JPH113455A - Issuing and collating method for electronic money card and its system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make it difficult to forge or alter a card through recording medium. SOLUTION: This method generates time data T0 that is a random number and a specific number N0 of a card 40 when a card is issued and records them on a recorder 21 outside the card 40, wherein the number N0 is a cipher data C1 with the data T0 as a key, and the data S1 and the number N0 are recorded on the card 40 and issued. At the time of using a card, the data T0 is retrieved from the recorder 21 based on the number N0 which is read from the card 40, the ciphered data is decoded by decoding the data S1 which is separately read from the card 40 with the data T0 as a key and the card is allowed to be used through collation coincidence. When the card 40 is returned, a cipher data S2 which is enciphered by a time data T1 that newly occurs is generated and recorded on the card 40 and the recorder 21. When an enciphered data is a card utilization number, alteration becomes even more difficult.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic money card issuing and collating system for issuing a card as a recording medium and collating the card when the payment is settled with the card. Simplify recording media,
The present invention also relates to an electronic money card issuance / collation method that can prevent forgery or unauthorized use of a card.

[0002]

2. Description of the Related Art Conventionally, in this type of electronic money card issuing and collating system, in order to prevent forgery or tampering of the card at the time of card authentication, an ID (personal identification) card having a face photograph attached or printed on the surface thereof. And a card having a built-in arithmetic function by an IC (integrated circuit) are used.

A technique for photographing a front face is described, for example, in Japanese Patent Application Laid-Open No. 8-305816.

In this configuration, characteristic image information of a face photograph on a card is recorded on the card with a small amount of information by scramble compression. It quickly determines whether the photo above has been forged or tampered with.

[0005] On the other hand, a technology for a card with a built-in IC is described in, for example, JP-A-8-287202.

[0006] In this method, the encryption key incorporated in both the IC card and the service providing center increases the security of the card authentication even if it is stolen by a person who forges the authentication. And the random number received from the center by the card based on the encryption function, and sends the calculation result from the card to the center, and compares the calculation result on the card side with the calculation result calculated by the center in the center. In this case, the bit length of the random number sent from the center to the card can be controlled at random.

[0007]

Among the conventional electronic money card issuance and collation methods described above, the method using the face photograph image information described in the above-mentioned publication discloses the image information on the card and the compression of the image information. Since the data is matched,
If the compression method of image data is stolen, the compressed data obtained from the image information of the face photo that has been tampered with the stolen compression method can be recorded on the card, so there is a problem that the security is questionable There is.

That is, in the method of authenticating a card based on the consistency of data on the same card, forgery of the card is relatively easy when the encryption means as the data conversion means is found.

In the method using an IC card described in the above-mentioned publication, it is difficult to tamper with the card because it has complicated functions. However, the cost of the card itself is high, and a large amount of the card is required, for example, a prepaid card. However, there is a problem that it is not suitable for practical use.

An object of the present invention is to solve the above problems,
An object of the present invention is to provide an electronic money card issuance / collation method that can simplify a recording medium used for a card and prevent forgery or unauthorized use of the card.

[0011]

According to a first electronic money card issuance / collation method according to the present invention, a card as a recording medium is issued, and when the payment is settled with the card, the electronic money card is verified. In the card issuance / collation method, the card issuance / collation system includes a card issuance system, a record database, and a card collation system, wherein the card is a writable and readable recording medium. A specific number for uniquely identifying a card is generated, and a random number is generated at the time of issuing a random number.At the same time, at least one of the specific number generated at the time of issuing the random number as key data and a specific number set separately is generated. Create the issue-time encrypted data by encrypting the encrypted data at the time of issue, the encrypted data at the time of issue and the specific number Issued recorded on the card, corresponding to the specific number generated in the other records sent to the record database as a random number to the original issue random number, and for utilizing the card, the card verification system,
A specific number and encrypted data recorded from the card are read out, a random number corresponding to the specific number is indexed from the recording database based on the specific number, and the encrypted data read from the card is indexed. The use of the card is permitted when the decoded code for collation obtained by decoding with the random number is collated with the specific number and matched.

According to this method, the card may simply be a writable and readable recording medium. In addition, even if the encryption method in each system is fixed, the encryption key data differs for each card, and the record database that records and stores the encryption key data must be separated from either the card issuing place or the card verification place. Therefore, it is difficult to tamper with a card that can be authenticated by using only data that exists only in the card, the card issuing system, or the card verification system.

[0013] Also, in the first aspect of the present invention, the card collation system generates a random number at the time of collation of a random number, and when the use of the card is permitted, uses the random number at the time of collation as an encryption key. Create collation data at the time of collation by encrypting a specific number, on the one hand overwrite this collation data at the time of encryption data recorded on the card, and on the other hand, record the collation random number generated The random number sent to the database is overwritten and recorded.

With this configuration, the recording database and the encryption key data of the card are changed every time the card is used, and since the common encryption key data is not used, even if the encryption key data is stolen, This makes it difficult to decipher the data, and the security by falsification becomes higher.

