JPH0636089A - Data carrier device - Google Patents

Abstract

PURPOSE:To prevent an illegal access by allowing only the access when the right password is used on the data carrier device to be used for the settlement for the accounts of such as financial institutions and leasures. CONSTITUTION:When the constant time has passed after starting the energy supply from outside using a timer 30, the external access is inhibited. The external access may be inhibited when starting the external access, during the access or when the constant time has passed since the last access. Further, if the number of external accesses exceeds a prescribed number, the external access can be inhibited.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data carrier device used for financial settlement processing at financial institutions, leisure and the like.

[0002]

2. Description of the Related Art Conventionally, for example, a data carrier device shown in FIG. 5 is known as a data carrier device used for cashless payment in financial institutions and leisure. Figure 5
In FIG. 1, the data carrier 20 is shown together with the reader / writer 10. First, the reader / writer 10 is fixedly installed, and includes a control unit 11, a transmission unit 12, a transmission coil 13, a reception coil 14 and a reception unit 15. The user carries the data carrier 20 as a data card or a data coin, and has a nonvolatile memory 21, such as an E ² PROM, a transmitter 22, a transmitter coil 23, a receiver coil 24,
Reception unit 25, control unit 26, comparison unit 27, permission gate unit 2
8 and a rectifier circuit 29.

A password is previously stored in the memory 21 of the data carrier 20. Transmitter 1 of reader / writer 10
2 constantly transmits a signal obtained by FSK-modulating the data bit 0 from the transmission coil 13. When the data carrier 20 is brought close to the communicable distance of the reader / writer 10, for example, the FSK signal from the reader / writer 10 is data-transferred by electromagnetic induction coupling. The receiving coil 24 of the carrier 20 receives the rectifying circuit 2
At 9, the received signal is rectified and smoothed to generate the power supply voltage Vcc, and the operation is performed.

In this operating state, when the control unit 11 of the reader / writer 10 sends a collation command together with the password to release the access prohibition of the memory 21, that is, to open the key, the control unit 26 of the data carrier 20 causes the reader / writer to operate. The instruction from 10 is read, the password of the memory 21 is read out by the comparison unit 27, and the password is verified. When the verification match is obtained, the permission gate unit 28 is enabled to permit the access of the memory 21. That is, the data carrier 20 can be unlocked.

In the access-permitted state of the data carrier 20, the data carrier 20 becomes distant from the communicable distance of the reader / writer 10 and cannot be supplied with energy from the outside, so that the power supply voltage of the data carrier 10 decreases and the data carrier 20 cannot operate. Maintained up to.

[0006]

In such a conventional data carrier, the reader / writer cannot be used to access the data carrier without knowing the password. However, for a data carrier that has been accessed by a reader / writer whose password is known and is in the access-enabled state, connect it to another reader / writer device before the power supply voltage of the data carrier drops and it stops operating. If so, it is possible to access the data carrier because the access is already permitted.

For this reason, after the data carrier is set in the access-permitted state by a legitimate reader / writer whose password is known, it is brought back before the power is turned off and coupled to another reader / writer to supply energy, so that the password is transmitted. Without doing so, the reader / writer could access the data carrier, which could lead to unauthorized use of reading / writing the contents of the memory without a password.

The present invention has been made in view of such conventional problems, and it is an object of the present invention to provide a data carrier device capable of preventing only unauthorized access by using only a correct password. To aim.

[0009]

To achieve this object, the present invention is constructed as follows. First, the present invention is directed to a data carrier device that has a readable / writable memory and operates by energy supplied from the outside, and prohibits access from the outside after a lapse of a certain time from the start of energy supply from the outside. An access prohibition means is provided.

Further, the data carrier device of the present invention is provided with an access prohibition means for prohibiting the external access when starting the access from the outside, during the access, or when a predetermined time has passed since the last access. Characterize. Further, the present invention is directed to a data carrier device having a built-in operating power supply, and in this case, the access from the outside is prohibited at the time of starting the access from the outside, during the access, or when a certain time has passed from the last access. An access prohibition means is provided.

Here, the access prohibiting means has a timer means for measuring the elapsed time, and the access from the outside is prohibited by a time-out output when the timer means measures a certain time. Further, the present invention has a data carrier device having a readable / writable memory and operated by energy supplied from the outside, or a data carrier device having an operating power supply and a readable / writable memory and operated by a signal supplied from the outside. The device is characterized in that access prohibiting means is provided for prohibiting external access when the number of external accesses exceeds a certain number.

