JPH0850639A - Ic card unauthorized used prevention system - Google Patents

Abstract

PURPOSE:To prevent the unauthorized use of a lost card while saving the handling time of both card user and manager. CONSTITUTION:Information excluding a personal identification number and a valid term among the information read from an IC card is checked S4 and when the disapproval of entering a room is judged by the checked result, an error processing is executed S6. On the other hand, when the checked result is OK, whether or not it is within the valid term is judged S7 and when the valid term is over, standby is performed until the personal identification number is inputted S8. Thereafter, when the personal identification number is inputted, whether or not the input of the personal identification number is correct is judged S9 and the error processing is performed when a wrong personal identification number is inputted. On the other hand, when a correct personal identification number is inputted, the valid term is updated S10 and the electric lock of a door is unlocked S11. When the correct personal identification number is inputted once, the electric lock of the door is unlocked without waiting for the input of the personal identification number no matter how many times the IC card is used within the updated valid term.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card unauthorized use prevention system for preventing unauthorized use of a lost IC card.

[0002]

2. Description of the Related Art In recent years, an entrance management system using an IC card is becoming widespread in order to check a person entering an important confidential room or the like. In this system, as a method to prevent the illegal use of a lost IC card, the following 2
The street method is adopted. First, when entering a room, an IC card is inserted into the reader / writer, and each time, a personal identification number is entered with the ten keys of the reader / writer, and if the personal identification number is correct, the electric lock on the door is unlocked via the door controller. . Another method is that the administrator registers the information of the lost card in the door controller every time the IC card is reported to be lost, and thereafter the use of the lost card is prohibited.

[0003]

However, in the former method, the personal identification number must be entered every time the card user enters the room, and when the number of times of entry and exit of the day is high, the card user The operation of inputting the personal identification number is extremely troublesome for the user. On the other hand, in the latter method, if the number of card users (the number of issued cards) is large, the number of lost cards will also be large, so the notification of card loss will be repeated, and each time,
The administrator has to repeat the work of updating the information of the lost card, which is very troublesome. Moreover, if there is no notification of loss of the card, the information of the lost card cannot be updated, and the lost card may be illegally used in the meantime.

The present invention has been made in consideration of such circumstances, and therefore an object thereof is to prevent the illegal use of a lost card while saving the labor of both the card user and the manager. It is to provide an IC card unauthorized use prevention system.

[0005]

In order to achieve the above object, an IC card unauthorized use prevention system according to the present invention comprises an IC
A system in which a card is inserted into a reader / writer and data is transmitted and received between the two, in which a storage period of the IC card stores a period not requiring input of a password such as a personal identification number as an expiration date, The control unit of the reader / writer determines whether it is within the valid period based on the information read from the storage unit of the IC card, and if it is within the valid period, the next process is performed without waiting for the password input. When the valid period has expired, the password is awaited for input, and when the correct password is entered, the valid period stored in the storage unit of the IC card is updated and the process proceeds to the next process. It is controlled so as to do so (Claim 1).

In this case, it is preferable that the expiration date is set to around 10 hours (claim 2). Further, as the next process, a process of unlocking the electric lock of the door can be considered (claim 3).

[0007]

According to the IC card unauthorized use prevention system of the first aspect, the expiration date which does not require the input of the password such as the personal identification number is stored in the storage portion of the IC card as the expiration date. Therefore, within this expiration date, the card user only has to insert the IC card into the reader / writer and does not need to input the password. That is, when the IC card is inserted into the reader / writer, the control unit of the reader / writer determines whether or not it is within the expiration date based on the information read from the storage unit of the IC card. The process shifts to the next process without waiting for input.

On the other hand, when an IC card whose expiration date has passed is inserted into the reader / writer, the control unit of the reader / writer waits for the password input based on the information from the IC card, and the correct password is input, Move to processing for the first time. At this time, when the correct password is input, the expiration date stored in the storage unit of the IC card is updated, and thereafter, within the updated expiration date, there is no need to input the password again.

In this case, the "expiration date" may be appropriately set in consideration of the usage pattern of the system, such as the frequency of use of the IC card, the time of use, the place of use, the degree of confidentiality required in the room, etc. For example, as in claim 2, the expiration date is 10
If it is set around the time, during the working hours of a day, the password is input only once at the beginning, and thereafter, the password is not required, which is extremely convenient. In this case, even if the IC card is lost, the validity will expire the next day, so it is impossible for another person to use the IC card without knowing the password, and unauthorized use can be prevented. . Therefore, it is not necessary for the administrator to register the lost card information.

Although the present system having such features can be used in various fields such as finance, physical distribution, medical treatment, distribution, etc., for example, as in claim 3, unlocking / locking of an electric lock on a door If applied to an entry management system for managing the above, it is possible to construct an entry management system that makes maximum use of the features of the present invention described above.

