JPH08110975A - Card terminal equipment - Google Patents

Abstract

PURPOSE: To provide a card terminal equipment which is not only excellent in respect of crime prevention but also easily changes data for access permission even in an offline system. CONSTITUTION: A reader/writer 2 which reads/writes data from/in a card having prescribed data and a storage part 3 are provided, and when a user card 6 is inserted to the reader/writer, data for access permission in the storage part 3 is outputted to this user card 6 to permit the user card 6 to access the specific data in the user card 6. In this card type vending machine, when the inserted card is recognized as a card 7 for access change which is for the change of data for access permission, prescribed data for access change permission is outputted to this card 7 for access change to permit the access to data for access change, and this data for access change is rewritten as data for access permision.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card terminal device such as a card type deposit / withdrawal machine or a card type vending machine.

[0002]

2. Description of the Related Art A card-type vending machine, in which a user holds a user card in which various data are written in an internal storage unit, and which uses the user card to purchase merchandise or withdraw cash Card terminal devices such as card type depositing / dispensing machines are known. In this type of card terminal device, when the user card is inserted into the reader / writer of the card terminal device, specific data such as the balance written in the user card is input to the specific data. According to the demand, products are purchased and cash is taken in and out. In this case, in a card system that attaches great importance to the safety of data related to security such as crime prevention, a card system that requires access permission data (hereinafter referred to as an access key) when accessing a user card from a card terminal device is there.

That is, when the user card is inserted into the reader / writer of the card terminal device, the access key is output from the card terminal device side to the user card so that the user card is sent to the user card side. The card terminal device is allowed to access the specific data, and then the card terminal device starts to access the specific data of the user card. As a result, even if the user card is not inserted in the reader / writer of the card terminal device, the specific data written in the user card is inadvertently leaked to the outside or the specific data is written. Is protected from being tampered with by separate data.

Here, in this type of card system, an access key must be registered in advance on the card terminal device side. As a method of registering the access key, there are a method of recording the access key in the ROM of the card terminal device in advance and a method of registering the access key in the storage unit of the card terminal device via a communication line.

[0005]

However, when the access key is recorded in the ROM of the card terminal device in advance, the access key may be leaked to the outside due to the theft of the ROM or decryption in the distribution channel. If this is not desirable and if the card contents in the system have been changed, open the inside of the card terminal device and
There is a problem in that it is very troublesome to replace the parts with those corresponding to the contents of the card.

Further, in the case of registering in the storage unit of the card terminal device via the communication line, even if the card contents in the system are changed, it is easy to register in the storage unit of the card terminal device via the communication line. Although there is an advantage that it can be fixed, there is a problem that it is not possible to realize with an offline system because it costs a line usage fee and requires a communication interface.

The present invention solves these problems and problems, and provides a card terminal device which is excellent in crime prevention and can easily change access permission data even in an offline system. To aim.

[0008]

In order to solve the above problems and problems, the present invention provides means for recognizing that a card inserted in a reader / writer is an access change card for changing access permission data. When the access change card is recognized, by outputting predetermined access change permission data to the access change card, access to the access change data in the access change card is performed. It is provided with a control means for allowing the card side to permit, inputting this access change data from the access change card, and rewriting as the access permission data.

[0009]

With the above structure, the access permission data in the storage section of the card terminal device can be rewritten by simply inserting the access change card into which the access change data has been input in advance into the reader / writer.

[0010]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows a card type vending machine as a card terminal device of the present invention, FIG. 2 shows a flow chart of the main part of its control unit, and FIG. 3 shows information on one area of a storage unit area of an access change card. Indicates the recording format.

As shown in FIG. 1, a card type vending machine 1
Is equipped with a reader / writer 2 having a card insertion port on the customer service side, a storage unit 3 for storing various data, a product dispensing device 4 for dispensing products, and a control unit 5 for controlling these. ing. Cards such as the user card 6 owned by the user and the access change card 7 owned by the manager of the card system or the like can be freely inserted into and removed from the read / write 2.