This access prohibiting means has a counter means for counting the number of accesses, and prohibits an external access by a counter overflow output when the counter means counts a certain number of times.

[0013]

According to the data carrier device of the present invention having such a configuration, even if the legitimate reader / writer sends the password to make the data carrier accessible, the fixed time required for access from the reader / writer is maintained. After the lapse of time, the data carrier itself creates a prohibited state in which access from outside is not accepted. In this access prohibited state, after the power supply voltage of the data carrier is lowered and the operation is stopped, energy is again supplied from the outside and the access permitted state is not obtained unless the verification match using the correct password is obtained.

For this reason, the data carrier is combined with a legitimate reader / writer and brought back as an access-permitted state, and even if the power supply voltage remains when the carrier is brought back and it is in the operating state, it is already in the access-prohibited state. The memory contents cannot be read or written by the data carrier.

[0015]

1 is a block diagram of an embodiment showing an embodiment of a data carrier device of the present invention, which is shown together with a reader / writer. In FIG. 1, the reader / writer 10 first includes a control unit 11, a transmission unit 12, a transmission coil 13, and a reception coil 14.
And a receiver 15.

On the other hand, the data carrier 20 is an E ² PORM.
A non-volatile memory 21, etc., a transmitter 22, a transmitter coil 2
3, a receiving coil 24, a receiving unit 25, a control unit 26, a comparing unit 27, a permission gate unit 28, a rectifying circuit 29, and a timer 30 is newly provided. The timer 30 is started when the power supply voltage Vcc is obtained from the rectifier circuit 29, and a time-out output is generated when the elapse of a predetermined fixed time T is measured. The time-out output of the timer 30 is given to the transmission unit 22 so that the transmission of read data from the memory 21 to the reader / writer 10 or response data to a predetermined command is prohibited. By prohibiting the transmission operation by the time-out output to the timer 30 and the transmission unit 22, the access prohibition means in the present invention is configured.

Data transmission between the reader / writer 10 and the data carrier 20 will be described below. First, the FSK modulation method is used for data transmission from the reader / writer 10 to the data carrier 20. That is, the transmitter 12 supplies the FSK signals of frequencies f ₁ and f ₂ to the transmitter coil 13 according to the data bits 0 and 1 from the controller 11.

In the standby state, data bit 0 is given from the control unit 11 to the transmission unit 12, and therefore the transmission coil 13 has a frequency f corresponding to the data bit 0.
The FSK signal of ₁ is always supplied to the transmitter coil 1
The induced electromagnetic field generated by the driving of No. 3 is generated in the communicable area of the reader / writer 10. When the data carrier 20 approaches the communicable area of the reader / writer 10, the receiving coil 24
The FSK signal is induced in the received signal and the received signal is rectified by the rectifier circuit 29.
Is rectified with to generate power supply voltage Vcc, and at the same time timer 3
0 starts.

From the data carrier 20 to the reader / writer 10
For the data transmission to, for example, a spread spectrum modulation method is adopted. Therefore, the transmitter 22 is provided with, for example, two types of pseudo random sequence signal generators corresponding to the data bits 0 and 1 to be returned. Specifically, data bit 0 generates an M ₀ series signal, and data bit 1 generates M ₀ series signals.
_{A 1-} series signal is generated to drive the transmission coil 23.

The receiver 13 of the reader / writer 10 is provided with a correlation calculator holding the M ₀ and M ₁ series signals on the data carrier 20 side as reference series signals. The correlation calculating unit calculates the autocorrelation between the received series signal received by the receiving coil 14 and the reference series signal, determines the autocorrelation peak value when the received series matches the reference series, and determines the data bit 0 or 1 The reception output is given to the control unit 11.

Here, the constant time T from when the power supply voltage Vcc is obtained by the supply of the external energy measured by the timer 30 to the access prohibition is usually the reader / writer 1
Access time to data carrier 20 by 0 is 0.1
Since it is about 1 second to 1 second, it is sufficient to set a time slightly longer than this access time. FIG. 2 is a flow chart showing the processing operation of the reader / writer 10 in the embodiment of FIG.

In FIG. 2, the control unit 11 of the reader / writer 10 issues a test command at regular intervals as shown in step S1, for example. When the data carrier 20 approaches the communicable area of the reader / writer 10, the power supply voltage Vcc is generated by the rectifying circuit 29 from the received signal of the receiving coil 24, and the operating state is achieved. When a test command issued by the reader / writer 10 is received by the data carrier 20 after this operation state is returned, a bit response is returned. This bit response is performed by transmitting the pseudo random signal generated in the transmitter 22.

