore, if the password collation processing is performed once after the power-on start, regardless of the success or failure of the collation, the access to the personal identification code based on the subsequent secret code collation command is prohibited at all, that is, By ensuring that the PIN code verification command is accepted only once after power-on start, the confidentiality of the PIN code can be further ensured.

[0016]

1 is a block diagram showing an embodiment of the present invention. In FIG. 1, reference numeral 10 is a reader / writer, which is fixedly installed at a place of use of a facility where the information processing apparatus of the present invention is used, or is used while being carried. The reader / writer 10 has a control unit 14, and an input unit 16 provided as an external unit is connected to the control unit 14. The input unit 16 has, for example, a numeric keypad 18, and the reader / writer 10
On the other hand, when the data carrier 12 is set, the user uses it to input the personal identification code 25A.

The control section 14 is provided with a ROM 26 as a special code storage section, and the special code 2 is previously stored in the ROM 26.
8A is fixedly stored. The special code 28A stored in the ROM 26 may be completely fixed or may be selectively used depending on the location. For example, a special code that can be used as a telephone card and a special code that can be used as an orange card are defined differently. Also, the special code 28A is the special code A at the facility used by the company A, and the special code B is for the gate system of the company B.
It may be changed for each application used.

Further, a mode setting switch 27 is provided for the control unit 14. The mode setting switch 27 is, for example, a DIP switch provided in the unit of the reader / writer 10 so that it cannot be operated from the outside, and it is hard to use the secret code or the special code for the control unit 14 by hardware. Set to. For this reason,
The control unit 14 reads the state of the mode setting switch 27 at the time of initialization processing by turning on the power of the reader / writer 10,
Select either the PIN code matching mode or the special code matching mode.

Following the control unit 14, a read / write unit 20, a secret code collation command unit 22, a special code collation command unit 24,
Further, the transmission unit 30 is provided. PIN code collation command section 2
2 operates in a state in which the personal identification code collation mode is set by the mode setting switch 27, and issues the personal identification code collation command to the data carrier 12 together with the personal identification code 25A input from the input unit 16. The special code collation command section 24 operates in a state where the special code collation mode is set by the mode setting switch 27, and issues the special code collation command to the data carrier 12 together with the special code 28A read from the ROM 26.

The read / write unit 20 is a secret code collation command unit 2
2 or only the issuing of the collation command for the data carrier 12 by the special code collation command unit 24, the reading process or the writing process for the data carrier 12 is executed according to a predetermined sequence. At this time, the data carrier 12
If the identification code or the special code is successfully collated on the side, the memory of the data carrier 12 can be accessed.

Next, the data carrier 12 will be described. The data carrier 12 is provided with a transmission unit 32 that exchanges information with the transmission unit 30 of the reader / writer 10. Here, the transmission units 30 and 32 may be a contact type such as a connector, or may be a non-contact type such as radio wave coupling, electromagnetic induction coupling, or optical coupling. A read / write unit 34, an access permission unit 36, and a memory 38 are provided following the transmission unit 32. Further, a personal identification code collating unit 40 is provided corresponding to the personal identification code collating instruction unit 22 on the reader / writer 10 side. Further, a special code collating unit 44 is provided corresponding to the special code collating instruction unit 24 of the reader / writer 10.

The personal identification code collating unit 40 is the reader / writer 10.
Input section 16 sent from PIN code verification command from
The personal identification code 25A input from the personal computer and the personal identification code 25B registered in the memory 38 are compared and collated.
A level output is generated, and access to all or part of the memory 38 by the read / write unit 34 is permitted.

The special code collating unit 44 is the reader / writer 10
The special code 28A sent together with the special code collating instruction from the special code 28B stored in the memory 46 is compared and collated with the special code 28B held by the data carrier 12. When the special code collating unit 44 succeeds in collating, an H level output is generated to the access permitting unit 36 via the OR circuit 42, and the reading / writing unit 3
4 allows access to all or part of the memory 38.

At this time, the OR circuit 42 is different from each other.
The address area may be accessed. An example
For example, in the secret code collating section 40, addresses 00 to FF (1
The hexadecimal display) is accessible, and the special code collating unit
In 44, addresses 80 to XX can be accessed.
It As the memories 38 and 46 provided in the data carrier 12,
As for security code 25B and special code 28B,
Because it is stored in the power backup RAM or E ² P
Non-volatile memory such as ROM is used. Also, the secret code
The memory 25B and the special code 28B are stored in the memories 38 and 46.
I do not have it, but the PIN code collation unit 40 and the special code collation unit 44
It may be fixedly held in the register or the like. It
In addition, the special code 28B does not change much, so it is stored in ROM.
Or hold it in the memory 38 together with the secret code 25B.
May be.

