JPS62100892A - Personal collation system for ic card - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

[Detailed Description of the Invention] [Technical Field of the Invention] The present invention is used, for example, to verify the identity of an IC card used as a cash card issued by a financial institution such as a bank and its owner. Regarding IC card personal verification method.

1 Conventional technology and its problems In recent years, it has been called the cashless era, and by using a cash card issued by a financial institution such as a bank, it is possible to withdraw the necessary amount of cash only when necessary. It becomes. In other words, the movement of household funds is decreasing due to bank transfers for salaries, automatic transfers for utility bills, and payments for credit card shopping.

Conventionally, plastic cards, embossed cards, magnetic striped cards, and the like have been generally used as the above-mentioned cash cards, but these cards are easy to forge due to their structure, and unauthorized use has become a problem. In order to solve these problems, information cards, so-called IC cards, have recently been developed that incorporate an IC circuit that stores a PIN number, etc. into the card so that the PIN number cannot be read easily from the outside. . This IC card is difficult to forge and 1llf
It has excellent idiosyncrasies and has the advantage of being able to store a large amount of information. However, when actually conducting a transaction using an IC card such as the one mentioned above, the IC card is attached to an IC card terminal installed at a bank or store, and the cardholder's PIN number is entered. After checking the match,
Predetermined transaction processing is performed.

However, since the PIN number stored in the internal memory of the IC card as described above must be entered manually at the card terminal when verifying the identity, it is completely impossible to prevent it from being known to others. If the PIN number of a high-value depositor is stolen, there is a possibility that fraudulent transactions will result in large losses.

[Object of the invention] This invention was made in view of the above problems.
To provide an IC card personal verification system that can prevent illegal high-value transactions from being carried out even if, for example, a personal identification number of a high-value depositor is stolen.

[Key Points of the Invention 1] In other words, the IC card personal verification method according to the present invention prepares a low-value deposit account and a high-value deposit account separately in advance, and also stores not only PIN information but also date of birth etc. in the IC card. Personal information is also stored, and in the case of a high-value transaction in which the desired transaction amount exceeds a predetermined amount, double personal verification is performed between the above-mentioned password information and personal information, and the above-mentioned high-value exclusive account is used. It is something.

[Embodiment 1 of the invention An embodiment of the present invention will be described below with reference to the drawings.

Figure 1 shows the external configuration of an IC card 11 and an IC card terminal 12 that utilize the IC card personal verification method. A card insertion slot 15 for electrical connection with the IC card 11 is provided in the card slot 15 . The keyboard 13 includes a monetary unit key as well as a numeric keypad and function keys. This keyboard 13 is used to enter the cardholder's PIN (Personal Identification Number) when verifying the card 11 and the cardholder.
tion Number) or various personal information (
It is used to enter information such as date of birth, place of birth, and telephone number, and also, for example, to enter the amount to be withdrawn from a savings account.The above-mentioned PIN is arbitrarily set by the cardholder. This is a code with a predetermined number of characters. Also, I
An arrow A indicating the insertion direction into the card insertion slot 15 is provided on the top surface of the C card 11, and a connection terminal 11a7') is provided on the bottom surface of the main body. It is now possible to connect with.

Next, the circuit configuration of the IC card 11 will be explained with reference to FIG.

