KR20050088684A - System and method for providing information by using smart card, recording medium for it - Google Patents

Abstract

The present invention relates to a method and system for providing information using a smart card and a recording medium therefor, wherein the server (1) uses predetermined information (or data) mounted on a client smart card in a server (2) or a terminal or a device. It is to. Preferably, the predetermined information (or data) is encrypted and mounted through the server 1, and the server 2 or the terminal or the device uses or uses the predetermined information mounted on the smart card. The decryption key corresponding to the encrypted predetermined information (or data) is obtained from the server 1.

Accordingly, client credit information provided from a specific server (for example, card company 1, etc.) can be utilized for another server (for example, card company 2 or a bank). For example, if the client credit rating evaluated by the credit card company 1 is very low, the credit card company 2 may predict or evaluate a predetermined service to be provided to the client, such as a small credit limit or a loan limit of the client. have.

Description

System and Method for Providing Information by Using Smart Card, Recording Medium for It}

The present invention encrypts predetermined information about a client in the server 1 and mounts the predetermined information on the client smart card, and uses the predetermined encrypted information mounted in the client smart card in another server 2 or a terminal or a device. And a method and system for the same.

As the Internet evolves, protecting data on a computer or network so that certain data is only exposed to a specific authorized user (or organization) is of great importance for the user or for the data issuing organization.

For example, data that exposes the authorized (or authenticated) specific user (or agency) may be associated with a user's personal business (eg, bank account number, credit card number, social security number, etc.) or company business (eg, secret document, contract). Data, etc.).

Accordingly, in using certain specific data, if the specific data is data useful for at least one or more third parties, a method for more convenient use of the specific data by the third party should be sought.

An object of the present invention for resolving the above problems is to encrypt the predetermined information (or data) in the server (1) and to mount on a smart card, when using the smart card, a predetermined terminal or device or server (2) Receiving or receiving the encrypted predetermined information (or data) from the smart card, the server (1) receives a decryption key value corresponding to the encrypted information (or data) in the terminal, device or server (2) Receiving a decryption key value corresponding to the encrypted information (or data) from the server (1), and decrypting the information (or data) using the provided decryption key value; and In providing a system.

The present invention for achieving the above object is a step of encrypting the predetermined information (or data) in the server (1) and mounting on the smart card, and when using the smart card, a predetermined terminal or device or the server (2) the smart card Extracting or receiving the encrypted predetermined information (or data) from the terminal, and a decryption key value corresponding to the encrypted information (or data) at the terminal, device, or server 2 to the server 1. Requesting, and providing the decryption key value corresponding to the encrypted information (or data) to the terminal or the device or the server 2 according to the request from the server 1 and the terminal or the device or Decrypting and using the information (or data) by using the decryption key value provided from the server 1 in the server 2.

Preferably, the step of encrypting the predetermined information (or data) in the server 1 and mounting on the smart card, the predetermined information corresponding to the information (or data) encrypted in the server 1 and mounted on the smart card And storing the decryption key value in a predetermined storage medium.

Further, the predetermined information (or data) mounted on the smart card in the server 1 includes network connection information (or data) corresponding to the server 1.

Preferably, the storage medium is characterized in that provided in the card company server and / or bank server and / or mobile communication company server and / or VAN company server and / or terminal or device.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings, and first, predetermined reference numerals are added to the components shown in the drawings. However, it is noted that the same components shown in different drawings are denoted by the same reference numerals as much as possible.

In addition, in the following description, in order to explain the embodiments of the present invention, specific details such as specific elements are illustrated, which are provided to help a more general understanding of the present invention, and the present invention may be practiced without these specific details. It will be apparent to those skilled in the art.

1 is a simple configuration diagram of a system for providing information (or data) using the smart card 130 according to the present invention.

Referring to FIG. 1, a preferred information (or data) providing system of the present invention includes an IC card 130, a server 1, and a terminal or device 150.

Preferably, IC card 130 includes a memory 145 for storing encrypted predetermined information (or data). The IC card 130 is connected to the server 1 through a predetermined terminal (eg, a personal computer, an ATM, a KIOSK, a merchant terminal, etc.), and the predetermined information provided from the server 1 through the communication session. (Or data) is stored in the memory 145 in the IC card 130. According to the present invention, the IC card 130 is characterized in that it receives the predetermined information (or data) encrypted from the server 1 and is mounted in the memory 145.