A second electronic money card issuance / verification method according to the present invention includes a card issuance system, a record database, and a card verification system, wherein the card is a writable and readable recording medium and issues the card. In this case, the card issuing system generates a specific number that uniquely identifies the card to be issued and generates a random number when issuing a random number, and sends the specific number and the random number when issued to the recording database. Next, the recording database, on the one hand, records and stores the received specific number and the random number at the time of issuance as a random number corresponding to this specific number, and, on the other hand, at the time of issuance where the received specific number is encrypted using the random number at the time of issuance as an encryption key. Creates the encrypted data and sends it to the card issuing system, and then the card issuing system Encrypted data is recorded and issued on the card together with the specific number as encrypted data, and when using the card, the card verification system reads the specific number and the encrypted data recorded from the card. To the record database, the record database then indexes a random number for the particular number from the record database based on the particular number,
Based on the specific number and the random number, a specific number is encrypted with a random number to create encrypted data for verification, and the encrypted data for verification is compared with the encryption code read from the card, and a match is found with the card verification system. To
Next, the card matching system permits the use of the card when a matching match is received.

According to this configuration, despite the fact that the decryption means is unnecessary from the first invention, it has the same operation as the first invention, and the encryption means is concentrated in the recording database. Therefore, a plurality of card matching systems can be simplified.

Also in the second invention, the card collation system generates a random number at the time of collation of a random number and sends it to the recording database, and when the use of the card is permitted, the recording database is The collation random data is created by encrypting the specific number using the collation random number as an encryption key. On the other hand, the recorded random number is overwritten and recorded on the collation random number, and the other is sent to the card collation system. By overwriting and recording the encrypted data upon collation on the encrypted data recorded on the card,
It has the same function as the first invention.

Further, since a clock which is normally provided by using the random number as time data can be used, a special random number generator can be eliminated. In addition, by checking the consistency in consideration of the usage record data of the card, it is possible to more easily find unauthorized use due to falsification of the contents of the card.

[0019]

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a functional block diagram showing an embodiment of the present invention. In the electronic money card issuance collation method shown in FIG. 1, a card issuance system 10 for newly issuing a card using a card medium as a card, a record database 20 for recording and storing various data relating to the card, and a card Record database 2
It is assumed that a card collation system 30 for collating based on the data of 0 and determining whether or not to use the card is provided, and a general writable and readable recording medium is used for the card 40.

The card issuing system 10 includes a specific number generating means 11, a time generating means 12, an encrypting means 13, and a card record issuing means 14. The recording database 20 includes a recording device 21. Also,
The card verification system 30 includes a card reading / writing unit 31,
It is provided with a decrypting means 32, a collating means 33, a time generating means 34, and an encrypting means 35.

The specific number generating means 11 of the card issuing system 10 generates a unique number for each of a large number of cards in the card issuing and collating system as a specific number N0 when the card is issued. Time generating means 12
Is used as random number generating means because it can recognize the time of card issuance and sequentially generates different numbers over 24 hours. Time data T0 generated at the time of card issuance is used as an encryption key in the encryption means 13. It shall be.

The encrypting means 13 includes a fixed specific encryption key and the time data T generated by the time generating means 12.
The encrypted data S0, S0 obtained by encrypting the specific number N0 generated by the specific number
1 are generated, and the encrypted data S0 and S1 are sent to the card record issuing means 14.

When the card record issuing unit 14 receives a new registration permission from the record database 20, the card record issuing unit 14
After recording the encrypted data S0 and S1 received from the storage area of the card 40, the data is issued by ejection.

The recording device 21 of the recording database 20
It has a storage area for recording a specific number N and time data T applied to the specific number N. First, the specific number N0 generated by the specific number generating means 11 in the card issuing system 10 and the time generating means 12 Is recorded as the recording device 21 (A). When the card 40 is collated by the card collating system 30, the time data T1 generated by the time generating means 34 is overwritten as shown in the recording device 21 (B).

When the card 40 to be used is set, the card reading / writing means 31 of the card collating system 30
Each of the encrypted data S0 and S1 recorded on the card 40 is read and sent to the decryption means 32. On the other hand, the card reading / writing means 31 receives the encrypted data S0, S
2 is overwritten on the card 40 and the card 40 is ejected and returned to the card user.

On the other hand, the decryption means 32 decrypts the encrypted data S0 with the specific encryption key to generate a specific number N0, and based on the generated specific number N0, the recording device 21 (A) of the storage database 20. To retrieve and read and receive the time data T0. On the other hand, the decryption means 32 uses the time data T0 received from the recording device 21 as a decryption key, decrypts the encrypted data S1 received from the card read / write means 31, generates a decryption code Nd, and send. The decoding code Nd is the specific number N0 if the card 40 can be normally authenticated.

On the other hand, the collating means 33 comprises the decrypting means 32
, And on the other hand, receives the specific number N0 decrypted from the encrypted data S0 by the decryption means 32 and collates the two, and outputs the matched specific number N0 to the recording database 20 and the encryption means 35, respectively. It shall be. It is also assumed that the matching match is notified to the card reading / writing means 31 as use permission.

The time generating means 34 recognizes the card collation time and also serves as a random number generating means, and sequentially generates a number serving as an encryption key over 24 hours. Therefore, the time generating means 34 generates the time data T generated at the time of card verification.
Let 1 be an encryption key and send it to the recording device 21.

On the other hand, the encrypting means 35
, And the time data T1 generated by the time generating means 34 on the other hand, and the same as the card issuing system 10, on the one hand, encrypting the specific number N0 with a fixed specific encryption key. Data S0,
On the other hand, it is assumed that the time data T1 generated by the time generating means 32 is used as an encryption key to generate encrypted data S2 obtained by encrypting the specific number N0, and is transmitted to the card record issuing means 14.

The time data T1 sent from the time generating means 34 to the recording device 21 is overwritten by the time data T0 in the recording device 21 (A).
The time data T is updated as shown in FIG.

