KR100238416B1 - Multi-layer operation method of smart card - Google Patents

Abstract

The present invention relates to a step-by-step method of operating a smart card to enable the use of a smart card for the user's authorization and authorization of use more securely, the manufacturing step of manufacturing a smart card in the smart card manufacturers, when the card lost in the manufacturing industry Issuance preparation step for the issuer to take over the card and record its identifier code as a security measure in preparation for it, issuer step for granting various key information and authority that only the issuer can safely know at the request of the user, user The card can be used by the user's request, the card disposal step by the user's request, etc. The card is operated step by step and the status of the card is set according to each step. Prints only the error number. In addition, the state of the card once set is not allowed to return to the previous state, so that the card can be prevented from being forged / modified by theft / disappearance of the card. It can improve safety.

Description

Smart Card Step-by-Step Method

The present invention relates to a step-by-step operation method of the smart card to enhance the safety of the smart card for the user's authorization and authorization of use, in particular, to reduce the possibility of forgery and tampering when the card is lost, the card according to each step It is about the initialization and operation method that can prevent the forgery of the card by setting the state to prevent the return to the past state.

In general, smart card is a credit card-sized high security device, unlike a magnetic card used in general, it can store a huge amount of information, and there is a program in itself to provide various service functions by itself. The password program is essentially built in, and it is a device that cannot access any contents without the password set by the holder.

In the related art, such a similar case has been announced domestically and internationally, but a function for preventing forgery and alteration in case of loss / theft of the smart card is based only on the safety of the smart card itself. However, there is little to prepare for knowing the commands to send and receive and knowing the details of smart cards.

Therefore, in order to solve the problems of the conventional technology, the present invention sets the state of the card according to the issuing use step before issuing the smart card and makes it impossible to return to the previous, so that the lost / stolen smart card is not available. The purpose of the present invention is to provide an initialization and operation method that enhances the safety of the smart card without the possibility of reissuance.

1 is a schematic view of the utilization of the smart card to which the present invention is applied.

2 is an EEPROM configuration diagram of a storage device of a smart card to which the present invention is applied.

3 is a step-by-step functional diagram of the smart card to which the present invention is applied.

4 is a software system configuration of a smart card to which the present invention is applied.

5 to 8 is a smart card step-by-step operating flow chart of the present invention.

The present invention relates to a step-by-step operating method for enhancing the stability of the smart card.

The present invention is briefly described as follows.

When creating a smart card, ask the card manufacturer to record the serial number of the card, and set the state of the card and the issuer identifier code of the card to 0 and store them in a safe area of the smart card. do. The safe area means an area in which all bits can only be set from 0 to 1 and cannot be erased from 1 to 0. The card issuer takes over the blank card, which contains only the serial number from the card manufacturer, records the issuer identifier code and sets the status of the card to `` Personalization ''. The card issuer issues a smart card that records the user's information, password, usage rights, etc. to users with certain requirements, and sets the status of the smart card to `` Utilization ''. The smart card checks the current state when all commands are input and outputs an error response for commands that cannot be performed in the current state. Even the authorized smart card issuer cannot restore the current smart card state to the past state, thereby increasing the safety of the smart card that provides the user's authority authentication and user authorization function.

In addition, when the card user requests to cancel the subscription, the card issuer collects the smart card and sets the state of the collected card as `` Termination '', and the life of the smart card ends. The smart card terminated in the above step cannot be revived.

Hereinafter, the initialization for the safety of the smart card of the present invention and its operation method will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram of a user authentication and authorization system to which the present invention is applied, the configuration of which is a management center 110 that performs authorization and authorization of a user, and a terminal for providing specific information or service to be used by the user. 120, the smart card 130 possessed by the user and the subscriber management terminal 140 in the management center 110 for issuing and managing the smart card to the user.

Referring to the operation of the smart card-related portion of the user authentication and use authority grant system configured as described above are as follows.