In addition, the IC card 130 is connected to the terminal or device 150 (or server 2) and the encrypted predetermined information (or data) received from the server 1, the terminal or device 150 (Or server 2), an input / output interface 135, an IC chip having a predetermined memory 145, and a processor 140 for controlling the input / output of the product information. desirable.

Preferably, in providing the predetermined information (or data) to the IC card 130, the server encrypts the information (or data) through a series of encryption processes, and furthermore, a third party (eg, IC). A predetermined decryption corresponding to the encrypted information (or data) required for the terminal or device 150 or the server 2 or the like in which the card is used to confirm and / or use the encrypted information (or data). It stores and manages keys.

In addition, the server includes an encryption unit 105, a providing unit 115, a storage unit 110 and the approval unit 120, thereby providing information (or data) using the smart card 130 according to the present invention. To realize.

Preferably, the encryption unit 105 encrypts predetermined information (or data) mounted on the card 130 of the client. The information (or data) encryption requires that a third party (eg, a particular card terminal or device or server, etc.) not authorized or authenticated in accordance with the present invention by the client using the card 130 may optionally The memory 145 of 130 is concealed so that the information (or data) mounted thereon cannot be identified and / or used.

The information (or data) encryption through the encryption unit 105 performs a symmetric encryption or public key encryption process so that only a predetermined user (for example, a card holder client or a corresponding information or data management server) can be identified. It is desirable to apply a hash function (Hash Functio) to ensure confidentiality (Confidentiality) by applying, and also to prevent the reproduction and modulation in the transmission of information (or data).

For example, if the client encrypts at least one or more card related information (eg, loan, cash service, credit information, etc.) from the L card company and stores it in the memory 145 of the card 130, the memory of the client card 130 ( The card-related information stored in 145 may be sufficient evaluation data and / or criteria in providing other services (eg, loans or cash services) to other clients (eg, other card companies or banks). have.

Accordingly, the other institution (for example, another card company or bank), etc., to use the card related information stored in the memory 145 of the client card 130, predetermined for use of the card related information to the L card company In this process, the other authority requests a decryption key from the L card company to decrypt the encryption of the card related information.

For example, when the information (or data) provided from the L card and loaded into the memory 145 of the client card 130 is credit information of the client (for example, bad credit, high delinquency rate), the third party may set the credit. By confirming the information, it is possible to determine the creditworthiness of the client and to provide an appropriate service.

Preferably, since the card-related information is personal and unique information of the client and / or L card company, in order to use the card-related information by other organizations according to the present invention, the L card company and the other organization may have predetermined information. It is stated that consultations and contracts can be preceded.

The providing unit 115 mounts predetermined information (or data) encrypted through the encryption unit 105 in the memory 145 of the client card 130. Preferably, the encrypted predetermined information (or data) may have a file structure based on a smart card standard (for example, a dedicated file (DF) and / or an element file (EF), etc.), and an APDU (Application Protocol Data Unit). ) Is mounted on the memory 145 in the card 130.

The storage unit 110 stores a predetermined decryption key generated and / or extracted in a process of encrypting predetermined information (or data) mounted on the client card 130 by the encryption unit 105. 125).

Preferably, the storage unit 110 stores the encrypted information (or data) in the storage medium 125, wherein the client personal information and / or card information and / or application (or information or data) information and And / or store network connection information of the server 1 in association.

The approval unit 120 uses the card 130 on which the encrypted information (or data) is loaded by the client, so that the card is used in the terminal or the device 150 or the server 2 in which the card 130 is used. When there is a request for a decryption key corresponding to the encrypted information (or data) from the terminal or the device 150 or the server 2 by requiring the encrypted information (data) mounted on the 130. Then, it is determined whether to approve the provision of the decryption key.