[0011]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which the present invention is applied to an entrance management system will be described below with reference to the drawings. First, the hardware configuration of the entire system will be described with reference to FIG. The IC card 11 used in this embodiment is a non-contact type IC card (contactless IC card), and the power supply circuit 12 provided therein has a reader / writer 13 described later.
A power receiving coil 14 is provided to receive power from the electromagnetic coupling.

Inside the IC card 11, a CPU 15 which operates by receiving power supply from the power supply circuit 12 and an EEPROM 16 which is a storage unit are provided. This E
The information stored in the EPROM 16 includes general management data such as a use permission flag, employee type, employee number, number of reissues, effective department number, effective room number, effective door number, and a personal identification number. (Password) and expiration date are also stored. Here, the expiration date is a time period that does not require the input of a personal identification number, and is set to a time of about 10 hours (e.g., 8 hours) corresponding to a working time of a day (including an overtime work). Further, inside the IC card 11, two transmitting plates 17 and two receiving plates 18 for transmitting and receiving data to and from the reader / writer 13 by electrostatic coupling are provided, respectively. The CPU 15 is connected via the communication circuit 19.

On the other hand, the reader / writer 13 is provided outside the door 33 of the room that manages entrance. The reader / writer 13 is provided with a power feeding coil 21 at a position facing the power receiving coil 14 of the inserted IC card 11, and a switching transistor 22 is provided in a power supply path to the power feeding coil 21. This transistor 22
Is turned on / off by a CPU 23 which is a control unit, and the transistor 22 is periodically turned on / off to periodically turn on / off a power supply path to the power feeding coil 21 to generate an alternating current in the power feeding coil 21. Is caused to flow, and a voltage is induced in the power receiving coil 14 of the IC card 11 by the electromagnetic induction.

Further, the reader / writer 13 has a transmitting plate 17 and a receiving plate 18 of the inserted IC card 11.
Two receiving plates 24 and two transmitting plates 25 are provided at positions facing each other, and these transmitting / receiving plates 24, 25 are connected to the CPU 23 via a communication circuit 26. As a result, data is transmitted and received between the transmission / reception plates 17 and 18 of the IC card 11 and the transmission / reception plates 24 and 25 of the reader / writer 13 by electrostatic induction. Further, in this embodiment, the reader / writer 13
Motor 27 for pulling the IC card 11 inserted into the card insertion port (not shown) of the device to a predetermined set position.
Is provided so that the card detection switch 28 outputs a card detection signal to the CPU 23 when the IC card 11 is correctly set at a predetermined setting position. The CPU 23 reads an operation signal input from the numeric keypad 29, controls ON / OFF of the display LED 30, and enters the room OK (unlocks) and displays an error.

The CPU 23 of the reader / writer 13 transmits / receives data to / from the door controller 32 via the communication circuit 31, and controls the unlocking / locking of the electric lock 34 of the door 33 via the door controller 32. . The CPU 23 executes the control program of FIG. 1 stored in the ROM 35 to prevent unauthorized use of the IC card 11. The contents of this control program will be described in detail below.

First, in step S1, it is determined whether or not the IC card 11 is correctly inserted into the reader / writer 13 based on the output signal of the card detection switch 28, and "N"
If it is "o", it waits until the IC card 11 is inserted. After that, when the IC card 11 is inserted, the determination in step S1 becomes “Yes”, the process proceeds to step S2, the switching transistor 22 is driven, and the IC
Power supply to the card 11 is started.

Next, in step S3, information stored in the EEPROM 16 of the IC card 11 (for example, use permission flag, employee type, employee number, reissue number, valid department number, valid room number, valid door). Number, PIN, expiration date, etc.) and check general management data such as usage permission flag, employee type, employee number, effective department number, effective room number, etc., excluding PIN and expiration date. (Step S4). If the result of this check indicates that entry is not possible, the determination in step S5 is "N
Then, the process proceeds to step S6 and error processing is executed. In this error processing, the power of the IC card 11 is turned off, and a predetermined display LED 30 is turned on to display an error. After this, the process proceeds to step S12 and the motor 2
The IC card 11 is forcibly discharged from the reader / writer 13 by rotating 7 in the reverse direction.

On the other hand, if the result of checking the above-mentioned general management data is OK (enterable), the determination in step S5 becomes "Yes", and the process proceeds to step S7 to determine whether it is within the expiration date. To do. In this embodiment, the expiration date corresponds to 1 working hour (including overtime) 1
The time is set to about 0 hour (for example, 8 hours), and updated by the process of step S10 described later.

For example, at the time of leaving the company the next morning after leaving the company, first I
When the C card 11 is inserted into the reader / writer 13,
Usually, since the above-mentioned expiration date of about 10 hours has passed, the determination in step S7 is "No", and step S7
8 and waits until the personal identification number is input using the ten keys 29. Here, if the personal identification number is not input before a certain predetermined time passes, in step S13, error processing (step S6) is forcibly executed. On the other hand, if the personal identification number is input within the predetermined time, the determination in step S8 becomes "Yes", and the process proceeds to step S9 to determine whether the personal identification number is input correctly. If an incorrect personal identification number is input, the determination in step S9 becomes "No", the above-mentioned error processing (step S6) and the IC card 11 ejection processing (step S12) are executed, and the IC
Prevent unauthorized use of the card 11.

