JPH10340229A - Ic card system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a means for holding security high even if the number of terminals increases and management becomes difficult. SOLUTION: The system is provided with an IC card 1 holding more than two memory areas, a first key 4 having authority to read/write a first memory area and a second memory area among the memory areas and a second key 5 having authority to read/write only the second memory area, with a first terminal 2 holding only the first key 4 and with the second terminal 3 holding only the second key 5. Thus, the IC card system of high security can be provided by writing the same data in the first memory area and the second memory area of the IC card 1 in the first terminal 2 and adding or subtracting data of the second memory area in line IC card 1 in the second terminal 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a configuration of an IC card system used for various prepaid cards and financial transactions.

[0002]

2. Description of the Related Art Conventionally, IC cards have extremely high security and are expected to have a very large market for financial use and personal ID cards. However, the higher the level of security, the higher the cost. For the development of IC card systems, it is important to provide a system that can maintain high security even if costs are kept low.

A conventional IC card system will be described below with reference to the drawings. FIG. 6 shows a configuration of a conventional IC card system. In FIG. 6, 30 is an IC card, 3
Terminals 1 and 32 have the same fifth key 33 having the right to access the IC card 30.

[0004] A method of collating keys in the IC card 30 in this configuration will be described with reference to FIGS. 6 and 7. Input from a keyboard (not shown) to the terminal 31 or reading from a memory in the terminal 31 (not shown) allows the
It is delivered to the C card 30. In the IC card 30, the delivered key data 34 is compared with the fifth key 33 in the IC card 30. If the key data 34 matches, the access to the memory in the IC card 30 is permitted. Since the fifth key 33 cannot be directly accessed from the outside and can access the memory only when correct key data 34 is input to the IC card, the system has a high security. As a method of further increasing security, there is a method of collating keys using encryption. In this case, since the key data 34 from the terminal to the IC card 30 is transmitted as different data for each collation, it is difficult to decode the key data 34 even if the data is picked up on the way.

[0005]

However, in the above-mentioned conventional configuration, when the number of terminals increases, it becomes difficult to manage them, and the terminal is stolen or key data is eavesdropped between the keyboard and the terminal, and the key is lost. Once the key is decrypted, there is a risk that the IC card will be forged and the data will be falsified. In addition, if an IC card is provided with an encryption function to prevent this, the cost of the IC card and the system increases, and the processing speed is reduced, so that there is a problem that the application range is limited.

An object of the present invention is to solve the above-mentioned conventional problems, and an object of the present invention is to provide means for maintaining high security even when the number of terminals increases and management becomes difficult.

[0007]

Means for Solving the Problems Two or more memory areas, a first key having a right to read / write a first memory area and a second memory area among the memory areas, and the second memory An IC card holding a second key having an authority to read / write only the area, a first terminal holding only the first key, and a second terminal holding only the second key The first terminal writes the same data to the first memory area and the second memory area of the IC card in the first terminal, and the second memory of the IC card in the second terminal. It adds or subtracts data in the area, thereby having the effect of reading, writing, and comparing data in two memory areas having different access rights according to the access right. Memory area If the data in the first memory area is larger than or equal to the data in the second memory area if the data is read out from the second memory area and the addition processing is performed on the readout data, the system also performs the subtraction. For example, if the data in the first memory area is smaller than or the same as the data in the second memory area, a function can be obtained in which it can be determined that a proper IC card is correctly processed.

According to another aspect of the present invention, there is provided an IC card system comprising two or more memory areas, a third key having a right to read / write only a first memory area among the memory areas, and a fourth key. An IC card holding a fourth key having a right to read / write only the memory area, a third terminal holding the third key and the fourth key, and the fourth key A fourth terminal for storing the same data in the first memory area and the second memory area of the IC card in the third terminal, and the IC card in the fourth terminal. Is added to or subtracted from the data in the second memory area, whereby the same function as that of the above-described IC card system can be obtained.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will be described below in detail with reference to the drawings.

