JPS63159991A - Portable storage medium processor - Google Patents

Abstract

PURPOSE:To exactly prevent an erroneous data from being written, by adding the discriminating information to data respectively in each data holding device, collating these discriminating information, and confirming whether each data in each data holding device is in a correct relation or not. CONSTITUTION:A data discriminating code is added in advance to each data in a floppy disk device 14 (or a magnetic tape unit 15) and a key card KC, prior to read and write of a data, these data discriminating codes are read out and collated. Subsequently, whether each data in the floppy disk device 14 (or the magnetic tape unit 15) and the key card KC is in a correct relation or not is confirmed, and when it is confirmed that each data is in a correct relation, read and write of a data by a read/write control part 39 are executed. In such a way, write of an erroneous data can be prevented exactly.

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention (Industrial Application Field) The present invention relates to a portable storage medium processing device that issues portable storage media such as IC cards.

(Prior art) Cards with magnetic stripes, so-called magnetic cards, which are generally used for identification cards or credit cards, have a small amount of stored data and are easy to read, so they have low security. There's a problem.

Therefore, recently, a so-called IC card, which is a portable storage medium that has high security against readout of stored contents and has a large storage capacity, is being used. This type of IC card is usually handed over from the card manufacturer to the card issuer in an unissued state, and the card issuer writes predetermined data on it, issues it, and hands it to the user. .

By the way, in the conventional IC card issuance processing method, data written on a magnetic tape or floppy disk is directly input to a card reader/writer via a host computer, as in the case of conventional magnetic card issuance.
A method was used in which the IC card was issued by writing on an unissued IC card.

However, in such conventional processing methods, there is a very large possibility that the data written on the IC card will be easily leaked to the outside, and therefore there is a drawback that security for the processing device is poor.

Therefore, recently, some of the data important for security has been
It has been considered that the information is stored (stored) in a C card and data is input using this IC card. However, since it is impossible for an IC card to hold all the data of the issued IC card, it is also necessary to input data using a magnetic tape or floppy disk. For this reason, there is a problem that a plurality of data holding devices are used for data input, and if the data in each data holding device is not in the correct relationship, erroneous data may be written.

(Problems to be Solved by the Invention) As described above, the present invention solves the problem that if the data in each data holding device for data input is not in the correct relationship, incorrect data will be written. To provide a portable storage medium processing device which can check whether data in each data storage device has a correct relationship with each other and can reliably prevent writing of erroneous data. With the goal.

[Structure of the Invention] (Means for Solving the Problems) A portable storage medium processing device of the present invention writes predetermined data to a portable storage medium, and has identification information added thereto. a first data holding device that holds different data for each portable storage medium to be written in the portable storage medium, and a first data holding device that is common to the portable storage medium to which identification information is added and to be written in the portable storage medium; a second data holding device holding data; Second
By reading each of the identification information from the data holding device and collating each of these pieces of identification information, the first. f! Check whether there is a correct relationship between the data in the second data holding device. If it is confirmed that there is a correct relationship between the verification means and the verification means, the first. The apparatus further includes a reading/writing control means for controlling reading/writing of data between the second data holding device and the portable storage medium.

(Function) By adding identification information to each data in each data holding device and comparing these identification information, it is confirmed whether the data in each data holding device is in a correct relationship with each other, When it is confirmed that there is a correct relationship, by reading and writing data between each data holding device and the portable storage medium, it is possible to check whether or not there is a correct relationship between the data in each data holding device. Check and
Writing of incorrect data can be reliably prevented.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 3 shows an example of a portable storage medium according to the present invention.
The appearance of an IC card with a magnetic stripe after being issued is shown. That is, 1 is a card body, which is made of, for example, a rectangular thin plastic plate. A magnetic stripe 2 is provided at the end of the front surface of the card body 1 in the form of a strip in the longitudinal direction. In addition, on the surface of the card body 1, embossed information 3 is written on an embossed print.
is formed. The embossed information 3 includes, for example, the name of the card holder, the account number, and the expiration date of the card.
It consists of identification information of the cardholder.

Furthermore, the surface of the card body 1 is electrically connected to an integrated circuit (IC>4) embedded in the card body 1, and serves as an input/output terminal for electrical contact with a card reader/writer (not shown). A contact section 5 is provided.The integrated circuit 4 is composed of a control section (for example, a microprocessor) 6 and a memory section (for example, an EEPROM) 7.The embossed information 3 is provided before publication.
is not formed.

FIG. 2 shows an external perspective view of an IC card processing device that issues IC cards as an example of a portable storage medium processing device according to the present invention, and FIG. 1 shows a block configuration diagram thereof. That is, 11 is a host control unit, which includes a host processor 12 consisting of a control section (not shown) and a memory section containing a control program, and a hard disk drive 1213 that stores a program for controlling the entire apparatus and the processing contents of the apparatus. and a floppy disk device [14] for inputting data that is part of the data to be written on the IC card and that differs from IC card to IC card, such as the name of the card holder and the account number in the case of a cash card. This is the host for the device that will be used. Here, an example of the data format of the floppy disk in the floppy disk device [14]
As shown in the figure, from the beginning, the data control unit D11,
Data identification code D12 as identification information, data (personal data) D13. It is configured in the following order. The data identification code D12 is an identification code of the data D13, and is composed of numbers or symbols.