For example, when the terminal or the device 150 or the server 2 transmits a decryption key request message corresponding to the encrypted information (or data) to the server 1, the encrypted information (or data) is stored. Preferably, the personal information of the client having the loaded card 130 and / or the card information and / or the identifier of the encrypted information (or data) is further included. The information included in the decryption key request message transmitted from the terminal or the device 150 or the server 2 (for example, an identifier of personal information and / or the card information and / or the encrypted information (or data)). Based on this, it is determined whether the decryption key corresponding to the encrypted information (or data) is provided to the terminal or the device 150 or the server 2.

In addition, the server 1 is connected to the function performing unit (encryption unit 105, providing unit 115, storage unit 110 and the approval unit 120, etc.) any storage medium useful for the implementation of the present invention. 125 may be further provided.

According to another aspect of the present invention, the present invention provides a function of encrypting and providing predetermined information (or data) with the IC card 130, and provided through a wired or wireless network from the terminal or device 150 or server A function of receiving predetermined decryption key request information corresponding to the encrypted information (or data) and a predetermined decryption key corresponding to the encrypted information (or data) in response to the request information. Or a recording medium characterized by recording a program for realizing a function of transmitting to a server.

Preferably, when the terminal or the device 150 (or server) intends to use the extracted encrypted information (or data) by extracting the encrypted information (or data) stored in the IC card 130, A decryption key corresponding to the encrypted information (or data) is received from the server 1, and the encrypted information (or data) stored in the IC card 130 is decrypted and used.

Further, according to another example, the terminal or device 150 (or server) accesses encrypted information (or data) stored in the IC card 130 and / or from the IC card 130 is encrypted. Even when extracting information (or data), a predetermined decryption key can be received from the server 1 and used.

According to an embodiment of the present invention, the terminal or the device 150 (or the server 2) is characterized in that the extraction unit 155, the authentication request unit 160, decryption unit 165 and other function performing unit It is done.

The extraction unit 155 of the terminal or device 150 (or server 2) inserts or accesses a card interface (not shown) provided in the terminal or device 150 (or server 2). From 130, predetermined encrypted information (or data) is extracted in accordance with the present invention.

If it is determined that the predetermined encrypted information (or data) provided or extracted from the client card 130 is worth using and / or checking, the authentication requesting unit 160 corresponds to the encrypted information (or data). A message requesting a decryption key is generated and provided to the server 1.

For example, the message may include client personal information and / or card information and / or identifier information of the encrypted information (or data) and / or terminal or device 150 information (unique code, ID or serial number, etc.). It may include.

The authentication requesting unit 160 determines that the predetermined encrypted information (or data) provided or extracted from the client card 130 is worth using and / or checking, for example, from the server 1. Information (or data) encrypted and embedded in 130 is credit card related information (eg, credit information, cash service limit information, etc.) of the client, and the terminal or device 150 (or server 2) is a card company. Or, if connected to a bank or the like, the encrypted information (or data) may be sufficient as a reference for the card company or bank to perform a predetermined evaluation (eg credit rating, cash service limit, etc.) for the client. .

In addition, the authentication request unit 160 receives the decryption key response message provided from the server 1 in response to the decryption key request message, and transmits the decryption key included in the response message in the terminal or the device 150. Transfer to decoder 165.

The decryption unit 165 decrypts the encrypted information (or data) using the decryption key provided from the server 1 in response to the predetermined encrypted information (or data) extracted from the client card 130. Thus, the terminal or the device 150 performs a process of processing in a form that can be used and / or confirmed.

A function performing unit is interlocked with the extracting unit 155, the authentication requesting unit 160, the decrypting unit 165, etc. according to the present invention, a control unit for performing at least one or more functions and / or tasks, a screen output unit, a key input unit, The memory 145 and the communication unit.

For example, the controller is a generic term for an operating system and a terminal or device 150 control management program and a terminal or device 150 agent program required for the terminal or device 150 to perform a predetermined task. Control and manage the overall operation of the device 150.

The screen output unit receives at least one or more key data generated from the key input unit and / or various information and signals extracted and / or generated during the control process of the controller, and includes a screen (eg, an LCD ( Liquid Crystal Display)) to output.

The key input unit includes a plurality of number keys, a character key for inputting a character, and at least one function key, and the like. When the user presses a predetermined key, the corresponding key data is generated and provided to the controller.

