JPS6123281A - Identification number setting system - Google Patents

Abstract

PURPOSE:To make hard analogization of an identification number for a third person and to improve the secrecy of the identification number by selecting an optional number of place when an identification number is registered to the number collating function of a portable medium and therefore enabling a user to set an optional number of place for his/her identification number. CONSTITUTION:A CPU11 displays ''Feed a tentative identification number.'' through a display device 13 and also turns on an indentification number input display device when a customer uses his/her number for the first time. Thus the user feeds a tentative number by means of ten keys. Then a CPU3 collates the tentatively fed identification number of a RAM5 with another tentative number stored in a data memory 4 in terms of the number of place through an identification number collating part 7. When a coincidence signal is supplied, the CPU11 decides that the genuine number of the customer can be set and displays a guidance. Thus the user feeds the genuine identification number by means of the ten keys at an identification number input part. In this case, the number of place can be selected between 1 and 10 for an identification number.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a password setting method for registering a password in an IC card comprising, for example, a data memory and a CPU.

[Technical background of the invention and its problems] Recently, automatic transaction devices or home banking systems available in financial institutions have data memories that cannot be easily read for data security reasons. IC cards (portable media) have been developed.

Conventionally, in a system for confirming a user's password, that is, a password using an IC card and a terminal, the following password verification system is known, and will be explained with reference to FIG. That is, the password is stored in the memory 62 of the IC card 61. The user then inputs the password using the keyboard 64 of the terminal 63. Then, the password is supplied to the CPU 68 via the control unit 65, interface 66, and interface 67.

Thereby, the CPU 68 compares whether the password in the memory 62 and the supplied password match, and if they match, outputs a match signal to the terminal 63.

Depending on this match, the terminal device 63 performs various processes.

In the above-described system, the user's PIN number is set by the issuer, and has the disadvantage that anyone other than the customer himself/herself can know the PIN number. Therefore,
The issuer sets a temporary PIN at the time of issue, and when the temporary PIN entered by the user at the start of use matches the temporary PIN on the card, the user can confirm the real PIN. There are things that can be configured.

However, even if it is possible to set a password so that it is not known to anyone other than the user, in conventional systems, the password is fixed at four digits. In this case, the user often sets a part of his or her birthday as a password, and a third party has the disadvantage that this password can be guessed relatively easily.

[Purpose of the Invention] This invention was made in view of the above circumstances, and its purpose is to allow the user to set a password using any number of digits, making it difficult for a third party to make an analogy. The object of the present invention is to provide a password setting method that can improve confidentiality.

[Summary of the Invention] According to the present invention, when registering a password to a password verification function of a portable medium, the password can be set to have an arbitrary number of digits.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In FIG. 1, 1 is an IC card as a portable electronic device. The surface of this IC card 1 has a connection section 2.
are provided, for example, a plurality of terminals 2a,...2
It is composed of h. Terminal 2a is for operating power supply voltage (+5 V), terminal 2b is for grounding, terminal 2
C is for a clock signal, terminal 2d is for a reset signal, terminals 20 to 2Q are for data input/output, and terminal 2h is for a power supply voltage (+21V) for data writing.

Also, inside the IC card 1, as shown in FIG.
Unit) 3, control program, password (for example, maximum 10 digits), data, etc. are recorded in the EEpROM.
Alternatively, it is constituted by a data memory 4 constituted by a FROM, an interface circuit 5, a RAM 6 for data processing, and a password verification section 7. Each of the above parts is composed of an IC chip and is provided on one substrate. Also,
The interface circuit 5 and the connection section 2 are wired. The password verification section 7 verifies whether the password supplied from the outside and the password in the data memory 4 match.

3 and 4 show the configuration of an IC card handling device va10 as a terminal device according to the present invention. This IC card handling Ia10 is installed in a general store, for example. In other words, 11 is a CPU (central processing unit) that controls the whole;
12 is a keyboard for inputting data, 13 is a CRT display device, 14 is RO~1 (read-only memory) in which a control program is stored, and 15 is a RAM (random access memory) in which data is stored.
, 16 is a dot printer that outputs various print data; 17 is a Blotsby disk device that stores and reproduces data on a floppy disk 19 inserted from the floppy disk insertion slot 18; 20 is an IC card reading/writing section; 41 is a password input section for a customer to enter a password.

The IC card reading/writing section 2o and the password input section 41 are used for operations by customers, and the other sections are used for opening a store, for example.

As shown in FIG. 5, the PIN input section 41 includes a numeric keypad 42 for inputting a PIN, a correction key 43 that is pressed when making a correction while inputting a PIN, an input completion key 44 that is pressed when inputting a PIN is completed, and a numeric keypad 41. It is composed of an input digit number display section 45 that displays the number of digits (of the PIN number) input by , a PIN input display 46 that indicates when the PIN is input, and an incorrect PIN display 47 that indicates an error in the PIN.
It is connected to the C card reading/writing section 20 by a cable 23. The input digit number display section 45 is composed of, for example, 10 LEDs, and the LED lights up in accordance with the input digit number.

