JPS61249184A - Ic card certifying system - Google Patents

Abstract

PURPOSE:To certify the justification of an IC card by providing a calculating function in the IC card, storing the optional digit of an optional calculating result and composing the pass word number of a number stored by an owner and the number stored in the card. CONSTITUTION:When a user uses the IC card and purchases a goods, the optical calculation is executed by the IC card and the numeric of the digit designated by himself is stored to a memory part 17. At the time of shopping, first, the code number registered in the IC card is inputted, and continuously, the optional numeric data for the arithmetic result are inputted. A control part 14 reads and synthesizes the pass word number stored at a pass word number storing part 19 and the numeric of the designating digit position for the arithmetic result stored in the memory part 17 to a figure synthesizing part 21, and outputs to a coincidence detecting part 22. The detecting part 22 compares the coincidence of the synthetic data with the pass word number latched at a code number latch part 20. Thus, the card owner can be certified and the card itself can be certified without fail.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to an IC card authentication method for authenticating the validity of an IC card.

[Prior art and its problems] In recent years, it has been called the cashless era, and by using cards issued by credit card companies, it has become possible to purchase products without handling cash. . At this time, the store sells the product by confirming whether the cardholder is the cardholder, that is, whether the card was stolen, etc., but the common method for this confirmation is to use a PIN number. Specifically, the confirmation has been made by the person shown below.

(a) A PIN number is recorded on the magnetic stripe of the card, and the PIN number entered by the customer via the keyboard of an authentication device installed at the store and the number read from the card by the magnetic reader are A method of comparing and matching.

(b) A method in which the PIN number presented by the customer is compared with the PIN number registered with the credit card company via an online POS terminal or telephone to verify a match.

However, in method (a) above, the person who stole the card can easily read the PIN number from the magnetic strip by using a special magnetic reader, etc. There was extremely little reliability as to whether or not the person was the real person.Therefore, in recent years, an IC has been built into the card that stores the PIN number, etc., so that the PIN number cannot be easily read from the outside. Card so-called IC
cards are being developed. However, although it is certainly difficult to read the PIN number on this information card,
It is necessary to key in the PIN number itself at the time of verification.
When entering a password into a terminal, etc., there was a risk that the password could be seen by a third party.

On the other hand, the confirmation method (b) described above is extremely reliable in terms of card authentication, but since it uses a communication line, there is a risk that the PIN will be intercepted during the transmission of the communication line. As expected, there was a problem with the security of the PIN number.

[Object of the Invention] The present invention has been made in view of the above points, and an object of the present invention is to provide an IC card authentication method that can reliably authenticate the card owner and the card itself.

[Summary of the Invention] The present invention provides a calculation function in an IC card, stores any digit of any calculation result, and separates the password between the number stored by the card owner and the number stored in the card. The IC card is configured to authenticate the validity of the IC card.

[Embodiment of the Invention] An embodiment of the present invention will be described below with reference to the drawings. First, the external structure of the IC card 1 will be explained with reference to FIG. The IC card 1 includes a display section 3 and a keyboard 4 on the top surface of a card body 2. The keyboard 4 includes arithmetic keys such as a numeric keypad and function keys, as well as an IN key 5 and an ENT key 6 for data input.

The IN key 4 is the verification number IPIN (Initial
Ization persona + identity
ENT key 5 is used to input account number 11, etc. The above-mentioned verification number IPIN is a random code of, for example, 6 bits, and is a code that is used until the cardholder's personal identification number is used.

Next, the configuration of the IC circuit provided in the card body 2 will be explained with reference to FIG. 2. In FIG. 2, reference numeral 11 denotes a system bus, to which the keyboard 4 is connected via an input control section 12, and the display section 3 is connected via a display control section 13. Further, a control section 14, a system program control section 15, a calculation section 16, and a storage section 17 are connected to the system bus 11, as well as a digit position storage section 18, a password storage section 19, and a password latch section 20. Connected. The digit position storage section 18 and the password storage section 19 are constituted by, for example, an EEP ROM.

The storage unit 17 stores key input data, calculation results of the calculation unit 16, etc., and also sends data at a digit position corresponding to the data stored in the digit position storage unit 18 from among the calculation result data to the number synthesis unit 21. Output. This number synthesis section 21
combines the numerical data given from the storage section 17 and the password stored in the password storage section 19, for example, adds the number from the storage section 17 to the lower part of the password, and outputs it to the match detection section 22. .

The match detection section 22 compares the data synthesized by the numeric synthesis section 21 with the password latched in the password latch section 20 and outputs the comparison result to the control section 14 . Further, each of the circuit sections described above is supplied with an operating voltage from a battery (not shown) provided in the IC card 1.

