JPS613278A - Password matching system - Google Patents

Abstract

PURPOSE:To confirm whether the collation of a portable medium is performed correctly or not, and perfor highly reliable password collation by outputting the password of a portable medium only when the password is collated and found coincident and recollating it externally. CONSTITUTION:The CPU3 of an IC card 1 collates a password number which is supplied with the password number stored previously in a data memory 4 by a password collating part 7. When the collation result shows coincidence, the CPU3 outputs a coincidence signal and the password number in the data memory 4 to the CPU11 of an IC card handling machine. The CPU11 when supplied with the coincidence signal and password number recollates the password number with a password number inputted on a keyboard 12 by a comparing circuit 9. Then, when the both coincide with easch other, the CPU11 judges that the password collation is performed correctly by the IC card 1 and displays the guidance of transaction processing on a CRT display device 13.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a password verification method for verifying a password in an IC card comprising, for example, a data memory and a CPU.

[Technical background of the invention and its problems]

Recently, in automatic transaction devices or home banking systems in financial institutions, IC cards (portable media) having data memories whose stored data cannot be easily read have been developed for data security reasons.

Conventionally, in a system for confirming a user's password using an IC card and a terminal, the following password verification system is known and will be explained using FIG. That is, I
A password is stored in the memory 42 of the C card 41. The user then inputs the password using the keyboard 44 of the terminal 43. Then, the password is transmitted to the CP via the control unit 45° interface 46 and interface 47.
Supplied to U 4 B. As a result of this, 1), CPUdB compares whether the password in the memory 42 and the supplied password match or not, and if the input does not match (incorrect), the CPUdB does not match (NG).
) signal is output to the terminal 43, and if the input matches (regular), a match (OK) signal is output to the terminal 43, and the password stored in the memory 42 is not output to the outside at all. ing. In this way, the confidentiality of the IC card is maintained, but the matching signal output from the IC card,
Because the result of password verification depends only on the mismatch signal,
It was not known whether the IC card was operating normally and the signals were being output, which caused problems in terms of reliability. The purpose of this system is to provide a highly reliable password verification method that can confirm whether the verification using the portable medium is being performed correctly while maintaining the confidentiality of the password on the portable medium. There is a particular thing.

[Summary of the invention]

In this invention, only when the passwords match during password verification, the password of the portable medium is output and re-verified externally.

[Embodiments of the invention]

An embodiment of the present invention will be described below with reference to the drawings.

In FIG. 1, 1 is an IC as a portable electronic device.
It's a card. A connecting portion 2 is provided on the surface of this IC card 10, for example, a plurality of terminals 21,...
・2. It is made up of. The terminal 21 is for the operating power supply voltage (+SV), and the terminal 2. is for grounding, terminal 2.
is for the clock signal, and terminal 24 is for the reset signal.

Terminal 2. ~2. Terminal 26 is for data input/output, and terminal 26 is for data writing power supply voltage (+21V).

Also, inside the IC card 1, as shown in FIG.
unit) 3, control program, password (e.g. 8
digit) and data are recorded, and is composed of a data memory 4 constituted by an E2FROM or FROM, an interface circuit 5, a RAM 6 for data processing, and a password verification section 7. Each of the above parts is composed of an IC chip and is provided on one substrate. Further, the interface circuit 5 and the connection section 2 are wired. The password verification section 7 verifies whether the password supplied from the outside and the password in the data storage 4 match.

3 and 4 show the configuration of an IC card handling machine 10 as a terminal according to the present invention. 11 is a CPU (central processing unit) that controls the entire system; 12 is an input means for inputting data, such as a keyboard; 13 is a CRT display device; 14 is a ROM (read only memory) in which a control program is stored; 15 is a RAM (
16 is a dot printer for outputting various print data; 17 is a floppy disk 19 inserted from a 70-pin disk insertion slot 18;
70. Storing and reproducing data. P-disk device, 20 is an IC card reading/writing unit, 9 is a keymate 1
This is a comparison circuit that re-verifies the password entered by IC card 2 and the password supplied from IC card 1.

The IC card reading/writing unit 20 reads data in the memory of the IC card 1 inserted from the card insertion slot 21, or writes data into the memory, and is connected to the card handling machine main body and the cable 22. It is now connected. That is, as shown in FIG. 5, a transport/fourth slot 31 for transporting the IC card 1 inserted from the card insertion slot 21 is provided. This transport nox 31
is provided with a plurality of pairs of rotatable transport rollers 32, which are positioned so as to sandwich the IC card 1 from above and below when it is transported. The pair of conveyance rollers 32 are provided along the conveyance path 31 at equal intervals. The distance from the center of each of these transport rollers 32 to the center of the adjacent transport roller 32 has the width dimension in the card transport direction. Therefore, the transport path 31 of the IC card 1 is defined by the transport guide 33. Also, the transport path 31 of the IC card 1 is defined by the transport guide s3.
A reader/writer 34 is arranged to exchange data with the US. This reading/writing device 34 is electrically connected to the connecting section 2.