15 is a magnetic tape unit for inputting different data for each IC card, similar to the floppy disk M14, and is connected to the host processor 12, so that it can be used, for example, by an IC card issuer for its services. It is also possible to use the magnetic tape created by the magnetic tape unit of the host computer from the list of new subscribers registered in the host computer of the system. Here, an example of the data format of the magnetic tape in the magnetic tape unit 15 is shown in FIG. 6, starting from the beginning with a data start mark D21, a data identification code D22 as identification information, data (personal data) D23. It is configured in the following order. The data identification code D22 is an identification code of the data D23, and is composed of numbers or symbols.

16 is a keyboard for performing various operations, and 17 is a CRT display device for displaying operating procedures, status, etc., and these are connected to the host processor 12.

18 is a card reader/writer, and the host processor 12
It is possible to insert an access key card AC to activate the device. Here, as the access key card AC, for example, an IC card similar to the IC card shown in FIG. 3 is used.

However, the magnetic stripe 2 and the embossed information 3 may not be provided.

19 is a printer that creates a shipping note for shipping the issued IC card to its owner, and 20 is a printer that sends the card holder's temporary PIN (which can be changed by the card holder) to the IC card holder. Issuance notice to notify separately! 21, which are connected to the host processor 12. The issuance notice 21 created by the printer 20 is structured as shown in FIG. 7, for example. In other words, the issuance notice is in the form of an envelope, with the periphery (hatched area 23) glued to two sheets of paper 22 in advance! 21 is formed so that it can be cut at perforations 24 provided at its peripheral edge. And this issuance notice! 21, address/name 25 and temporary PIN number 2
6 etc. will be printed. In this case, the area where the address/name 25 is printed will also be colored on the first sheet on the front, and the area where the temporary PIN number 26 will be printed will be colored only on the front (inside) of the second sheet on the back, and the area where the temporary PIN number 26 will be printed will be colored only on the front (inside) of the second sheet. is designed not to develop color. As a result, the temporary PIN number is written so that only the cardholder can know it.

27 is an issuance processing unit that processes the IC card to be issued, and is connected to the host processor 12. The issue processing unit 27 is configured as follows. That is, 28 is a microprocessor, and host processor 1
IC card issuance control according to commands from 2, that is, control to write magnetic data on the magnetic stripe 2 of the IC card, control to form embossed information 3 on the IC card, and write data to the memory section 7 of the IC card. Control etc. 29 is a keyboard, and 30 is a display device, which are connected to the microprocessor 28. The keyboard 29 is used for inputting a PIN number and for book issuance processing unit 27.
Used as input for test operation, reset in case of trouble, etc. The display 30 displays the status of the main issue processing unit 27, the results of test operations, and the like.

Unissued IC cards are stacked and stored in a hopper 31, and are taken out one by one in response to a signal from the microprocessor 28. The IC card taken out from the hopper 31 is sent to an encoder section 32 in which magnetic data is written.
sent to. After a detector (not shown) detects that the IC card has arrived at the encoder 32, the microprocessor 28 writes magnetic data on the magnetic stripe 2 using a write/read head (magnetic head) (not shown). After writing is completed, the microprocessor 28 reads the written data, checks whether the written data is correctly written, and then sends the IC card to the embossing unit 33.

If the written data is incorrect, the magnetic data is written again and then checked. If the writing still cannot be done correctly, the data passes through the embossing unit 33, further passes through the reader/writer unit 34, and is sent to the destruction unit 35, where, for example, as shown in FIG. open it. This results in
To make an IC card unusable and to visually determine that it is a defective IC card. Further, if the emboss information 3 has been formed, a hole 9 is also made in the emboss information 3 portion as shown in FIG. 4, for example. Regarding electrical recording, it is possible to write a void command in the memory section 7 so that the IC card cannot be used by the control section 6 of the IC card, so it is not necessarily necessary to destroy the IC card by drilling a hole or the like. This not only makes it impossible to use this IC card in a terminal that can use it, but also makes it possible to determine that this IC card cannot be used without using a device. The punching of the magnetic stripe 2 and the embossed information 3 and the writing of a void command into the memory section 7 are performed in the following manner.

The first is when the magnetic stripe 2 is defective, the writing to the magnetic stripe 2 is completed normally but there is an error in the middle of forming the embossed information 3, and the second is when the embossed information 3 is formed normally. and cases where the embossed information 3 is formed normally but not normally (for example, when the last digit of the account number is embossed with an incorrect number) and it is impossible to write to the memory unit 7. It is. Third, although the magnetic stripe 2 and emboss information 3 are normal, a part of the memory section 7 is defective, so it is not a normal IC card, but the terminal that can use this IC card is partially used. If possible.

In the first case, a hole 8 is made in the magnetic stripe 2 by the destruction unit 35, and a hole 8 is made in the magnetic stripe 2 by the reader/writer unit 34.
A void command is loaded into the memory section 7. Although the emboss information 3 is not formed at all, since it is incomplete, it can be determined by looking at it, and therefore there is no need to make holes with the destruction unit 35.

In the second case, since the magnetic stripe 2 is written normally and the embossed information 3 is formed normally, each part of the magnetic stripe 2 and embossed information 3 is punched by the destruction unit 35. Let's do it. Since data cannot be written into the memory unit 7, there is no need for the reader/writer unit 34 to write a void instruction (in fact, it is impossible to write the void instruction itself).

In the third case, each part of the magnetic stripe 2 and embossed information 3 is punched by the destruction unit 35 @, and a void command is written in the memory section 7 by the reader/writer unit 34 .

