JPS63663A - Ic card system - Google Patents

Abstract

PURPOSE:To contrive to get the safety for operating a system, by constituting it so that transaction data can be collected, and the transaction data can be collected quickly in an off-line, when uncollected data in the off-line exist by tracing back to the past, at the time of using a card in an on-line. CONSTITUTION:When an IC card 5 is used in an on-line, whether an uncollected data by an off-line transaction exists in the stored contents of the IC card 5 or not is checked by tracing back to its previous time, and if the data concerned exists, these transaction data are fetched and collected. Accordingly, the transaction data by the off-line can be collected without causing so much time delay. Comparing with a fact that a collection of the transaction data by a conventional off-line is delayed remarkably, by which an actual deposit balance and an individual credit data, etc. are apt to become changeable and unstable, these various data can be formed to those which are scarcely varied and have a high reliability, and also, at the time of operating the system, an illegal action which utilized a fact that various data are changeable and unstable can be controlled.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to an IC card system that allows offline transaction data to be quickly collected.

[Prior art and its problems] In recent years, it has become known as the cashless era, and by using cards issued by credit card companies, it has become possible to purchase products without handling cash.

Conventionally, cards used include plastic cards, embossed cards, and magnetic stripe cards, but these cards are easy to forge due to their structure, so unauthorized use has become a problem.

Therefore, in order to solve this problem, information cards, so-called IC cards, have been developed that incorporate an IC circuit that stores a PIN number and other information inside the card so that the PIN number cannot be easily read from the outside. An IC card system that combines such an IC card and a terminal has been developed.

By the way, in such a tC card system, in addition to the so-called online use where an IC card is used via a terminal connected to a host computer of a credit company or bank, there is also a terminal installed at a store alone. So-called offline use is possible.

Particularly when using the card offline, all transaction data is stored in the IC card's memory, and in this state, for example, once a month.
The recovery card holder goes directly to the credit card company, bank, etc. to retrieve data related to offline transactions in memory.

However, if you do this, the collection of offline transaction data will be much delayed compared to the collection of online transaction data, so when it comes to settlement, actual bank balances and personal credit data will not be collected. etc. may be significantly rewritten. This means that while offline transaction data exists in the card, various data such as bank balances and personal credit data will be volatile and unstable, making it difficult to use in terms of system operation. Moreover, fraudulent acts that take advantage of the fluctuation and instability of various types of data are easy to commit, which poses a major problem in terms of security.

[Purpose of the Invention] This invention has been made in view of the above circumstances, and allows offline transaction data to be collected quickly, making various data stable with less fluctuation, and improving system operation. The purpose of the present invention is to provide an IC card system that can also improve the safety of computers.

[Summary of the Invention] An IC card system according to the present invention is capable of making online or offline transactions using an IC card burnable and storing data of these transactions within the IC card. When making an online transaction, if there is data from an offline transaction that has not yet been collected in the memory contents of the IC card, this transaction data can be collected.

[Embodiments of the invention] An embodiment of the present invention will be described below with reference to the drawings.

First, Figure 1 shows the terminal 1 where the IC card 5 is installed.
This shows the circuit configuration of the circuit. In the figure, 11 is a system bus, and this system bus 11 includes a sound controller 12, a working RAM 13, a system program RoM 14, a terminal attribute ROM 15, an initial parameter RAM 16, a main controller 17,
Display drive controller 18, one key controller, reader/writer controller 20, comparator 21, rR3
An encryption unit 22 that quickly performs encryption according to the AJ algorithm, an output buffer 24 via an output controller 23, and a pano j controller 2 via an input buffer 25.
6. Latch circuit 42 for rCAJ latching, Data Encryption Standard (Data Encryption Standard)
cription 5tanclerd)
rDEsJ type encryption arithmetic unit 43, similar rD
An ESJ-type I11Va arithmetic unit 44 and an input/output controller (I10 controller) 45 are connected, respectively.

A speaker 27 is connected to the sound controller 12 and outputs an alarm sound as necessary.

Working RAM 13 has an IC card 5I in the memory area.
rPANJ, rCHNJ, rEP sent from 11
DJ, etc. are stored, as well as various processing data within the terminal 1.

System programs RO to 114 are E for matching with the IC card 5 along with various system programs.
Equipped with NQ code etc.

