JPH0656632B2 - Identification card utilization system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION (Field of Industrial Application) The present invention uses an identification card using an identification card such as an IC card in an automatic teller machine (hereinafter referred to as ATM) used in a financial institution or the like. The present invention relates to a system, particularly an identification card utilizing system for collating identification data such as a personal identification number.

(Prior Art) Conventionally, in systems that require identification and presence / absence of usage qualifications, for example, automatic deposit payment systems operated by financial institutions such as banks, and credit systems operated by retailers, etc. A magnetic card is generally used as the card. However, the magnetic card has a small storage data capacity, and a person skilled in the art can read identification data such as a personal identification number of the holder, which is a safety problem.

Therefore, in recent years, various IC cards in which a central processing unit (hereinafter referred to as a CPU), a memory and the like are embedded in a card base material have been proposed as a substitute for the magnetic card. The IC card has data processing and arithmetic functions because it has a built-in CPU, and has a data storage capacity of, for example, 16K.
More than a bit. CP for reading data from memory
Since it is performed under the control of U, it is quite difficult to read data from the outside, and the CPU can be provided with a security function for preventing forgery and unauthorized reading.

Conventionally, as an identification card utilization system using an identification card such as an IC card of this type, for example, an identification card and an AT
There has been proposed a system that includes a card processing device such as M and performs processing such as deposit / withdrawal by the card processing device after confirming the identity of the user when using an identification card. That is, the card user sets the identification card in which the identification data such as the personal identification number is stored in the built-in memory in the card processing device,
The identification data is input by an input device such as a keyboard provided in the card processing device. Then, in the card processing device, the identification data input by the input device,
It collates with the identification data read from the identification card, and if the two match, processing such as deposit and withdrawal is performed.If the two do not match, the identification data is prompted again, and the number of mismatches is the specified number of times. When it reaches, the identification card is ejected.

(Problems to be Solved by the Invention) However, the identification card utilization system having the above configuration has the following problems.

Since the card user needs to input identification data from a card processing device such as an ATM, the operating time per person becomes long, and the waiting time of other customers becomes long, and the efficiency of use of the card processing device is low. .

Since the card user inputs the identification data at a place where there is a card processing device such as an ATM, there is a risk that the identification data will be known to other customers during the input operation.
Not only is there a problem with confidentiality (security), but there is also a problem with security due to unauthorized use by a person who is not the legitimate holder of the card.

SUMMARY OF THE INVENTION The present invention provides an identification card utilization system that solves the problems that the above-mentioned prior art has, that is, the use efficiency of the card processing device is low and that there are problems in terms of confidentiality and security.

(Means for Solving the Problems) In order to solve the problems, the present invention stores a memory for storing data including identification data, a first data input unit for inputting identification data, and a memory previously stored in the memory. An identification card having a control unit for collating the identification data with the identification data input by the data input unit and storing match / mismatch information in the memory; a second data input unit for inputting the identification data; Data reading means for reading the contents of the memory, and identification data in the memory read by the data reading means and second data input section when there is mismatch information based on the match / mismatch information read by the data reading means. The card processing having a collating means for collating with the identification data input by In the identification card utilization system including a processing device, the control unit of the identification card has a function of monitoring elapse of a predetermined time after obtaining coincidence information and storing the time elapse information in the memory; And a function of counting the number of times of mismatch and storing the mismatch count information in the memory, and the matching means matches the mismatch / mismatch information in the memory read by the data reading means. A function is provided for omitting the collation process when it is determined that the information, the elapsed time information has not passed the predetermined time, and the mismatch count information has not exceeded the predetermined number of times.

(Operation) According to the present invention, since the identification card utilization system is configured as described above, the control unit of the identification card is configured to check whether the identification data match / mismatch, monitor the passage of time from the time of matching, and check the number of mismatches. Is stored in the memory, and the collating means of the card processing device determines whether each information in the memory read through the data reading means satisfies a predetermined condition. When all the conditions are satisfied, the collation process is omitted.
As a result, it is possible to simplify the input operation in the card processing device, prevent the identification data from being stolen at the time of the input operation, and prevent illegal use due to an increase in the verification conditions in the verification means. Therefore, the above problems can be eliminated.