(Embodiment 1) FIG. 1 shows a system configuration of an embodiment of the present invention, in which a first key 4, a second key 5, a first memory area 6 in FIG. The first terminal 2 having the function of reading and writing the first memory area 6 and the second memory area 7 by collating the IC card 1 having the memory area 7 with the first key 4. The second terminal 5 has a function of reading / writing the second memory area 7 in FIG. 2 by collating the second key 5.

In the IC card system according to the present invention, the first terminal 2 first checks the first key 4. By collating the first key 4, the first and second memory areas 6, 7 of the IC card 1 can be accessed. In the case of a new card, the same data, for example, “100” is written in the first and second memory areas 6 and 7. In the case of a reusable card, the data in the first and second memory areas 6, 7 are compared, and if the data in the first memory area 6 is larger or the same, it is determined that the card is used correctly. to decide. If the data in the first memory area 6 is smaller than the data in the second memory area 7, the second terminal 3 or another terminal (not shown) illegally accesses the second memory area 7, Has been performed, and unauthorized use of the IC card 1 can be found. If used correctly, the data in the second memory area 7 is written to the first memory area 6. That is, after passing through the first terminal 2, the same data is written to the first and second memory areas 6 and 7 in the IC card 1 that has been determined to have been properly used until then. The second terminal 3 checks the second key 5. By collating the second key 5, only the second memory area 7 can be accessed. In the second terminal 3, the data in the second memory area 7 is read, and after a predetermined process is performed, the data is subtracted, for example, "95".
Is rewritten. The subtraction process can be automatically performed in the IC card 1 according to a command from the terminal.

[0012] Since the second terminal 3 is installed at a service providing place of the system, there are usually a plurality of the second terminals. Therefore, as the service spreads, the management becomes more difficult as the service spreads, and there is a risk that the second terminal 3 is stolen or the key is eavesdropped from the second terminal 3. However, by using the IC card system of the present invention, even if the key of the second terminal 3 is eavesdropped, the data can be rewritten only in the second memory area 7. Also, the data can be enlarged only up to the data in the first memory area 6. Further, since the data in the first memory area 6 is subtracted each time the data passes through the first terminal 2, the advantage of falsifying the data is reduced. Further, forgery cannot be performed because the first key 4 is not known.

In the above-described IC card system, the case where the subtraction processing is performed has been described. However, it goes without saying that the same processing can be performed when the addition processing is performed.

(Embodiment 2) FIG. 3 shows a system configuration of another embodiment of the present invention, in which a third key 14, a fourth key 15, a first memory area 6 in FIG. Card 11 having a memory area 7 of
4 by comparing the fourth key 15 with the third terminal 12 having the function of reading and writing the first memory area 6 and the second memory area 7. And a fourth terminal 13 having the function of reading / writing the area 7.

In the IC card system of the present invention, first, the third terminal 14 is compared with the fourth key 15 by the third terminal 12. By comparing the two keys, the IC
The first and second memory areas 6 and 7 of the card 11 can be accessed. In the case of a new card, the same data, for example, “100” is written in the first and second memory areas 6 and 7. In the case of a reusable card, the data in the first and second memory areas 6, 7 are compared, and if the data in the first memory area 6 is larger or the same, it is determined that the card is used correctly. to decide. If the data in the first memory area 6 is smaller than the data in the second memory area 7, the fourth terminal 13
Alternatively, another terminal illegally accesses the second memory area 7 and data addition is performed, so that unauthorized use of the IC card 11 can be found. If it is used regularly, the data in the second memory area 7 is written to the first memory area 6. That is, the third terminal 1
2, the IC card 11 which has been determined to have been used properly is stored in the first and second memory areas 6, 7
Is written with the same data.