The memory 145 may include a predetermined program code for controlling the overall operation of the terminal or the device 150, a space in which information and / or data input and / or outputted when an operation by the program code is performed, and And / or a generic term for a storage area, typically a read only memory 145 such as a read only memory (ROM) and a read / write memory 145 such as an electrically erasable and programmable read only memory (EEPROM) or flash memory (FM). ) May be provided in the terminal or the device 150.

In addition, the terminal or device 150 (or server) includes at least one personal computer, merchant terminal, KIOSK, ATM, POS terminal.

2 is a simplified structural diagram of a storage medium 125 according to a preferred embodiment of the present invention.

Figure 2 is located inside or outside the server, the predetermined information for the third party to use the encrypted information (or data) mounted in the memory 145 of the card 130 of the client in accordance with the present invention The storage medium 125 is stored.

Preferably, the storage medium 125 may include user information (ID), card information, application (or data) information, encryption / decryption key value information, key value management information, and network access information.

The user information in the storage medium 125 is a subject receiving predetermined information (or data) from the server 1, and the client name information, ID information, social security number information, mobile phone number information, e-mail information, and the like are the user. Information may be included.

Card information is card related information of a client mounting predetermined information (or data) from the server 1, for example, card number information, chip serial number information, card valid authority information, password (or authentication code) information, and the like. Other information such as safety payment code may be included.

Application information is encrypted in accordance with the present invention and loaded into the memory 145 of the client card 130, and at the time of use of the client's card 130, at a third party (e.g., terminal or device 150, etc.). It is predetermined information (or data) to be used by obtaining the consent of the server 1 (eg, obtaining a decryption key), and may include, for example, credit rating information and loan information of the client.

The key value information in the storage medium 125 is an encryption key generated or extracted in the course of performing a predetermined encryption process before the predetermined information (or data) is loaded into the memory 145 of the client IC card 130. And information about a decryption key corresponding to the encryption key, for decrypting the predetermined information (or data) encrypted with the encryption key.

The key value management information includes management information on a value of a predetermined key (encryption key and / or decryption key, etc.) generated or extracted in the process of encrypting the predetermined information (or data) according to the present invention.

For example, the key value management information may include key generation date information, key registration date information, key use date information, key use requester information, key use approval information, and the like.

The key usage requester information is decrypted to decrypt the encrypted information (or data) to the server 1 in order to use predetermined encryption information (or data) mounted on the client card 130 according to the present invention. As information on the subject requesting the key (for example, the card terminal or device 150, the server 2, KIOSK, ATM, etc.), a unique identification code of the decryption key subject may be recorded.

The network connection information of the storage medium 125 may be determined by the terminal or the device 150 (or the server 2) that wants to use predetermined encrypted information (or data) mounted on the client card 130 according to the present invention. Connection information for accessing the server 1 on the network which stores a predetermined decryption key for decrypting the encrypted information (or data).

For example, the network connection information may include communication protocol information (for example, Simple Mail Transfer Protocol (SMTP), HyperText Transfer Protocol (HTTP), User Datagram Protocol (UDP), Transmission Control Protocol (TCP)), communication port information, and a server ( Domain / IP address information for 1) and predetermined access code information for accessing the server 1, and the like.

3 is a simplified illustration of the client card structure and card memory 145 structure according to a preferred embodiment of the present invention.

Referring to FIG. 3, the client card 130 is a card 130 manufactured and provided based on an integrated circuit chip (ICC) standard including ISO / IEC 7816 and / or ISO / IEC 14443. Client card 130 according to the invention is connected to the terminal or device 150, the input and output interface 135 for the input and output of the data inside or outside the card 130, and the server 1 through the input and output interface 135 Stored in the memory 145 in the card 130, or encrypted information (or data) mounted in the memory 145 in the card 130. At least one or more execution processors 140 (e.g., central process unit (CPU), MPU (Micro) for providing to the terminal or device 150 (or server 2) (to use the encrypted information or data). Process Unit), Coprocessor (140) ) And further characterized in that it comprises a memory 145 having an area for storing a given information (or data), the encrypted received from the server (1).