Next, the control operation of the controller 5 will be described. When the user card 6 is inserted into the reader / writer 2, the controller 5 detects that the card has been inserted at # 1 shown in FIG. In # 2, the card type data read from the card detected to be inserted in # 1 is identified, and it is determined whether or not the inserted card is the user card 6. If it is determined in # 2 that the user card 6 is present, the access key as access permission data from the card type vending machine 1 side to the user card 6 in # 3, for example, access key "A". Is output, the user card 6 is allowed to access specific data for the card type vending machine 1, for example, prepaid remaining amount data, and thereafter, a normal selling operation is executed in # 4. That is, the card type vending machine 1 reads the prepaid remaining amount data of the user card 6 and the like, and if the prepaid remaining amount data is equal to or more than the product purchase amount, instructs the product dispensing device 4 to pay out the product.

On the other hand, when it is determined in # 2 that the inserted card is not the user card 6, it is determined in # 5 whether this card is the access changing card 7. If it is determined that the access changing card 7 is not the user card 6, the process proceeds to step # 6 of a predetermined operation separately.

If it is determined in # 5 that the card is the access change card 7, the access key as access change permission data is sent from the card type vending machine 1 side to the access change card 7 in # 7. For example, access key ”
By outputting "X", the access modification card 7 side is allowed to access the access modification data for the card type vending machine 1, and then, in # 8, the access modification data is used as the access modification data. substitute.
That is, if the access change data of the access change card 7 is "B", the access change data is corrected to "B". More specifically, after reading the area number in the storage area of the access changing card in FIG. 3 and determining the data type (registration or deletion) of the area number in # 9, there are a plurality of access keys. In this case, each value is read and corrected (registered or registered or deleted) to this data in the EEPROM or the like of the storage unit 3 (# 10, # 11).

Therefore, after this, the lead writer 2
When the user card 6 is inserted into the
The card-type vending machine 1 side outputs the access key "B" as the access permission data to permit the access to the user card 6 side and execute the normal sale operation.

As a result, the access permission data can be easily changed even in an offline system. Further, in particular, since the access change card 7 is provided and the access permission data is changed by the access change card 7, if the access change card 7 is strictly managed, the data regarding the security such as the crime prevention surface can be stored. The safety can be surely ensured.

In this embodiment, the case of the access key for the prepaid remaining amount data in the user card 6 has been described, but the present invention is not limited to this, and the same applies to the data of other specific contents. It goes without saying that the present invention can be applied to each of the cases where the data of plural kinds of contents are written in the user card 6. Further, the access key "X" as the access change permission data is pre-recorded in the storage unit 3 of the card type vending machine 1, but like the card type data, it is accessed as the information of the area which does not require the access key. It is also possible to record the data on the changing card 7, read the data by the card type vending machine 1, and output the data. Further, in the above embodiment, the case where the card type is recognized from the card type data has been described, but the card type may be physically provided and recognized. Furthermore, the present invention is not limited to the card type vending machine 1 shown in this embodiment, but can be applied to various card terminal devices such as a card type depositing / dispensing machine.

[0018]

As described above, according to the present invention, a means for recognizing that the card inserted in the reader / writer is an access change card for changing the access permission data, and an access change card are provided. Upon recognition, by outputting predetermined access change permission data to the access change card, the access change card side is permitted to access the access change data in the access change card, By providing the access change data from the access change card and rewriting it as the access permission data, it is safe from the viewpoint of security, and the access permission data is troublesome even in an offline system. Can be easily changed without.

[Brief description of drawings]

FIG. 1 is a block diagram showing a card type vending machine as a card terminal device of the present invention according to an embodiment of the present invention.

FIG. 2 is a flowchart of a main part of a control unit of the card type vending machine.

FIG. 3 is a diagram showing a recording format of information regarding one area of a storage area of an access changing card of the card type vending machine.

[Explanation of symbols] 1 card type vending machine (card terminal device) 2 read / write 3 storage unit 5 control unit 6 user card 7 access change card

Claims (1)

[Claims] 1. A reader / writer for reading / writing data from / into a card having predetermined data therein, and a storage unit for storing various data. A user card used by a card user is inserted into the reader / writer. At this time, by outputting the access permission data in the storage unit to the user card, the user card side is permitted to access the specific data in the user card, and then the A card terminal device for performing an operation by accessing a user card and referring to the specific data read by the reader / writer, wherein a card inserted in the reader / writer stores the access permission data. A means for recognizing that it is an access change card for changing, and this access change card when the access change card is recognized By outputting predetermined access change permission data to the access change card, the access change card in the access change card is permitted to access, and the access change data is transmitted from the access change card. A card terminal device, comprising: a control unit for inputting and rewriting as the access permission data.