The terminal attribute ROM 15 stores terminal codes TC (for example, manufacturing code, issue code, store code, etc.) depending on the purpose of the terminal.

The initial parameter RAM 16 stores answer-to-reset data from the IC card 5 in bulk.

This initial parameter RA M2C is connected to the output controller 23, input controller 26, vpp level latch section 28, Vpp timer latch section 29.1pp level latch aI130 via the transmission line 16a.
Hello, these latches 28, 29, 30 have corresponding vp
A p power supply 31, a Vpp timer 32, and an IpD limiter 33 are connected.

Here, the Vpp voltage [t31 is for securing the voltage vpp used for writing data to the data memory of the IC card. In addition, the Vpp timer 32 is
This is to ensure the maximum VCC application time specified by the above. Furthermore, the 1pp limiter 33 determines the permissible value of the current including data 8.

In this case, the maximum data write voltage by the Vpp power supply 31, the ■pp application time by the Vpp timer 32, the maximum allowable data write current by the Ipp limiter 33, etc. are set based on the answer-to-reset data stored in the initial parameter RAM 16. be done.

An IC card operating frequency selector 34 is connected to the data transmission line 16a. An oscillation signal from an oscillator 35 is supplied to this selector 34 via a frequency divider 36.
It is output from the CI ock terminal as a signal with the operating frequency set.

Main controller 17 system! I! A comparator 21, an IPK (Issuer"S
Public Key) ROM 41, latch circuit 42, encryption arithmetic unit 43, decryption arithmetic unit 4
4. An input/output controller 45 and the like are connected, and control commands are sent from the main controller 517 to each circuit depending on the operating state of the system.

The display drive controller 18 controls the display on the display section 3 of the terminal 1.

The key controller 19 provides a key sampling signal to the keyboard 2 of the terminal 1 to detect a key input signal.

The reader/writer controller 20 controls the reader/writer mechanism 38. It is controlled by iI+. Here, the mechanism section 38 includes a motor for conveying the card,
The IC card 5 inserted from the card insertion slot of the terminal 1 is transported to a predetermined position, and the card 5 is mechanically connected to the terminal 1. When the predetermined processing is completed, the IC card 5 is inserted into the card slot of the terminal 1.
The card 5 is returned to the card insertion slot.

The output buffer 24, the reset controller 39, the Ipp level latch section 30, the operating frequency selector 34, and the VCC power supply 40 are connected to such a reader/writer 9111 section 38. These output buffers 24. IG corresponding to the reset controllers 3 and 9, the Ipp level latch section 3o, the operating frequency selector 34, and the Vccl source 40.
I/ON child connected to card 5 side, Re5e
t terminal, vppi child, C1oCk terminal, V CC014
have a child.

The input controller 26 and the output controller 23 control the exchange of data between the IC cards 5 in accordance with commands from the main controller 17 via the initial parameter RAM 16. Of these, the input controller 26 outputs the data sent from the IC card 5 to the working RAM 13 via the input buffer 125 and also provides it to the comparator 21, and provides the comparison output here to the main controller 17. Also, the output controller 23 outputs data given from terminal attributes RO to 115, etc. to the output buffer? IC card 5 via 24
Send to.

The rR3AlIla encoding unit 22 is a working RAM.
IF'ANJ sent from 13 to IPKROM41
The data is encrypted according to the public key code given by . The above IPK ROM41 is I
The decryption code rPRKJ (Private Key Code) written in the data memory of the C card 5
) II; I A corresponding public key code is stored in advance, and the stored code is output according to a command from the main controller 17.

The latch circuit 42 inputs the latched "CA" to the encryption arithmetic unit i-43 and the decryption arithmetic unit 44. The encryption arithmetic unit 43 receives predetermined data via the system bus 11, and in response to a command from the main controller 17, it processes rPANJ and the like stored in the working RAM 13 using rCAJ as a key, and sends it to the input/output controller 45. I am trying to output it to . Further, the decoding unit 44 decodes the l11@ data input to the input/output controller 45 based on rCAJ and outputs it to the system bus 11.

The input/output controller 45 is connected online to a host computer of a credit company, bank, etc., and is configured to exchange encrypted data.

