JPS63244192A - Ic card device - Google Patents

Abstract

PURPOSE:To read and write data without deteriorating the security of a card publisher by dividing a data memory in an IC card into three areas of a privacy area, an open area and a free area and constituting an IC card device by means of said areas and a terminal without holding publisher keys. CONSTITUTION:A publishing object (bank, for example) uses a terminal holding the publisher key and information which is not to be informed to a card holder and which is inherent to the IC card (bank number, kind of card, etc.) is written in the privacy area 12. Information which can be informed to the card holder (balance information and hystories of card utility) is written in the open area 13. On the other hand, the card holder uses the IC card device, namely, the personal terminal without holding the IC card and the publisher key, whereby information in the privacy area 12 cannot be read and written, but information in the open area can be read. Thus, information in the IC card can be read and written without deteriorating the security function of the IC card.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of Industrial Application The present invention relates to an IC composed of an IC card and a terminal used in cash cards, credit cards, etc.
The present invention relates to a card device.

BACKGROUND ART The conventional I(j card memory format has a configuration as shown in FIG. 10, for example. In FIG. 10,
101 is an issuer key storage area for storing an issuer key, and 102 is a confidential area that can be accessed after the issuer key is successfully verified. A conventional access procedure using an IC card and a terminal is shown in FIG. 7, and its operation will be explained below. First, the terminal outputs a reset signal to the IC card to initialize the IC card. The IC card that has completed the initialization process returns identification information (Answer to Reset) of the I(j card) as a response to the reset signal.Next, in order to obtain the right to access the IC card, the terminal sends a message to the IC card. The IC card compares the received issuer key with the data stored in the issuer key storage area 101, and returns information on whether or not they match to the terminal. If there is a match, the terminal will then access confidential area 10 in the IC card.
2 can be freely accessed. On the other hand, if there is no match, the confidential area 102 in the IC card cannot be accessed at all. In this manner, unless the issuer key is successfully verified, all information in the IC card cannot be read or written.

Problems to be Solved by the Invention In order to use such a conventional IC card, all terminals must have an issuer key. on the other hand,
The issuer key is extremely important confidential data to prevent unauthorized use of the IC card, and it is not desirable for security reasons to have the issuer key stored in a terminal that an individual possesses.

Therefore, each individual can only use an IC in a limited number of places with terminals.
It is not possible to check the information on the card (for example, balance information when using an IC card as a bank card).
This has limited the uses of IC cards. The present invention solves this problem, and allows information in an IC card to be read and written without performing issuer key verification. I
The object of the present invention is to provide an IC card device consisting of a C card and a terminal.

Means for Solving the Problem In order to solve this problem, the present invention provides that the data memory of the IC card has an issuer key storage area for storing the issuer key and reads and writes data. A confidential area that requires verification of the issuer key before writing data, and a confidential area that requires verification of the issuer key before writing data, and reading data freely without requiring verification of the issuer key. an XC card having a public area where data can be written and read, and a free area where data can be written and read freely without the need for verification of the issuer key;
The IC card device is constituted by a terminal that can read data from the public area and read and write data from the free area without holding the issuer key internally.

Function: With this configuration, an individual can have a terminal that can check the inside of an IC card without degrading the security function of the IC card, making it easy to use.

Embodiment FIG. 1 shows a memory format of 10 cards according to an embodiment of the present invention. In FIG. 1, 11 is a publisher key storage area, and 12 is a storage area for the publisher key before reading and writing data. A confidential area 13 that requires verification is a public area 13 that requires verification of the issuer key before writing data, and a public area 1 where data can be read freely without the need for verification of the issuer key.
Reference numeral 4 denotes a free area in which data can be freely read and written without requiring verification of the issuer key. Furthermore, FIG. 8 shows the communication procedure between the terminal and the I(j card) according to an embodiment of the present invention.
An example of how the card device is used will be described below.

The issuing entity (for example, a bank) uses a terminal that holds the issuer key to write information unique to the XC card (bank number, card type, etc.) that must not be disclosed to the cardholder into the confidential area 12. , information that may be made known to the cardholder (e.g. balance information and card usage history) in the public area 13
write to. On the other hand, the cardholder is
By using a C card device, that is, a personal terminal that does not have the IC card and the issuer key, the information in the confidential area 12 cannot be read or written, but the information in the public area 13 cannot be read or written. Information can be read. The information in the public area 13 can be read by a personal terminal that does not have the issuer key, but cannot be written to, so it cannot be used illegally by, for example, rewriting balance information. Further, since the cardholder can write data to and read data from the free area 14 using a personal terminal, this area can be used in place of a personal memo.

In the above usage, the issuing entity can also access the confidential area 12 by following the procedure shown in FIG. 7 as in the conventional case. Further, as shown in FIG. 8, the cardholder can immediately access the public area 13° and the free area 14 without verifying the issuer key.

Next, other embodiments of the present invention will be described with reference to the drawings. FIG. 2 shows the memory format of an IC card in another embodiment of the present invention. In FIG. 2, 21 is an issuer key storage area, 22 is a password storage area 23, 2 for confirming the authenticity of the card user.
4.25 are a secret area, a public area, and a free area, respectively. In this embodiment, the password must be verified when reading data in the public area, reading data in the free area, and writing data in the free area.

With this configuration, the information of the card issuer can be protected with the issuer key, and the information of the card holder can be protected with the password. In the above embodiments, memory management using passwords was performed by the CPU inside the card.
Memory management may be performed on the terminal. An embodiment in this case will be described with reference to the drawings. FIG. 3 shows the memory format of the IC card in this embodiment.