Next, the card issuing procedure (A) and the card collating procedure (B) will be described with reference to FIG. 1 and FIG.

In the card issuing system 10, when a card issuance request occurs, first, the specific number generating means 11 generates the specific number N0, and the time generating means 12 generates time data T0 (step 101). Specific number N0
And the time data T0 are sent to the encryption means 13 and the recording device 21, respectively.

The encrypting means 13 encrypts the specific number N0 with a specific encryption key to create encrypted data S0, and encrypts the time data T0 as an encryption key to create encrypted data S1 (procedure). 102), encrypted data S0
, S1 to the card record issuing means 14. On the other hand, the recording device 21 newly registers the time data T0 in the area of the time data T corresponding to the specific number N0 (step 103).

At the time of new registration in step 103, the specific number N0
If the new registration is not possible because the time data T- has already been registered in the recording device 21 (NO in step 104), the procedure is restarted from step 101.

If the procedure 104 is "YES" and new registration is made, the card record issuing means receives new registration permission from the recording database 20 and records the encrypted data S0 and S1 received from the encryption means 13 on the new card. Then, the card 40 is issued (step 105), and the card issuing procedure ends.

Next, in the card collation system 30,
When the card 40 is inserted into the card reading / writing means 31 for use, the card reading / writing means 31
The encrypted data S0 and S1 are read from (step 111).
It is sent to the decoding means 32.

The decrypting means 32 reproduces the specific number N0 from the received encrypted data S0 using the specific encryption key, sends the specific number N0 to the recording database 20, and reads the time data from the specific number N0 area of the recording device 21. Index T0 (step 112).

Next, the decrypting means 32 stores the encrypted data S1 received from the card reading / writing means 31 in the recording device 21.
The specific number Nd is reproduced by decrypting the time data T0 indexed from the above by using the time data T0 as an encryption key (step 113).

The collating means 33 collates the specific number N0 reproduced from the encrypted data S0 received from the decrypting means 32 with the specific number Nd decrypted from the encrypted data S1 (step 114). Next, when the collation is matched (YES in step 115), the collation unit 33 sends the use permission of the inserted card 40 to the card reading / writing unit 31 (step 116).
At the same time, the matching specific number N0 is sent to the encryption means 35.

When the card 40 is used in accordance with the use permission and the use is completed, for example, by settlement, the encryption means 35 receives new time data T1 generated by the time generation means 34, The specific number N which has already been received from the matching means 33 using T1 as an encryption key
0 is encrypted to create new encrypted data S2 (step 117), and the specific number N0 is sent to the card reading / writing means 31 together with the encrypted data S0 encrypted with the specific encryption key.

On the other hand, when the use of the card is completed, the new time data T1 generated by the time generating means 34 is generated.
The recording database 20 receives the data and the specific number N0 generated by the collating means 33, and overwrites and updates the time data T1 in the specific number N0 area of the recording device 21 (step 11).
8).

The card reading / writing means 31 having received the encrypted data S0 and S2 overwrites the encrypted data S1 with the encrypted data S2 and ejects the updated card 40 (step 119). Then, the card 40 is returned to the card user.

If the above procedure 115 is "NO" and the collation does not match, the collation means 33 notifies the card 40 inserted into the card reading / writing means 31 that the card 40 is defective and notifies the user that the use is not permitted (procedure 116).

In the above description, the specific number generating means is simply used. However, specifically, if there are a plurality of card issuing systems so that a unique number can be assigned to each card in the entire system, the card issuing system and the As an appropriate means, it is possible to set an identifier capable of identifying the device number and combine this identifier with a serial number generated in each of the card issuing systems to obtain a specific number. In addition, when the time generating means is used to specify time, it is appropriate as a changing encryption key, but if it is used only as a changing encryption key, it is generated by another random number generating device. A random number may be used.

In the above description, the specific number is converted into encrypted data using a fixed encryption key and recorded on the card. However, if there is no decryption means in the card verification system, encryption may not be possible. The specific number may be recorded without encryption as it is.

In the above description, the specific number is encrypted by using a variable time or random number as an encryption key each time to obtain the difficulty of tampering, which is the main object of the present invention. By encrypting the data, for example, the usage count data obtained by quantifying the usage results, instead of the specific number, the encrypted data can be made more complicated, so that falsification can be made more difficult.

That is, various data other than the specific number given to the card are encrypted with encryption key data each having a different random number, and the encrypted data is recorded on the card and encrypted. By recording various data in the specific number areas of the recording database, forgery and falsification of the card is made more difficult.

In the above description, the card is inserted and ejected. However, the structure for fixing the card for writing and reading on the recording medium of the card is free, and the above description does not limit the present invention. .

[0050]

【Example】

[First Embodiment] Next, a first embodiment based on the embodiment of FIG. 1 will be specifically described with reference to FIGS. As shown, the electronic money card issuance / verification system includes a plurality of card issuance systems 110, a single record database 120, and a plurality of card verification systems 130, and is interconnected between remote locations via a data communication network. It is assumed that a card 140 made of a writable recording medium is used.

First, the card issuing system 110 according to the first embodiment will be described with reference to FIG.

The card issuing system 110 for issuing the card 140 includes a specific number generating device 111 and a time generating device 1.
12, use result initial value generation device 113, encryption device 11
4. It is assumed that a card record issuing device 115 and a data communication device 116 are provided. Record database 12
0 includes a recording device 121, a data search device 122, and a data communication device 123.