Here, in order to prevent access by illegal use of the secret code 25B held in the data carrier 12, the special code collating unit 44 succeeds and the access permitting unit 36 causes the reading / writing unit 34 to the memory 38. Even if the access is permitted, the storage area of the personal identification code 25B is excluded from the access permission target, and even if the special code is successfully collated, the personal identification code 25B of the data carrier 12 is read out or changed by rewriting. Do not allow

Further, when the secret code collating unit 40 fails in collating the secret code, the secret code 25B is prohibited from being read from the memory 38 even if the secret code collating command is received for the second time or later. Of course, once the transfer state with the reader / writer 10 is cut off and the power supply is reset, the secret code collating command can be received again by resetting.

As a result, even if the reader / writer 10 is illegally used to check the personal identification code 25B of the data carrier 12, if the wrong personal identification code 25B is input, further access cannot be made, and the correct personal identification code 25B is obtained. Unless known, access by the reader / writer 10 to the data carrier 12 in the secret code collation mode can be prohibited.

FIG. 2 is a flow chart showing the processing of the reader / writer 10 and the data carrier 12 shown in the embodiment of FIG. 1 including the exchange between them. In FIG. 2, the reader / writer 12 first issues a test command in a constant cycle in step S101, and checks the presence or absence of a response from the data carrier 12 side in step S102.

In this state, when the data carrier 12 is set in the reader / writer 10 and communication is possible between them, the test command issued by the reader / writer 10 in step S101 is the step S20 of the data carrier 12.
1 is received and a response is returned in step S202. The response to the test command from the data carrier 12 is determined in step S102, and the process proceeds to step S103.

In step S103, it is checked, for example, based on the state of the mode setting switch 27 whether the personal identification code collation mode is set. If the personal identification code is in the collation mode, the user inputs the personal identification code 25A through the input unit 16 in step S104. PIN 25
When A is input, the PIN code collation command unit 22 is activated,
A personal identification code collation command is issued to the data carrier 12 together with the personal identification code 25A input in step S105.

On the other hand, when the special code collation mode is determined in step S103, the process proceeds to step S106, the special code collation command section 24 is activated, the special code 28A stored in the ROM 26 is read, and the special code collation command is issued. Issued to the data carrier 12. Step S2
The data carrier 12, which has returned a response to the reception of the test command in 02, checks the reception of the collation command in step S203.

When the collation command is received, the process proceeds to step S204, and the personal identification code collation process or the special code collation process is executed. When it is determined in step S205 that the collation is successful in this collation process, the process proceeds to step S206 to permit access to the memory 38. If necessary, the response indicating the success of the collation is returned to the reader / writer 10, and the reader / writer 10 receives the response indicating the success of the collation, and the reader / writer 10 performs the step S1.
At 07, normal data processing is executed. Of course,
The data carrier 12 may reply only when there is an inquiry from the reader / writer 10.

Even if the response of successful collation is not returned in step S206, normal data processing in step S107,
That is, when reading or writing is performed on the data carrier, if the collation is successful, the reading or writing can be executed, while if the collation fails, the reading or writing cannot be performed. You know it.

FIG. 3 is a block diagram showing another embodiment of the present invention. In this embodiment, the personal identification code collation command unit 22 and the special code collation command unit provided in the reader / writer 10 of FIG. It is characterized in that 24 are combined into one to form a collation command section 60, and a RAM 29 for temporarily storing the personal identification code 25A input from the input section 16 is provided. The control unit 14 of the reader / writer 10 determines whether the secret code 25A or the ROM 2 of the RAM 29 is in accordance with the secret code collating mode or the special code collating mode by the mode setting switch 27.
Any of the 6 special codes 28A is selected and a collation command is issued to the data carrier 12.

By thus switching the ROM 26 and the RAM 29 and using the code sent to the data carrier 12 together with the collation command as the secret code or the special code, the structure of the reader / writer 10 can be simplified. On the side of the data carrier 12, the verification command from the reader / writer 10 includes flag information indicating the secret code verification mode or the special code verification mode, so that the security code verification unit 40 or Special code matching unit 44
Is executed and the collation processing is executed in the same manner as in the embodiment of FIG. 1. When the collation is successful, the access permission unit 36 causes the memory 38
To allow all or part of the access. The other structure is the same as that of the embodiment of FIG.