In Figure 3, 31 is the issuer key storage area, 32 is the password storage area, and 33, 34, and 35 are the confidential area, public area, and free area, which have the same meaning as in Figure 1, but each area has multiple The terminal is configured to be able to access the IC card in units of records. In this embodiment, it is assumed that memory management using passwords can be performed at the terminal, and the IC card transmits only the password verification results to the terminal. In this embodiment, a personal terminal that does not have the issuer key can manage the memory of the IC card by partially using the records in the free area of the IC card. An embodiment in this case will be described with reference to the drawings.

FIG. 4 is an example of a format when a code in a free area is used as a management record for memory management. The location and format of the management record can be freely determined on the terminal side. In FIG. 4, numeral 41 is a free area shown in FIG. 336. The free area 41 is divided into a total of n records, some of which are used as management records. The management record is composed of the areas shown below, and is used to manage records of free areas and public areas. In FIG. 4, 42 is a first record storage area for storing the first record number (temporarily assumed to be M) of the records managed by the management record, and 43 is the number of records managed by the management record (tentatively assumed to be B). 44 is a password management area for managing whether or not to use a password and, if used, the number of digits of the password. 46 is for storing the number of records for which data has been written. 46 is a public area management area for managing whether password verification is required or distorted when reading data in the public area, and 47 is a record management area for managing individual data records. . Furthermore, when data is added to the IC card, some data needs to be read from new information such as history information. In this case, new data is usually entered in the first record as shown in FIG. 91.

A method of moving old data code by code is used, but since IC cards use serial communication as a communication method, the method shown in 91 is not preferred in terms of processing speed. That is, in the method of 91, the latest data is always stored in record 1, and previous records must be sequentially moved to lower records, and all records must be accessed. Therefore, in this embodiment, the ninth
The cyclic use shown in FIG. 92 is performed. In the cyclic use, the record in which the latest data is stored is not constant, but is the next record of the record in which the previous data is stored, and the number of the record in which the latest data is stored is stored in the memory. When reading data, first read out the record number in which the latest data is stored, and then read out the latest data. If you want to continue reading data, you can read the record numbers one by one, and the latest record should be the one after the first code. With the above configuration, history information can be written by only accessing the IC card twice. In the embodiment shown in FIG. 4, 48 is a cyclic management area for managing whether or not to perform the cyclic use, 49 is a cyclic start record storage area for storing the number of the record for starting the cyclic use, and 410 is a cyclic management area for managing whether or not to perform the cyclic use. 411 is a cyclic record number storage area for storing the number of records to be used for the cyclic use; 411 is a latest data record storage area for storing the record number in which the latest data is stored for the cyclic use;
Reference numeral 12 denotes an oldest data record storage area for storing the record number in which the oldest data is stored when using the Buiclick. Further, FIG. 5 shows details of the record management area. In the WcS diagram, 51 is a data change prohibition flag used when you do not want to change data, 62 is a cyclic flag for determining whether a record is being used cyclically,
+53 is a password flag for determining whether a password is required when reading and writing data, 6
4 is a data written flag for determining whether data has been written or not; 66 and 56 are areas for storing the previous record number and subsequent record number when the data is long and two or more records are required. 55 is a previous record number storage area 56 is a subsequent record number storage area. In this embodiment, the terminal can manage passwords, cyclic usage, etc. for the xC card by setting a management record in the free area of the IC card in the format shown in FIG. In the above embodiment, individual data records are managed using management records, but a management area may be set within each data record. FIG. 6 shows an example of such a case, in which the inside of the data record is divided into a management area and a data area. In Figure 6, 61,61 63,641
651 and 66 are a data change prohibition flag, a cyclic flag, and a password flag, which have the same meanings as in FIG. 6, respectively.

Data written flag, previous record number storage area,
This is the rear record number storage area. By using the 7-o-mat shown in FIG. 6, it is possible to cope with a large increase in the number of data records.

Effects of the Invention As described above, according to the present invention, the data memory in an IC card is divided into three areas: a confidential area, a public area, and a free area, and an IC card device is configured with a terminal that does not have an issuer key. This allows data to be read and written without compromising the security of the card issuer, and by managing the memory with a password, it is possible to protect the confidentiality of the cardholder. Now you can own the device.

This greatly improves the usability of cardholders.

[Brief explanation of drawings]

FIG. 1 is a diagram showing a memory format of an IC card in one embodiment of the present invention, FIGS. 2 to 6 are diagrams showing a memory format and a data format in other embodiments of the present invention, and FIG. 10 is a diagram showing a conventional IC card. 7 is a diagram showing a communication procedure between a conventional IC card and a terminal. FIG. 8 is a diagram showing a communication procedure between an IC card and a personal terminal according to the present invention. FIG. 9 is a diagram showing the data format during cyclic use. 11.21, 31, 101... Issuer key storage area, 12, 23, 33, 102... Confidential area, 131 24.34... Public area, j4, 2
5.35°41...Free area, 22,32...
...Password management area, 42-412151-5
61 61~6θ...Details of data format, 91...Data format when not using cyclic, 92...Data format when using cyclic (Figure 1) Fig. 2 Fig. 13 Fig. 4 Fig. 5i w & 6 Fig. 7 Fig. 9 Fig. 11 Catty record-3 Latest record-4 Fig. 10

Claims (1)

[Claims] A microprocessor and a data memory, the data memory having a publisher key storage area for storing a publisher key, and requiring verification of the publisher key before reading and writing data. A confidential area, which requires verification of the issuer key before writing data, and a public area, which can freely read data without requiring verification of the issuer key, and a public area, which can read and write data. an IC card having a free area that can be freely created without the need for verifying the issuer key, and reading data in the public area without performing the issuer key verification procedure for the IC card;
An IC card device comprising a terminal capable of reading and writing data in the free area.