JPS62212792A - Personal information management system - Google Patents

Abstract

PURPOSE:To prevent personal information from being leaked by builting and forming an information transmitting/receiving means, a decoding information storing means, an information storing means, and an information decoding control means integrally in a portable type body substance. CONSTITUTION:The information transmitting/receiving means 119, the decoding information storing means 121, the information storing means 123, and the information decoding control means are integrally built in the body substance, and when prescribed relation is formed by the 1st control signal 115 corresponding to a read/write control information inputted from the external and a decoding signal 125 outputted from the means 121, the means 131 permits writing/ reading in/from the means 123. When the 1st control signal 115 instructs reading, information stored in the means 123 is read out from a storing address specified by the 2nd control signal 117 as a reading information signal 129. Thereby, the objective information held in the body substance can be sufficiently protected from leakage and damage.

Description

[Detailed Description of the Invention] [Table of Contents] Page Overview/
・・・・・・・・・・・・・・・・・・4 Industrial application fields・・・・・・・・・・・・4 Conventional technology・・・・・・・・・・・・
...4 Problems that the invention attempts to solve...
・Means for solving 6 problems...7 Actions・
・・・・・・・・・・・・・・・9 Examples of the invention...
・・・・・・・・・10I, Correspondence between the example and FIG. 1...10■, Structure of the example...11
m. Operation of the embodiments...13■. Variations of the invention...20 Effects of the invention...
・・・・・・20 [Summary] A personal information management system in which a predetermined relationship with a decoding signal does not hold between external writing and reading of target information into an information storage means built into a portable tangible object. By configuring it so that it is not possible as much as possible, it is possible to prevent leakage and destruction of the target information stored in the tangible object.

[Industrial application field]

The present invention relates to a personal information management system, and particularly to a personal information management system that can prevent leakage or destruction of information when a tangible object has a function of storing various types of information.

[Conventional technology]

In recent years, the use and research of so-called IC cards incorporating IC memories has progressed. This IC memory has come to have a large storage capacity, and financial institutions and the like are considering ways to use it for the convenience of users.

Currently, each financial institution disburses cash using a magnetic card called an individual CD card.

We provide services such as depositing money. However, since the storage capacity of this magnetic card is extremely small (only about a few dozen characters can be recorded), the reality is that it is not shared among multiple financial institutions.

Focusing on the large storage capacity of such IC cards, experiments are also being conducted at financial institutions. For example, January 2, 1986
In the Nikkei Sangyo Shimbun on the 7th, ``IC card joint experiment j
The use of IC cards has been reported.

Furthermore, since an IC card has a large storage capacity, it is possible to share information from multiple financial institutions with one card. This is convenient because the user does not need to have a card for each financial institution.

Furthermore, not only information at financial institutions, but also, for example, health information of the holder of the IC card can be stored in the IC card, allowing extremely effective use at medical institutions.

As described above, since IC memory has a large storage capacity, a variety of personal information can be stored on one IC card, and this IC card is expected to be widely used in the future.

[Problem that the invention seeks to solve]

However, as mentioned above, a single IC card can store a variety of personal information and is expected to be widely used in the future, but on the other hand, from the perspective of privacy, sufficient protection measures are required for its use. It is necessary to consider.

Even if one IC card can be shared by multiple financial institutions, there is a problem in that if no protection measures are taken, information about one financial institution can be known by other financial institutions. Furthermore, if protection against writing is not taken, there is a problem that the contents can be tampered with.

Furthermore, if no protective measures are taken to protect personal health information, even a doctor other than a doctor who is bound to maintain confidentiality can read the health information stored on the IC card.
There is a problem that personal information may be leaked.

As described above, unless measures are taken to prevent the leakage of IC card information to persons other than those who do not wish to know about it, and to prevent the destruction of stored information, there will be a major problem in the widespread use of IC cards.

The present invention was created in consideration of these points, and when a large amount of information is stored in one information storage means, only an authorized specific person can know the stored information. The purpose of the present invention is to provide a personal information management method that allows new information to be written.

[Means for solving problems]

FIG. 1 is a block diagram of the principle of the personal information management system of the present invention.

