JPH08202845A - Ic card and ic card system - Google Patents

Abstract

PURPOSE: To prevent an IC card from being locked due to misunderstanding even it an IC card possessor authentic by providing an errorneous input identification number storage part and displaying a stored identification number at the time of inputting the identification number. CONSTITUTION: When the identification number is inputted to an information input part 1, it is once stored in an input identification number storage part 2. A coincidence judgment part 4 judges whether the identification number is matched with a registered identification number which is previously stored in a registered identification number storage part 3 or not. When it is judged that they are not matched with each other, an identification number errorneous input counter 6 is increased, and an errorneous input identification number which is once stored in the input identification number storage part 2 is transferred to the errorneous input identification number storage part 7 so as to store it. If the errorneous input identification number is stored when the input of the identification number is received, the errorneous input identification number is displayed on a display part 8.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card and an IC card system using this IC card.

[0002]

2. Description of the Related Art Conventionally, an apparatus of this type has been disclosed in JP-A-61-53.
There is one disclosed in No. 89. This is performed by comparing the registered personal identification number stored in advance in the non-volatile memory with the input personal identification number input from the outside and temporarily stored in the volatile memory by a control unit such as a central processing unit (CPU), and the registered personal identification number is registered. When the personal identification number and the input personal identification number do not match, the personal identification number erroneous input counter is incremented (added) by one, and when they match, the personal identification number erroneous input counter is cleared to 0 and the transaction permission flag is set. Set to 1. Then, when the secret code wrong input counter reaches a predetermined number of times, for example, 3, the IC
Lock the card to prevent trading.

The IC card system checks the transaction permission flag and permits the transaction if it is set to 1, and checks the PIN input error counter to disallow the transaction when the value reaches 3. To Alternatively, there is also a method of checking whether or not the IC card is locked and disallowing the transaction. In other words, a person who has entered the correct PIN is judged to be the holder of the genuine IC card and the transaction is permitted, and the person who entered the wrong PIN multiple times, here three times in a row, is the genuine IC card holder. The IC card is locked not only because the transaction is not permitted because it is determined that the user cannot be the cardholder, but the subsequent transactions are also not permitted. Thus, high security, which is one of the great features of the IC card, is guaranteed.

[0004]

However, in the case of the above-mentioned conventional IC card, even a genuine IC card holder will mistakenly input the wrong personal identification number and lock the IC card. There is a problem that things often occur. For example, in the case of a person who has several cards, each of the multiple cards may have a date of birth, etc.
In many cases, a number that is closely related to you is set as the personal identification number.

In such a case, even though the candidate for the personal identification number is remembered, it is often forgotten which card is associated with which candidate. As a result, even if the correct personal identification number is remembered, the personal identification number of another card is repeatedly input, so that the personal identification number input counter is incremented and the IC card is locked.

[0006]

In order to solve the above-mentioned problems, according to the present invention, whether the personal identification number input from the information input unit is the same as the registered personal identification number stored in the registered personal identification number storage unit. In the IC card which determines whether or not the coincidence determination unit determines that there is a disagreement, the secret code number input counter is incremented, and when the value reaches the upper limit value, the card is disabled. A wrong input personal identification number storage unit for storing a wrong input personal identification number that has been determined to be inconsistent is provided, and when the personal identification number is input from the information input unit, the personal identification number stored in the wrong input personal identification number storage unit is input. This is to be displayed on the display unit.

[0007]

According to the present invention having the above-mentioned configuration, when it is determined that the input personal identification number does not match the registered personal identification number,
This incorrect personal identification number is stored in the incorrect input personal identification number storage unit. Then, when the personal identification number is input next time, the wrong input personal identification number stored in the wrong input personal identification number storage unit is displayed.

[0008]

1 is a functional block diagram of an IC card representing a first embodiment of the present invention. In the figure, 1 is an information input section for receiving an input of a personal identification number, 2 is an input personal identification number storage section for temporarily storing the personal identification number input by the information input section 1, and 3 is a correct personal identification number registered in advance. The registered personal identification number storage unit 4 stores the input personal identification number temporarily stored in the input personal identification number storage unit 2 and the correct registered personal identification number stored in the registered personal identification number storage unit 3. It is a match determination unit that determines whether there is a mismatch.