The specific number generating device 111 sequentially generates a serial number N- for the card 140 issued at the time of issuing the card, and assigns a unique card number to the card 140 in the system. Shall be output. The serial number N- and the issuing device identifier M0 are sent to the encrypting device 114 and the data communication device 116 when issuing the card.

The time generation device 112 generates the current time T0 as time data T0, and sends it to the encryption device 114 and the data communication device 116 when issuing a card. The usage result initial value generator 113 is a card 1
40 generates initial value data V0 indicating that it is unused and has no use record, and sends it to the encryption device 114 and the data communication device 116 when issuing a card.

The encrypting device 114 calculates the serial number N
0 and a specific number based on the issuing device identifier M0, the time data T0, and the usage actual value initial value data V0.

The encryption device 114 has an encryption key fixed to the system, and encrypts the serial number N0 and the issuing device identifier M0 received from the specific number generation device 111 with the unique encryption key to obtain encrypted data S0. Using the current time data T0 received from the time generation device 112 as an encryption key and encrypting the usage result initial value data V0 received from the usage result initial value generation device 113 as encrypted data S1;
It is assumed that the two encrypted data S0 and S1 thus encrypted are sent to the card recording / issuing device 115.

When receiving new registration permission from the recording database 120, the card recording and issuing device 115 records the two encrypted data S0 and S1 received from the encrypting device 114 in the recording area of the card 140 that has been set. Is issued by ejecting the recorded card 140.

The data communication device 116 is a communication device for exchanging data between the card issuing system 110 and the recording database 120 via a data communication network.

The record database 120 stores the serial number N generated by the card issuing system 110 as described above.
0 and a specific number based on the issuing device identifier M0, the time data T0, and the usage actual value initial value data V0.

The recording device 121 stores the storage area for recording the serial number N, the issuing device identifier M, the time data T, and the usage count data V as the usage result data in correspondence with the specific number based on the serial number N and the issuing device identifier M. When issuing a card, the card issuance system 11
Record the data received from 0.

On the other hand, when receiving a recording request for issuance registration from the card issuing system 110, the data search device 122 notifies the card issuing system 110 that new registration cannot be performed if the recording has already been performed in the relevant area. On the other hand, the data search device 122 receives a specific number based on the serial number N and the issuing device identifier M from a card verification system 130 (not shown), searches an area corresponding to the specific number, and sends the result to the card verification system 130.

The data communication device 123 is a communication device for exchanging data between the card issuing system 110 and the recording database 120 via a data communication network, and is not shown at the time of card collation. Data exchange with the card collation system 130 is also performed.

Next, an operation procedure at the time of issuing a card will be described.

The serial number N 0, issuing device identifier M 0, time data T 0, and use result initial value data V 0 generated by the card issuing system 110 are stored in the data communication device 11.
6 and 123 to the data search device 122. The data search device 122 stores the time data T in the area corresponding to the serial number N0 and the issuing device identifier M0 in the recording device 121.
0 and the usage count data V0 are registered, and a new registration permission is returned to the card issuing system 110. At this time, if the registration has already been made, a new registration rejection is sent to the card issuing system 110.

In the card issuing system 110, when new registration is permitted from the recording database 120, the card recording / issuing device 115 sends the encrypted data S to the card 140.
The card 140 is issued by recording and ejecting 3, S4.

Next, the card collation system 130 of the first embodiment will be described with reference to FIG.

A card collating system 130 for collating a card at the time of use includes a card reading / writing device 131, a decrypting device 132, a collating device 133, a time generating device 134, a use record updating device 135, an encrypting device 136, A data communication device 137 is provided.

When the card 140 to be used is set, the card reading / writing device 131 reads the encrypted data S3 and S4 recorded on the card 140, sends them to the decryption device 132, and verifies the use permission. When received from the device, the encrypted data S3 received from the encryption device 136,
The card 140 is returned to the card user by overwriting and discharging S5 on the card 140.

The decryption device 132, on the other hand, decrypts the encrypted data S3 with the specific encryption key to obtain the specific number N0,
M0 is generated and sent to the data communication device 137. Based on the generated specific numbers N0 and M0, the storage database 12 is generated.
The time data T0 and the number-of-uses data V0 are retrieved from the recording device 121 of 0 and read and received.

On the other hand, the decryption device 132 decrypts the encrypted data S4 received from the card read / write device 131 using the time data T0 received from the recording device 121 as a decryption key to generate a decrypted code Vd. Send to collation device 133. The decoded code Vd is the use count data V0 if the card 140 can be authenticated normally.

On the other hand, the verification device 133
Code Vd received from the
The usage count data V0 received from 0 is compared with the two, and when they match, a use permission is sent to the card reading / writing device 131, and the specific numbers N0 and M0 are recorded in the recording database 120 via the encryption device 136 and the data communication device 137. Output to each of

The time generator 134 recognizes the card collation time and also serves as a random number generator, and sequentially generates numbers over 24 hours. The time generating device 134 sends the time data T1 generated at the time of card collation to the encrypting device 135 as an encryption key, and sends the data communication device 137.
To the recording database 120 to update the recording data.

The use result updating device 135 receives the collated use number data V0 at the time of card use, generates use number data V1 obtained by adding and updating one time, sends it to the encryption device 135, and transmits the data communication device 137 to the encryption device 135. The record is sent to the record database 120 to update the record.