For example, the encrypted predetermined information provided from the server 1 may be included in the form of an application (or data) or included in a specific application (or data), and may be included in the memory 145 area of the IC chip in the card 130. It is preferably mounted on an EEPROM (Electrically Erasable and Programmable Read Only Memory).

In addition, the encrypted predetermined information stored in the memory 145 in the card 130 from the server 1 may include the client's financial evaluation information (eg, credit rating, loan or cash service information) and / or the client's disposition ( Or personal information such as personal information).

Referring to FIG. 3, an application (or data) including encrypted predetermined information and stored in the memory 145 in the card 130 is a terminal or a device that wants to use the application (or data) according to the present invention. 150 (or the server 2) predetermined for interfacing (e.g. acquiring a decryption key) with the server 1 that mounted the application (or data) to the memory 145 in the card 130 Contains data.

Preferably, the application (or data) includes an encrypted content (e.g., credit card information (credit, loan information, etc.)) and an application identifier (or file identifier, etc.) that distinguishes the application (or data). Include.

For example, the application recognizer recognizes the external terminal or device 150 (or the server (or server) when an application (or data) including the encrypted information is provided to the external terminal or device 150 (or the server 2). 2)) to identify what contents (eg, credit card related information, etc.) associated with the application (or data) provided from the card 130.

Accordingly, the external terminal or device 150 (or server 2) provides the application (or data) identifier information to the server 1 on the network that encrypted the application (or data), thereby providing the application (or Data) to request decryption key information corresponding to encryption.

In addition, according to the present invention, the application (or data) further includes network connection information and encryption information.

As described above, the network connection information of the application (or data), the application (or data) containing the encrypted predetermined information (or data) is the external terminal or device 150 (or server 2) When provided with, the external terminal or device 150 (or server 2) is required in the process of connecting to the server 1 to request a decryption key for decrypting the encrypted information (or data) Connection information (e.g., domain address, IP, communication protocol, etc.).

The application (or data) is encrypted information, for example, information on whether or not the application (or data) to determine whether the application (or data) mounted on the card 130 by a predetermined encryption operation is performed according to the present invention Indicates.

For example, when the external terminal or device 150 (or the server 2) extracts or receives the application (or data) from the card 130, the external terminal or device 150 (or the server 2) checks the encryption information of the application (or data), The decryption processing processor cooperating with the server 1 is advanced.

4 is a simple flow chart of a preferred process according to the present invention.

4 shows that, according to the present invention, predetermined encrypted information (or data) from the server 1 is loaded into the memory 145 in the client card 130 and the client uses the card 130. A simple flow diagram for a process of using predetermined encrypted information (or data) mounted on the card 130 in a terminal or device 150 (or server 2) that cooperates with the card 130.

Referring to FIG. 4, the encryption unit 105 of the server 1 performs an encryption operation on predetermined information (or data) to be mounted in the client card 130 (400), and the encryption unit 105 is In the process of performing an encryption operation on predetermined information (or data), a decryption key corresponding to the encrypted predetermined information (or data) is generated / extracted (405).

The storage unit 110 of the server 1 stores the encrypted information (or data) and the generated decryption key information in a storage medium 125 in association with the client information (410), and of the server 1 The provider 115 mounts the encrypted information (or data) on the client card 130 (415).

For example, when the providing unit 115 of the server 1 mounts the encrypted information (or data) on the client card 130, a card that is previously issued and / or previously issued to the client It is noted that post-issuance using a terminal (eg, PC, ATM, KIOSK, affiliated store terminal, etc.) interoperating with 130 may be all possible.

A card in which a client is loaded with the encrypted information (or data) in the memory 145 of the card 130, and the client is loaded with the encrypted information (or data) in association with a predetermined terminal or device 150. In operation 420, the terminal or device 150 determines whether to use encrypted information (or data) mounted on the card 130 (425).

For example, the terminal or the device 150 confirms the identifier of the encrypted information (or data) and / or the identifier of the application including the encrypted information (or data), and thus the encrypted information (or data). It is determined whether the information relating to a specific task required by the terminal or the device 150.

