JPH0654507B2 - Portable electronic device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention] (Industrial field of application) The present invention is used in, for example, a bank system, and has a nonvolatile data memory and a control element such as a CPU (Central Processing Unit). The present invention relates to a portable electronic device, which is a so-called IC card, which incorporates an IC (integrated circuit) chip having the above.

(Prior Art) Instead of a conventional magnetic card, recently, a bank system using an IC card having an IC chip having a nonvolatile data memory and a control element such as a CPU has been devised. In the case of a magnetic card, the data used for collating the identification information for personal authentication at the time of transaction is stored in the magnetic stripe on the surface of the card, which may result in forgery or falsification. On the other hand, in the IC card, this collation data is stored inside the card, and this data cannot be referenced from the outside. The personal identification information from the user and the stored collation data are collated inside the card, and only the collation result is output from the card. Here, when the collation does not match, the number of times of non-coincidence is counted, and when the predetermined number of times is exceeded, the subsequent collation cannot be performed, thereby improving the security of the data in the IC card.

By the way, the comparison between the number of times of disagreement and the predetermined number of times is carried out in the IC card. However, if the predetermined number of times is fixed in the control program, for example, in an application in which the upper limit value of the number of times of the disagreement is set to another value. I can not respond. In particular, the control program is usually stored in a mask ROM (read only memory) or the like so that the program cannot be read out. In the above case, the program corresponding to each application is stored. I have to make an IC card
Not suitable for mass production of cards.

Further, if the general user can store the upper limit value of the number of times of disagreement in the data memory of the IC card, the security of the data in the IC card similarly deteriorates.

(Problems to be Solved by the Invention) As described above, if the collation inconsistency upper limit value of the identification information for personal authentication is fixed in the control program, it becomes impossible to deal with various applications, and the collation inconsistency upper limit value is also lost. Can be stored by a general user, which reduces security.

Therefore, the present invention eliminates the above drawbacks, and the upper limit value of the number of times of collation mismatch corresponding to various applications can be freely set when the portable electronic device is initialized. It is an object of the present invention to provide a portable electronic device which can be used for various applications having different numbers of collation mismatches, can be changed once initialized, and can maintain security.

[Configuration of the Invention] (Means for Solving the Problems) In the portable electronic device of the present invention, the upper limit value of the number of times of non-matching of the identification information for personal authentication is stored in the data memory.

(Operation) By dividing the input instruction into those that can be executed before initialization and those that can be executed after initialization, and by setting the instruction for setting the collation mismatch upper limit value to be executable before initialization, The upper limit of the number of times of collation mismatch can be set when the portable electronic device is initialized, and cannot be changed after the initialization is completed.

(Example) Hereinafter, one example of the present invention will be described with reference to the drawings.

FIG. 8 shows a configuration example of a card handling device to which the IC card as the portable electronic device according to the present invention is applied and which is used as a terminal device such as a home banking system or a shopping system. That is, this device enables the IC card 1 to be connected to a control unit 3 including a CPU via a card reader / writer 2, and the control unit 3 includes a keyboard 4, a CRT display device 5, a printer 6, and a floppy disk device. 7 are connected.

The IC card 1 is held by the user and refers to a personal identification number known only to the user, for example, when the user purchases a product, and stores necessary data. As shown in FIG. In addition, the read / write unit 11, the password setting / password collating unit 12, the encryption / decryption unit 13, and other parts that perform basic functions, and the supervisor 14 that manages these basic functions. . The read / write unit 11 has a function of reading, writing, or erasing data with the card reader / writer 2.
The password setting / password collating unit 12 has a function of performing storage and reading prohibition processing of the password set by the user, collating the password after setting the password, and permitting subsequent processing. The encryption / decryption unit 13
For example, encryption is performed to prevent leakage or forgery of communication data when transmitting data from the control unit 3 to another terminal device via a communication line, and decryption of encrypted data is performed. For example, DES (Data Encryption)
This is a function of performing data processing in accordance with an encryption algorithm having a sufficient encryption strength such as the option standard. The supervisor 14 has a function of decoding a function code or a function code added with data input from the card reader / writer 2 and selecting and executing a necessary function from the basic functions.

In order to exert these various functions, the IC card 1 has a control element (for example, CPU) as shown in FIG. 6, for example.
15. Non-volatile data memory 1 whose contents can be erased
6, a program memory 17, and a contact portion 18 for making electrical contact with the card reader / writer 2, of which the portion within the broken line (control element 15, data memory 16, program memory 17)
Is an IC chip. The program memory 17 is composed of a mask ROM, and stores a control program of the control element 15 having a subroutine for realizing each of the basic functions. The data memory 16 is used to store various data and is composed of, for example, an EEPROM. As shown in FIG. 1, this data memory 16 is divided into a specific information storage area 16 ₁ and a data storage area 16 _2, and the specific information storage area 16 ₁ is a personal identification number as a plurality of identification information for personal authentication. A secret identification area 16 _{3 in} which the upper limit value of the number of times of collation mismatch corresponding to each and an index are stored, and an initialization completion flag area 16 ₄
It is composed of and. The upper limit value of the number of times of non-coincidence among the above information is stored when the IC card 1 is initialized. Whether or not the initialization of the IC card 1 is completed depends on the state of the initialization completion flag.
Will judge.