In the above embodiment, the data carrier 1 is issued by issuing a test command from the reader / writer 10.
Although the access is started by recognizing the presence of the second carrier 2, the access may be started by detecting attachment of the data carrier 12 to the reader / writer 10 with a sensor or the like. Further, in the above-described embodiment, the setting of the secret code collating mode and the special code collating mode for the control unit 14 of the reader / writer 10 is set by hardware by the mode setting switch 27 provided in the unit of the reader / writer 10. However, after turning on the power of the reader / writer 10, for example, the input unit 1
The ten key 18 of 6 may be used to set the main mode by software.

Further, regarding the control unit 14, the read / write unit 20, the personal identification code collation command unit 22, the special code collation command unit 24, and the command collation unit 60 of FIG. 3 of the reader / writer 10 shown in the above embodiment. , May be realized by dedicated hardware, or may be realized as a function by program control of the MPU. This point also applies to the data carrier 12, and the write control unit 34, the access permission unit 36, the personal identification code collation unit 40, the OR circuit 42, and the special code collation unit 44 may be realized by dedicated hardware. , MPU
It may be realized by the function of the program control of. However, the data carrier 12 is preferably dedicated hardware rather than a general-purpose MPU in order to simplify the internal circuit.

[0038]

As described above, according to the present invention, even in a facility where both the reader / writer uses the personal identification code and the case where the personal identification code is not used, the reader / writer side Without changing the configuration
It is possible to deal with the use or non-use of the personal identification code.

Further, since the personal identification code possessed by the data carrier is not transferred to the reader / writer side for the collation processing, the personal identification code of the data carrier cannot be illegally known and the security performance can be improved. .

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of the present invention.

FIG. 2 is a flowchart showing the processing operation of the present invention.

FIG. 3 is a block diagram showing an embodiment of the present invention.

FIG. 4 is a block diagram showing a conventional device.

FIG. 5 is a block diagram showing another conventional device.

[Explanation of symbols]

 10: reader / writer 12: data carrier 14: control unit 16: input unit 18: numeric keypad 20, 34: read / write unit 22: secret code collation command unit 24: special code collation command unit 25A: input secret code 25B: memory secret code Code 26: Special code storage unit (ROM) 27: Mode setting switch 28A, 28B: Special code 29: RAM 30, 32: Transmission unit 36: Access permission unit 38: Memory 40: PIN code verification unit 42: OR circuit 44: Special code collation unit 46: Special code storage unit 60: Instruction collation unit

Claims (4)

[Claims] 1. A data carrier (12) comprising at least a readable memory and the data carrier (1).
2) A reader / writer (1 that can read at least the memory
0) and an information processing device using a data carrier, the reader / writer (10) has an input unit (16) for inputting a unique personal identification code (25A) predetermined for each data carrier. , A special code storage unit (2) that stores and holds a special code (28A) common to a plurality of data carriers.
6), a personal identification code collation command section (22) for instructing the data carrier (12) to collate a personal identification code, and a special code collation instruction section (24) for instructing the data carrier (12) to collate a special code. And a control unit (14) for selectively operating the personal identification code collation instruction unit (22) or the special code collation instruction unit (24), and the personal identification code ( Memory (38) storing 25B) and a special code (28B) shared by a plurality of data carriers.
A special code storage unit (46) that stores and holds the secret code, a secret code (25A) received when the secret code collating command is received from the reader / writer (10), and the memory (3).
8) A secret code collating unit (40) for comparing and collating with the secret code (25B), a special code (28A) received when a special code collating command is received from the reader / writer (10), and the special code. Special code collating unit (4) for comparing and collating with the special code (28B) of the storage unit (46)
4) and an access permission unit (36) for permitting access to part or all of the memory (38) when the identification code collation unit (40) or the special code collation unit (44) succeeds in the collation. An information processing device using a data carrier characterized by being provided. 2. The information processing apparatus using the data carrier according to claim 1, wherein the control unit (14) of the reader / writer (10) is provided with the secret code when collation of the secret code is required. When the code collation command unit (22) is operated to perform the collation process of the personal identification code on the data carrier (12) side and the collation of the personal identification code is not required, the special code collation command unit (24) is operated. An information processing device using a data carrier, characterized in that a special code is collated on the data carrier side. 3. The information processing apparatus using the data carrier according to claim 1, wherein the access permission unit (36) of the data carrier (12) is used for collating the special code by the special code collating unit (44). An information processing apparatus using a data carrier, characterized in that access to the secret code (25B) of the memory (38) is prohibited even if it succeeds. 4. The information processing apparatus using the data carrier according to claim 1, wherein the access permission unit (36) of the data carrier (12) is a secret code by a secret code collating unit (40) after power-on start. Code comparison 1
When the operation is repeated, regardless of the success or failure of the verification, a data carrier characterized by prohibiting the access to the security code (25B) of the memory (38) based on the subsequent security code verification command is used. Information processing equipment.