In the figure, 21 is a system control unit, and this system control unit 21 is equipped with an access mechanism 22, a PIN memory 23 for storing the cardholder's personal identification number PIN, and a low-value deposit below a preset transaction limit. Account number PANI (Primary Account
Low-value account data memory 2 that stores information such as
4a. Account number PAN2 (Primary Account Nu
High-value account data memory 24b that stores information such as
, a personal information memory 25 that stores the date of birth, place of birth, and telephone number of the card holder, and a transaction memory 26 that stores transaction information such as the account balance. Also,
This system control section 21 has a PIN information comparison section 28, a transaction amount comparison section 2, and an I10 interface chair 27 for connection matching with the card terminal 12.
9 and personal information comparison unit 30 are connected. The PIN information comparison section 28 compares the PIN number manually entered from the card terminal 12 via the I10 interface 27 and the true card owner's PIN number read out from the PIN memory 23 via the output line Q1 and the system control section 21. The judgment output from the comparison section 28 is sent to the card terminal 12 side via the I10 interface 27, and is also sent to the transaction amount comparison section 29. Supplied. This transaction amount comparison section 29 compares and determines whether the refund amount (X) inputted from the card terminal 12 exceeds a predetermined transaction amount (Y). The determination output from i1. ! 2 through low amount account data memory 24a1 personal information memory 2
5, and is also supplied to the personal information comparison section 30. This personal information comparison section 30 compares the personal information keyed from the card terminal 12 via the I10 interface 27 and the true card ownership information read out from the personal information memory 25 via the output line 03 and the system control section 21. The judgment output from the comparison section 30 is sent to the card terminal 12 side via the I10 interface 27, and is also sent to the system control section 21 and the system control section 21. It is supplied to the high value account data memory 24b via input line i3. Here, the output lines 02 and 04 of the low-performance account data memory 24a and the high-value account data memory 24b are connected to the I10 interface 27, and the transaction memory 2
The input/output line io of 6 is connected to I via the system control unit 21.
10 interface 27.

Next, the operation when, for example, actually withdrawing money from a deposit account using the method of the above embodiment will be explained with reference to the flowcharts shown in FIGS. 3(A) to 3(C).

In each of the above flowcharts, the left side of the center vertical line is I.
The operation of the C card 11 is shown, and the right side shows the operation of the IC card terminal 12.

First, when the cardholder goes to the location where the card terminal 12 is installed, the message "Please insert your card" is displayed on the display section 14 of the terminal 12 (step 81). Here, in step S2, one end of the IC card 11 is inserted into the card insertion slot 15 of the IC card terminal 12 to establish an electrical connection between the connection terminal 11a on the card side and the internal circuit on the terminal 12 side. Proceeding to step S3, the bank code memory 24
Based on the account number PAN etc. extracted from the IC card 11, it is determined whether or not the present IC card 11 is valid for the currently connected card terminal 12. In this step $3, if rNOJ is determined, that is, the card 11 is determined to be a card that cannot be used in the card terminal 12,
The display section 14 of the card terminal 12 displays the message "
Your card cannot be used.J is displayed and the card is invalidated (step 84). On the other hand, in step S3 above, rYesJ, that is, the main card 1
1 is determined to be valid for the currently connected card terminal 12, the process advances to step S5, and the terminal display section 14 displays a message "Please enter your PIN number" for identity verification. Display.

Here, the card owner manually enters his/her personal identification number PIN using the keyboard 13 of the card terminal 12 (step S6). Then, this key human-powered PI
N is sent to the PIN comparison unit 28 in the IC card 11 and is stored in advance in the PIN memory 23 of the main card 11.
It is compared with the PIN number of the true owner (step 87). If it is determined that rNoJ, that is, the PIN number entered manually and the true PIN do not match and the authenticity of the cardholder cannot be confirmed, the determination signal is sent to the card terminal 12 and displayed on the display unit 14. , the message "The entered PIN is incorrect J" is displayed, and input error processing is executed (step S8).On the other hand, in step S7, rYesJ is displayed, that is, the entered PIN and the memorized PIN are the same. When it is determined that the person who entered the PIN key in step S6 is the true owner of the card 11, the match determination signal is transmitted to the card terminal 12, and the display unit 14 displays the following message "Amount of money.""Pleaseenter" is displayed (step 89).

Then, the cardholder uses the keyboard 13 of the card terminal 12 to enter the amount (X) that he or she wishes to withdraw from his or her account in accordance with the amount entry message (step 510). Then, this key human-powered amount data (X) is transferred to the transaction amount comparison section 2 in the IC card 11.
9 and is compared with a predetermined transaction limit amount (Y) stored in advance in this comparison section 29 (step $11).
.