In the figure, the information exchange means 119 provides a read signal 111 to the outside as information to be read, and also provides a write signal 1 according to the information to be written that is supplied from the outside.
13, a first control signal 115 is generated in accordance with control information for reading and writing, and a second control signal 117 is generated in accordance with control information specifying the storage location of the target information.

The decryption information storage means 121 stores decryption information for permitting reading and writing of the target information.

The target information is read and written to the information storage means 123.

If a predetermined relationship is established between the decoding signal 125 from the decoding information storage means 121 and the first control signal 115, the information decoding control means 131 outputs the write signal 113 in response to writing and reading of the first control signal 115. The information storage means 12 specified by the second control signal 117 as the storage information signal 127
The target information is written in the storage location No. 3, and the read information signal 129 from the storage location of the information storage means 123 specified by the second control signal 117 is read out as the read signal 111.

In addition, information exchange means 119. Decryption information storage means 121,
Information storage means 123. The information decoding control means 131 is integrally formed into a tangible object.

Therefore, overall, the decoding signal 125 and the first control signal 1
15, the information storage means 123 is configured to be able to write and read the target information.

[For production]

If a predetermined relationship is established between the first control signal 115 corresponding to read/write control information supplied from the outside and the decoding signal 125 from the decoding information storage means 121, the information decoding control means 131 starts storing the information. Allows writing and reading in means 123.

In that case, if the first control signal 115 instructs writing, the second control signal 1 in the information storage means 123
The writing target information supplied from the outside is written into the storage location specified in step 17.

Further, if the first control signal 115 instructs reading, the information storage means 1 specified by the second control signal 117
The stored information is read from the storage location of 23 and the information signal 12
Read as 9. This read information is read signal 111
The information is provided to the outside by the information exchange means 119.

In the present invention, writing and reading of target information to and from the information storage means 123 from the outside is as follows.
Since this is related to the relationship between the first control signal 115 and the decoding signal 125, protection against leakage and destruction of the target information held in this tangible object is sufficient.

[Embodiments of the Invention] Hereinafter, embodiments of the present invention will be described in detail based on the drawings.

- Relationship between the punch and the first method Here, the main components of the embodiment of the present invention and the first method shown in FIG.
The correspondence relationship with the main components of the figure will be described below.

The information exchange means 119 includes the contact electrode 217 and the CPU 2.
It corresponds to 13.

The decryption information storage means 121 corresponds to the EEFROM 215.

The information decoding control means 131 corresponds to the CPU 213.

- The information storage means 123 corresponds to the IC memory 211.

Other signals are within the CPU 2 l 3, the CPU 213,
IC memory 211. This corresponds to a signal exchanged between the EEFROMs 215.

Examples of the present invention will be described below, assuming that the above-mentioned correspondence exists.

In FIGS. 2(A) and 2(B), an IC card 210 used in the embodiment of the present invention includes an IC memory 211 in which personal information of the IC card holder is stored, and a central Processing device (C
PU) 213, rewritable memory (EEFROM) 2 in which a password (access key) for determining whether such writing and reading is to be performed is registered.
15, and a plurality of metal contact electrodes 217 for making electrical contact with external access means (not shown).

The IC card 210 is made of plastic, for example, and has a rectangular plate shape with a certain thickness.

IC memory 211. CPtJ213 and EEFROM
215 is embedded inside the IC card 210 and is not visible from the outside. The plurality of contact electrodes 217 are connected to an IC
It is exposed on the surface of the card 210 and can be contacted with the outside.

IC memory 211. CPU213. EEPROM215
and contact poles 217 are electrically interconnected within IC card 210.

Here, it is assumed that the control information for externally instructing the IC card 210 to write or read personal information and information is 4 bits. Therefore, the contact electrode 21
7 are in groups of four each.

Figure 3 shows the concept of the file structure in the embodiment of the present invention.

That is, according to the file management program of the CPU 213, personal information is filed item by item in the IC memory 211. For example, file 1 (Fl) contains transaction information for A bank account, file 2 (F2) contains transaction information for B bank account, file 3 (F3) contains transaction information for C securities account, file 4 ( F4) has D credit shopping information, file 5 (F5) has pension receipt information, etc.
. . , various information is filed in file n (Fn), such as medical records at N hospital.