The fourth terminal 13 checks the fourth key 15. By collating the fourth key 15, only the second memory area 7 can be accessed. In the fourth terminal 13, the data in the second memory area 7 is read, and after a predetermined process is performed, the data is subtracted and rewritten to, for example, "95". The subtraction process is performed by the IC card 1 according to a command from the terminal.
It is also possible to process automatically within 1. Since the fourth terminal 13 is installed at a service providing place of the system, there are usually a plurality of fourth terminals 13. Therefore, as the service spreads, the management becomes more difficult as the service spreads, and there is a risk that the fourth terminal 13 may be stolen or the key may be eavesdropped on by the fourth terminal 13. However, by using the IC card system of the present invention, even if the key of the fourth terminal 13 is eavesdropped, only the second memory area 7 can rewrite data. Also, the data can be enlarged only up to the data in the first memory area 6. Further, since the data in the first memory area 6 is subtracted every time the data passes through the third terminal 12, the advantage of falsifying the data is reduced. Further, forgery of the IC card 11 becomes difficult because the third key 14 is not known.

In the above-described IC card system, the case where the subtraction processing is performed has been described. However, it goes without saying that the same processing can be performed when the addition processing is performed.

(Embodiment 3) FIG. 5 shows a system configuration of another embodiment of the present invention. In FIG.
Indicates the facility that uses the C card, and entry / exit 2 of facility 20
3 and a receiving device 21 acting as the first terminal according to the first or second embodiment, and an embodiment installed in the facility 20 and subtracting data in the second memory area according to the service of the facility 20 And service machines 22a to 22c having the function of the second terminal in 1 or 2.

In the IC card system described in the first embodiment, the entrance 2 of the facility 20 using the IC card 1
3, the IC card 1 holder compares the first key 4 with the first memory area 6 in exchange for cash or the like, and stores, for example, data “100” in the first memory area 6 and the second key. The same data "1" as in the first memory area 6 also exists in the memory area 7 of
00 ". Alternatively, the user purchases the IC card 1 in which the same data corresponding to the purchase price is written in the first and second memory areas 6 and 7.

When the holder of the IC card 1 receives a service in the facility, the second key 5 is collated by the service machine 22a, and the second memory area 7 is accessed.
After reading the data “100”, the subtraction process for the service provided by the facility is performed, and the data is rewritten to, for example, data “95”. The subtraction process can be automatically performed in the IC card 1 by a command from the terminal. At the entrance / exit 23 which is also the exit of the facility 20, the reception machine 21 checks the first key 4 and reads out the data "100" in the first memory area 6 and the data "95" in the second memory area 7. If the data in the first memory area 6 is larger than or equal to the data in the second memory area 7, it is determined that the service devices 22a to 22c have performed normal processing without any injustice. If the size is smaller, the service machines 22a to 22c or another terminal has illegally accessed the second memory area 7, and data has been added, so that unauthorized use of the IC card 1 can be found.

The data "1" in the first memory area 6
If 00 "is larger than the data" 95 "in the second memory area 7, the data in the first memory area 6 is rewritten to the data" 95 "in the second memory area 7.

Next, when using the facility 20, the first key 4 of the IC card 1 is collated by the reception machine 21 at the entrance of the facility 20, and the data in the first memory area 6 and the second memory 4 are compared. It is compared whether the data in the area 7 is the same. In the case of the above example, if the card is the same "95", it is determined that the card has been used correctly, and if the card is not the same, it can be determined that the data has been falsified. In this system, data verification is performed at the reception machine 21 at the entrance / exit 23 of the facility 20 where the IC card 1 is used, and even if the reception machine 21 is sufficiently managed, even if the service machines 22a to 22c are operated, Even if the second key 5 is stolen and the second key 5 is decrypted, the first memory area 6 cannot be accessed, so that the data is not falsified and the security of the system can be enhanced. If the data is tampered inside the facility 20, if the data in the second memory area 7 is the same as or smaller than the data in the first memory area 6, the data cannot be detected. Can not be done,
The effect of tampering can be made extremely small. Also,
Since the first key 4 is not known, the IC card 1 is not forged.

Here, a specific example using an IC card system for subtracting the first and second memory areas of the present invention will be described.

At the golf driving range, an IC card in which the number of practice balls corresponding to the purchase price is written at the time of entry is purchased. For example, if 100 balls have been purchased, the card will have 100 written in the first and second memory areas.
Then, by inserting the IC card into the terminal in the practice range, the golf ball can be hit one ball or several balls at a time.