Next, FIG. 2 shows the circuit configuration of the IC card 5. As shown in FIG. In the figure, 51 is a system bus, and this system bus 51 has an answer-to-reset data ROM 52.
, application ROM53, test program RO
M54. System program RoM55, working R
AM56, central controller 57, storage memory read/write controller 58, decryptor 59,
Input controller 61 via input buffer 60, output buffer? Output controllers 63 via 62 are connected respectively. Further, a data input/output terminal I10 is connected to the input controller 61 and the output controller 63.

Here, the answer-to-reset data ROM 52 is
It stores all operating conditions for the C card itself (for example, data writing, applied voltage, current permissible value and maximum applied voltage, maximum data transmission amount, maximum response waiting time, etc.), and these condition data are stored in the card's own internal initials. When this is completed, it is transmitted to the terminal 1 side as answer-to-reset data in a predetermined format.

The application ROM 53 stores card type data rAPNJ indicating what type of IC card 5 this card type data is.
Terminal 11il after setting initial parameters for two reset data! When exchanging attributes with I, it is sent in a predetermined format.

The test program ROM 54 stores a program for card testing.

The system program ROi'i'l 55 includes various system programs as well as a code signal rAcKJ or rNAC,J indicating whether the signal transmitted and supplied from the terminal 1 side is correct or not.

The working RAM 56 stores various processing data within the card 5.

Is the central controller 57 an input buffer? It outputs operation commands to each circuit in accordance with the data reception signal transmitted and supplied via 60 and the operation state.

The storage memory read/write controller 58 controls the writing and reading of data to and from the storage memory 64 in response to commands from the central controller 57.

In this case, the storage memory 64 includes a zone address table 641, a public zone 64 as shown in FIG.
2, a secret zone 643, a transaction zone 644, and a credit zone 645. Here, the zone address table 641 stores a predetermined zone address as test data used for card authentication, for example, and extracts verification data from the predetermined zone immediately after the address, and also retrieves verification data from the predetermined zone by comparing it with the test data. - Doki-sho is now available. Public zone 642 stores public data. The secret zone 643 is, for example, a PIN code @I.
PINJ, data re-input count rRTNJ (Re-T
ry Number), the number rlP[NJ (Initialz
ationPersonal Identifica
tiOn Number), account number "PAN" (
Primary Account Number)
, decryption code rPRKJ (PrivateK
ey Code) etc. are stored. Further, this secret zone 643 stores secret information regarding the card owner.

The transaction zone 644 is a place for storing various data related to general transactions, and as shown in FIG. 5, it has transaction data areas 644a of #1 to #n for storing data of each transaction unit. Here, each transaction data area 644a includes 2-byte year and month data representing the year and month of the transaction, rOFF Line
Although it is used, it is transferred ON 1ine.
“Did the customer see the transaction?” “On/Offline transaction”
1-byte status data representing various states such as 1-byte status data representing the current day, 1-byte format data representing the type of transaction format, 1-byte SIG data representing the company code, 1-byte representing the terminal application card number. ]- TAN data, 1-byte currency unit data representing the currency unit, 6-byte amount data representing the transaction amount, 2-byte TAC data representing the transaction establishment number,
6-byte balance data representing the credit balance is stored. Credit zone 245 stores data regarding credit transactions.

The decryptor 59 decrypts the code based on a predetermined algorithm, and uses the decryption code rPRKJ etc. from the storage memory 64 to decrypt the input data supplied from the terminal 1 side via the cover 760. It looks like this.

The contents of storage memory 64 read by storage memory read/write controller 58 are applied to one input terminal of comparator 66 . The comparator 66 has input data decoded by the five dark @ decoders and working R at the other input terminal.
Data stored in the AM 56, data stored in the data ROM 52, and specific codes are given. The comparison output of this comparator 66 is then sent to the central controller 57.

Note that when the IC card 5 configured as described above is attached to the terminal 1 (not shown), the reset signal Re5et and the system clock clock are supplied from the terminal 1 side, and the VCC power source and the Vpp power source are connected. Here, the Vcc power supply is a system driving power supply, and the Vpp power supply is a built-in N source for the storage memory 64.
Set on the terminal 1 side based on the two-reset data. - On the other hand, a system operation signal from the system clock is supplied to each circuit via a frequency divider 67.

Next, the operation of the embodiment configured as described above will be explained.

In this case, offline transactions using the IC card 5 will be explained.