5 is set to 1 (transaction permitted) when the input identification number is determined to match the registered personal identification number by the coincidence determination unit 4, and 0 (transaction not permitted) when the input identification number does not match.
This is a transaction permission flag that is reset to. Reference numeral 6 denotes a personal identification number erroneous input counter in which the count value is incremented when the coincidence determination unit 4 determines that the input personal identification number and the registered personal identification number do not match and the count value is cleared when they match.

When the coincidence judging section 4 judges that the input personal identification number and the registered personal identification number do not coincide with each other, 7 stores the erroneously inputted input personal identification number. This is an erroneous input secret code storage unit for clearing. 8
Is a display unit for displaying the incorrect input personal identification number stored in the incorrect input personal identification number storage unit 7.

Numeral 9 indicates whether the transaction is permitted based on the state of the transaction permitting flag 5 and the count value of the secret code wrong input counter 6.
It is a transaction control unit that performs determination of disapproval and lock control of the IC card. According to the above configuration, when the personal identification number is input to the information input unit 1, this is temporarily stored in the input personal identification number storage unit 2 and the correct registered personal identification number stored in advance in the registered personal identification number storage unit 3 and the matching determination unit 4 are stored. To determine whether they match or do not match.

When it is determined that the passwords do not match, the erroneous personal identification number input counter 6 is incremented, and the erroneously input personal identification number temporarily stored in the input personal identification number storage unit 2 is transferred to the erroneously input personal identification number storage unit 7 for storage. Then, the transaction permission flag 5 is reset. Here, when the input of the personal identification number is accepted, if the wrong input personal identification number is stored in the wrong input personal identification number storage unit 7, the wrong input personal identification number is displayed on the display unit 8. The incorrect input personal identification number is displayed when the personal identification number input operation is started, and the display can be erased when it is not necessary. If incorrect passwords are continuously input and they are different passwords, both of them may be stored in the incorrect input password storage unit 7 and both may be displayed on the display unit 8. Good.

When the personal identification number input counter 6 reaches a predetermined number of times, for example, 3, the transaction control unit 9 locks the IC card by disabling the information input from the information input unit 1. This makes it impossible to enter the personal identification number after that. If it is determined that the PIN input error counter 6 reaches the upper limit value, the transaction permission flag 5 is set to 1, the PIN input error counter 6 is cleared to zero, and the incorrect input is made. The stored contents of the password number storage unit 7 are cleared. As a result, even if the password has been erroneously input before, it is possible to erroneously input the password up to the upper limit value of the password erroneous input counter 6 from the next time. Until the input is made, nothing is stored in the incorrect input personal identification number storage unit 7.

Here, the fact that the correct personal identification number has been input means that the personal identification number is remembered at least at that point, so that when inputting the subsequent personal identification number, the correct personal identification number is input earlier than the time when the correct personal identification number was remembered. You are likely to remember the correct PIN without displaying the wrong PIN. Further, even if the user has forgotten the correct personal identification number when inputting the personal identification number, the personal identification number erroneous input counter 6 is cleared to zero, so that the personal identification number can be erroneously input until the upper limit value is reached. . Therefore, by clearing the stored contents of the incorrect input personal identification number storage unit 7 when the correct personal identification number is input, the incorrect input personal identification number will not be displayed when it is not so effective, and the user will try to misuse it. Security for those who live will be higher. Furthermore, the time required for operation is shortened due to the reduced information recognition for the genuine owner.

When a transaction is performed using the IC card having the above configuration, the IC card is inserted into a reader / writer (not shown) of the transaction IC card system, and the IC card system causes the transaction permission flag 5 and the secret code erroneous input. The counter 6 is checked. If the transaction permission flag 5 is set, the transaction is permitted, and if the secret code wrong input counter 6 reaches 3, for example, the transaction is not permitted.