Here, if it is determined that the refund amount (X) desired by the cardholder is lower than the transaction limit amount (Y), the determination signal is sent to the card terminal 12 and the system control It is also supplied to section 21. As a result, the card terminal 12 uses the account number PANI and other data read from the low-value account data memory 24a of the IC card 11 to establish a low-value deposit account with the host computer via online connection with the corresponding bank in step 812a. Perform transaction authentication processing.

In this case, the process proceeds to step 813 and the card terminal 12
writes the transaction information into the transaction memory 26 of the IC card 11 and refunds the specified amount of cash, and proceeds to step 814 to eject the IC card 11 from the card insertion slot 1 of the card terminal 12. As a result, the cardholder receives the cash refunded through the transaction authentication process using the low-value account, and also takes out his/her IC card 11 that has been ejected from the card insertion slot 15, and the refund amount (X) is the transaction limit ( If the amount does not exceed Y), the bank transaction is terminated (step 515).

On the other hand, in step 811, if it is determined that the refund amount (X) desired by the cardholder is a large amount exceeding the transaction limit (Y), the determination signal is transmitted to the card terminal 12, Furthermore, the terminal display section 14 displays a message [Please enter your date of birth] for identity verification (step 816).
.

Here, the cardholder enters his or her date of birth using the keyboard 13 of the card terminal 12 (step 517). Then, this date of birth data manually generated by the key is sent to the personal information comparison section 30 in the IC card 11 and compared with the date of birth of the true owner of the card 11 stored in advance in the personal information memory 25. (step 818). If "No" here, that is, if it is determined that the date of birth determined manually by the key does not match the true date of birth and the validity of the cardholder cannot be confirmed, the determination signal is sent to the card terminal 12 side. The message "The input date of birth is incorrect" is displayed on the display unit 14, and input error processing is executed (step $19).
. On the other hand, if the answer in step 818 is "Yes", that is, the input date of birth matches the true date of birth, and the key holder of the date of birth in step 817 is the true owner of the card 11. If it is determined that there is a high possibility that there is a match, the match determination signal is sent to the card terminal 12, and the display unit 14 displays the following identity verification message [Please enter your hometown J (step 320).
.

Here, the cardholder enters his or her hometown using the keyboard 13 of the card terminal 12 (step $21). Then, this data on the place of birth created manually is sent to the personal information comparison section 30 in the IC card 11, and is stored in the main card 1 in advance in the personal information memory 25.
1 is compared with the origin of the true owner (Step 5)
22).

If the answer is "No" here, that is, if it is determined that the place of birth determined by the key operator and the true place of birth do not match and the legitimacy of the cardholder cannot be confirmed, the determination signal is sent to the card terminal 12.
The message ``The input hometown is incorrect'' is displayed on the display unit 14, and input error processing is executed (step 523). On the other hand, rYesJ in the above step S22, that is, the input birthplace and the true birthplace match, and it is extremely possible that the key person of the birthplace in the above step 821 is the true owner of the card 11. If it is determined that the match is high, the match determination signal is transmitted to the card terminal 12, and the display unit 14 further displays the next identity verification message "Please enter your telephone number" (step 524).