After the above-mentioned unusable processing is performed on the defective IC cards, they are sorted by the sorting section 36 and are stacked in the reject stacker 37.

The IC card on which magnetic data has been normally written and sent to the embossing unit 33 has embossed information 3 formed thereon. Here, we generally use character types (
Although raised characters are formed on the upper side by pressing (convex and concave), raised characters may also be formed by pasting characters. When forming emboss information 3 by pressing a character mold, the position of the press mold for each character is checked, and the microprocessor 28 checks whether or not the emboss is done correctly. Immediately after this happens, embossing is stopped and the above-mentioned unusable process is performed. Of course, the data to be embossed is controlled by the microprocessor 28.

When the embossed information 3 is normally formed, the IC card is sent to the reader/writer unit 34, and the contact portion 5 of the IC card is placed at the contact position of the reader/writer unit 34.
came and was stopped. After that, the reader/writer unit 34
The microprocessor 28 controls the non-oral contact portion of the IC card to contact the contact portion 5 of the IC card.

When the microprocessor 28 inputs a signal to the read/write control section 39 indicating that the contact of the contact section 5 has been completed, the read/write control section 39 supplies power to the control section 6 and the memory section 7 via the contact section 5. and sends a start signal (command).

Read and write! After receiving a reply signal (response) from the IC card control unit 6, the 1IJI11 unit 39 sends the card reader/writer 4 connected to the reading/writing control unit 39.
Key card KC inserted into 0, and card reader/
Fixed data card FC inserted into writer 41
The data is written into the memory section 7 of the IC card and checked. Here, when the read/write controller 39 confirms that the data has been written normally, the microprocessor 28 receives a signal from the read/write controller 39 and sends the IC card's contact section 5 to a contact (not shown). The reader/writer unit 34 is controlled to separate the parts. Thereafter, under the control of the microprocessor 28, the IC cards pass through the destruction unit 35 and are sorted by the sorting section 36, and the IC cards on which all writing has been normally completed are stacked in the stacker 38. Here, as the key card KO and fixed data card FC, for example, an IC card similar to the IC card shown in FIG. 3 is used.

However, the magnetic stripe 2 and the embossed information 3 may not be provided.

In addition, in FIG. 2, 42 is the I in the stacker 37°38.
This is an exit door for taking out the C card.

FIG. 8 shows the contents of the memory section 50 of the access key card AC. 51 is a control program area, 52 is a terminal access code area, 53 is a card access code area, 54 is a pin number area, 55 is a user name (code) area, 56 is a void area, 57 is an error count area, and 58 is an issue area. This is the recording area.

FIG. 9 shows the contents of the memory section 60 of the key card KC. 61 is a control program area, 62 is an issue code area, 63 is a terminal access code area, 64 is a card access code area, 65 is a pin number area, 66
is user name (code) area, 67 is issue 1 temporary PIN area, 68 is issuer record area, 69 is void area, 70 is error count area, 71 is issue number area, 72 is issue count area, 73 is Defective power runt area, 74 is cumulative issuance area, 75 is issuance record area,
76 is a data identification code area.

Figure 10 shows the memory section 8 of the fixed data card FC.
The content of 0 is shown. 81 is a control program area;
82 is an issue code area, 83 is a terminal access code area, 84 is a card access code area, 85 is a pin number area, 86 is a user name (code) area, 87
is a void area, 88 is an error count area, and 89 is a data area.

FIG. 11 shows the contents of the memory section 7 of the IC card after it is issued. 91 is the basic Ill'IA program area, 92 is the manufacturer record area, 93 is the issuer record area,
94 is an issue record area, 95 is an application program area, 96 is a bearer record area, and 97 is an empty area.

Next, the operation of the above configuration will be explained with reference to the flowchart shown in FIG. 12.

First, when you turn on the power of this device, the host processor 1
Step 2 performs initial settings, and if there are no problems, displays a message "Insert the access key card" on the display device 17 (Sl). Here, the operator inserts the access key card AC into the card reader/writer 18 (S2). Then, the access key card AC is supplied with power and activated, and a check is made between the access key card AC and the host processor 12 to see if the inserted access key card AC is compatible with this device. be done (83.84). This compatibility verification is performed, for example, in the following manner.

That is, a terminal access code is stored in the terminal access code area 52 of the memory section 50 of the access key card AC, and by requesting this terminal access code from the host processor 12 and returning it to the host processor 12, the host It is compared with a code registered in the processor 12. Next, the host processor 12 sends the card access code to the access key card AC, and the access key card A is checked against the card access code in the card access code area 53 of the memory section 50.
Do this in C. By any method, it is verified that the host processor 12 and the access key card AC can access each other. If the host processor 12 and the access key card AC cannot be matched here, the access key card AC is connected to the card reader.
It is ejected from the writer 18 (S5), and the entire process ends.

Note that since the access key card AC was different, if another access key card AC is used, the process will start from the first step.