Here, the input personal identification number storage unit 2 is a RAM.
And the like. The registered personal identification number storage unit 3, the transaction permission flag 5, the personal identification number erroneous input counter 6 and the erroneous input personal identification number storage unit 7 are electrically rewritable nonvolatile memories such as EEPROM. It is preferable that the control unit (not shown) that is constituted by a memory and that is necessary for constructing the matching determination unit 4, the transaction control unit 9, and the other IC card is constituted by a CPU, but a combination other than that is naturally possible.

Further, a volatile memory such as a RAM or an EEP
Non-volatile memory such as ROM is integrated with CPU 1
Chip microcomputers are also suitable. 2A and 2B are structural views of the IC card of the first embodiment described above. FIG. 2A is a plan view of one side, and FIG. 2B is a plan view of the opposite side. 11 is I
The C card body is provided with a display unit 8 composed of, for example, a liquid crystal display or the like on one side thereof, and an information input unit 1 composed of a numeric keypad or the like.

Reference numeral 12 denotes an IC, such as a transaction control unit 9 and other CPUs for performing various controls, a ROM storing a processing program for determining whether or not a personal identification number matches, a storage unit storing a personal identification number, and the like. Is a microcomputer in which a RAM, an EEPROM, etc. constituting
It is embedded inside the card body. 13 is a power supply unit, which is I
A solar cell, a dry cell, etc. for supplying power to each circuit section of the IC card when the C card is operated alone, and for backing up the stored contents of the RAM when the storage section is composed of the RAM only. Composed of.

Reference numeral 14 denotes an external connection terminal, which is a terminal group used when an IC card is connected to a card reader / writer to exchange information and the like with the IC card system. With such a configuration, if there is a history of inputting a wrong personal identification number before, the wrong input personal identification number can be viewed on the display unit 8 when the personal identification number is input. Therefore, a genuine owner can prevent the same mistake from being repeated, and moreover, it will be a hint to remember which of several types of personal identification number candidates that he / she remembers well is set to this IC card. , The probability that you can enter the correct PIN will be extremely high.

On the other hand, when a person who is not the genuine owner tries to misuse it, he / she originally does not know the candidate for the personal identification number. It is useless information, and you cannot assign the correct PIN. Therefore, it is effective for the authentic owner to remember the forgotten PIN, but it is useless for anyone who wants to misuse it, without compromising security.

In this embodiment, since the IC card is provided with the display section and the information input section, the above processing can be performed by the IC card alone without using the IC card reader / writer. It is very convenient for people. FIG. 3 is a functional block diagram of an IC card system showing a second embodiment of the present invention.

In the figure, 21 is a card reader / writer,
An information input unit 22 is provided in the card reader / writer 21 and receives various kinds of information such as a personal identification number. Reference numeral 23 is a display unit provided in the card reader / writer 21, 24 is a control unit of the card reader / writer 21, and the control unit 24 sends the personal identification number input by the information input unit to the IC card 30 or the IC card 30. The incorrect input personal identification number sent from is displayed on the display unit 23.

Reference numeral 31 is an input / output control unit provided in the IC card 30 to input / output various information between the IC card 30 and the card reader / writer 21. 32 is an IC card 30
The input personal identification number storage unit provided in the information input unit 2
The personal identification number input in 2 and sent via the control unit 24 and the input / output control unit 31 is temporarily stored.

Reference numeral 33 denotes a registered personal identification number storage section provided in the IC card 30 for storing a correct personal identification number registered in advance. Reference numeral 34 denotes a coincidence determination unit provided in the IC card 30. The input personal identification number temporarily stored in the input personal identification number storage unit 32 and the registered personal identification number storage unit 33.
It is determined whether or not the correct registered personal identification number stored in 1 is matched.

Reference numeral 35 denotes a transaction permission flag provided in the IC card 30, which is set to 1 (transaction permission) when the coincidence determination unit 34 determines that the input personal identification number matches the registered personal identification number, and does not match. 0 (transaction not allowed)
Is reset to. Reference numeral 36 denotes a personal identification number erroneous input counter provided in the IC card 30. When the coincidence determination unit 34 determines that the input personal identification number and the registered personal identification number do not match, the count value is incremented. The count value is cleared.