Here, the cardholder again uses the keyboard 13 of the card terminal 12 to key in his or her telephone number (step 525). Then, this telephone number data manually generated by the key is sent to the personal information comparison section 30 in the IC card 11 and compared with the telephone number of the true owner of the main card 11 stored in advance in the personal information memory 25. (
Step $26). If it is determined that the cardholder's legitimacy cannot be confirmed because rNoJ, that is, the telephone number entered manually and the true telephone number do not match, the determination signal is sent to the card terminal 12 and displayed on the display unit 14. teeth,
The message [Input phone number is incorrect.J] is displayed and input error processing is executed.
7). On the other hand, in step 826, rYesj,
In other words, the input phone number above matches the true phone number,
The key operator of the telephone number in step 825 above is:
When it is determined that the true owner of the card 11 is almost confirmed, the match determination signal is sent to the card terminal 11.
and is also supplied to the system control unit 21. As a result, the card terminal 12
Based on the account number PAN2 and other data read from the high-value account data memory 24b of No. 1, in step 512b, transaction authentication processing using the high-value deposit account is performed with the host computer via online connection with the corresponding bank. Thereafter, the process proceeds to step 813, where the card terminal 12 writes the transaction information to the transaction memory 26 of the IC card 11, and refunds the specified amount of cash input in step S10, and proceeds to step S14, where the card terminal 11 is ejected from the card insertion slot 15 of the card terminal 12. This results in
The owner of the card receives the cash refunded through the transaction authentication process using the high-value account, takes out his/her IC card 11 ejected from the card insertion slot 15, and confirms that the refund amount (X) is within the transaction limit class (Y). ), the bank transaction is terminated (step 515).

Therefore, according to the IC card personal verification system configured as described above, when a cardholder wishes to make a low-value refund, the authenticity of the cardholder is confirmed by verifying the identity using only the PIN number, and the cardholder's authenticity is confirmed by verifying the identity using only the PIN number. When making a transaction or making a large refund, the cardholder's legitimacy is verified through complex identification using not only the PIN number but also three pieces of personal information (date of birth, place of birth, and telephone number). In addition, we have ensured that transactions are carried out in high-value deposit accounts, so even if your PIN is stolen and a refund is fraudulently made, we will still be able to confirm that all other personal information, including identification, is verified. Not only is it extremely difficult to do so, but we have also made it impossible to conduct transactions using the above-mentioned high-value account if the identity is verified using only the above-mentioned PIN number, thereby preventing fraudulent transactions that would result in large losses. .

[Effects of the Invention] As described above, according to the present invention, a low-value deposit account and a high-value deposit account are prepared separately in advance, and not only the password information but also personal information such as date of birth can be stored in the IC card. If the desired transaction amount exceeds a predetermined amount, double verification of the personal information and personal information is performed and the account for large amounts is used.For example, Even if the personal identification number of a high-value depositor is stolen, it is possible to prevent fraudulent high-value transactions from being carried out, and the amount of damage can be kept to a minimum.

[Brief explanation of drawings]

Fig. 1 is an external configuration diagram showing an IC card and an IC card terminal using an IC card personal verification system according to an embodiment of the present invention, and Fig. 2 is a block diagram showing the circuit configuration of the IC card in Fig. 1 above. , Fig. 3(A)-(C
) are flowcharts showing the verification transaction operation according to the above-mentioned IC card personal verification method. 11...IC card, 12...IC card terminal, 13...key personnel section, 14...display section, 15.
...Card insertion slot, 21...System Systems Department, 2
3...PIN memory, 24a...Low amount account data memory, 24b...Large amount account data memory, 25...
Personal information memory, 27...l, 10 interface, 28...Password information comparison section, two...Transaction amount comparison section, 30...Personal information comparison section.

Claims (1)

[Claims] Account data storage means for separately storing each account data of a low-value deposit account and a high-value deposit account; a password information storage means for storing password information; a personal information storage means for storing personal information; and the password information and personal information. and an input means for inputting a transaction amount, a password information verification means for determining whether or not the password information input by the input means matches the password information stored by the password information storage means, and the password information. transaction amount comparison means for determining whether or not the transaction amount input by the input means exceeds a predetermined transaction amount when the input password information and the stored password information are determined to match by the verification means; and when the transaction amount comparison means determines that the input transaction amount exceeds a predetermined transaction amount, the personal information input by the input means and the personal information stored by the personal information storage means match. personal information matching means for determining whether or not the input personal information matches the stored personal information; The IC card personal verification method is characterized in that it is equipped with an amount-based transaction means for performing transaction authentication processing, and when the input transaction amount is large, double personal verification is performed and a high-value exclusive account is used.