In step S4, if the host processor 12 and the access key card AC are matched, the host processor 12 displays the message "Enter your PIN" on the display device 17.
A message is displayed (S6). Here, the operator inputs the password using the keyboard 16 (
S7). This input PIN number is sent to the access key card AC by the host processor 12, and inside the access key card AC, a control section (not shown) of the access key card AC and a control program area 51 of the memory section 5o are stored. 111111 program is used to check the PIN number in the PIN area 54 (S
8). If the passwords do not match here, the error count area 57 of the memory section 50 is checked (S9). For example, if the number of mismatches reaches 3, it is determined that the access key card AC cannot be used.If the control program in the control program area 51 controls the access key card AC, it is determined whether the number of mismatches (the number of errors) is 3 or not. Check whether Here, if the number of mismatches has not reached three, the value in the error count area 57 is incremented by one (S10), and the display device 17
The message "Password number not verified, please enter the password again" is displayed, but the operation returns to step S6. Then you will have to enter your PIN again. On the other hand, if the number of mismatches has reached three, a void instruction is written in the void area 56 of the memory unit 50 (811),
The access key card AC cannot be used thereafter. This method includes, for example, the host processor 12
This is done by issuing an unusable code instead of the terminal access hood when checking the access key card AC. In this way, access key card AC
is voided, the contents of the user name area 55 of the memory unit 50 are read out, and the printer 19 prints out the user name, mismatched comment, date, etc. (8
12>, the entire process ends after this printing is completed. In addition,
After the user's name is read before the above printing, the access key card AC is ejected from the card reader/writer 18.

If the passwords match in step S8, the host processor 12 causes the display device 17 to display a message "insert key card" (S13). Here, the key card KC is inserted into the card reader/writer 40 (S14). Then, the key card KO and the read/write control unit 39 perform verification in the same manner as the above-described verification that the host processor 12 and the access key card AC can access each other (S1
5.516). If the key card KO and the reading/writing control section 39 cannot be matched here, the key card KO is ejected from the card reader/writer 40 (8
17). If there is a new keycard KC, i.e. if a different keycard KO has been inserted a long time ago, the correct different keycard KC can be inserted (S1
8). If there is no other keycard KO, keyboard 16
Press the end key (819). Then, after the contents of the user name area 55 of the memory section 50 of the access key card AC are read out, the access key card AC is ejected from the card reader/writer 18 (820>. At the same time, the printer 19 prints the User name area 5
The user name read from 5 is printed along with the date (S
21), the entire process ends after this printing is completed.

In step 816, when the key card KC and the read/write controller 39 are matched, the host processor 12 receives a signal to that effect from the read/write controller 39 via the microprocessor 28, and the host processor 12 displays the display device 17. The message "Please enter your password" is displayed (822). Here, the password is input using the keyboard 29 (823). If the password is entered by the administrator rather than by the operator using the access key card AC, the security of the IC card issuance operation will be enhanced. In addition, since the password is entered using the keyboard 29 provided in the issuance processing unit 27 instead of using the keyboard 16, security is improved as there is no wiring to the outside to prevent eavesdropping. It is being

The password No. 11 entered on the keyboard 29 is sent to the key card KO by the microprocessor 28 via the reading/writing control section 39, and is sent to the key card KC's control section (not shown) and memory section inside the key card KC. The control program in the control program area 61 of 60 is compared with the password in the password area 65 (S24). The verification result is sent from the key card KC to the read/write control unit 39 and further sent to the host processor 12 via the microprocessor 28. Therefore, the verification results (match, mismatch) are displayed on the display @
As can be confirmed in 17, the verification result is also displayed on the display 30 of the issuing processing unit 27, making the operation easier for the person who inputs the key code of the KC in the issuing processing unit 27. .

If the passwords do not match in step 824, the error count area 70 of the memory unit 60 is checked (825). For example, if the number of mismatches reaches 3, the control program in the control program area 61 indicates that the key card KC cannot be used. Check whether Here, if the number of mismatches has not reached three, the value in the error count area 70 is incremented by one (826), and the display 17 displays "Password mismatch, please enter the code again". message is displayed, but the operation returns to step 822.

Then you will have to enter your PIN again. On the other hand, if the number of mismatches has reached three, a void command is written in the void area 69 of the memory section 60 (827), and the key card KO cannot be used thereafter.

This method is carried out, for example, by issuing an unusable code instead of the terminal access code when checking the read/write control section 39 and the key card KC. In this way, when the key card KO is voided, the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 66 of the memory section 60 of the key card KC are read out. After that, the access key card AC is ejected from the card reader/writer 18 and the key card KC is ejected from the card reader/writer 40. At the same time, the printer 19 prints the user's name read from the user's name area 55, the user's name read from the user's name area 66, unverified comments, date, etc. (828).

After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

If the passwords match in step 824, the host processor 12 causes the display device 17 to display a message "Insert fixed data card" (829). Here, Fixed Data Card FC
is inserted into the card reader/writer 41 (830). Then, fixed data card FC and read/write t
+11 The a section 39 is the read/write control section 3 mentioned above.
9 and the key card KC are verified to be mutually accessible (831,
832). If here, Fixed Data Card FC
If the fixed data card FC cannot be compared with the read/write control unit 39, the fixed data card FC is ejected from the card reader/writer 41 (833). If there is a new fixed data card FC, that is, if a different fixed data card FC is inserted by mistake, another correct fixed data card FC can be inserted (S34). Another fixed data card F
If C is not available, press the end key on the keyboard 16 (
835). Then, after the contents of the user name area 55 of the memory section 50 of the access key card AC and the contents of the user name area 66 of the memory section 60 of the key card KO are read, the access key card AC is transferred to the card reader. The key card KC is ejected from the writer 18 and the card reader/writer 40 (836). At the same time, the printer 19 prints the user name read from the user name area 55, the user name read from the user name area 66, the comment, the date, etc. (S37). After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