Then, in step S2, the data carrier 20
The response from the side is checked, and if a response to the test command is obtained, the process proceeds to step S3 to instruct the password verification. That is, the control unit 1 of the reader / writer 10
1 issues a password and its verification command to the data carrier 20, and in response to this, the control unit 26 of the data carrier 20 reads the password from the memory 21 and compares it with the comparison unit 2.
7, and collates with the password sent from the reader / writer 10.

If the passwords match, the permission gate unit 28
Is enabled to enable returning of read data from the memory 21, for example. As a matter of course, the access permission based on the collation match may permit both the read access and the write access to the memory 21. When the collation of the passwords in the data carrier 20, that is, the access permission is obtained in step S4, the process proceeds to step S5, and the read or write access to the data carrier is performed.

FIG. 3 is a flow chart showing a first embodiment of the access prohibition process in the data carrier of FIG. In FIG. 3, the data carrier 20 enters the communicable area of the reader / writer 10, and energy is supplied from the reader / writer 10 to supply the power supply voltage Vcc from the rectifier circuit 29.
When is obtained, the timer 30 is started in step S1.

Subsequently, in step S2, it is checked whether or not the test command is received. When the test command is received, a bit response is returned in step S3. In response to this bit response, a password collation command is issued from the reader / writer 10, received in step S4, the password is read from the memory 21 as shown in step S5, and the password from the reader / writer 10 received in the comparison unit 27. Match with.

When it is determined in step S6 that the passwords match, the permission gate unit 28 is enabled and the memory 21
Create a permission state for. Then, the read command or the write command issued from the reader / writer 10 is received in step S8, and the corresponding access process is executed in step S9. When the access process of step S9 is completed, the presence or absence of the time-up output of the timer 30 is checked in step S10, and the processes of steps S8 to S9 are performed until the time-up output is obtained, that is, the reader / writer 1
The access request from 0 is accepted.

In step S10, the timer 30 sets a fixed time T
When the measurement of No. is finished and a time-up output is generated, the process proceeds to step S11. In this embodiment, the transmission state of the transmission unit 22 is stopped to prohibit the access from the reader / writer 10 and complete the series of processes. To do. Therefore, once the access prohibition state is reached, the power supply voltage Vcc of the data carrier 20 is lowered and the operation is stopped. Then, unless the password verification matching is obtained again by the operation state by the external energy supply. The access permission status does not occur.

As a second embodiment of the access prohibition process in the data carrier 20 of FIG. 1, instead of starting the timer 30 when the power supply voltage Vcc is obtained by the supply of energy from the outside, the power supply voltage Vcc is used. When the access from the reader / writer 10 is received for the first time, the timer 30 is started, and a time-up output is sent to the transmission unit 22 after the elapse of a certain time T to set the access prohibited state. Is also good.

The activation of the timer 30 is not limited to the first access, and the timer 30 is activated during the access or when the last access of the reader / writer 10 scheduled in advance ends. Boot up,
Access may be prohibited by time-out output after a certain period of time. In addition, a counter is used instead of a timer, and after the password is matched and the verification succeeds and the counter is cleared, the access count is counted, and access is prohibited by overflow output when the predetermined access count is counted. Good.

Further, in the embodiment shown in FIG. 1, the transmission operation of the transmission section 22 is stopped by the time-up output of the timer 30 so that the access is prohibited.
8 is disabled, the control function of the control unit 26 is stopped, the reception function of the reception unit 25 is stopped,
Further, it is possible to take an appropriate access prohibition technique such as stopping the rectification function of the rectification circuit 29.

FIG. 4 is a block diagram of an embodiment showing another embodiment of the present invention. In this embodiment, the data carrier 2 is used.
It is characterized in that an operating power source is provided at 0. In FIG. 4, the data carrier 20 has a built-in battery 32, and even if the battery 32 is not supplied with energy from the outside as in the embodiment of FIG. ing.

In the case where the battery 32 is built in as described above, the timer 30 is started when the receiving unit 25 receives the first access from the reader / writer 10 and outputs a time-up output when counting a predetermined constant time T. If so, the transmission operation of the transmission unit 22 may be stopped to prohibit access. Further, the access prohibition state once set by the time-out output of the timer 30 can be canceled when a password matching command is next received from the reader / writer 10 and a matching match is obtained. For this reason, the enable output when the comparison unit 27 obtains a password matching match is given to the transmission unit 22 in addition to the permission gate unit 28.