On the other hand, the encrypting device 136
3 and the time data T1 generated by the time generator 134 and the updated usage count data V1 from the usage record updating device 135. On the other hand, similarly to the card issuing system 10, one is fixed. The encrypted data S3 obtained by encrypting the specific numbers N0 and M0 with the specified specific encryption key, and the encrypted data S5 obtained by encrypting the usage count data V1 using the time data T1 generated by the time generator 134 as the encryption key. Are generated and sent to the card reading / writing device 131.

The data communication device 137 is a communication device for exchanging data between the inside of the card collation system 130 and the recording database 120 via a data communication network.

The time data T 1 sent from the time generating device 134 and the usage count data V 1 sent from the use record updating device 135 are sent to the data search device 122 via the data communication devices 137 and 123, and By overwriting the time data T0 and the usage count data V0, the records of the time data T0 and the usage count data V0 are updated to the time data T1 and the usage count data V1, respectively.

Next, an operation procedure at the time of card verification will be described.

The card 140 is stored in the card reader / writer 131.
When inserting and using a card reader / writer,
The encrypted data S3, S4 from the card 140 in which
Is read and sent to the decryption device 132.

The decryption device 132 reproduces the specific numbers N0 and M0 from the received encrypted data S3 using the specific encryption key, and stores the specific numbers N0 and M0 in the recording database 12.
The time data T0 and the number-of-times data V0 are indexed from the area corresponding to the specific numbers N0 and M0 of the recording device 121.

Next, the decryption device 132 reproduces the usage frequency data Vd by decrypting the encrypted data S4 received from the card reading / writing device 131 using the time data T0 indexed from the recording device 121 using the encryption key key. Then, the identification numbers N0 and M0, the time data T0, and the usage count data V0 previously indexed from the recording device 121 are sent to the collation device 133 together with the usage count data Vd.

The collation device 133 decrypts the data received from the decryption device 132, that is, the usage frequency data V0 and the encrypted data S4 indexed from the recording device 121 by the specific numbers N0 and M0 reproduced from the encrypted data S3. Is compared with the specified number Nd. Next, the collation device 13
In the case of collation matching, 3 sends the use permission of the inserted card 140 to the card reading / writing device 131 and sends the specific numbers N0 and M0 to the encryption means 35.

When the card 140 is used in accordance with the use permission and the use is completed by, for example, settlement, the encryption device 136, on the other hand, updates the updated time data T1.
And the number-of-times data V1, the time data T1
Is used as an encryption key to encrypt the usage count data V1, create new encrypted data S5, and send the specific numbers N0 and M0 to the card reader / writer 131 together with the encrypted data S3 encrypted with the specific encryption key. .

When the use of the card is completed, on the other hand, the recording database 120 stores the new time data T1.
Then, the time data T1 and the usage count data V1 are overwritten and updated and registered in the specific number N0 and M0 areas of the recording device 121.

The card read / write means 31 overwrites the encrypted data S4 with the encrypted data S4 and the encrypted data S4, discharges the updated card 140, and returns the card 140 to the card user. As a result, the card 140
End use of.

[Second Embodiment] Next, a second embodiment different from the above embodiment will be specifically described with reference to FIGS. As shown, the electronic money card issuance / verification system includes a plurality of card issuance systems 21.
0, one record database 220, and a plurality of card collation systems 230, interconnected between remote locations via a data communication network, and using a card 240 of a writable and readable recording medium. And

The second embodiment is different from the first embodiment in that the encryption device 222 is
, And the plurality of card issuing systems 210 and the card collating systems 230 do not include a decryption device.

First, a card issuing system 210 according to the second embodiment will be described with reference to FIG.

The card issuing system 210 for issuing the card 240 includes a specific number generator 211, a time generator 2
12, a use result initial value generating device 213, a card record issuing device 214, and a data communication device 215. The recording database 220 includes a recording device 221, a data search device 222, an encryption device 223, and a collation device 22.
4 and a data communication device 225.
The basic functions of these devices are the same as in the first embodiment.

The specific number generating device 211 sequentially generates a serial number N- for the card 240 issued at the time of issuing a card, and assigns a unique card number to the card 140 in the system. Shall be output. The serial number N0 and the issuing device identifier M1 are sent to the encrypting device 214 and the data communication device 215, respectively, when the card is issued.

The time generator 212 generates the current time T0 as time data T0 and sends it to the recording database 220 via the data communication device 215 when issuing a card.
The use record initial value generation device 213 generates initial value data V0 indicating that the card 240 is unused and has no use record, and sends it to the recording database 220 via the data communication device 215 when the card is issued.

The data communication device 215 is a communication device for exchanging data between the card issuing system 210 and the recording database 220 via a data communication network.

In the recording database 220, the serial number N0 and the issuing device identifier M1 and the time generating device 21 are transmitted from the specific number generating device 211 via the data communication device 225.
2 and time data T0, and further, use result initial value data V0 from the use result initial value generator 213, respectively.
The encrypting device 223 encrypts the use result initial value data V0 received from the use result initial value generating device 213 using the time data T0 as an encryption key, and uses the encrypted data S6 as a new registration permission for the data communication device. 225 to the card issuing system 210.

In the card issuing system 210, when the card recording and issuing device 214 receives the encrypted data S6 from the recording database 220 as a new registration permission, the card data issuing device 214 receives the encrypted data S6 and the serial number received from the specific number generating device 211. N0 and the issuing device identifier M1, and the usage result initial value data V0 received from the usage result initial value generating device 213 are each set in the card 240
Is issued by discharging the recorded card 240 in the recording area.