1. The smart card issuer orders the smart card from the card manufacturer. Only the serial number is recorded in the secure area on the EEPROM, and the issuer identifier code recording area and the status recording area of the card are set to zero.

2. The card issuer who acquired the ordered card before issuing inserts the card into the subscriber management terminal 140 to check whether the card is in the pre-issuance state, and records his identifier code through the issuance preparation command and records the state of the card as' Set it to `` Issuance '' and keep it safe.

3. When a person who wants to use a specific information or service visits the corresponding management center 110 to determine usage rights and the like, the smart card issuer stores the issued smart card 130 according to '' 2 ''. ) Is inserted into the subscriber management terminal 140, and the subscriber information, usage rights, key information, etc. are recorded in the smart card, and the state of the card is changed to `` use '' and issued to the subscriber.

4. The subscriber inserts the card in the `` used '' state into the information and service providing terminal as needed, and enters the password to use the information or service.

5. If the subscriber wants to terminate his / her own subscription, he terminates the life of the smart card and discards the smart card by setting the state of the collected smart card to `` discard ''. Once discarded, the smart card cannot be reused as a smart card.

FIG. 2 is an EEPROM configuration diagram of a storage device of a smart card to which the present invention is applied in connection with FIG. 1, which resides in a smart card and stores various information.

The subscriber information recording area 131 is an area for recording subscriber information and key information which is not changed, so that it is not easy to change during the post-issuance use phase. In the various authority and usage history recording areas 132, usage records for service use, various keys that may be changed, usage rights, and the like are recorded or erased. The secure area 133 is an area that can be recorded but cannot be erased.

3 is a step-by-step functional diagram of a smart card, showing the performance and setting status of each step of the card.

First, the production step 210 is the card issuer by recording the serial number in the security area 133 when manufacturing the smart card in the smart card manufacturer, and also set the card issuer identifier code and the status recording area of the card in the security area to 0. To pass.

Next, the issuance preparation step 220 checks the state of the card and records the issuer's identifier code in the corresponding area only when the state of the card is 0, and sets the state of the card to be issued and keeps it. Therefore, even if the card is removed from the card manufacturer, the card cannot be issued without this step. Even if it is forcibly issued, the key value for using the actual information or the service can be obtained unless the valid card issuer is issued. It cannot be used because it cannot be recorded.

Next, the issuing step 230 records the subscriber information and smart card rights, etc., changes the state of the card to `` use '', sets it, and delivers it to the subscriber.

In the subscriber use step 240, actual information or services are used, the usage history is recorded, and the user authority is changed and stored if necessary.

Finally, the card discarding step 250 recovers the card when the user requests termination in the subscriber use step 240, sets the state of the card to discard, erases various privilege areas, and discards the card.

4 is a configuration diagram of a software system of a smart card to which the present invention is applied, all of which are recorded in a ROM, driven by a CPU when necessary, and perform a corresponding function. Each function program and common function, including the main part, are set and used jointly in each function program.

The main unit 310 of the entire program interprets the message and recognizes it as a command, and performs a corresponding function in the case of a normal command. If it is not a normal command, or if there is an illegal record retrieval or erase attempt, the countermeasure function is performed.

Reference numeral 320 denotes input / output processing of common functions, encryption / decryption of data, and writing or erasing data in the EEPROM. The issue preparation command processing function unit 330 performs a function for preparing the issuer before issuing the smart card. The issue command processing function unit 340 records the subscriber information and the authority and issues the smart card when issuing the card so that the subscriber can use the card. The use command processing function unit 350 performs a function of using the information or the service by inserting the user's smart card into the specific information and service providing terminal.

5 to 8 is a step-by-step operation flow chart of the smart card of the present invention according to the second to fourth.

The smart card operates normally after a predetermined power supply and clock are provided, and a predetermined reset signal is given. During normal operation, the flow is executed and controlled in the flows of FIGS. 5 to 8.

First, with reference to FIG. 5, it is checked whether there is a smart card input by the subscriber from the outside (410), and if there is a card input from the outside, it is determined whether the command inputted from the outside is a proper command ( If it is an incorrect command, error transmission is performed (500).