In the embodiment shown in FIG. 4, the timer 30 is activated when the receiving unit 25 receives the first access from the reader / writer 10 after the access permission is obtained by the matching verification of the password. However, as another embodiment, the timer 30 may be started during the access,
Alternatively, the timer 30 may be activated when the last access is received among the accesses determined by the password verification.

Further, a counter is used instead of the timer, the counter is cleared when the collation succeeds due to the coincidence of the passwords, the number of times of access is counted thereafter, and the access is prohibited by the overflow output when the number of times of access is counted a predetermined number of times. . Although the above-described embodiment has been described by taking the non-contact coupling method using the coil as an example, the present invention is not limited to this, and the contact method in which the data carrier 20 is mechanically connected to the reader / writer 10. Can be applied as is.

Further, the non-contact coupling is not limited to the electromagnetic inductive coupling using a coil, and an appropriate method such as an optical coupling method and a radio wave method can be adopted. Further, in the embodiment of the present invention, the data transmission from the reader / writer 10 to the data carrier 20 is the FSK modulation system, and the data transmission from the data carrier 20 to the reader / writer 10 is the spread spectrum modulation system. The transmission method is not limited to the above, and an appropriate transmission method can be adopted.

Further, the memory 21 provided in the data carrier 20 of FIG. 4 may be a non-volatile memory such as an E ² PROM, or a volatile memory using a normal RAM because it has a built-in battery 32. It may be.

[0038]

As described above, according to the present invention, a data carrier is connected to a legitimate reader / writer and the access permission of the data carrier is obtained by matching and collating a correct password, and a predetermined read / write from the reader / writer is obtained. When the access is completed, the data carrier itself is forcibly set to the access prohibition state. For example, the password is used with a legitimate reader / writer to set the data carrier to the access permitted state, and then brought back and joined to another data carrier whose password is unknown. Therefore, it is possible to prevent unauthorized use such as reading and writing the contents of the memory, and it is possible to greatly improve the reliability and safety of the data carrier device used for financial settlement such as financial institutions and cash registers.

[Brief description of drawings]

FIG. 1 is a configuration diagram of an embodiment of the present invention.

FIG. 2 is a flowchart showing a processing operation of a reader / writer according to the present invention.

FIG. 3 is a flow chart showing a first embodiment of a data carrier access prohibition process of the present invention.

FIG. 4 is a block diagram of another embodiment of the present invention.

FIG. 5 is an explanatory diagram of a conventional device.

[Explanation of symbols]

 10: reader / writer 11: control unit 12, 22: transmission unit 13, 23: transmission coil 14, 24: reception coil 15, 25: reception unit 21: memory 26: control unit 27: comparison unit 28: permission gate unit 29: Power supply circuit 30: Timer 32: Battery

Claims (7)

[Claims] 1. In a data carrier device having a readable / writable memory and operated by energy supplied from the outside, access from the outside is prohibited after a certain time has elapsed from the start of the energy supply from the outside. A data carrier device comprising access prohibition means. 2. A data carrier device having a readable / writable memory and operated by energy supplied from the outside, at the start of access from the outside, during the access, or when a predetermined time has passed from the last access. A data carrier device, characterized by comprising access prohibition means for prohibiting access from the outside. 3. A data carrier device having an operating power supply and a readable / writable memory and operated by a signal supplied from the outside, at the start of access from the outside, in the middle of access, or a fixed time from the last access. A data carrier device comprising an access prohibition unit for prohibiting access from the outside after the passage of. 4. A data carrier device according to claim 1, 2 or 3, wherein said access prohibiting means has a timer means for measuring an elapsed time, and a time-out output when a predetermined time is measured by said timer means. A data carrier device characterized by prohibiting access from the outside in. 5. A data carrier device having a readable / writable memory and operated by energy supplied from the outside, wherein access from the outside is prohibited when the number of accesses from the outside exceeds a certain number. A data carrier device comprising a prohibition means. 6. In a data carrier device having an operating power supply and a readable / writable memory and operated by a signal supplied from the outside, when the number of times of access from the outside exceeds a certain number, the access from the outside is prevented. A data carrier device provided with an access prohibition means for prohibiting access. 7. The data carrier device according to claim 5 or 6, wherein said access prohibiting means has a counter means for counting the number of accesses, and is a counter overflow output when the counter means counts a certain number of times. A data carrier device characterized by prohibiting access from the outside.