For example, when leaving the practice field after using 50 balls, the data of 50 written in the second memory area is also written in the first memory area at the terminal at the entrance. Then, when the next visit is made, the game can be started from a state in which there are 50 balls.

As a specific example using the IC card system for adding the second memory area, a case is described in which a member card in which personal information is written is used in a facility such as an amusement park.

After checking the data in the first and second memory areas when entering the facility, the entry fee is added to the second memory area. Then, each time an attraction or the like is used, the number of used facilities or the amount of used facilities is sequentially written in the second memory area by the terminal placed at the entrance of the attraction. Then, when leaving, the data in the first memory area is rewritten with the data in the second memory area,
At this time, it is possible to use a method of withdrawing the difference from an account of a bank or the like without cash based on the personal information of the IC card user.

In the above description, the case where the number of the IC card and the number of the first terminal are one each has been described.

In the above embodiment, the case where the encryption function is not used has been described, but it goes without saying that the security is further improved when used in combination with the encryption function.

In the above embodiment, the card used in the present system has been described as an IC card. However, in the case of a non-contact IC card, there is a high possibility that a key can be eavesdropped without stealing the terminal. Needless to say, higher effects can be obtained.

[0031]

As described above, according to the present invention, the first terminal has the effect of reading, writing, and comparing data in two memory areas having different access rights according to the access rights. If the system reads the data in the memory area and the data in the second memory area and performs an addition process, if the data in the first area is greater than or equal to the data in the second area,
If the data in the first area is smaller than or the same as the data in the second area in a subtraction system, a normal I
A function of determining that the C card has been correctly processed can be obtained.

Further, a high security system can be provided without mounting an encryption function on an IC card. By eliminating the encryption function, the system can be inexpensive, the processing speed can be improved, and the application range can be expanded.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram according to a first embodiment of the present invention.

FIG. 2 is a configuration diagram of an IC card according to the first embodiment of the present invention.

FIG. 3 is a system configuration diagram according to a second embodiment of the present invention.

FIG. 4 is a configuration diagram of an IC card according to a second embodiment of the present invention.

FIG. 5 is an external view of Embodiment 3 of the present invention.

FIG. 6 is a configuration diagram of a conventional IC card system.

FIG. 7 is a flowchart of a conventional key collation.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1, 11 IC card 2 1st terminal 3 2nd terminal 4 1st key 5 2nd key 6 1st memory area 7 2nd memory area 12 3rd terminal 13 4th terminal 14 3rd Key 15 Fourth key 20 IC card utilization facility 21 Reception machine 22a-c Service machine 23 Entrance / exit

Claims (5)

[Claims] 1. A method of reading only two or more memory areas, a first key having a right to read / write a first memory area and a second memory area among the memory areas, and reading only the second memory area. An IC card holding a second key having the authority to write, a first terminal holding only the first key, and a second terminal holding only the second key Writing the same data in the first memory area and the second memory area of the IC card in the first terminal, and writing the data in the second memory area of the IC card in the second terminal; An IC card system characterized by adding or subtracting. 2. A third key having a right to read / write only a first memory region among two or more memory regions and a right and a right to read / write only a fourth memory region. An IC card holding a fourth key, a third terminal holding the third key and the fourth key, and a fourth terminal holding the fourth key, At the third terminal, the same data is written to the first memory area and the second memory area of the IC card, and at the fourth terminal, the data of the second memory area of the IC card is added. Or an IC card system for performing subtraction. 3. After adding or subtracting data in a second memory area of the IC card in the second or fourth terminal, the second or fourth terminal stores the second memory in the first memory area in the first or third terminal. 3. The IC card system according to claim 1, wherein data in a memory area is written. 4. A first terminal is installed at an entrance / exit of a facility or the like, and the data in the first memory area and the data in the second memory area of the IC card are made identical every time a facility user enters / exits. The IC card system according to claim 1 or 2, wherein: 5. The IC according to claim 1, wherein a non-contact IC card is used as the IC card.
C card system.