Next, the operation of the above embodiment will be explained with reference to the flowcharts of FIGS. 3 and 4. First, the operation when issuing the IC card 1 will be explained with reference to the flowchart shown in FIG. A personal identification number, digit position, and account number are registered in the IC card 1 when the card issuing company hands the card to the user. The above registration operation is performed by the card issuer or the user himself/herself. First, as shown in step A1 of FIG. 3, the IPIN is input from the keyboard 4. By inputting this IPIN, it is checked whether the card issuance procedure is being carried out correctly. That is,
The card manufacturing company issues a verification number I to the manufactured IC card 1.
Write the PIN in advance and send it to the card issuing company. At that time, write the verification number @IPIN on a piece of paper and send it separately to the card issuing company. Therefore, only a duly recognized card issuing company can input the correct verification number IPIN into the IC card 1 when issuing a card. When the identification number IPIN is input from the keyboard 4 in step A1, the IC card 1 proceeds to step A2 and inputs the internally stored identification number IPIN.
and the key-input verification number IPIN to determine whether they match. If the verification numbers @IPIN do not match, the process returns to step A1, but if they match, the process proceeds to step A3 to prepare for the next process. After inputting the verification number IPIN, the operator inputs a personal identification number that the user remembers, for example, rl 234J, and operates the IN key 5 after completing the input. The IC card 1 registers the key-input password in the password storage section 19 under the control of the control section 14 . Next, the operator inputs the digit position designation data "-□" as shown in step A4 and operates the IN key 5.The digit position designation data is used as a password for any calculation result data. This is for specifying a digit, and the digit position data is registered in the digit position storage unit 18.For example, if you want to specify the 3rd and 6th digits for an arbitrary calculation result, "3" is used. Enter the numerical data of "6" and the WI
Operate N key 5. Therefore, in this case, the third and sixth digits of a certain calculation result are added to the password stored in the password storage section 19. Thereafter, the operator stores the account number and the like in the IC card 1, as shown in step A5, and ends the data registration process. Above IC card 1
can be used for actual use by completing the above registration process.

When the user actually purchases a product using the IC card 1, the user performs an arbitrary calculation on the IC card 1 in advance and stores the numerical value of the digit specified by the user in the storage unit 17. . That is, an arbitrary numerical value is inputted from the keyboard 4 as shown in step B1 of FIG. For example, when calculating "f2", if it is displayed in 8 digits, the calculation result is I1.4142
135J is displayed. The user memorizes the numerical value "11" in the third and sixth digits specified in advance for this calculation result, and operates the WIN key 5.

When this IN key 5 is operated, the IC card 1 responds to the calculation result as shown in step B3 according to the data stored in the digit position storage section 1B, that is, in this case, the third and sixth digits. Eye data “11” is stored in the storage unit 17.

Therefore, as shown in step B4, when the user shops at a store, in front of the store clerk, the user first steps in step B5.
PIN number N2 that was first registered on IC card 1 in
34J is input, and then, in step B6, the numerical data "11" in the third and sixth digits for the above calculation result is input. The above data entered by the user r12341
1J is a password latch unit 20 under the control of the control unit 14.
is set to When the password is input into the IC card 1 as described above, the password is verified as shown in step B7. That is, when the control unit 14 of the IC card 1 sets the externally input password in the password latch unit 20, the controller 14 stores the password “1234” stored in the password storage unit 19 and the password in the storage unit 17. The numerical value "11" at the designated digit position for the calculation result is read out to the number synthesis section 21, synthesized, and output to the coincidence detection section 22. The match detection section 22 compares the synthesized data provided from the numeric synthesis section 21 with the password latched in the password latch section 20, and outputs the comparison result to the control section 14. When the control unit 14 receives a mismatch signal from the match detection unit 22, the control unit 14 proceeds to step B8, stores the error bits in the storage unit 17, and determines whether the number of error bits is within the limit number of times in step B9. to judge. If the above number of error bits is within the limit number of times, step B
Step 5 is returned to prepare for inputting the corresponding digit data again, but if the limit has been exceeded, the process advances to step 810 and [1nval
idJ etc. is displayed as invalid and the process ends. Also,
In step B1 above, from the coincidence detection section 22 to the control section 1.
If a match signal is sent to step B11, "OK" is displayed on the display section 3, and the authentication process ends.

After completing the authentication process as described above, the user
The customer shows the "OK" display on the C card 1 to the clerk to confirm that the customer is the customer, and then proceeds to the next transaction process.

In the above embodiment, a square root calculation is performed and the value of the specified digit corresponding to the calculation result is added as part of the PIN number, but the type of calculation is not limited to the above embodiment. For example, AOQ, S i n, CO5, t
Any calculation that can be executed immediately, such as an, may be used.

Furthermore, in the above embodiment, the IC card 1 is operated independently without being attached to the POS terminal, but the IC card 1 may be provided with a connector section and connected to the POS terminal by electrical or optical means. It's okay.

[Effects of the invention] As detailed above, according to the present invention, a calculation function is provided in an IC card, an arbitrary digit of an arbitrary calculation result is stored,
Since the PIN number consists of a number memorized by the cardholder and a number stored in the card, it is possible to authenticate the cardholder and the card itself, and prevent the card from being stolen. Even in the event of unauthorized use, unauthorized use can be reliably prevented. Furthermore, since the numerical value of the designated digit for any calculation result is part of the password, the password can be changed at any time and is safe even if viewed by a third party. Furthermore, since the IC card itself has arithmetic functions, it can usually be used as a calculator.

[Brief explanation of drawings]

The drawings show one embodiment of the present invention, and FIG. 1 is a perspective view showing the external structure of an IC card, FIG. 2 is a block diagram showing the structure of an IC circuit provided inside the IC card, and FIG.
4 and 4 are flowcharts for explaining the operation. 1...IC card, 2...card body, 3...
Display section, 4...Keyboard, 5...IN key, 6.
...ENT key, 11...System bus, 14...
Control unit, 16... Calculation unit, 17... Storage unit, 18.
...Digit position storage section, 19...PIN number storage section, 20.
...Password latch section, 21...Number composition section, 22.
... Match detection section.

Claims (1)

[Claims] a PIN number storage unit that stores a preset PIN number; a calculation unit that performs calculation operations according to key input data; a digit position storage unit that stores preset arbitrary digit position designation data; and the calculation unit. a synthesizing means for reading out the numerical value of the digit specified by the setting data of the digit position storage section from arbitrary calculation result data calculated by the digit position storage section and synthesizing it with the PIN number stored in the PIN storage section; An IC card authentication method comprising: means for comparing data synthesized by the means with a password inputted by a key to authenticate the validity of the IC card.