On the other hand, in the recording database 220, the encryption device 222 retrieves the serial number N0, the issuing device identifier M1, the time data T0 and the usage result initial value data V0 received from the card issuing system 210 via the data searching device 222. The recording device 221 is sent to the recording device 221,
1, the serial number N0 and the specific number of the issuing device identifier M1 are recorded.

Next, a card reference system 230 according to a second embodiment will be described with reference to FIG.

The card verification system 230 that authenticates the use permission of the card 240 includes a card read / write device 231, a data communication device 232, a time generation device 233, and a use record updating device 234. The recording database 220 includes a recording device 221, a data search device 222, an encryption device 223, a collation device 224, and a data communication device 225, as in FIG. The basic functions of these devices are almost the same as those of the device having the same name as the first embodiment.

Accordingly, the description will be made according to the operation procedure.

When the card 240 to be used is set, the card reading / writing device 231 sets the serial number N0 and the specific number of the issuing device identifier M1 recorded on the card 240, the encrypted data S6, and the usage result initial value data. V0 is read and sent to the recording database 220 via the data communication device 232. Data communication device 232
Holds the transferred serial number N0 and the specific number of the issuing device identifier M1 for writing to the card 240.

In the recording database 220, the encryption device 223 sends the serial number N0, the specific number of the issuing device identifier M1, and the encrypted data S6 via the data communication device 225.
, And the use result initial value V0, and the collation device 224 receives the use result initial value data V0 from the card collation system 230.

The encrypting device 223 searches the recording device 221 via the data searching device 222 based on the serial number N0 and the specific number of the issuing device identifier M1, and obtains time data To. Further, the encryption device 223 receives the use result initial value data V received from the card collation system 230 using the time data T0 as an encryption key as in the case of issuing the card.
0 is encrypted, and the encrypted data Sd and, if normal, the encrypted data S6 are sent to the collating device 224.

The collation device 224 includes the encrypted data Sd received from the encryption device 223 and the card collation system 230.
Then, the encrypted data S6 is compared with the encrypted data S6 received from the server, and the use permission is sent to the card matching system 230 via the data communication device 225 when the matching is found.

Although not shown, the collation device 224 searches the recording device 221 via the data retrieval device 222 based on the serial number N0 and the specific number of the issuing device identifier M1 to obtain the use result initial value data. In the case where V0 is compared with the use result initial value data V0 received from the card collation system 230 for examination, the coincidence of collation with the above encrypted data is examined twice, and the collation can be further strictly performed.

In the card collation system 230, the time generation device 233 transmits the time data T1 and the usage record updating device 234 transmits the usage count data V1 and the data communication device 232 according to the collation matching signal received from the recording database 220. To the recording database 220 via
At this time, the data communication device 232 holds the usage count data V1 to be transferred.

In the recording database 220, the encryption device 223 again converts the time data T1 to the encryption key by using the time data T1 sent from the time generation device 233 and the usage count data V1 sent from the usage record update device 234. To encrypt the usage count data V1 received from the card collation system 230 to generate encrypted data S7.

The encrypted data S 7 is sent to the card verification system 230 via the data communication devices 225 and 232, and the time data T 1 and the number-of-times data V 1 are recorded by the encryption device 223 on the recording device 221.
The time data T0 and the usage count data V0 are recorded in the time data T1 by overwriting.
And the usage count data V1.

On the other hand, in the card verification system 230, when the data communication device 232 receives the encrypted data S7 and is informed of the end of the card use, it receives the received encrypted data S7 and the serial number N0 and the issued serial number. The specific number of the device identifier M1 and the usage count data V1 are sent to the card reading / writing device 231.

When the card read / write device 231 receives the use permission and the use end, the card read / write device 231 transmits the encrypted data S7 received from the data communication device 232, the serial number N0, the specific number of the issuing device identifier M1, and the use count data V1. By overwriting and discharging the card 240, the card 24
Return 0 to the card user.

In the above description, the use permission and the end of use are described separately, but for efficient use of the system,
For example, at the end of use due to settlement, authentication of use permission / non-permission of the card is performed by collation of the card.

As described above, the data to be encrypted is not limited to the above description.

[0110]

As described above, according to the present invention, the following effects can be obtained.

A first effect is that it is difficult to analyze data on a card for falsification.

The reason for this is that the encrypted data recorded on the card uses a different encryption key each time the card or even one card is used by random numbers such as time data.

The second effect is that forgery is difficult even if data on the card can be analyzed.

The reason is that the record database is isolated from the place where the card is issued or the place where the card is to be collated, and furthermore, the issuance record such as the use record is used as the encrypted data. Because it is difficult.

A third effect is that the manufacturing cost of the card increases.

The reason is that the card may be a simple writable and readable inexpensive recording medium and does not require a system such as a special arithmetic function for card authentication.

[Brief description of the drawings]

FIG. 1 is a functional block diagram showing an embodiment of the present invention.

FIG. 2 is a flowchart showing an embodiment of the present invention.

FIG. 3 is a functional block diagram showing a card issuing system according to the first embodiment of the present invention.

FIG. 4 is a functional block diagram showing a card collation system according to the first embodiment of the present invention.

FIG. 5 is a functional block diagram showing a card issuing system according to a second embodiment of the present invention.

FIG. 6 is a functional block diagram showing a card collation system according to a second embodiment of the present invention.