Here, an access key (password) for access is registered in advance. For example, this access key is determined according to the code assigned to each financial institution, and the access key based on the code is given to the IC card 210 by an external device, and then stored in the EEFROM via the CPU 213.
Write it in 215. The same applies to medical institutions, etc.

FIG. 4 shows the procedure for accessing personal information from the IC card 210.

The operation will now be described with reference to FIGS. 2 to 4, assuming that transaction information on the bank account of B is to be accessed in file 2 (F2).

The automatic transaction device (A) installed in Bank B as an external device
TM, etc.), the rc card 210 is operated by its card reading unit. Then, the automatic transaction device and I
The C card 210 is electrically connected to the contact electrode 217, and becomes operational. This allows access according to the file management program of the CPU 213, as shown in FIG. In this state, the holder of the IC card 210 is assumed to have made a desired transaction.

First, the automatic transaction device on line 881 inputs a file number (here, file 2) (step 411).

Next, an access key (password) is input (step 412).

The CPU 213 of the IC card 210 is already equipped with an EEPROM.
The access key (password) of Bank B registered (stored) in 215 is called up, and it is determined whether the two access keys match (step 413). In addition, EBPR has already been
In the OM 215, the Bt 艮行 code is registered as an access key (password).

If the input access key is correct (affirmative judgment), I
The data filed in the C memory 211 is read out (step 414). Here, the storage information of the file according to the file number entered manually in step 411 is read out.

Furthermore, when new data is written to update the data, the stored information is rewritten in step 414.

By the way, if the access key input in step 412 is incorrect (negative determination in step 413), the CPU 213 sends a signal to the automatic transaction device that access is not possible (step 415). Therefore, if the access key (password) is different, the IC memory 211 cannot be accessed, so there will be no leakage or destruction of information stored in the IC card 210.

FIG. 5(A) shows the structure of an access command when reading information stored in the IC card 210.

Here, the information read designation signal 511 is a read command to the IC card 210 from the outside. The contents are at the very front (
STX), file number, access key (password)
and the final part (ETX). Further, the read permission signal 513 is a read command from the IC card 210 to the outside, and includes an instruction part (OK) for permitting reading between the first part (STX) and the last part (ETX).

Furthermore, the read information signal 515 is a read command from the IC card 210 to the outside, and has a configuration in which file data (that is, read data) is included between the first part (STX) and the last part (ETX). ing.

FIG. 5(B) shows the structure of an access command when storing (writing) information on the IC card 210. Here, the information write designation signal 521 is transmitted from the outside to the IC card 21.
This is a write command to 0.

The contents are the front part (STX), file number,
It consists of an access key (password) and a final part (ETX). Further, the write permission signal 523 is a write command from the IC card 210 to the outside, and is
) and the final part (ETX) includes an instruction part (OK) that permits writing. Furthermore, the write information signal 52
5 is a write command to the IC card 210 from the outside, and file data (that is, write data) is included between the first part (STX) and the last part (ETX).

FIG. 6(A) is a timing diagram showing an information read access to the rc card 210, and FIG. 6(B) is a timing diagram showing an information write access.

Hereinafter, FIGS. 5(A) to (B) and 6IA(A) to (
See also B).

Therefore, in the control procedure of the file management program as shown in FIG.
The information write designation signal 511 created based on the file number and access key input in step 12 is compared with the registered access key of the EEPROM 215 in step 413. If they match, the read permission signal 51
3 to enable access. Furthermore, the transaction information supplied from the automated teller machine is used as file data to create a read information signal 515 and access the IC memory 211.

Also, in the case of read access, it is determined in step 413 whether access is possible or not, and write access is performed in step 414.

The timing of the access in step 414 is as follows: in the case of a read access, a write command (W T
) is at the "high" level, the read command (π ding) is "
When the CPU 213 takes the “low” level, the CPU 213
11 (see FIG. 6(A)). The 4-pinto read information to be read here is read from the storage location of the IC memory 211 according to the specified information in the file number included in the information read designation signal 511, and is provided to the automatic transaction device as the read information signal 515. be done.

