JPS5962975A - Identifying system of person himself - Google Patents

Abstract

PURPOSE:To prevent the wrong use or the like of a card, by retrieving a cipher key for a file and an identification code by a password and deciphering a ciphered sentence on the card by this cipher key, and identifying the user himself on a basis of the deciphering result and the retrieved identification code. CONSTITUTION:When a depositor inserts own card to a card reader 2 and inputs the password from a keyboard 1, a communication controller 3 edits them and ciphers them in a means 10 and transmits them to a bank center. In the center side, the line cipher is translated in a means 11 to read out the password, and a file address is attained by a scrambling device 5 to read out contents of a file 6. Parts 22 and 23 of trasmission data are translated in a deciphering device 7 by a cipher key 31 of the file 6, and the deciphering result of the check code part 22 and a check code part 32 of the file 6 are compared with each other in a means 8 to identify the depositor. Thus, forgery of the card, the wrong use, etc. are prevented.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Application of the Invention] The present invention relates to an identification method in a cash dispenser or the like, and particularly to an identification method suitable for preserving a cryptographic translation key.

[Prior art]

Conventional cash dispensers verify the identity of the person by comparing the password on the card and the password entered. However, the password on the card can be easily read with a magnetic card reader, so it cannot be said to be sufficient to protect the secret.

[Purpose of the invention]

An object of the present invention is to provide an identification method that can protect the contents of this card.

[Summary of the invention]

In order to achieve such an object, the present invention records a ciphertext on a card, searches for a cipher translation key using a password, and translates the ciphertext using the searched key.
The unique feature is that the identity of the person is verified by comparing the account number with a confirmation code.

[Embodiments of the invention]

Embodiments of the present invention will be described below with reference to FIGS. 1 to 3.

FIG. 1 is a block diagram of an example of a system that implements the method of the present invention. In the figure, 1 is a keyboard, 2 is a card reader, 3 is a communication control device, 4 is a center side communication control device,
5 is a scramble device, 6 is a key, check code, file, 7 is a code translation device, 8 is a comparison device, 9 is a gate,
10.11 is a cipher machine.

Figure 2 shows an example of the format of the data transmitted in Figure 1, where 21 is part of the header of the data format, 22 is the check code part, 23 is the data part such as the deposit account number, and 24 is the transmission error. This is the control section.

Figure 3 shows the contents of file 6 in Figure 1.
is the encryption translation key part of the contents of the file 6, and 32 is the check code part.

The operation shown in FIG. 1 will be explained below with reference to FIGS. 2 and 3. The depositor inserts the card into the card reading device 2 and inputs the password from the keyboard 1. In the communication control device 3, the keyboard input and card contents are edited in the format shown in Figure 2 and sent to the bank center.

At this time, in order to maintain confidentiality on the line, the encryption machine 10 generates a ciphertext.

On the center side, first, the line code is translated, the password is read out, and the file address obtained by converting the password by the scrambler 5 is obtained.

The contents of the file 6 are read out using this file address. The contents of this file 6 are as shown in FIG. 3, and the cryptographic translation key 31 is used to translate portions 22 and 23 of the transmitted data using the cryptographic translation device 7. Translation result of check code section 22 and check code section 32 of file 6
The comparison device 8 compares the information to confirm the identity.

If the identity of the person is confirmed, the gate 9 is opened and the deposit payment operation is continued with the data 23 such as the account number.

At this time, check the password change history.

Line encryption+AQ10, 11 requires changing the key for each payment transaction, and for this reason, key management must be performed at regular intervals. - For example, if the encryption method is an M-sequence random number generator, the key is changed at regular intervals using the initial value as the key, and - +α is added to both keys upon completion of processing.

FIG. 4 shows the structure of an embodiment of a card production package that implements the method of the present invention.

In the figure, 41 is a password input keyboard, 42 is a keyboard for receiving a passbook from a user (depositor) and accessing an account number file 45, and 43 is the aforementioned scrambling device 5.

44 is the aforementioned key and check code file 6. 4
5 is a deposit ledger file including account numbers, etc.

46 is an encryption device that encrypts the check code, account number, etc. 47 writes to the card. It is a card writing device.

The depositor creates an automatic withdrawal code. If you still want to change your password, go to the bank, show the person in charge that you are a legitimate depositor by providing your passbook, seal, etc., and then press 4 on the keyboard.
Enter a new password from step 1. At this time, the input contents are kept secret from others. Bank personnel use keyboard 4
2, this person's deposit ledger file 45 with Shiroza number etc.
access. The history is written in the file 45 and the file 45 access data is output.

On the other hand, the scrambler 43 accesses the converted file access database file 44 using the password entered on the keyboard 41 to obtain an encryption key and a check code.

The outputs of the files 44 and 45 are an encryption key, a check code, and deposit ledger file access data, and the check code and access data are converted into an encryption key and a ciphertext by an encryption device 46.

This is written to the card writing device 47 in the format shown in FIG. 5.

Here, 51 is an encrypted check code, and 52 is encrypted file access data.

The password change history is recorded in the file access data.

〔Effect of the invention〕

According to the present invention, the password cannot be known just by reading it with a card reader like a conventional card.

Therefore, it is effective as a preventive measure against card forgery, card fraud (use of a found card), and card forgery prevention due to wire tapping.

[Brief explanation of the drawing]

Figure 1 is a configuration diagram of an example of a system that implements the method of the present invention, and Figure 2 is a diagram of the data format for transmission of Figure 1.
Figure 3 is a format diagram of the contents of file 6 in Figure 1, Figure 4 is a configuration diagram of a card creation device that implements the method of the present invention, and Figure 5 is a diagram of the format of the contents of file 6 in Figure 1. figure

Claims (1)

[Claims] 1. Record the ciphertext on the card, and also have a file storing the encryption key and confirmation code for each password, and when you enter a password, search for the corresponding encryption key and confirmation code in the above file. An identification method characterized in that the cipher text on the card is translated using the searched encryption key, and the translation result is compared with the searched confirmation code to confirm the identity of the person.