[Explanation of symbols]

10, 110, 210 Card issuing system 11 Specific number generating means 12 Time generating means 13, 35 Encrypting means 14 Card record issuing means 20, 120, 220 Recording database 21, 121, 221 Recording device 30, 130, 230 Card collating system 31 Card read / write unit 32 Decryption unit 33 Collation unit 34 Time generation unit 40, 140, 240 Card 111, 211 Specific number generation unit 112, 134, 212, 233 Time generation unit 113, 213 Usage record initial value generation unit 114 , 136, 223 Encryption device 115, 214 Card record issuing device 116, 123, 137, 215, 225, 232
Data communication device 122, 222 Data search device 131, 231 Card read / write device 132 Decryption device 133, 224 Verification device 135, 234 Usage record update device

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁶ Identification code FI G07F 7/08 G06F 15/30 340 G07G 1/12 321 350A G07F 7/08 M

Claims (19)

[Claims] 1. A card issuing system, a record database, a card collating system, and a method of issuing and collating an electronic money card for collating a card when issuing a card as a recording medium and performing payment settlement with the card. Comprising, the card is a writable and readable recording medium, while the recording database records various data, while receiving and sending a search, when issuing the card,
The card issuance system generates a specific number that uniquely identifies the card to be issued and generates a random number when issuing a random number. The issue-time encrypted data in which at least one of the set specific numbers is encrypted is created and converted into encrypted data. The issue-time encrypted data and the specific number are recorded on the card and issued, and the other is generated. The issuance random number is transmitted as a random number to the recording database and recorded in correspondence with the specified number, and when the card is used, the card verification system uses the specified number and encrypted data recorded from the card. Read out, index a random number corresponding to the specific number from the recording database based on the specific number, and read out the random number from the card. Issuance of the electronic money card, wherein the encrypted data is decrypted by using the indexed random number, and the obtained decryption code for verification is verified against the specific number and, when they match, the use of the card is permitted. Matching method. 2. The verification according to claim 1, wherein the card verification system generates a random number at the time of verification of a random number and encrypts the specific number with the verification random number when the use of the card is permitted. When the encrypted data is created, on the one hand, this encrypted data at the time of collation is overwritten and recorded on the encrypted data recorded on the card, and on the other hand, the generated random number at the time of collation is sent to the recording database and recorded. An electronic money card issuance and collation method characterized by overwriting and recording a random number. 3. The recording medium according to claim 1, wherein, when recording on the card, the specific number is encrypted with a specific encryption key.
An electronic money card issuance and collation method characterized in that the card is collated and used with this specific encryption key at the time of card collation. 4. A card issuing system, a record database, and a card collating system, in which a card as a recording medium is issued and an electronic money card is collated when the payment is settled with the card. The card is a writable and readable recording medium,
While the recording database records various data, receives and transmits a search, and when issuing the card, the card issuing system generates a specific number that uniquely identifies the card to be issued and generates a random number. Generates a random number at the time of issuing a number, sends the specific number and the random number at the time of issue to the recording database, and then records and stores the random number at the time of issue as the received specific number and a random number corresponding to the specific number. On the other hand, on the other hand, the received specific number is encrypted using the random number at the time of issuance as an encryption key to create issue-time encrypted data and sent to the card issuing system. Encrypted data is recorded and issued on the card together with the specific number as encrypted data, and when using the card, The card collation system reads the specific number and the encrypted data recorded from the card and sends the data to the recording database.The recording database then indexes a random number for the specific number from the recording database based on the specific number. Based on the specific number and the random number, a specific number is encrypted with a random number to create collation encrypted data, and the collated encrypted data read from the card is collated with the encryption code to determine that they match. Sending the electronic money card to the system and then permitting the use of the card when the card matching system receives a matching match. 5. The card verification system according to claim 4, wherein the card verification system generates a random number at the time of verification of a random number and sends the generated random number to the record database. Create a collation data at the time of collating the specific number with the collation random number, overwrite the recorded random number on the collation random number on the one hand, and send it to the card collation system on the other hand, and send it to the card collation system. Is overwritten on the encrypted data recorded on the card. 6. The method according to claim 1, 2, 3, 4, or 5.
, The specific number is configured by a serial number generated in each of the plurality of issuing devices that issue cards, and a device identifier that is previously assigned to each of the issuing devices so that the card can be uniquely identified. An electronic money card issuance / collation method characterized by the following. 7. The method of claim 1, 2, 3, 4, or 5,
, Wherein the random number is time data referring to the time at that time. 8. The method according to claim 1, 2, 3, 4, or 5.
7. The electronic money card issuance / collation method according to claim 6, wherein the specific number is constituted by the serial number and the device identifier according to claim 6, and the random number is time data referring to a time at that time. 9. The card issuance system according to claim 1, wherein the card issuing system further generates an initial value of the usage result, and the initial value of the usage result. The data is recorded and issued on the card and recorded in the recording database, and the card collation system further updates the usage result data for each use, while being recorded on the card each time the card is collated. A method for issuing and verifying an electronic money card, comprising updating use record data and updating records in the record database. 10. The electronic money card issuance / collation method according to claim 9, wherein the usage record data is encrypted by the random number instead of the specific number. 11. A card issuing system, a record database, and a card collating system are used in an electronic money card issuing collating system for collating a card when issuing a card as a recording medium and performing payment settlement with the card. Provided, the card is a writable and readable recording medium, the card issuing system, a specific number generating device for generating and outputting a specific number for uniquely specifying the card to be issued when issuing the card, An issuance random number generation device that generates and outputs an issuance random number of a random number, and receives the specific number and the issuance encryption data generated when issuing a card, and uses the issuance random number as an encryption key. An encryption device that creates encrypted data at the time of issuance by encrypting the specific number, and outputs the encrypted data at the time of issuance; A card recording and issuing device that records the issued encrypted data at the time of issuance as encrypted data along with the specific number on the card and issues the card, and issues the specific number and the issuance encrypted data generated when the card is issued. A first data communication device for receiving the data and transferring the data to the recording database, wherein the recording database records the random number at the time of issuance as a random number together with the specific number; A data search device that searches for and outputs a search result, and a specific number and issue-time encrypted data received from the first data communication device are transferred to the recording device via the data search device,