The IC card reading/writing section 2o is for reading data in the memory of the IC card 1 inserted from the card insertion slot 21, or writing data in the memory, and is connected to the main body of the card handling machine 10 by a cable 22. It is now possible to do so. That is, as shown in FIG. 6, a transport bus 31 for transporting the IC card 1 inserted through the card insertion slot 21 is provided. This transport bus 31
is provided with a plurality of pairs of rotatable transport rollers 32, which are positioned so as to sandwich the IC card 1 from above and below when it is transported. The pair of conveyance rollers 32 are provided along the conveyance path 31 at equal intervals. The distance from the center of each of these transport rollers 32 to the center of the adjacent transport roller 32 has the width dimension in the card transport direction. Therefore, the transport path 31 of the IC card 1 is defined by the transport guide 33.

Further, the CP in the IC card 1 is placed on the transport guide 33.
A reader/writer 34 is arranged to exchange data with U3. The reading/writing device 34 is electrically connected to the section 2 to the connector 1.

In addition, the IC card issuing machine 51 also handles the above-mentioned IC card 81.
All 10 have almost the same configuration. however.

The control programs in the ROM 14 are completely different. Further, the password is input using the keyboard 12 without using the password input section 41. Above I
The 'C card issuer 1 is a card issuer installed at a financial institution, for example.

Next, the issuance of the IC card 1 in such a configuration will be explained. That is, the operator (issuer) sets the IC card issuing mode using the keyboard 12 of the IC card issuing machine 51, and inserts the IC card 1 into the card insertion slot 21'. Then, the IC card 1 is electrically connected to the reading/writing device 34 by the connecting section 2. As a result, the CPU 11 uses the CRT display device 13 to
Please enter the user's temporary PIN number.'' In response to this guidance, the operator inputs a temporary password using the keyboard 12. Depending on this input, CPU1
1 reads the signal indicating the PIN number and the issuing machine, and the writing device 3
4. Supplied to the CPU 3 via the connection section 2 and the interface circuit 5. Then, the CPU 3 causes the data memory 4 to store the supplied temporary password. Also,
Other transaction data and the like are also stored in the data memory 4 in the same way as the password. Then, the IC card 1 storing this temporary password etc. is issued from the card insertion slot 21.

Next, a case in which a user (customer) handles the IC card 1 issued as described above will be described with reference to the flowchart shown in FIG.

That is, the customer inserts the IC card 1 into the card insertion slot 21 of the IC card handler 1110 (ST1). Then, the IC card 1 is transferred to the reader/writer 3 by the connector 2.
It is electrically connected to 4. As a result, the CPU 11
The CPU determines whether C card 1 is set to the handling machine for the first time.
The judgment is made according to the signal from 3 (ST2). If the result of this judgment is that it is not the first use, the process advances to step 11, which will be described later.

In addition, in the case of first-time use, the CPU 11 displays on the CRT display device 13 the instruction "Please enter a temporary PIN number," and lights up the credential entry display 46 (ST3). In response, the operator inputs a temporary password using the numeric keypad 42 (ST4
．． ),. In response to this input, the CPU II reads a signal indicating the PIN number and the manner of handling, and sends it to the writer 34 and the connection unit 2.
and is supplied to the CPU 3 via the interface circuit 5. Then, the CPU 3 inputs the supplied temporary PIN number to R.
, AM5. Next, the CPU 3t collates the number of digits and number of the entered temporary password in the RAM 5 and the temporary password stored in the data memo 1-4 in the password verification section 7 (ST5). As a result, when the number of digits and the number match, the password verification section 7 outputs a match signal to the CPU 3, and when the number of digits does not match, the password verification section 7 outputs a match signal to the CPU 3.
outputs a mismatch signal.

Next, if the verification results from the password verification unit 7) are a match, the CPU 3 outputs a match signal to the CPU 11, and if it is a non-match signal, it counts up a discrepancy counter (not shown) provided in the data memory 4, and then outputs a match signal to the CPU 11. When the count value is within the predetermined number (3 times), the CPU1T sends a discord signal for the re-entering group.
When the count value reaches a predetermined value, the IC card 1 outputs an invalid mismatch signal to the CPU 11 (
ST6). As a result, when a match signal is supplied, CPLl
ll determines that it is possible to set the customer's real PIN number,
The CRT display device 13 displays a message saying "Please enter your actual PIN as it will be registered," and the PIN input display 46 is turned on (ST7). Based on this guidance, the customer inputs the actual password using the numeric keypad 42 of the password input section 41 (ST8). In response to this input, the CPU 11 displays the input digit number display unit 42 corresponding to the input digit number.
Turn on the LED. Thereby, the customer confirms the number of digits of the actual personal identification number that he or she is inputting on the input digit number display section 42. Furthermore, at this time, the number of digits of the main password set by the customer may be anywhere between 1 and 10 digits. Then, when the customer has finished inputting the desired number of digits of the actual PIN, he/she inserts the input completion key 43 (ST9).
. Then, the signal corresponding to the main PIN entered above will be C.
It is supplied from PU11 to CPLI3. As a result, C
The PU 3 causes the data memory 4 to store the supplied customer's permanent password (STIO'). At this time, CPtJ
3 sets a flag that prohibits the use of the temporary password stored in the data memory 4.