First, insert the IC card 5 into the terminal 1, and in this state, enter your personal identification number "PIN". i
I will explain to you. In this case, insert the IC card 5 into terminal 1.
When installed, the initial setting signal set in advance on the terminal 1 side will be transmitted.

Then, depending on the operating conditions based on this signal, the IC card 5
is operated. In other words, the answer stored in the data ROM 52 under the control of the central controller 57
Two Reset]...Data is read and sent to terminal 1 from I10@ child via output controller 63.

In this way, when the answer-to-reset data is sent to terminal 1, the terminal 1 side transfers the sent data to input controller 26 and input buffer 25.
Write to the initial parameter RAM 16 via. Then, the main controller 17 determines whether the answer-to-reset data stored in the initial parameter RAM 16 is correct for the terminal 1. Here, if it is determined that they correspond, the main controller 17 controls the data loading voltage of vppwa3i, the data writing continuous application time of the Vpp timer 32, and the data 1 loading ff of the IpI limiter 33.
The allowable value of i-stream and the operating frequency of the operation selector 34 are respectively set to card-specific operating conditions based on the answer-to-reset data. From this state, the rENQJ code is extracted from the system program ROM 14 according to a command from the main controller 17, and is transmitted to the IC card 5 via the output controller 23 and output buffer 24.

On the IC card 5 side, this code is stored in the working RAM 5.
Write to 6. In this state, the central controller 57
It is determined whether or not the rENQJ code can be received properly with normal operation, and the system program RO
rAcKJ if YES from M55, rN if No
Each signal of AcJ is taken out and sent to terminal 1 via output buffer 62 and output controller 63.

In terminal 1, this judgment result is stored in working RAM 1.
Add 1 to 3. Then, when the rACKJ signal is confirmed,
Terminal attribute ROM1 by main controller 17
A different terminal code rTcJ is taken out depending on the type of terminal 1 stored in the terminal 5 and latched in the output buffer 24.

- On the other hand, when the rNAcJ signal is confirmed, the connection with the IC card 5 in the reader/writer investigation section 38 is severed.

The terminal code rTc is latched in the output buffer 724.
When J is sent to the IC card 5, the central controller 57 in the IC card 5 stores it in the application ROM 5.
A different application name rAPNJ is extracted depending on the type of card stored in the terminal 3, is latched once in the output buffer 62, and then sent back to the terminal 1 side.

On the terminal 1 side, rAPNJ is used as working RAM13.
After storing it in the rAP, the main controller 17
NJ is taken out, and it is determined whether the rAPNJ stored in the terminal attribute ROM 15 and its usage type are in the corresponding PA section. If the type matches that of the IC card 5, the instruction code is extracted from the system program ROM 14 and sent back to the IC card 5. - On the other hand, if not, the connection with the IC card 5 at the reader/writer mechanism section 38 is severed.

With such an instruction code, input of one's own 118 identification number rPINJ from terminal 1 is permitted.

In this situation, when the PIN number "PINJ" is entered from the keyboard 2 of the terminal 1, this rPINJ is
1/([from the child) is temporarily stored in the working RAM 56 via the input controller 61 and the input buffer 60, and then provided to the comparator 66.

In this state, step A of the flowchart shown in FIG.
Go to 1. In step A1, after the central controller 57 determines whether rPINJ is input,
The storage memory read/write controller 58 is commanded to read the PIN number rPIN'J previously stored in the secret zone 643 of the storage memory 64, and the read PIN number rPIN'J is given to the comparator 66. Then, the ll&E number IPINJ input from the terminal 1 is compared.

In this case, based on the comparison results between the two, the identity verification and the card verification are performed, and then the process proceeds to the actual card transaction processing shown in step A2.

In this step A2, data corresponding to the current card transaction input from the keyboard 2 of the terminal 1 is transferred to the IC via the output controller 23 and the output buffer 24.
It is sent to the card 5 side, and is sent to the working RAM 56 via the input controller 63 of the IC card 5 and the input buffer 162.
given to.

In this state, the process advances to step A3. In this step A3, the previous transaction area 644a in the transaction zone 644 of the storage memory 64, here #TI
transaction area 644a. Then, in step A4, it is determined whether there is data in the transaction area 644a of the corresponding #Ti.

In this case, if there is data and the answer is YES, the process advances to step A5. In this step A5, it is determined whether the transaction data in the transaction area 644a of #Ti is for online use. Here, if it is determined that the use is not online, that is, if it is determined that the use is offline, the answer is No and the process proceeds to step 80.