A second data communication device that transfers a specific number received from the card verification system to the data search device and returns the searched random number to the card verification system;
In addition, the card collation system reads out the specific number and the encrypted data recorded on the card when using the card and sends it out, and when the predetermined card settlement process is completed by the use permission of the card, the card verification system A card reading / writing device for recording predetermined data, and a specific code received from the card reading / writing device is transmitted to the recording database, and a decoding code is generated by decoding the specific number using a random number received as a result as a decoding key. A decoding device that outputs a use permission to the card reading / writing device when the generated decoded code is compared with the specific number, and the received specific number is stored in the recording database. And a third data communication device for transmitting a random number received as a result of the transfer to the decryption device. . 12. The card matching system according to claim 11, wherein the card matching system further comprises a matching random number generating device for generating a matching random number of a random number, wherein the encryption device is configured to perform the processing when the use of the card is permitted. Using the random number at the time of verification as an encryption key, the specific number is encrypted to create and output encrypted data at the time of verification, and the card read / write device transmits the encrypted data at verification to the encryption data recorded on the card. Overwriting and recording the data, the third data communication device sends the generated random number at the time of collation to the recording database, and the recording database overwrites and records the random number at the time of collation received on the recorded random number. Issuance collation method of electronic money card to be. 13. A card issuing system, a record database, and a card collating system are used in an electronic money card issuing collating system for collating a card when a card as a recording medium is issued and payment is settled with the card. Provided, the card is a writable and readable recording medium, the card issuing system, when issuing the card a specific number that uniquely identifies the card to be issued, a specific number generating device that outputs An issuance random number generation device that generates and outputs an issuance random number of a random number, and the issuance encrypted data obtained by encrypting the specific number using the issuance random number as an encryption key and the card together with the specific number as encrypted data. And a card recording and issuing device for recording and issuing the specified number and the random number at the time of issuance to the recording database. A first data communication device for transferring the issue-time encrypted data received from the recording database to the card recording / issuing device, wherein the recording database records the received specific number and the random number corresponding to the specific number. A second data communication device that exchanges data with each of the card issuing system and the card verification system, and a recording device based on the specific number received via the second data communication device. A data search device for searching and outputting a random number to be output, and a specific number and a random number at the time of issue from the card issuing system via the second data communication device, and encrypting the specific number using the random number at the time of issue as an encryption key. Created issuance encrypted data and sent back to the card issuing system, while the second data communication device Encrypting a specific number received from the card collating system via the data retrieving device based on the specific number and using the random number obtained by retrieval as an encryption key to generate and output encrypted data for collation The device and the collation encrypted data output from the encryption device are collated with the encrypted data received from the card collation system, and when they match, the use permission of the card is passed through the second data communication device. And a third data communication device for transmitting and receiving data to and from the recording database, and a specific number recorded on the card when the card is used. And the encrypted data is read out and sent to the recording database via the third data communication device. Issued matching method of an electronic money card, comprising a card reading and writing device for recording predetermined data in the card upon completion of the laid et collation coincidence of the received predetermined card settlement process. 14. The apparatus according to claim 13, further comprising a verification random number generation device for generating and outputting a verification random number of a random number, wherein the card verification system generates the verification random number. Is transferred to the recording database, and in the recording database, the recording device overwrites and updates the random number recorded by the collation random number received via the second data communication device, and the encryption device transmits the card to the card. When the use permission of the second data communication device is received, the specific number is encrypted by using the random number at the time of verification received via the second data communication device as an encryption key to generate and output the encrypted data at the time of verification. The encrypted data at the time of verification is stored in the second
The data communication device of the transfer to the card verification system,
In the card collation system, the card read / write device overwrites the collation-encrypted data received via the third data communication device with the encrypted data recorded on the card. Issuance and collation method for electronic money cards. 15. The card according to claim 11, 12, 13, or 14, wherein the identification number is a serial number generated in each of the plurality of issuing devices that issue a card, and the identification number is such that the card can be uniquely identified. An electronic money card issuance collation method, comprising: a device identifier assigned to each of the issuing devices in advance. 16. The electronic money card issuance / collation method according to claim 11, wherein the random number is time data referring to a time at that time. 17. In claim 11, 12, 13, or 14, the specific number is constituted by the serial number and the device identifier according to claim 15, and the random number refers to a time at that time. An electronic money card issuance collation method characterized by time data. 18. The method of claim 11, 12, 13, 14, 1,
The card issuing system according to claim 5, 16 or 17, further comprising a use result initial value generation device for generating use result initial value data, wherein the use result initial value data is recorded on the card. Issued and recorded in the record database, and the card collation system further includes a use record update device that updates the use record data for each use, and each time the card is compared, the use record data recorded on the card is used. An electronic money card issuance / collation method, which updates a record of the record database while updating the record. 19. The electronic money card issuing and collating method according to claim 18, wherein the usage record data is encrypted using the random number as an encryption key instead of the specific number.