Preferably, if the terminal or device 150 attempts to perform a service related to the client's creditworthiness and / or loan limit, etc., the encrypted information (or data) is evaluated by another operator (eg, the server 1). Credit information and the like may be appropriate, and the encrypted information (or data) evaluated by the other operator may be used by the terminal or the device 150 (eg, the server 2) to provide credit and / or loan limits to the client. Provide a basis for providing related services.

As described above, if the terminal or device 150 wants to use or use predetermined encrypted information (or data) mounted in the memory 145 in the client card 130 (430), the terminal or device ( The extraction unit 155 of 150 extracts the encrypted information (or data) application mounted on the card 130 (435).

When the encrypted information (or data) application is extracted, the extractor 155 of the terminal or the device 150 checks identifier information included in or associated with the application and server 1 network access information (440). ), Based on the identified identifier information and network connection information of the server 1, the authentication requesting unit 160 of the terminal or device 150 generates a decryption key request message including the identifier information (445). .

For example, the decryption key request message generated by the authentication requesting unit 160 may include identifier information and / or server 1 network connection information and / or client card information and / or personal information and / or associated with the application. Alternatively, the terminal or the device 150 may be included.

The authentication request unit 160 transmits the generated decryption key request message to the server 1 based on the network connection information of the server 1 (450), and corresponds to the encrypted information (or data). Request a decryption key.

The server 1 receives the decryption key request message transmitted from the terminal or the device 150 (455), the approving unit 120 of the server 1 is the application identifier information included in the received decryption key request message And / or determining whether to provide a decryption key corresponding to the encrypted information (or data) mounted on the client card 130 based on the client personal information or the like (460).

For example, the approval unit 120 of the server 1 is stored in the storage medium 125 and the application identifier information and / or client personal (card) information included in the decryption key request message transmitted from the terminal or the device 150 By comparing the application identifier information and / or client personal (card) information, it is determined whether to provide the corresponding decryption key in response to the decryption key request message.

If, as a result of the determination, it is possible to provide the decryption key (465), the approval unit 120 of the server 1 is extracted from the card 130 to the authentication request unit 160 of the terminal or device 150 In step 470, an acknowledgment message including a decryption key corresponding to the encrypted information is provided.

When the authorization response message including the decryption key is provided from the server 1 to the terminal or the device 150, the decryption unit 165 of the terminal or the device 150 receives the decryption key provided from the server 1. In operation 475, the decryption operation is performed on the encrypted information extracted from the card 130.

In addition, the terminal or the device 150 provides (or applies) a predetermined service to the client based on the information (or data) on which the decryption operation is completed (480), and when the predetermined service is provided or applied to the client, The decrypted information (or data) is deleted.

Figure 5 is a simple illustration of a preferred embodiment of the present invention.

5 shows a card company server 1 for mounting predetermined encrypted information on a client card 130, a client card 130 for receiving and mounting the encrypted information from the card company server. It is a simple exemplary diagram composed of a terminal or device 150 to extract (or use) the encrypted information from the client card 130.

Preferably, the terminal or the device 150 interworks with another card company server 2 or a bank server, and predetermined encrypted information (eg, client credit information) mounted on the client card 130 from the card company server 1. And the like) to be used or used.

According to the present invention, the terminal or device 150 uses the encrypted information (or data) to use or use predetermined encrypted information (eg, client credit information, etc.) mounted on the client card 130. The card company server 1 requests a predetermined decryption key to decrypt the data, and decrypts the encrypted information (or data) through the decryption key provided from the card company server 1.

In addition, the terminal or device 150 (or the server 2), in using or using the encrypted information (or data), pays for the use of predetermined information (or data) to the card company server (1) Characterized in that.

For example, the use or use price of the encrypted information (or data) may be paid on a case-by-case basis and / or on a date-by-cycle basis and / or on a fixed basis by a predetermined contract or the like between the servers. have.

The embodiment shown in Figure 5 is made through the following process.

The credit card company server encrypts the client credit information and the previously loaned information and generates or extracts a decryption key corresponding to the encryption (1), and the encrypted information and / or decryption key information and / or client information (personal and card). (2) and the card company server stores the encrypted information in the memory 145 of the client card 130 (3).