Reference numeral 37 denotes an erroneous input personal identification number storage unit provided in the IC card 30. When the coincidence determining unit 34 determines that the input personal identification number and the registered personal identification number do not match,
The erroneously input input personal identification number is stored, and if they match, the stored contents are cleared. According to the above configuration, when the personal identification number is input to the information input unit 22 of the card reader / writer 21, the personal identification number is sent to the IC card 30 via the control unit 24, and the received personal identification number is input / output on the IC card 30 side. It is received by the control unit 31 and temporarily stored in the input personal identification number storage unit 32. Then, the coincidence determining unit 34 determines whether the correct registered personal identification number stored in advance in the registered personal identification number storage unit 33 matches or does not match.

When it is determined that the passwords do not match, the incorrect PIN input counter 36 is incremented, and the incorrect PIN input temporarily stored in the input PIN storage unit 32 is transferred to the incorrect input PIN storage unit 37 and stored therein. Then, the transaction permission flag 35 is reset. Further, when it is determined that they match before the personal identification number erroneous input counter 36 reaches the upper limit value, the transaction permission flag 35 is set to 1, and the personal identification number erroneous input counter 36 is cleared to zero.
Further, the contents stored in the erroneously input personal identification number storage unit 37 are cleared. As a result, even if the personal identification number has been erroneously input before, it is possible to erroneously input the personal identification number up to the upper limit value of the personal identification number input counter 36 from the next time.
Until the next incorrect input of the personal identification number, nothing is stored in the wrong input personal identification number storage unit 37.

When accepting the input of the personal identification number,
The control unit 24 of the card reader / writer 21 uses the IC card 3
0 input / output control section 31 erroneously input personal identification number storage section 3
If the erroneous input personal identification number is stored, the erroneous input personal identification number is displayed on the display unit 23. As for the timing when the wrong password is displayed,
By setting the time when the operation of inputting the personal identification number is started, the display can be erased when it is not necessary. If the wrong personal identification number is continuously input and they are different personal identification numbers, both of them are erroneously input.
7, and both may be displayed on the display unit 23.

Here, since inputting the correct PIN means remembering the PIN at least at that time, the subsequent inputting of the PIN must be done before the time when the correct PIN was remembered. You are likely to remember the correct PIN without displaying the wrong PIN. Even if the user has forgotten the correct personal identification number when inputting the personal identification number, the incorrect personal identification number input counter 36 is cleared to zero.
You can enter your PIN incorrectly until you reach the upper limit. Therefore, by clearing the stored contents of the incorrect input personal identification number storage unit 37 when the correct personal identification number is input, the incorrect input personal identification number will not be displayed when it is not so effective, and the genuine identification number will not be displayed. For the person, the time required for the operation is shortened because the recognition of the information is reduced, the security for the person who is trying to abuse the information is further enhanced, the access between the IC card and the card reader / writer is reduced, and the processing time is shortened. is there.

When conducting a transaction, the control unit 24 of the card reader / writer 21 controls the state of the transaction permission flag 35 and the count value of the secret code erroneous input counter 36 via the input / output control unit 31 of the IC card 30. Check
If the transaction permission flag 35 is set, the transaction is permitted, and if the personal identification number input counter 36 has reached a predetermined number, for example, 3, the transaction is not permitted.

Here, the input personal identification number storage unit 32 stores the RA
The personal identification number storage unit 3 is composed of a volatile memory such as M.
3, transaction permission flag 35, personal identification number input counter 36
The erroneous input personal identification number storage unit 37 is composed of an electrically rewritable non-volatile memory such as an EEPROM, and the input / output control unit 31, the match determination unit 34, and other I
The control unit (not shown) necessary for constructing the C card is CP
Although it is preferable to construct it with U, combinations other than that are naturally possible.