In step 832, the fixed data card F
If C is matched with the read/write control unit 39, then the fixed data card FC is matched with the key card KO (838°539). This verification is carried out, for example, by reading out the issuing code in the issuing code area 82 of the memory section 80 of the fixed data card FC by the reading entry control section 39 and sending it to the key card KC. This is done by comparing it with the issue code in the issue code area 62 of. Key card KC and fixed data card F
Both of C are used as bare data, so it is necessary to perform the above verification. Fixed data card FCs have different issuers but are used in the same way (for example, if OO Bank and XXX Bank are affiliated and can be used with each other, it will be the same application)
, it is effective to separate the key card KO and fixed data card FC. In this case, the issuance code area 82 of the memory section 80 of the fixed data card FC
By creating multiple issuance codes within the key card KC, it becomes possible to deal with key cards KC from different issuers. Of course, key card KC
Fixed data card FC data (issued I
By storing all the data written in the key card KC, it is also possible to start the device using only the key card KC. In this case, initial settings can be made using the keyboard 29 of the issue processing unit 27.

In step 839, if the key card KO and the fixed data card FC cannot be matched, the process proceeds to step 833 where the fixed data card FC is ejected, and the above-mentioned fixed data card FC and read/write controller 39 are connected to each other. The same processing as when no match is made is performed.

In step 839, if the key card KC and fixed data card FC are matched, a signal to that effect is sent from the read/write control unit 39 to the microprocessor 2.
8, the host processor 12 causes the display device 17 to display a message "Enter your PIN number" (840). Here, key card K
The password is input using the keyboard 29 in the same manner as inputting the password of O (841). This is also a key card KC
If the administrator, rather than the operator using the access key card AC, enters the PIN number, the security of the IC card issuance process will be enhanced.

The password entered on the keyboard 29 is sent to the fixed data card FC by the microprocessor 28 via the reading/writing control unit 39, and is sent to the fixed data card FC within the fixed data card FC.
The control unit (not shown) of C and the control program in the control program area 81 of the memory unit 80 perform verification against the password in the password area 85 (S42).
) is sent from the fixed data card FC to the read/write IIJI 11 unit 39 and further sent to the host processor 12 via the microprocessor 28. Therefore, although the display of the matching result (match, mismatch) can be confirmed on the display device 17, the issue processing unit 2
The comparison result is also displayed on the display device 30 of No. 7, making the operation easy for the person who inputs the password of the fixed data card FC in the issuance processing unit 27.

If the passwords do not match in step 842, the error count area 88 of the memory section 80 is checked (843). For example, if the number of discrepancies reaches 3, if the control program in the control program area 81 controls that the fixed data card FC cannot be used, then the number of discrepancies (errors) becomes 3? Check whether or not. Here, if the number of mismatches has not reached 3, the error count area 8
The value in 8 is incremented by one (S44), and a message saying "Password number not verified, please enter the password again" is displayed on the display device 117, but the operation returns to step 840. Then you will have to enter your PIN again. On the other hand, if the number of mismatches has reached 3, a void command is written in the void area 87 of the memory section 80 (S45), and subsequent fixed data cards FC
This means that you will not be able to use it. This method applies, for example, to the read/write system part 39 and the fixed data card FC.
This is done by issuing an unusable code instead of the terminal access code when checking the terminal. In this way, when the fixed data card FC is voided, the contents of the user name area 55 of the memory section 50 of the access key card AC and the fixed data card F
After the contents of the user name area 86 of the memory section 80 of C are read out, the access key card AC is transferred from the card reader/writer 18 to the fixed data card FC.
are respectively discharged from the card reader/writer 41.

At the same time, the printer 19 prints the user name read from the user name area 55, the user name read from the user name area 86, unverified comments, date, etc. (S46). After such processing, the operation of the apparatus ends, and if it is to be operated again, it must be restarted from the beginning.

If the passwords match in step 842, the host processor 12 causes the display device 17 to display a message "Enter data" (847). Here, a floppy disk (
or magnetic tape) to the floppy disk device 14 (
Or set it on the magnetic tape unit 15 (84).
8). Then, the host processor 12 reads the data identification code D12 (or D22) from the floppy disk device 14 (or magnetic tape unit 15), and sends the data identification code D12 (or D22) to the read/write controller 39 via the microprocessor 28.
send to The read/write control unit 39 reads the sent data identification code D12 (or D22) into a card reader.
The data is sent to the key card KC via the writer 40, and the data identification code is verified inside the key card KC (849
,850>. That is, the memory section 60 of the key card KC
A data identification code is stored in the data identification code area 76, and the control unit (not shown) of the key card KC stores the data identification code area 7 in accordance with the control program in the control program area 61 of the memory unit 60.
For example, the data identification code in 6 and the sent data identification code D12 (or D22) are compared to see if they match. This verification result is sent from the key card KC to the read/write control unit 39, and further to the microprocessor 2.
8 to the host processor 12 and the display device 1
7 will indicate that.

Therefore, if the above verification fails, the floppy disk drive 14 (or magnetic tape unit 15
) is not the correct floppy disk (or magnetic tape), that is, the issuing IC is incorrect.
It is possible to confirm that the card is not a floppy disk (or magnetic tape) holding data for the card (851). In this case, make sure you have the correct floppy disk (or magnetic tape), that is, the floppy disk (or magnetic tape) that holds the data for the IC card you are issuing.
Or by resetting the magnetic tape (S5
2), the data identification code is checked again (85
3.854>. Here again, if there is a mismatch, or if there is no floppy disk (or magnetic tape) holding data for the IC card to be issued in step S51, the end key is pressed on the keyboard 16 (855). Then, the host processor 12 performs a termination process of ejecting the key card KC, fixed data card FC, etc. (856), and prints out this information using the printer 19 (857), thereby terminating the issuing operation at this time.

