JPH11306301A - Ic card having security status with time limit - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent an IC card from being illegally used after expiration by a person other than the genuine owner. SOLUTION: With respect to an IC card having a timer function, a security status indicating an authentication valid state is kept only for a prescribed time after expiration of the authentication of a card owner and the term of validity of the card owner authentication is set to a master key file IEF00 and application key files IEF01, IEF02 and IEF03.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card which prevents continuous unauthorized use of an IC card by a person other than a true card holder.

[0002]

2. Description of the Related Art As shown in FIG. 4, a reader / writer 1 transmits a command (instruction) to an IC card 2, and the IC card which receives the command interprets the command and performs processing such as writing / reading. Is executed, and the processing result is returned to the reader / writer 1 as a response.

As shown in FIG. 5, an IC card 2 has a CP
It has a U2a, a RAM 2b, a ROM 2c, and an EEPROM 2d, reads a program stored in the ROM 2c into the CPU 2a, and receives a command transmitted from the reader / writer 1 through the I / O port. It reads and performs necessary processing, writes the result in a predetermined file area of the EEPROM 2d, and outputs a response through the I / O port. Reference numeral 2e denotes a timer module, and the CPU 2
This is a timing device that operates independently of the operation of “a” and notifies the CPU 2a of an interruption when a set time elapses.

FIG. 6 shows an EEPROM 3 composed of an area for an application program and an area for an operating system (OS). When the files of the applications A, B and C are allocated in this order from the start address of the application area. At the same time, an A directory, a B directory, and a C directory are formed from the end to the beginning of the application area in the order of file area allocation. The directory is control information of the file, and as shown in FIG. 7, a file ID for identifying the file, a head address where the file is stored, an area capacity, and attribute information (information of read / write access right (key)). ), Consists of a check code.

In FIG. 6, an OS area following the application area has a pointer indicating the last address of the assigned file area based on the start address and area capacity indicated in the directory, and the last directory in the stack. The data used by the OS, such as a pointer indicating the above, is set. The area between the pointers P and P 'is a memory area that can be further allocated.

As shown in FIG. 8, commands from a reader / writer are classified into a command classification (CLA) and an instruction (IN).
S), the data length Lc and the data part (file ID, area capacity, attribute information) are added to the parameters P1 and P2.
Performed by file command.

[0007]

In a conventional IC card, a key (PIN: Per) input by a card holder from a terminal is used.
sonal Identification Number
er) is compared with the key stored in the IC card, and if they match, the security status is updated. Thereafter, until the IC card is deactivated (the card is removed from the connection device). Was able to access the file at a level where the security attributes were satisfied.

In FIG. 9, a key file IEF00 immediately below the master file represents a card holder key.
P1, AP2, and AP3 indicate application program files in the dedicated file DF, and include IEF01, IE
F01 and IEF03 are keys PIN1 and PIN2 for accessing each application program, respectively.
This is a key file in which PIN3 is stored.

Authentication of the card holder (global security status) is performed when a PIN is input to a key immediately below the MF. When the input PIN matches the key of IEF00, the global status shown in FIG. 10 is updated from 0 to 1. After that, the initial global security status is retained unless the card holder authentication procedure is explicitly executed on the IC card use system side (connection device side) or the IC card side is not deactivated.

[0010] In this state, the authority to access each dedicated file is given and, for example, the application AP
1 to access the key file IEF01
It is checked against IN1, and if this matches, AP1 can be accessed. At this time, the security status in FIG. 10 is updated from 0 to 1. Note that the security status is a right to access the application file, and does not extend to other applications.

As described above, once the authentication procedure is successful, the initial global security status is maintained, so that the authentication procedure of the authenticity of the card is challenged /
Even if the response is exchanged (procedure to check whether the other party is genuine by passing a random number between the connection device and the IC card side), the person operating toward the connection device is not allowed to enter the initial PIN. There was no means to detect if the authorized card holder changed to another unauthorized operator.

[0012] The situation in which the person operating toward the connection device is changed from a genuine card holder to an unauthorized person can be caused by forgetting to remove the IC card at the POS register terminal or by using a SIM ( Subscri
bar Identification Modul
e) It is assumed that the IC card is left on the telephone with the IC card inserted.

The present invention has been made to solve the above problems, and has as its object to prevent continuous unauthorized use of an IC card by a person other than a true card holder.

[0014]

According to the present invention, there is provided an IC card having an arithmetic unit, a main memory, a read-only memory, a non-volatile memory, and a timer function. It is characterized in that it lasts for a predetermined time.
Further, the present invention is characterized in that after the predetermined time has elapsed, the security status is restored or the corresponding application file is closed. Further, the present invention is characterized in that an expiration date of card holder authentication is set in a key file. Further, the present invention is characterized in that an expiration date of card holder authentication is set in a key file for each application file.

[0015]

Embodiments of the present invention will be described below. The IC card of the present invention has the same configuration as that shown in FIG. 5, and has a timer function. This timer function measures the elapsed time using a clock supplied from the outside, and notifies the CPU 2a that the specified expiration time has elapsed. Even if the timer function is realized by dedicated hardware, an interval timer by software is used. It may be realized by.