After registering the actual PIN number, the transaction may be carried out as is, or the IC card 1 may be returned to the customer.

Furthermore, when checking the match between temporary PIN numbers, if a predetermined number of mismatches has been reached, the IC card cannot be used.

From now on, when you make a transaction using the above-mentioned handling machine, you will be able to do so using the above-mentioned original PIN number.

F. If it is determined in step 2 above that the IC card 1 is not being used for the first time in the handling machine, the CPU 11 will display the CRT display device 13 and ask "Please enter your real PIN number."
This guidance is provided (ST11). In response to this guidance, the operator enters the main password using the numeric keypad 42 (ST
12). In response to this input, the CPLI'11 lights up the LED of the input digit number display section 42 corresponding to the input digit number. Thereby, the customer confirms the number of digits of the password being inputted on the input digit number display section 42. Then, when the customer finishes inputting the password of any number of digits, he or she presses the input completion key 43 (ST13).

Then, a signal corresponding to the entered main password and a signal indicating the handling machine are supplied from the CPU II to the CPU 3. Thereby, the CPU 3 stores the supplied customer's permanent password in the RAM 5.

Next, the CPUA causes the password checking unit 7 to compare the number of digits and the number between the entered regular password in the RAM 5 and the regular password stored in the data memory 4 (ST14). As a result, the password verification unit 7 outputs a match signal to the CPU 3 when the number of digits and the number (content) match, and outputs a match signal to the CPU 3 when the number of digits or the @ sign does not match (S715.16). .

Next, if the verification result from the password verification unit 7 is a match, the CPU 3 outputs a match signal to the CPLll (ST17).
, in the case of a mismatch signal, a mismatch counter (not shown) provided in the data memory 4 is counted up, and when this count value is within a predetermined number (3 times), a mismatch signal of the re-entering group is output to CPtJll, and the above When the count value reaches a predetermined value, the CPU 11 sends a mismatch signal indicating that the IC card 1 is invalid.
- (ST18). As a result, when a matching signal is supplied, CPtJll determines that a transaction using the IC card handling machine 10 is possible, and executes the corresponding transaction (ST19
). Also, when a mismatch signal is supplied, CPtJll:
It is determined that re-input of the original PIN number or transaction using the IC card handling machine 10 is not possible, and the customer is notified to that effect (
ST20).

In addition, (temporary, book) in the above IC card handling machine 10
Operational guidance for entering the password may be provided by another display or by a staff member.

As mentioned above, the customer's PIN is not known to anyone other than the person who registered it, and it can have any number of digits; in other words, a part of the customer's birthday can be used as the PIN. However, since the password is not limited to four digits and may be any other number of digits, a third party cannot easily know the password, making it an excellent security measure.

In the above embodiment, the number of input digits of the PIN to be input is displayed on the input digit number display section, but this is not limited to this.
It may also be displayed on a display device. Also,
Although the password verification is performed within the IC card, the present invention is not limited to this, and the verification may be performed on the terminal side. Further, although an IC card is used, a magnetic stripe card or a laser cart may also be used.

[Effects of the Invention] As detailed above, according to the present invention, the user can set the password using any number of digits, making it difficult for a third party to make analogies, and improving confidentiality. A password setting method can be provided.

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention, and FIG. 1 is an external perspective view of an IC card, FIG. 2 is a block diagram schematically showing the configuration of the electric circuit of the IC card, and FIG. A perspective view of the card handling machine, Figure 4 is an overview of the card handling machine.
δ configuration block diagram, FIG. 5 is a plan view showing the configuration of the PIN input section, FIG. 6 is a sectional view showing the configuration of the IC card reading/writing section, and FIG. 7 is a diagram for explaining the main parts of the operation. This is a flowchart, and FIG. 8 is a diagram for explaining a conventional password verification system. 1... IC card (portable medium), 2... Connect section, 3... CPU, 4... Data memory, 7...
・Password verification unit, 10... Bow C card handling machine, 11...
CPU. 20...Bow C card reading/writing section, 34...reading/writing device, 41...Password input section, 42...numeric keypad, 4
3... Correction key, 44... Input completion key, 45...
- Input digit number display section, 51...IC card issuing machine. Applicant's agent Patent attorney Takehiko Suzue Figure 1 Figure 2

Claims (1)

[Claims] A password setting method characterized by providing a setting means for setting a password with an arbitrary number of digits when registering a password for a password verification function of a portable medium.