Next, the operation of the supervisor 14 in such a configuration will be described with reference to the flowchart shown in FIG. The supervisor 14 receives the instruction data as shown in FIG. 3, decodes it, and executes it. As the instruction data, as shown in FIG. 3 (a), there is one that is composed of only the function code and one that is composed of the function code and the data added to it as shown in FIG. 3 (b). is there. The function codes are roughly classified into those to be executed at the time of initialization and those to be executed at the time of completion of the initialization. Now, when the command data is input to the IC card 1, it is first judged by the function code included in the command data whether or not it is for initialization. At this time, when to have been intended for initialization, then refers to the initialization completion flag area 16 _4, checks whether the initialization has been completed. If the initialization is completed, the response data indicating an instruction error is output and the operation returns to the instruction data wait state.If the initialization is not completed, this instruction is executed and the response data indicating the end of execution is output. Output and return to instruction data wait state. On the other hand, if the function code is not for initialization, similarly, initialization completion flag area 1
Referring to 6 _4, if not initialization is complete, return the output to the instruction data standby state response data indicating the instruction error, if the initialization is completed, it executes the instructions,
The response data indicating the end of execution is output and the operation returns to the instruction data wait state. Here, by classifying the command data for setting the collation mismatch upper limit value into the command data at the time of initialization, it is possible to freely set at the time of initialization, and once initialization is completed, the setting becomes impossible. , The upper limit of the number of times of collation mismatch does not change from the outside.

Next, the operation at the time of password verification will be described with reference to the flowchart shown in FIG. Command data for password verification is
As shown in FIG. 5, it is composed of a collation function code, index data, and collation data. Now, when the instruction data is input, it finds the same index and index data included in it from security area 16 _3, and outputs response data indicating infeasible if not found back to the instruction data standby state compares then with the collation data inputted and PIN personal identification area 16 ₃ corresponding to the index if found. If the verification result is affirmative outputs response data card use permission, if negative to see what time the negative result, reached the mismatch count upper limit value of the security area 16 ₃ corresponding to the index If not, the response data indicating the collation mismatch is output and the process returns to the command data waiting state. If the upper limit value of the number of mismatches is reached, the response data indicating the card use prohibition is output, and the command data cannot be accepted thereafter.

In this way, the upper limit value of the number of password collation mismatches of the IC card can be freely set at the time of initialization of the IC card, so that a kind of IC card can be used to cope with applications having different numbers of mismatches, and once initialized. Since it cannot be changed thereafter, the security of the IC card system can be maintained.

In the above embodiment, the case where the data memory is the EEPROM has been described, but the present invention is not limited to this, and the data memory is, for example, an EP.
The same applies to the case of ROM or RAM.

Further, in the above-described embodiment, the IC card is illustrated as the portable electronic device, but the present invention is not limited to the card-shaped one, and may be a block-shaped or pencil-shaped one, for example. Further, the hardware configuration of the portable electronic device can be variously modified without departing from the spirit of the invention.

[Effects of the Invention] As described in detail above, according to the present invention, the upper limit value of the number of times of collation mismatch corresponding to various applications can be freely set when the portable electronic device is initialized. It is possible to provide a portable electronic device which can be used for various applications with different numbers of collation mismatches and which cannot be changed once initialized and which can also maintain security.

[Brief description of drawings]

FIG. 1 is a diagram for explaining an embodiment of the present invention. FIG. 1 is a diagram showing a format example of a data memory, FIG. 2 is a flow chart explaining an operation of a supervisor, and FIG. 3 is a format example of instruction data. , FIG. 4 is a flow chart for explaining the password collating operation, FIG. 5 is a diagram showing a format example of command data for password collating, and FIG. 6 is a block diagram showing a configuration of an IC chip incorporated in the IC card. FIG. 7 is a diagram showing the functional blocks of the IC card, and FIG. 8 is a block diagram showing the configuration of the card handling device. 1 ... IC card (portable electronic device), 2 ... Card reader / writer, 15 ... Control element (CPU), 16 ...
... data memory (EEPROM), 17 ... program memory, 18 ... contact part.

Claims (5)

[Claims] 1. An individual who has a data memory and a control element which controls to selectively read or write data from or to the data memory according to an externally input instruction, and which is externally input. Means for collating the identification information for authentication with a plurality of identification information for personal authentication stored in the data memory, and for executing the collation processing thereafter when the collation results of this means do not match a predetermined number of times or more. A portable electronic device, wherein the predetermined number of times of information is stored in the data memory for each of the identification information for personal authentication. 2. The predetermined number of times information can be stored only when the portable electronic device is initialized, and cannot be changed after the initialization is completed.
A portable electronic device according to the paragraph. 3. The portable electronic device according to claim 1, wherein the identification information for personal authentication is a personal identification number. 4. The portable electronic device according to claim 1, wherein the data memory is an erasable non-volatile memory. 5. The portable electronic device according to claim 1, wherein the control element is a CPU (Central Processing Unit).