When the card 130 on which the encrypted predetermined information (or data) is loaded is used and / or the encrypted information (or data) related matters are transmitted to the terminal or the device 150 (4), the terminal or the device 150 determines whether the encrypted information (or data) is used (5), and (if desired) the terminal or device 150 transmits the encrypted information (or data) to the card 130. Request (6).

The card 130 provides the encrypted information (or data) to the terminal or the device 150 according to a request of the terminal or the device 150 (7), the terminal or device 150 is encrypted The decryption key approval request message corresponding to the information (or data) is transmitted to the card company server 1 (8).

The card company server approves the provision of the decryption key corresponding to the encrypted information (or data) (9), and sends the authorization response message including the decryption key corresponding to the encrypted information (or the data) to the terminal or the terminal. Provided to device 150 (10).

The terminal or device 150 decrypts the encrypted information using the decryption key provided from the card company server 1 to use the corresponding information (or data), and the use or use of the information (or data) is completed. After that, the settlement of the predetermined information (or data) is provided to the card company server 1.

According to the present invention, using or using the encrypted information (or data) in a terminal or device (or server 2) that wants to use or use predetermined encrypted information (or data) mounted on a client smart card. Request and obtain a predetermined decryption key required for the server from the server 1 equipped with the encrypted information (or data) on the smart card, and the encrypted information (or By decrypting the data)

There is an advantage in that predetermined information (eg, client credit information, etc.) provided from a specific server (eg, card company 1, etc.) can also be used by another server (eg, card company 2 or a bank).

In addition, the server providing the predetermined information has an advantage that can generate new revenue due to the use or the use of the information.

1 is a simple configuration diagram of a system for providing information (or data) using a smart card according to the present invention.

2 is a simplified structural diagram of a storage medium according to a preferred embodiment of the present invention.

3 is a simplified illustration of a client card structure and a card memory structure according to a preferred embodiment of the present invention.

4 is a simple flow chart of a preferred process according to the present invention.

5 is a simplified illustration of a preferred embodiment of the present invention.

<Description of main parts of drawing>

100: server (1) 105: encryption unit

110: storage unit 115: providing unit

120: approval unit 125: storage medium

130: card 135: input and output interface

140: processor 145: memory

150: terminal or device 155: extracting unit

160: authentication request unit 165: decryption unit

170: function performing unit

Claims (5)

Encrypting predetermined information (or data) at the server 1 and mounting the same to a smart card; Extracting or receiving the encrypted predetermined information (or data) from the smart card at a predetermined terminal, device or server (2) when using the smart card; Requesting a decryption key value corresponding to the encrypted information (or data) from the terminal or the device or the server (2) to the server (1); Providing, at the server (1), a decryption key value corresponding to the encrypted information (or data) to the terminal, device, or server (2) according to the request; And Providing information (or data) using a smart card, including; decrypting and using the information (or data) using the decryption key value provided from the server (1) in the terminal, device, or server (2). Way. The method of claim 1, wherein the server 1 encrypts predetermined information (or data) and mounts the encrypted information on the smart card. And storing a predetermined decryption key value corresponding to information (or data) encrypted and mounted on the smart card in the server 1 on a predetermined storage medium. Information (or data) providing method using. The predetermined information (or data) to be mounted on the smart card in the server 1, Method for providing information (or data) using a smart card, characterized in that it comprises network connection information (or data) corresponding to the server (1). An IC card having a memory for storing encrypted predetermined information (or data); A server for storing and managing a decryption key corresponding to the encrypted information (or data) stored in the IC card; And When accessing the encrypted information (or data) stored in the IC card, the server receives a decryption key corresponding to the encrypted information (or data) from the server and stores the encrypted information (or data) stored in the IC card. Information (or data) providing system using a smart card comprising; a terminal or device used to decrypt. A function of encrypting and providing predetermined information (or data) with an IC card; Receiving predetermined decryption key request information corresponding to the encrypted information (or data) provided from a terminal or a device or a server through a wired / wireless network; And And a program for realizing a function of transmitting a predetermined decryption key corresponding to the encrypted information (or data) to the terminal, apparatus, or server in response to the request information.