On the other hand, if the correct personal identification number is input, the determination in step S9 becomes "Yes", and step S10
Go to to update the expiration date. That is, a new expiration date is set after a lapse of time (for example, 8 hours) around 10 hours from the present time. Next, in step S11, an unlock signal is output to the door controller 32 via the communication circuit 31 to unlock the electric lock 34 of the door 33. After that, the process proceeds to step S12, and the IC card 11 is ejected.

As described above, if the correct personal identification number is input once, the expiration date is updated only for about 10 hours (for example, 8 hours), so that thereafter, it will be within the expiration date during the working hours of the day. Therefore, no matter how many times the IC card 11 is used, the determination in step S7 is always “Yes”, and the process immediately proceeds to step S11 without waiting for the input of the personal identification number.
After unlocking the electric lock 34 of the door 33, the IC card 11 is ejected (step S12).

By the way, the "expiration date" is the IC card 1
The frequency of use 1, the time of use, the place of use, the degree of confidentiality required by the room, etc. may be set as appropriate in consideration of the usage pattern of the system. In other words, if the room requires less confidentiality, the expiration date becomes longer, and if the usage time of the day is shorter, the expiration date will be shortened accordingly, and it will be easy for outsiders to enter. In the room, the expiration date should be shortened to prevent unauthorized use of a lost card.

In this case, for example, as in the above embodiment,
If you set the expiry date to around 10 hours, you only have to enter the PIN number once during the working hours of the day.
It is extremely easy to use because you don't need to enter the password. At this time, even if the IC card 11 is lost, the validity will expire the next day, so it is impossible for another person to use the IC card 11 without knowing the personal identification number, and illegal use is prevented beforehand. be able to. Therefore, there is no need for the administrator to register the lost card information,
The trouble of the administrator can be saved.

The usable range of the present system having such features covers various fields such as finance, physical distribution, medical treatment, and distribution. For example, as described in the above claims, the electric lock 34 of the door 33 is unlocked. / If applied to a room entrance management system that manages locking, it is possible to build a room entrance management system that makes maximum use of the features of the present invention described above, and without the trouble of both the card user and the administrator, the illegal use of a lost card Can be prevented.

Although the personal identification number is entered in the above embodiment, a password including a code other than numbers such as English symbols and kana symbols may be used. In addition, the above-described control is performed by the door controller 32 via the communication circuit 31.
It may be executed by a program on the side (in this case, the door controller 32 also functions as a control unit of the reader / writer 13). Further, in the above embodiment, the non-contact type IC card is used as the IC card 11, but the contact type I card is used.
It goes without saying that a C card may be used.

[0026]

As is apparent from the above description, according to the IC card unauthorized use prevention system of claim 1 of the present invention, the validity period is renewed by entering the correct password once. No matter how many times the IC card is used within the time limit, it is not necessary to enter the password, and the card user's labor can be saved. In addition, even if the IC card is lost, if the password expires, the IC card cannot be used by another person without knowing the password, and unauthorized use can be prevented.
Therefore, the administrator does not need to register the information of the lost card, and the labor of the administrator can be saved.

In this case, if the expiration date is set to about 10 hours as in claim 2, during the working hours of one day, the password is input only once at the beginning, and thereafter the password is not input. It becomes unnecessary and extremely easy to use.

Further, when the present invention is applied to a room entrance management system for managing unlocking / locking of an electric lock on a door, as described in claim 3, a room entrance management system maximally utilizing the above-mentioned features of the present invention. This makes it possible to prevent the illegal use of a lost card while saving the labor of both the card user and the administrator.

[Brief description of drawings]

FIG. 1 is a flowchart of a control program showing an embodiment of the present invention.

FIG. 2 is a block diagram showing the electrical configuration of the entire system.

[Explanation of Codes] 11 ... IC Card, 13 ... Reader / Writer, 16 ... EEP
ROM (storage unit), 23 ... CPU (control unit), 28 ... Card detection switch, 32 ... Door controller, 33 ... Door, 34 ... Electric lock.

Claims (3)

[Claims] 1. A system in which an IC card is inserted into a reader / writer and data is transmitted and received between the reader and writer, wherein a storage unit of the IC card has a time limit that does not require input of a password such as a personal identification number. The expiration date is stored, and the control unit of the reader / writer determines whether or not it is within the expiration date based on the information read from the storage unit of the IC card. The process proceeds to the next process without waiting, and if the expiration date has passed, the password is awaited for input, and when the correct password is entered, the expiration date stored in the storage unit of the IC card is updated. An IC card unauthorized use prevention system characterized by controlling so as to shift to the next processing together with the above. 2. The IC card unauthorized use prevention system according to claim 1, wherein the expiration date is set to about 10 hours. 3. The I according to claim 1, wherein the subsequent process is a process of unlocking an electric lock of a door.
C card unauthorized use prevention system.