In this step 86, the data in the transaction area 644a of #Ti is stored in the working RAM 56 and sent to the terminal 1 side via the output buffer 762 and output controller 63. Terminal 1f
s, data from the IC card 5 is input to the working RAM 13 via the input controller 26 and the input buffer 25.
After the data is temporarily stored, it is encrypted in the encryption calculation unit 43 and transferred to a host computer such as a credit card company via the input/output controller 45. Then, the process advances to step A7.

In step A7, the transaction area 644a of #Ti-1 is searched this time. And step A4
Return to step A, determine whether there is data in the transaction area 644a of the corresponding #Ti-1, and then proceed to step A.
5, transaction area 6 of #Ti-1
44a is for online use.

In this case as well, if it is determined No for offline use in step A5, the operations of steps A4 to A7 are repeated, and the data in the transaction area 644a of #T+-1 is also transferred to the host computer. Sent. The same applies to the transaction area 644a after #7i-2.

- On the other hand, if it is determined that there is no data in step △5, for example, all the data up to transaction area 644a of #1 has been transferred, and there is no area before this and it is determined that there is no data, or In step 80, the corresponding transaction area 644a
If it is determined that the transaction data is for online use, proceed to step 88. Then, in step 88, the current transaction data is stored in the #Ti+i transaction area 644a of the transaction zone 644 of the storage memory 64.

Then, the process advances to step A9.

In this step A9, the current transaction data written in the transaction area 644a of #Ti+1 is stored in the working RAM 56, and the output buffer 162
, terminal 1111 via output controller 63
Send to m. In the terminal I II, data from the IC card 5 is temporarily stored in the working RAM 13 via the input controller 26 and the input buffer 725, and then encrypted by the encryption calculation unit 43, and then sent to the input/output controller 45 for credit. The data is transferred to a host computer at a company, etc., and processing is completed.

Therefore, in this way, when the IC card 5 is used online, it is checked whether or not there is any uncollected offline transaction data in the memory contents of the IC card 5, and the corresponding data is checked. If there is, it is possible to extract and collect these transaction data, and offline transaction data can be collected without much time delay, which significantly delays conventional offline transaction data collection. As a result, compared to actual deposit balances and personal credit data, which tend to fluctuate and become unstable,
These various types of data can be made highly reliable with little fluctuation, and in addition, in the operation of the IC card system, it is possible to suppress fraudulent acts that take advantage of the fact that each data (1 data is fluctuating and unstable), and the system is safe. It is also possible to improve sexual performance.

Note that the present invention is not limited to the above-mentioned embodiments, but can be implemented with appropriate modifications without changing the gist.

[Effects of the Invention] According to the present invention, when using a card online, if there is data on offline transactions that have not been collected going back in time, it is possible to collect these transaction data, and the offline transaction data can be collected. By making it possible to quickly collect data, various data such as actual deposit balances and personal credit data can be made stable without fluctuations, and system operational safety can be ensured.

[Brief explanation of drawings]

Figure 1 is a block diagram showing the circuit configuration of a terminal used in one embodiment of the present invention, Figure 2 is a block diagram showing the circuit configuration of an IC card in the same embodiment, and Figure 3 is used in the same embodiment. Diagram for explaining storage memory, 4th
The figure is a diagram for explaining the transaction zones of the storage memory 1 to the storage memory, and FIG. 5 is a flowchart for explaining the operation of the embodiment. DESCRIPTION OF SYMBOLS 1... Terminal, 2... Keyboard, 3... Display unit, 5... IC card, 17... Main controller, 56... Working RAM, 57... Central controller, 64...・Storage memory, 64
3...Secret zone, 644...[-Run transaction zone, 644a...Transaction area, 66...Comparator. Applicant Casio Accounting Co., Ltd. Figure 3 Figure 4 Figure 5

Claims (1)

[Claims] In addition to enabling online or offline transactions using IC cards, these transaction data can be
A storage means for storing information indicating whether or not each transaction is an online transaction in the IC card, and a storage means for storing information indicating whether or not each transaction is an online transaction;
a detection means for detecting whether there is transaction data of uncollected offline transactions in the storage contents of the IC card based on the previous storage contents of the storage means; An IC card system characterized by comprising means for collecting offline transaction data.