Further, a volatile memory such as a RAM or an EEP
Non-volatile memory such as ROM is integrated with CPU 1
Chip microcomputers are also suitable. FIG. 4 is a structural diagram of an IC card used in the IC card system of the second embodiment described above. Reference numeral 41 is an IC card body, and 42 is an IC embedded in the IC card body.
Etc., a CPU for performing various controls, a ROM that stores a processing program for determining whether or not a personal identification number matches, a RAM that constitutes a storage unit that stores a personal identification number, and an EEPR
It is a microcomputer in which an OM or the like is built in one chip and is embedded inside the IC card body.

Reference numeral 43 denotes an external connection terminal, which is a terminal group used when the IC card is connected to a card reader / writer to transfer information and the like to and from the IC card system. Has been done. Although the IC 42 and the external connection terminal 43 are arranged in different plane positions in the structure of FIG. 4, the IC 42 is arranged immediately below the external connection terminal 43 to integrally form the IC 42 and the external connection terminal 43. Good.

With such a structure, if
If there is a history of inputting a wrong personal identification number before, when the personal identification number is input, the wrong input personal identification number can be viewed on the display unit 23 of the card reader / writer, so that the authentic holder If so, it is possible to prevent the same mistake from being repeated, and moreover, it will be a hint to remember which of the several types of PIN code candidates that I remember well that I set on this IC card, so I can enter the correct PIN code. The probability is extremely high.

On the other hand, when a person who is not the genuine owner tries to misuse it, he / she originally does not know the candidate for the personal identification number. It is useless information, and you cannot assign the correct PIN. Therefore, it is effective for the authentic owner to remember the forgotten PIN, but it is useless for anyone who wants to misuse it, without compromising security.

Here, in the present embodiment, since it is not necessary to provide the IC card with the information input section and the display section, the IC card can be made low in price. In the two embodiments described above, the content stored in the incorrect input personal identification number storage unit is cleared at the time of matching determination, but the upper limit (for example, 3) to the number of items that can be stored in the incorrect input personal identification number storage unit.
May be provided so that the stored contents are not cleared even at the time of matching determination. In other words, if a match is determined, the incorrect PIN input counter is cleared to zero.
You will be able to enter the wrong PIN again up to a specified number of times (for example, 3 times). However, even if you make a match, you can leave the erroneous PIN to prevent the true owner from entering the time. It becomes possible to refer to the past mistakenly input password when inputting the next password regardless of whether or not the password has passed, and it is possible to reduce the number of mistakenly inputting the password. If there is an erroneous input of the personal identification number exceeding the upper limit of the number of erroneous input personal identification number storage units (for example, three), the oldest erroneous input personal identification number is the fourth erroneous input personal identification number here. It will be rewritten as a number. If the mismatch continues for a predetermined number of times (here, three times), the IC card will be locked, so there is no benefit to those who try to misuse the card even if there is a wrong input personal identification number, and security The height is almost unchanged.

Here, the upper limit value of the personal identification number erroneous input counter and the upper limit value of the number of cases that can be stored in the erroneous personal identification number storage unit have been described as the same, but the latter has a larger upper limit. It doesn't matter. Further, in each of the above-described embodiments, the description has been made by applying it to the IC card having the external connection terminal, but it may be applied to the contactless IC card which does not have the external connection terminal and which inputs and outputs a power source and a signal by electromagnetic induction or the like. Is also possible.

Further, although the case where the upper limit value of the secret code number input counter is 3 has been described, other values may be used.

[0039]

As described above, according to the present invention, when it is determined that the input personal identification number does not match the stored personal identification number, the wrong personal identification number is stored. Since it was decided to provide the input PIN code storage section and display the erroneous PIN code stored in this erroneous PIN code storage section, the next time you enter the PIN code, you may have entered the wrong PIN code in the past. It is possible to refer to the number, prevent the owner of the genuine IC card from accidentally inputting the PIN number set on another card many times, and also remember some PIN numbers. Since it is easy to remember which one of the groups has been set for this IC card, even if you are a genuine IC card owner, you may be mistaken for locking your IC card. It is possible to stop.