Also, in the case of write access in step 414, when the read command is at a "high" level and when the write command is at a "low" level, a 4-bit transaction is provided externally via the contact electrode 217. Information is written by the CPU 213 to a predetermined storage location in the IC memory 211 (specified by the file number included in the information write designation signal 521).

Note that in the embodiment of the present invention described above, the case where bank account information is accessed is described, but it is also possible to write various other personal information.

The same applies to reading.

In addition, (the C memory 211 can be formed of an E'EPROM, and this and the EEPROM 215 may be formed as one EEPROM without being formed separately.The means for storing personal information is not limited to the plastic IC card 210. , any tangible object that is convenient to carry.

Furthermore, in [I. Correspondence between Examples and FIG. 1],
Although the correspondence relationship between the embodiment of the present invention and FIG. 1 has been described, the present invention is not limited to this, and it goes without saying that there are various modifications B of the present invention.

〔Effect of the invention〕

As described above, according to the personal information management method of the present invention,
When storing and managing various types of personal information in one shared tangible object, by providing decryption information in this tangible object, unless the decryption information and access information meet certain conditions, it cannot be read or accessed. Since protection measures are taken to prevent writing, personal information will not be leaked or destroyed (
It can prevent unauthorized access (unauthorized access), and is extremely useful in practical terms, especially in the future information society.

[Brief explanation of drawings]

Figure 1 is a principle block diagram of the personal information management system of the present invention, Figures 2 (A) and (B) are block diagrams of the configuration of the personal information management system according to an embodiment of the present invention, and Figure 3 is a basic block diagram of the personal information management system of the present invention. A conceptual diagram of filing in an embodiment of the invention; FIG. 4 is a flowchart showing the execution order in an embodiment of the invention; FIGS. 5(A) and (B) are configuration diagrams of instructions in an embodiment of the invention; FIGS. 6A and 6B are operation timing diagrams in an embodiment of the present invention. In the figure, 111 is a read signal, 113 is a write signal, 115 is a first control signal, 117 is a second control signal, 119 is information exchange means, 121 is decoding information storage means, 123 is information storage means, 125 is decoding 127 is a stored information signal, 129 is a read information signal, 131 is an information decoding control means, 210 is an IC card, 211 is a TC memory, 213 is a central processing unit (CPU), 215 is a memory (εII-FROM), 217 is a contact electrode, 511 is an information read designation signal, 513 is a read permission signal, 515 is a read information signal, 523 is a write permission signal, and 525 is a write information signal. Block diagram of the principle of light transmission Fig. 1 An explanatory diagram of the example of the test Fig. 2 Filing, W, signal Fig. 3 An explanatory diagram of the controller j song Fig. 4 Fig. 5

Claims (5)

[Claims] (1) The read signal (111) is provided to the outside as information to be read, and the write signal (113) is provided to the outside according to the information to be written that is supplied from the outside. 1 control signal (115),
The second information is stored in accordance with the control information that specifies the storage location of the target information.
Information exchange means (
119), a decoding information storage means (121) storing a plurality of pieces of decoding information for permitting reading and writing of the target information in response to the second control signal (117), and a second control signal (117). information storage means (123) in which the target information is read and written according to the decoding information storage means (121);
If a predetermined relationship is established between the first control signal (125) and the first control signal (115), the write signal (113) is transferred to the stored information signal (125) in response to writing and reading of the first control signal (115).
7), the target information is written in the storage location of the information storage means (123) specified by the second control signal (117),
Further, a read information signal (129) from the storage location of the information storage means (123) specified by the second control signal (117)
an information decoding control means (131) for reading out the information as a readout signal (111);
121), an information storage means (123), and an information decoding control means (131) are integrally incorporated into a portable tangible object. (2) Personal information management according to claim 1, wherein the predetermined relationship is that the decoding information of the first control signal (115) and the decoding signal (125) both match. method. (3) The personal information management system according to claim 1, wherein the target information is personal information of each holder of the tangible object. (4) The personal information management system according to claim 1 or 3, wherein the tangible object is a portable card. (5) The personal information management system according to claim 3, wherein the personal information is transaction information at a financial institution.