According to the present invention, the security status (authentication valid state) is provided with an expiration date, and the validity state of the security status after card holder authentication by inputting the PIN of the card holder continues for a certain period of time. Is returned before the card holder authentication, so that it cannot be used continuously thereafter. In the example described below, the expiration date is set for both the global security status and the security status of each application, but the expiration date setting is not limited to this.
For example, it may be set as appropriate only for the global security status, the security status of each application, or the security status of a specific important application.

As shown in FIG. 1, the key file IEF00 immediately below the MF and the key files IEF01, IEF02, IEF03,... This expiration date may be set from the beginning, or may be set when it becomes necessary thereafter. For example, if the key file IEF00 immediately below the MF is specified by the authentication command, the entered PIN is compared with the key value in the file, and if they match, the current global security status is stored, and then the global security status is updated. , Start the timer function. When the application AP1 is used, the expiration date instructed to the timer function is, for example, the sum or difference of the expiration date of the IEF00 (expiration date of the entire card, for example, preset) and the expiration date recorded in the IEF01. It is determined by four arithmetic operations. When the application AP2 is used, it is obtained by four arithmetic operations such as the sum or difference of the expiration dates recorded in each of IEF00 and IEF02. Further, the expiration date of IEF00 may be obtained by performing some kind of calculation. In this way, the expiration date of card holder authentication can be variably set for each application. Of course, each expiration date may be set by any other method.

FIG. 2 is a diagram showing an example of a card holder authentication process flow. An arrow from left to right is a command from the terminal to the IC card, and an arrow from right to left is from the IC card to the terminal. Indicates a response. In A1, the card holder selects an application. In A2, a select file command (file selection command) for selecting AP1 is sent to the IC card. (9000) is returned as a response. Next, in V1, the card holder inputs the PIN to the terminal, and in V2, the authentication command (parameter =
IEF00, IEF01, data part = PIN input by card holder) are sent, and in V3, the IC card side checks the PIN and sets a timer. If the operation is completed normally, a status word (9000) is returned as a response
return it. In this state, the access right to AP1 is obtained,
After P1, mutual commands / responses are performed using a protocol specific to the application. If the security status expiration date has passed during this time, the security status is not satisfied in Pn, so a status word 6982 is returned, and the process returns to the state before card holder authentication. And, in order to continue using it, the above V
1, V2 process must be executed.

FIG. 3 is a diagram showing an example of authentication command processing.
It shows a processing flow when obtaining an access right to AP1. If IEF00 and IEF01 are specified by the authentication command and access to AP1 is attempted, IEF00 is searched first, and if IEF00 is found, the current security status is stored in the memory, and the data portion of the command (input by the card holder) Then, the record value of IEF00 is collated (steps S1 to S4). If the collation matches, the IEF01 is searched next, and when the IEF01 is found, the expiration date T of the security status is calculated (steps S5 to S8). Next, the timer function is called, and the argument T is set in the timer (expiration date setting). Next, the response is edited (step S10),
A response of normal termination is returned (step S11). Since the expiration date is set in this manner, the security status is not satisfied after the expiration date, and the authentication process must be performed again in the case of continuous use. In addition,
In step S5, if the collation of IEF00 fails, the process jumps to step S10 to edit the response content and return an error.

[0020]

As described above, according to the present invention, the true I
Even if the terminal device into which the IC card is inserted after the PIN input authentication by the C card holder reaches the hand of the unauthorized user, the unauthorized use of the IC card by the unauthorized user can be prevented. In a system using an IC card, in particular, in which a card holder must be strictly authenticated, for example, an electronic cash system, the present invention provides
By using the C card, the security status of the IC card itself is periodically returned to the state before the verification by the card holder's PIN, so even if it is passed to the unauthorized user, important cash information is obtained. The security attributes of the file cannot be satisfied, and continuous unauthorized use can be prevented.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a file structure according to the present invention.

FIG. 2 is a diagram showing an example of a card holder authentication process flow.

FIG. 3 is a diagram illustrating an example of an authentication command process.

FIG. 4 is a diagram illustrating communication between a reader / writer and an IC card.

FIG. 5 is a diagram illustrating a configuration of an IC card.

FIG. 6 is a diagram illustrating a configuration of an EEPROM.

FIG. 7 is a diagram illustrating a configuration of a directory.

FIG. 8 is a diagram illustrating the configuration of a command.

FIG. 9 is a diagram showing a file structure.

FIG. 10 is a diagram illustrating a security status.

[Explanation of symbols]

1 ... reader / writer, 2 ... IC card, 2a ... CPU,
2a RAM, 2b ROM, 2d EEPROM, 2
e ... Timer.

 ──────────────────────────────────────────────────の Continuing from the front page (72) Inventor Hiroshi Makino 1-1-1 Matsunami, Yamagata-shi, Yamagata Prefecture Dainippon Yamagata IDS Corporation

Claims (4)

[Claims] 1. An IC card having an arithmetic unit, a main memory, a read-only memory, a nonvolatile memory, and a timer function so that a security status indicating an authentication valid state after the authentication of a card holder is maintained for a predetermined time. An IC card, comprising: 2. An IC card wherein the security status is returned to its original state after a lapse of the predetermined time or a corresponding application file is closed. 3. The IC card according to claim 1, wherein an expiration date of card holder authentication is set in a key file. 4. The IC card according to claim 1, wherein an expiration date of card holder authentication is set in a key file for each application file.