[Brief description of drawings]

FIG. 1 is a functional block diagram of an IC card showing a first embodiment of the present invention.

FIG. 2 is a structural diagram of the IC card of the first embodiment.

FIG. 3 is a functional block diagram of an IC card system showing a second embodiment of the present invention.

FIG. 4 is a structural diagram of an IC card used in the IC card system of the second embodiment.

[Explanation of symbols]

 1 information input unit 3 registered personal identification number storage unit 4 coincidence determination unit 6 incorrect personal identification input counter 7 incorrect input personal identification number storage unit 8 display unit

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI technical display location G06K 17/00 T

Claims (5)

[Claims] 1. An information input unit for inputting various kinds of information, a display unit for displaying various kinds of information, a registered personal identification number storage unit in which a correct personal identification number is stored, and whether the personal identification numbers match or not. A coincidence determining unit for determining and a password input erroneous input counter for counting the number of times the password is input by mistake are provided, and the password input from the information input unit and the registration stored in the registered password storing unit. If the coincidence determination unit determines whether or not the same PIN number is reached, and if it is determined that they do not match, the incorrect PIN input counter is incremented, and when the value reaches the upper limit value, the card is used. In the IC card to be disabled, an erroneous input personal identification number storage unit for memorizing an erroneous input personal identification number determined by the coincidence determination unit is provided, and when the personal identification number is input from the information input unit, the wrong input personal identification number is input. An IC card characterized in that a personal identification number stored in a personal identification number storage section is displayed on a display section. 2. The IC card according to claim 1, wherein the coincidence determination unit determines that the personal identification number input from the information input unit matches the registered personal identification number stored in the registered personal identification number storage unit. At the time, the IC card is characterized in that the erroneous input personal identification number stored in the erroneous input personal identification number storage section is cleared. 3. An input / output control unit for exchanging information with the outside, a registered personal identification number storage unit in which a correct personal identification number is stored, and a coincidence determination unit for discriminating whether the personal identification numbers match or not. A personal identification number input counter that counts the number of times the personal identification number is input by mistake is provided, and the personal identification number externally input via the input / output control unit and the registered personal identification number stored in the registered personal identification number storage unit are provided. Is determined by the coincidence determination unit, and when it is determined that they do not coincide, the secret code number input counter is incremented, and when the value reaches the upper limit value, the card is disabled. In the IC card, an erroneous input personal identification number storage unit that stores an erroneous input personal identification number determined by the coincidence determination unit is provided, and the input / output control unit externally issues a command to start inputting the personal identification number. Receiving An IC card, which, when received, outputs the erroneous input personal identification number stored in the erroneous input personal identification number storage unit to the outside. 4. The IC card according to claim 3, wherein the coincidence determination unit determines that the personal identification number input from the outside via the input / output control unit and the registered personal identification number stored in the registered personal identification number storage unit. An IC card characterized by clearing an erroneous input personal identification number stored in the erroneous input personal identification number storage section when it is determined that they match. 5. An input / output control unit for exchanging information with the outside, a registered personal identification number storage unit in which a correct personal identification number is stored, and a coincidence determination unit for determining whether or not the personal identification numbers match. An IC card provided with a personal identification number incorrect input counter for counting the number of times the personal identification number is erroneously input, an information input unit for inputting various information, a display unit for displaying various information, and the IC A card reader / writer provided with a control section for controlling the card, and the secret code input to the information input section and transmitted to the IC card via the control section and the input / output control section. Whether or not the registered personal identification number stored in the registered personal identification number storage unit is the same is determined by the coincidence determination unit, and when it is determined that they are not coincident, the personal identification number erroneous input counter is incremented and the value thereof is incremented. In an IC card system that disables the IC card when the upper limit value is reached, the IC card is provided with an erroneous input personal identification number storage unit that stores an erroneous input personal identification number that the coincidence determination unit determines to be unmatched, When inputting the personal identification number from the information input unit, the control unit reads the wrong input personal identification number stored in the wrong input personal identification number storage unit via the input / output control unit and displays it on the display unit. An IC card system characterized in that