(Example) An identification card utilization system according to an example of the present invention is an IC
An identification card made of a card and a card processing device made of an ATM are provided.

The external view of the identification card is shown in FIG. 2, and the circuit configuration diagram thereof is shown in FIG.

As shown in FIG. 2, the identification card 10 is provided with a card base material 11, and on the surface of the card base material 11, a data input section 12 including a keyboard and a liquid crystal display device (LC).
A display device 13 for displaying data such as D) and a solar cell 14 for supplying power to the power source are provided, and further, an external connection terminal 15 shown in FIG. . The data input unit 12 has a numeric keypad 12a of reference numerals 0 to 9 and a plurality of function keys (function keys) 12b.

As shown in FIG. 3, inside the identification card 10, a CPU 16 which is a control unit for controlling the entire card, a readable / writable memory (hereinafter referred to as RAM) 17 for recording working data and the like, and a program are installed. A read-only memory (hereinafter referred to as ROM) 18 for storing, an electrically rewritable programmable ROM (hereinafter referred to as EE) for storing personal identification data such as a personal identification number and highly confidential data.
PROM) 19, predetermined time (for example, about 3 to 5 minutes)
Is provided with a timer 20 for measuring the
7, a ROM 18, an EEPROM 19, a timer 20 and the like are connected to the CPU 16 together with the data input unit 12, the display device 13, the solar cell 14 and the external connection terminal 15. R
The OM 18 and the EEPROM 19 are non-volatile memories whose stored contents are not erased even when the power supply voltage is not applied.

A card processing device for processing the identification card 10 is shown in its external view in FIG. 4 and its circuit configuration in FIG.

As shown in FIG. 4, the card processing device 30 includes a data input unit 31 including a keyboard and the like, a display device 32 for displaying data such as a CRT, a card control unit 33 that controls insertion and ejection of the identification card 10, Read the contents of the passbook,
A passbook read / print unit 34 for filling in the passbook, a deposit / withdrawal unit 35 for depositing / withdrawing banknotes, and a card control unit 3
A receipt printing unit 36, etc., which is built in the back of the unit 3 for printing the processing contents of deposit and withdrawal on a receipt, is provided. Inside the card processing device 30, as shown in FIG. 5, a CPU 37 for controlling the entire device, a memory 38 including a ROM for storing programs, a RAM for storing data, and the like, and an auxiliary memory such as a magnetic disk. 39 and the like, and the memory 38, the auxiliary memory 39, and the like are provided in the data input unit 31, the display device 32, the card control unit 33, the passbook read / print unit 3.
C together with 4, deposit / withdrawal section 35, receipt printing section 36, etc.
It is connected to the PU 37. Further, the CPU 37 is connected to a host device via a communication line 40. Where C
The PU 37 and the card control unit 33 use the E in the identification card 10.
It has a function as a data reading means for reading the contents of the EPROM 19, and the CPU 37 also has a function as a collating means.

1 (1) and 1 (2) show the operation of the identification card utilizing system according to the present embodiment. FIG. 1 (1) is a flowchart of the identification card 10 side, and FIG. 1 (2) is a card processing device 30. It is a flowchart on the side. FIG. 6 is a diagram showing an example of the flow of information between the identification card 10 and the card processing device 30. The operation of the identification card utilizing system will be described below with reference to these figures.

First, the processing operation in the identification card 10 will be described.

When the card user inputs, for example, a personal identification number as identification data from the data input section 12 on the identification card 10 shown in FIGS. 2 and 3, the CPU in the identification card 10
16 is a numeric keypad 12 according to the program in the ROM 18.
It is determined whether or not there is a key input of the a or the function key 12b (step 100), and if the key input is present, it is determined whether or not the key is the ten key 12a (step 101). In step 101, the CPU 16 invalidates the key input if it is not the ten key 12a, and in the case of the ten key 12a, temporarily stores the numerical value input from the ten key 12a in the RAM 17 and assembles it as a personal identification number (step 102). . CPU
When the numeral 16 indicates that the numerical value input from the ten-key pad 12a has reached a predetermined digit number (step 103), the personal identification number is collated with the personal identification number stored in the EEPROM 19 in advance, and when both are coincident with each other. The matching information to E
The data is stored in the EPROM 19 (step 105), and at the same time, the timer 20 is started (step 106).