If the data identification code is verified in step 850 or 854, the host processor 12 causes the display device 17 to display a message "Please set an unissued card" (S58). Therefore, at this point, an unissued IC card is set in the hopper 31 of the issuing processing unit 27 (359), and then the start key is pressed on the keyboard 16 (S60), thereby completing the startup of this device.

The read/write control section 39 reads the contents of the issued number area 71 (the number of issued sheets written in advance by the administrator and is to be issued this time) and the issued count area 72 of the memory section 60 of the key card KC, and stores both contents. Compare,
When the contents of the issue number area 71 are larger than the contents of the issue count area 72, a signal indicating that there is an issue number is sent to the host processor 12 via the microprocessor 28.

As a result, the host processor 12 reads out the IC card issue data (data D13) from the floppy disk device 14, sends it to the microprocessor 28, and also sends it from the microprocessor 28 to the read/write control section 39. Then, the microprocessor 28 takes out one IC card from the hopper 31 (861). When the removed IC card comes to the encoding section 32, the microprocessor 28 converts predetermined data in the data sent from the host processor 12 into the magnetic stripe 2 of the IC card.
(S62). After writing is completed, the microprocessor 28 reads the written data and checks whether the written data has been written correctly by comparing it with the data stored in the microprocessor 28 and sent from the host processor 12. Check (863). If this check indicates that the writing is incomplete, the microprocessor 28 writes the data again (864).

Then, the check is performed again (865), and if the writing is still incomplete, the IC card is sent to the destruction unit 35 as a defective IC card, a hole 8 is punched in the magnetic stripe 2 (S66), and the IC card is sent to the destruction unit 35. 36 and is accumulated in the reject stacker 37 (867). Then, the record is recorded on the hard disk device 13 by the host processor 12. Defective I in reject stacker 37
When the C card is integrated, the microprocessor 2
Step 8 returns to step 861 to take out the next IC card from the hopper 31.

If the writing is normal in the check in step S63 or 865, the IC card on which the magnetic data has been written is sent to the embossing unit 33, and embossed information 3 is formed by the microprocessor 28 (368).

Since the embossing is performed by pressing one character at a time, the microprocessor 28 performs the embossing while checking the pressed character position one character at a time (869).

Therefore, when one character is erroneously embossed during embossing, the embossing is stopped and the IC card is sent to the destruction unit 35 as defective (S70). The embossed information is usually at least the number (account number in banks) and name of the person carrying the IC card, so if it forms one line of either of these, or both, it is impossible to use it fraudulently. Destroy the embossed information 3 part. Here, in order to form the emboss of the carrier's number first,
A hole 9 is made in the part numbered by the destruction unit 35. In this case, the progress of embossing formation is determined (the microprocessor 28 checks the point at which the embossing is interrupted) (571), and the microprocessor 28 checks the magnetic stripe 2.
Either only the portion of the magnetic stripe 2 and the embossed information 3 are punched (S72), or both the magnetic stripe 2 and the embossed information 3 are punched (873), and then the process proceeds to step 867, where they are stacked on the reject stacker 37.

When the embossed information 3 is accurately formed, the IC card is sent to the reader/writer unit 34, and the contact part 5 comes to the contact position of the reader/writer unit 34 and is stopped. Then, the microprocessor 28 controls the contact section (not shown) of the reader/writer unit 34 to come into contact with the contact section 5 of the IC card, and then sends a signal indicating that the contact section has been brought into contact to the read/write control section 39. . Read/write control section 3 that receives this signal
9 supplies power to the control unit 6 and memory unit 7 of the IC card, and performs initial signal exchange.
This is written when the card is manufactured, so initial signals can be sent and received). When the initial signal exchange is completed, the key card KC and issued I
Verification with the C card is performed (874.875).

This verification method is performed, for example, by verifying the issuer's temporary PIN number. It is considered that when an unissued IC card is handed over from a manufacturer to an issuer, a password is set for the exchange between the manufacturer and the issuer to prevent unauthorized use by a third party. Furthermore, since this PIN is required only when the IC card is delivered, the issuer's temporary PIN is used as a separate PIN after the IC card is issued. Verification using the issuer's temporary PIN is performed in the following manner. First, read and write 1
The 13111 section 39 reads out the issuer temporary PIN number in the issuer temporary PIN number area 67 of the memory section 60 of the key card KC, and sends it to the control section 6 of the IC card to be issued. Control unit 6
is the issuer record area 93 of the memory section 7 (issuer name,
The temporary issuer password written by the manufacturer in the area for writing data such as the issuer code is read out and compared with the temporary issuer password sent from the read/write control section 39.

If the issuer's temporary PIN does not match after this verification, since the writing of magnetic data and the formation of embossed information have been completed, the IC card is sent to the destruction unit 35 (876), and the magnetic stripe 2 and embossed information are sent to the destruction unit 35 (876). A hole is punched in the information 3 part (S77), and then step 8
The process advances to step 67 and is accumulated in the reject stacker 37.