Next, the password verification method of the present invention in such a configuration will be explained. For example, now, the user inserts the IC card 1 into the card insertion slot 21 of the IC card handling machine 100. Then, the IC card 1 is connected to the connect section 2. It is electrically connected to the read/write device 34. This is F), CPU
II provides guidance on the CRT display device 13, ``Please enter your password.'' After receiving this guidance, the user inputs the password using the keyboard 12. In response to this input, the CPU JJ stores the password in the RAM JJ.
At the same time, a signal indicating the password and the handling machine is stored in the CPU J via the reading/writing device 34, the connecting section 2, and the interface circuit 5. Then, the CPU
J causes the password checking section 7 to compare the supplied password with the password stored in advance in the data memory 4. As a result, if the passwords match, the password matching section 7 outputs a matching signal to the CPU 3, and if they do not match, the password matching section 7 outputs a matching signal to the CPU 3.
Outputs a mismatch signal to PU and 9.

Next, when the verification result from the password verification unit 7 is a match signal, the CPUJ inputs the match signal, the password of the data memory 4, and i.
It is output to the CPU 11, and in the case of a mismatch signal, a mismatch counter (not shown) provided in the data memory 4 is counted up, and when this count value is within a predetermined number (3 times),
A re-throwing soybean discrepancy signal is output to the CPU IJ, and when the count value reaches a predetermined value, an unused signal indicating that the IC card 1 is invalid is output to the CPU 11.

Next, when the CPU 11 receives the matching signal and the PIN number, the CPU 11 executes a comparison circuit 9 to check whether the PIN number matches the PIN number stored in the RAM 15 and inserted into the keyboard 12. Do it with As a result of this rematch,
If they match, the CPU 11 determines that the password has been verified correctly on the IC card 1, and displays the CRT display device 1.
At step 3, the user is guided to "Please input handling data." Accordingly, the user performs various handling processes. In addition, when the CPU 21 receives a re-throwing soybean discrepancy signal, it determines that the password does not match, and displays a message on the CRT display saying "The password is incorrect. Please enter the correct password again." This is done using the device 13. moreover,
If a non-use signal is supplied, the CPU 11 determines that the card is being used illegally, and sends a message saying "Card cannot be used" to the CR.
This is done on the T display device 13.

In addition, if the result of the above re-verification does not match, the CPU.

11 determines that the password verification was not performed correctly with the IC card 1, and causes the CRT display device 13 to display this fact.

As mentioned above, when verifying the password using an IC card, if there is a match, the matching signal and the password are output to the outside and re-verified externally, so it can be confirmed whether the password was verified correctly using the IC card. It is possible to improve reliability and maintain the confidentiality of the IC card password.

In the above embodiment, the comparison circuit is used to perform the re-verification process, but the present invention is not limited to this, and the re-verification process may be performed within the CPU.

〔Effect of the invention〕

As described in detail above, according to the present invention, it is possible to confirm whether the verification using the portable medium is performed correctly while maintaining the confidentiality of the password in the portable medium, and to provide a highly reliable password verification method. .

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention, and FIG. 1 is an external perspective view of an IC card. Figure 2 is a diagram schematically showing the configuration of the electric circuit of the IC card, Figure 3 is an external perspective view of the card handling machine, Figure 4 is a schematic block diagram of the card handling machine, and Figure 5 is the IC card. FIG. 6 is a sectional view showing a schematic configuration of a card reading/writing section, and FIG. 6 is a diagram for explaining a conventional password verification system. 1...-IC card (portable medium), 2... Connect section, 3... CPU, 4... Data memory, 5...
・Interface circuit, 6...RAM17...Password verification unit, 9...Comparison circuit, 10...IC card handling machine, 11...CPU, 12...Key? -do, 13
. . . CRT display device, 20 . . . IC card reading/writing section, 34 . . . reading/writing device. Applicant's representative Patent attorney Takehiko Suzue Figure 1 Figure 2 Figure 4 Figure 5 Figure 1 Mu'Z (J Figure 6

Claims (1)

[Claims] In a device that uses a portable medium having a password verification function, when the password entered from the outside matches the password stored internally when the password is verified by the password verification function, the password is outputted to the outside; A password verification method characterized by re-verifying a password input externally and a password on a portable medium.