If there is no match in step 104, the CPU 16 returns E
1 is added to the counter indicating the number of password disagreements existing in the EPROM 19 (step 107). When the content of the counter is within the predetermined number of times, the process returns to step 100, and when it exceeds the predetermined number of times, the secret code input from the ten keys 12a is prohibited (step 108).

On the other hand, when the elapsed time is measured by the timer 106 started in step 106 and the elapsed time exceeds a predetermined time (for example, about 3 to 5 minutes) (step 10
9), the CPU 16 stores the elapsed time information in the EEPROM 1
9 (step 110).

Next, the processing operation on the card processing device 30 side will be described.

When the card user inserts the identification card 10 into the card control unit 33 of the card processing device 30 shown in FIGS. 4 and 5, after the card control unit 33 sucks the identification card 10 (step 200), the card processing is performed. CPU in device 30
37 sends an information read command signal for requesting the sending of information to the identification card 10 through the external connection terminal 15 of the identification card 10 in FIG. 3 according to the program in the memory 38 (step 20
1). Then, the CPU 16 of the identification card 10 causes the EEPR
As shown in FIG. 6, the matching / mismatching information of the personal identification number, the elapsed time information, and the count information of the mismatching stored in the OM 19 are sequentially transmitted in response to the command signal. Each response signal (response signal) is sequentially received and stored in the memory 38 (steps 202 and 204).

Then, the CPU 37 of the card processing device 30 has a memory 38.
Based on the information stored in the above, whether or not the personal identification numbers match each other (step 204), whether or not a predetermined time has elapsed (step 205), and whether or not the number of mismatching personal identification numbers is within a predetermined number of times. (Step 206), and if any one of the three conditions of password coincidence, within a predetermined time, and within a predetermined number of times is not satisfied, that effect is displayed on the display device 32. Key input section 31
Prompt for the PIN from. When the personal identification number is input from the key input unit 31, the CPU 37 stores the personal identification number in the memory 38 and then the EEPROM of the identification card 10.
It collates with the personal identification number previously stored in 19 (step 2
07). If the collation results do not match a predetermined number of times (for example, three times), invalid processing is performed, and if they match, transaction processing such as deposit / withdrawal is performed (step 208). On the other hand, when all of the three conditions are satisfied in steps 204 to 206, the CPU 37 skips the password collation process of step 207 and immediately proceeds to the transaction process of step 208.

After performing the transaction processing in step 208, the CPU 37 of the card processing device 30 executes the above-mentioned matching / matching as shown in FIG.
An initialization command signal for initializing the mismatch information, the elapsed time information, and the mismatch count information is sent and given to the identification card 10 (step 209). As a result, the CPU 16 in the identification card 10 erases the information of steps 105, 108, 110 stored in the EEPROM 19, and returns a response signal indicating the end of the erase to the card processing device 30 side as shown in FIG. come. Therefore, the CPU 37 of the card processing device 30 ejects the identification card 10 from the card control unit 33 (step 210) and ends the processing operation.

The identification card 10 includes the data input unit 12 and the display device 1.
3, solar cell 14, CPU16, RAM17, ROM1
8 and the EEPROM 19 and the like, the solar cell 14 can be operated by the power supply from the solar cell 14,
By storing various programs in M18, the data input unit 12 is operated to display the transaction history information such as the transaction balance stored in the EEPROM 19 on the display device 13 or the data input unit 12 is operated. It can be used for various purposes, such as causing the CPU 16 to perform four arithmetic operations and displaying the arithmetic result on the display device 13.

The identification card utilization system of this embodiment has the following advantages.

(A) The card user uses the data input unit 1 of the identification card 10.
If the personal identification number is input in advance by operating 2 and the conditions such as the coincidence of the personal identification number are satisfied, the personal identification input operation in the card processing device 30 becomes uneasy. Is shortened, and thereby the waiting time of other customers is shortened, so that the usage efficiency of the card processing device 30 is improved.

(B) By eliminating the need for a personal identification input operation in the card processing device 30, it is not necessary for another person to see the personal identification number, thereby improving confidentiality.

(C) In order to eliminate the need for a password input operation in the card processing device 30, two conditions are required, that is, a predetermined number of times and a certain number of erroneous inputs, in addition to the condition that the personal identification numbers match. Therefore, it is possible to accurately prevent unauthorized use of a person who is not a legitimate holder of the card, thereby significantly improving safety.