If the issuing signboard PIN numbers match in step 875, the fixed data in the issuer record area 93 and the application program area 95 of the memory section 7 and the variable data (carrier (name, account number, etc.) (87
8). This writing is performed as follows. First, fixed data is read from the data area 89 of the memory section 80 of the fixed data card FC and written into the memory section 7. The contents of the fixed data include the application program written in the application program area 95,
These include area divisions of the issue record area 94 and the bearer record area 96. When writing of this fixed data is completed, the contents of the issuer record area 68 of the memory section 60 of the key card KC are read out and the contents of the issuer record area 68 of the memory section 7 are read out.
Write in 3. Reading of data from the fixed data card FC and key card KC and writing of data to the memory section 7 are all performed by the read/write control section 39. When the writing of these data is completed, the read/write control section 39 writes variable data for the wearer (data D13) sent from the host processor 12 via the microprocessor 28 to the wearer recording area 96 of the memory section 7. Write.

In this way, when data writing to the memory section 7 is completed,
The read/write control section 39 reads the written data and checks the written data in the memory section 7 by comparing it with the data from the fixed data card FC, key card KO, and host processor 12 (S7)
9). As a result of this check, if the writing is defective, the data is written to the memory section 7 again (880). However, if there is a write failure again (881) and the application is possible to some extent (882), void data is written to the issue recording area 94 of the memory unit 7 so that it cannot be used (88
4). If it is not possible to write void data, it is sent as a defective IC card to the destruction unit 35, where holes are punched in the magnetic stripe 2 and embossed information 3 portions (883, 885), and then the process proceeds to step 867 where it is rejected. They are accumulated in a stacker 37. Of course, when a defective IC card is stacked in the reject stacker 37, it is checked and sent to the read/write control section 39 via the microprocessor 28, so that the contents of the defect count area 73 of the memory section 60 of the key card KC are checked. is uploaded and recorded. This information is also recorded when a defective IC card is stacked in the reject stacker 37 in the same way when the encoder 32 and the embossing unit 33 become defective. Of course, the data is also recorded on the hard disk device 13 of the host processor 12.

If the writing is normal in the check in step 879 or 881, the read/write control unit 39 calculates the temporary carrier PIN number using random numbers (586), and records the calculated temporary carrier PIN number in the memory unit 7. Write to area 96 (587>).

Next, the read/write control section 39 reads the cumulative issuance value from the cumulative issuance area 74 of the memory section 60 of the key card KC, adds 1 to the cumulative issuance value, and stores it in the issuance record area 94 of the memory section 7 as the issuance number. Write (588). At the same time, the user's name (or code) is read from the access key card AC, key card KC, and fixed data card FC and written into the issuance recording area 94 of the memory section 7. When this is completed, the read/write control section 39 starts the basic control program area 9 of the memory section 7.
Write non-rewritable hold data in 1 (S89)
It is not possible to rewrite any password other than the temporary PIN of the bearer or the part written by the bearer when receiving the service. Then, this IC card becomes issued and is sent to the stacker 38 to be accumulated (892). Further, the read/write control section 39 controls the memory section 6 of the key card KC.
0 issue count area 72 and issue cumulative area 74
Each content is incremented by 1 (S90). After writing the hold data in step 889, the host processor 12 uses the printer 19 to write the IC card to the shipping port (all data is recorded on the floppy disk in the floppy disk unit 14 or on the magnetic tape in the magnetic tape unit 15). 891.
. When the temporary PIN number of the bearer is printed by the printer 20, the memory in the read/write control section 39 is erased, thereby making the temporary PIN number extremely secure.

,! 5! When the reading/writing control unit 39 counts up the issue count area 772 of the memory unit 60 of the key card KC, it compares the number with the contents of the issue number area 71 to determine whether the number of issued cards has reached the planned number. It is checked whether or not (S93). As a result of this check,
If the scheduled number of IC cards has not been reached, a signal to that effect is sent to the host processor 12, so after receiving the data from the host processor 12, the microprocessor 28 takes out one IC card from the hopper 31 (861).

As a result of the check in step 893, if the scheduled number of copies has been reached (if the contents of the issuance count area 72 after counting up and the contents of the issuance number area 71 are the same), the issuance ends. Of course, even if there is data to be issued to the host processor 12 side, the issuance ends.

Note that before writing the hold data in step S89, the serial number written in the manufacturer record area 92 of the memory section 7 (a serial number is attached to each IC card manufactured by the manufacturer and By reading out the stored number) and writing it in the issuance record area 75 of the memory section 60 of the key card KC as the serial number of the issued IC card, it is possible to check the IC card including the manufacturing number, which is effective for management.

When the issuance is completed in this way, the read/write control section 39 writes the contents of the issuance count area 72 and defective count area 73 of the memory section 60 of the key card KC together with the date to the issuance record area 75 (894), and then 72 and the contents of defective count area 73 are cleared respectively. Since the content of the cumulative issue area 74 is the total number of issues issued so far, it remains unchanged and becomes the final issue number. When this writing is completed, the host processor 12 causes the display device 17 to display a message "Press the end key" (895). Here, press the end key on the keyboard 16 (8
96). Thereby, the host processor 12 prints the issuance record stored in the hard disk device 13 using the printer 19 (897). For example, as shown in FIG. 13, this issuance record includes the serial number read out from the IC cards issued in the order of the issuance number, the name and address of the bearer inputted by the floppy disk device 14 (or magnetic tape unit 15). etc. will be printed.