If the command is an appropriate command, first, it is determined whether the state of the smart card is '' 0 '' which is a state before issuance (the state in which subscriber information is not input) (430). The prepare command is processed (440).

However, if the state of the card is not 0, it is determined whether the state of the card is a `` issued '' state (450) and if the issued state is issued (460).

When the state of the card is not `` issuance '', it is determined whether the state of the card is the `` use '' state (470). If the state of the card is not in the use state, it is determined as `` discarded '' state (490) and returns to the state of waiting for the external input again.

Referring to FIG. 6, the issue preparation command processing process 440 will be described. First, when the input command code is '1' (441), a command for recording the issuer identifier code in the recording area is processed. (442) Perform a successful return 446 (446). If the command code is not '' 1 '', it is determined whether it is '' 2 '' (443). If '' 2 '', the command for setting the card state to `` issuance '' is processed (444). Perform a successful return (446). However, if the state of the card is not '' 1 '' or '' 2 '', after transmitting 445 the error state of the card (i.e., wrong external input state) 445, it returns to failure ( 447).

In addition, when the issuance command processing process 460 is described with reference to FIG. 7, the first command is a card state setting command (461). 462, then performs a successful return 466. However, if it is not a card status setting command, it is determined whether the input command is larger than '' 1 '' and smaller than '' 8 '' (463). If the address is within the range, the subscriber information processing command is stored and various rights are handled. Save the various key information (464), and then perform a successful return (466). If it is not within the range, an error transmission 465 indicating an invalid input is performed, and then a failure return 467 is performed.

In addition, when the use command processing process 480 is described with reference to FIG. 8, if the first input command is a discard command (481), the card discard command process 482 is performed, and then the successful return (486). Perform However, if it is not a card discard command but a general command (483), after executing various general commands (484), a successful return (486) is performed. In addition, an error state indicating that the command is not a discard command or a general command is erroneous (485), and then a failure return (487) is performed.

As described above, the present invention can be expected to have the following effects as a method of adding safety to a smart card for granting authorization and receiving restriction function of a receiving subscriber in Digipath.

In addition, the card issuer records his identifier code and changes the state of the card through a preparatory step before issuing the card, thereby ensuring safety against card loss or theft at the card manufacturer.

In addition, even if the card in use is lost or stolen according to the status of each step, the forgery of the card is less likely to provide a safer and more reliable service.

According to the present invention, the service provider, the operator, and the subscriber can all be guaranteed high reliability, safety, and convenience in using the smart card.

The present invention reinforces the security function to enable more secure use of the smart card for user authorization and use rights, and in particular, the aspect of reinforcing the security of the smart card to minimize the possibility of forgery and alteration after the card is stolen / acquired. The purpose is to provide a step-by-step operation of the smart card in.

Claims (2)

To reduce the risk of forgery, tampering and theft of smart cards, the card manufacturer records the serial number in the secure area of the storage device of the card when the smart card is manufactured, and the card issuer identification code and the status record area of the card in the secure area. A smart card making step of setting the value to '0' and delivering it to the card issuer; In order to prepare for the loss of the card in the smart card manufacturing step, the status of the card is checked and the issuer identifier code is set only when the status of the card is '' 0 '', and the status of the card is issued. Issuance preparation step to set to; According to the user's request, only the card set as `` issuance '' in the issuing preparation step can enter the subscriber information and smart card authority and set the status of the card to `` use '' so that only the issuer can know. An issuing step of granting key information and authority; A subscriber use step of recording and storing the use history on the card in which the state of the card is set to `` use '' in the issuing step and changing the user's authority when necessary so that the user can use the issued card for information or service use; If the user requests the termination, the card is collected, the card is erased, and the authority area is set to `` discard '' and the card is discarded. Step by step operation of the smart card, characterized in that it is impossible to change the card status to. The method of claim 1, wherein each step outputs only an error number when a command other than an available command is available.