The present invention is not limited to the illustrated embodiment, and various modifications can be made. The following are examples of such modifications.

(I) In step 104 of FIG. 1 (1), the personal identification number input by the data input unit 12 and the EEPROM
The identification number stored in advance in 19 is compared to determine whether they match or not. However, as another verification method, for example, the identification number input by the CPU 16 of the identification card 10 according to a predetermined algorithm. May be performed to check whether or not the value becomes a specific value.

(Ii) The data to be input to the identification card 10 in advance is not limited to the personal identification number, but other data such as the amount of bills to be paid may be input to the identification card 10 and the input to the card processing device 30. The operation can be further simplified.

(Iii) In the above embodiment, the personal identification number is made up of a combination of numbers, but of course it may be a letter, a symbol, or the like,
The number of digits may be fixed or variable. Further, the identification data may be personal data other than the personal identification number.

(Iv) In the identification card 10 of FIGS. 2 and 3, the data input unit 12 may be configured by another switch, the display device 13 may be omitted, the solar cell 14 may be configured by another battery, or The connection terminal 15 may be a non-contact type using optics or electromagnetics, the EEPROM 19 may be configured by another non-volatile memory, and the timer 20 may be configured by a counter area in the RAM 17 or the like.

(V) The card processing device 30 shown in FIGS. 4 and 5 is used for ATMs such as banks, point-of-sale systems (POS) such as retail stores, access to a facility, and use of goods. It may be a qualification inspection device or the like that inspects whether or not there is a valid qualification.

(Effect of the Invention) As described in detail above, according to the present invention, in addition to the collation function of identification data, the control unit of the identification card is provided with a time lapse monitoring function and a mismatch count function, and a card processing device. Since the collation means is provided with a collation processing omission function, the input operation to the card processing device is simplified and the use efficiency of the card processing device is improved, and the identification data is stolen during the input operation of the card processing device. Can be prevented and confidentiality is improved. In addition, since three conditions are required for the omission of the verification process, it is possible to accurately prevent the illegal use of the card, thereby significantly improving the security.

[Brief description of drawings]

1 (1) and 1 (2) are diagrams showing the operation of the identification card utilizing system according to the embodiment of the present invention. FIG. 1 (1) is a flow chart of the identification card, and FIG. 2 is a flow chart, FIG. 2 is an external view of the identification card of FIG. 1, FIG. 3 is a circuit configuration diagram of FIG. 2, FIG. 4 is an external view of the card processing device of FIG. 1, and FIG. FIG. 4 is a circuit configuration diagram, and FIG. 6 is a diagram showing a flow of information between the identification card and the card processing device in FIG. 10 ... Identification card, 12 ... Data input section, 13 ...
Display device, 14 ... Solar cell, 15 ... External connection terminal,
16 ... CPU, 17 ... RAM, 18 ... ROM, 1
9 ... EEPROM, 20 ... timer, 30 ... card processing device, 31 ... data input section, 32 ... display device,
33 ... Card control unit, 37 ... CPU, 38 ... Memory.

Claims (1)

[Claims] 1. A memory for storing data including identification data, a first data input section for inputting identification data, and identification data pre-stored in the memory and identification data input by the data input section. An identification card having a control unit for performing matching and storing match / mismatch information in the memory, a second data input unit for inputting identification data, a data reading unit for reading the contents of the memory, and a reading unit for reading the data. On the basis of the match / mismatch information thus obtained, when the mismatch information is obtained, the identification data in the memory read by the data reading means and the identification data input by the second data input unit are collated to obtain the match information. In a system for using an identification card, which comprises a card processing device having a collating means that sometimes omits the collating process, The control unit of the identification card has a function of monitoring the lapse of a predetermined time after obtaining the matching information and storing the time lapse information in the memory, and a count of the number of mismatches when the mismatch information is obtained and the mismatch. A function of storing count information in the memory, and further, the collating means is in a state where the match / mismatch information in the memory read by the data reading means is the same, and the time elapsed information is a predetermined time. An identification card utilizing system, which is provided with a function of omitting a collating process when it is determined that the count value has not passed and the mismatch count information has not exceeded a predetermined number of times.