Also, by opening the outlet door 42 of the issue processing unit 27, the reject stacker 37 and the stacker 38 can be removed.
The defective IC card and the issued IC card are respectively taken out (898). In addition, defective IC cards,
Since at least the magnetic stripe 2 or both the magnetic stripe 2 and embossed information 3 are perforated, it can be easily distinguished from the issued IC card.

Thereafter, when the end key is pressed again on the keyboard 16 (899), the host processor 12 writes the issuance date and issuance record area 58 of the access key card AC in the same way as the issuance record was written to the key card KC. The number of sheets, number of defective sheets, key card code, fixed data card code, etc. are written (S100). This records what kind of issue was issued, when and how many copies were issued. And access key card AC, key card KC
and the fixed data card FC are ejected (S101), and all operations of the device are completed.

In this way, data identification codes are added to each data in the floppy disk unit fl14 (or magnetic tape unit 15) and key card KC, and these data identification codes are read and verified before reading or writing data. By doing so, it is confirmed whether or not there is a correct relationship between each data in the floppy disk unit M14 (or magnetic tape unit 15) and the key card KC, and when it is confirmed that there is a correct relationship, the read/write control unit 39 By reading and writing data by
Writing of incorrect data can be reliably prevented.

Note that the present invention is not limited to the above-mentioned embodiments, and various modifications can be made. For example, instead of the key card KO and its card reader/writer 40, a data holding device equipped with a control section and a memory section that can store information that identifies the user and perform internal verification may be used, and the read/write control section 39 may be used. It is conceivable to connect them with detachable contacts.

Similarly, the fixed data card FC and its card reader/writer 41 are also data storage devices equipped with a control section and a memory section that can store and internally check information that identifies the user, and read and write information. It is conceivable that the controller 39 is connected to the control unit 39 through detachable contacts. In addition, although a PIN number was used to identify the user of the Key Card KO and Fixed Data Card FC, it is also possible to memorize the user's physical characteristics such as fingerprints or signature, and use that information for verification. be. In that case, the keyboard 29 of the issuing processing unit 27 needs to be provided with means for inputting fingerprints, signatures, etc.

Further, in the embodiment, an IC card is issued by writing predetermined data to an unissued IC card.
Although we have explained the case where it is applied to a C card processing device,
The present invention is not limited to this, but for example, at the IC card manufacturing stage, an IC card processing unit that writes initialization data, etc. to an IC card]! I! The same applies to devices.

Further, in the above embodiments, the portable storage medium is an IC card with a magnetic stripe, but the same applies to an IC card without a magnetic stripe or an optical memory card called a laser memory card. can.

[Effects of the Invention] As detailed above, according to the present invention, it is possible to check whether or not the data in each data holding device has a correct relationship with each other, and to reliably prevent writing of erroneous data. A storage medium processing device can be provided.

[Brief explanation of the drawing]

The drawings are for explaining one embodiment of the present invention. Fig. 1 is a block diagram of an IC card processing device, and Fig. 2 is a block diagram of an IC card processing device.
3 is a perspective view of the appearance of an IC card after it has been issued; FIG. 4 is a perspective view of the appearance of a defective IC card; FIG. 5 is a diagram showing an example of the data format of a floppy disk; Figure 7 shows an example of the data format of a magnetic tape, Figure 7 shows an example of the printing of a notice of issuance of the temporary PIN number of the bearer, Figure 8 shows the contents of the memory section of the access key card, 9 is a diagram showing the contents of the memory section of the key card, FIG. 10 is a diagram showing the contents of the memory section of the fixed data card, FIG. 11 is a diagram showing the contents of the memory section of the IC card after it is issued, and FIG. FIG. 12 is a flowchart explaining the operation, and FIG. 13 is a diagram showing an example of printing an issuance record. 6...Control unit of IC card, 7...Memory unit of IC card, 11...Host If III unit, 12
. . . host processor, 27 . . . issue processing unit, 28 . . . microprocessor, 34 . . . reader/writer unit, 39 .
41...Card reader/writer, 60...Key card memory section, 80...Fixed data card memory section, KC...Key card, FC...Fixed data card. Applicant's representative Patent attorney Takehiko Suzue Figure 3 Figure 4 Figure 5 FA 61!1 Figure 7 Figure 8 Figure 9 Figure 10 Figure 13 Figure 11 Figure 12 Figure 12 (e)

Claims (5)

[Claims] (1) A portable storage medium processing device that writes predetermined data to a portable storage medium; different data for each portable storage medium to be written to the portable storage medium to which identification information is added. a first data holding device that holds; a second data holding device that holds data common to portable storage media to be written to the portable storage medium to which identification information is added;
A data holding device; By reading out the identification information from these first and second data holding devices and comparing these pieces of identification information, the data in the first and second data holding devices are in a correct relationship. a verification means for confirming whether or not the relationship is correct; if the verification means confirms that there is a correct relationship, controlling reading and writing of data between the first and second data holding devices and the portable storage medium; What is claimed is: 1. A portable storage medium processing device comprising: a reading/writing control means. (2) The portable storage medium processing device according to claim 1, wherein the identification information consists of a number or a symbol. (3) The portable storage medium processing device according to claim 1, wherein the portable storage medium is an IC card. (4) The portable storage medium processing device according to claim 1, wherein an IC card is used as the second data holding device, and the collation means is provided in the IC card. (5) The portable storage medium processing device according to claim 1, wherein a floppy disk device, a magnetic tape device, or the like is used as the first data holding device.