KR20160072598A - Card having user authentication and otp generation function and method thereof - Google Patents

Abstract

The present invention relates to an IC card having functions of a user authentication and an OTP generation, and a method thereof. The IC card is free from a security risk of an IC card because an IC chip on the IC card can be activated such that a card reader reads information of the IC chip only when a user inputs password through a key-input means such as a keypad installed on the IC card prior to contacting the IC card with the card reader. In addition, the IC card can display points, balance, limits as well as the status information of the IC chip through a display installed on the IC card, thereby improving user convenience. The IC card contains a one time password (OTP) function such that security of the internet transaction can be more improved.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to an IC card having a user authentication function and an OTP generation function,

The present invention relates to an IC card having a user authentication function and an OTP generation function, and more particularly, to an IC card having a user authentication function and an OTP generation function. More particularly, the present invention relates to an IC card having a key pad, a display panel It is necessary to output the set information including the activation state information of the IC chip and the OTP and to input the password through the keypad so that the state of the IC chip in the card is activated so that the function of the IC chip can be used, The present invention relates to an IC chip security card and its security method that can be used by activating an IC chip of a card, thereby improving stability against theft and loss.

In the case of an IC card based on a conventional RFID (Radio Frequency Identification), when an IC chip (Integrated Circuit Chip) and a reader (IC card reader) that reads the IC chip contact or noncontact near face to face, And only mutual exchange such as reading or pre-set event occurs.

For example, there are credit cards, check cards, cash cards, transportation cards, and employee ID cards, which are typical of all IC chip cards on the market. The reader and the IC chip can exchange information in a desired process and achieve the purpose.

However, due to the structural characteristics of such an IC card, there is always a security risk that a user can lose the card and learn and use the card. For example, users are exposed to the media through the use of fraudulent use of a lost credit card or traffic card, or abuse of crime.

According to the present invention, the present invention provides a new IC card having a function of allowing the IC chip to be secured even if the IC card is lost or stolen, and capable of generating and outputting an OTP required in online transactions I want to present it.

Next, a brief description will be given of the prior arts existing in the field to which the technology of the present invention belongs, and the technical matters to be differentiated from the prior arts of the present invention will be described.

First, the Korean Registered Utility Model No. 0196770 (Apr. 10, 2000) relates to a security device for an IC card using fingerprints, in which an IC chip for inputting data necessary for card use and an antenna for wireless data transmission / reception are formed on one side of a plastic card A fingerprint recognition device for inputting fingerprint data of a card usage right is connected to the other side of the card by a conductor for transmitting a signal to the IC chip so that the IC chip can not be used if there is no fingerprint input by the user A description of a security device of an IC card is described.

In addition, U.S. Patent Publication No. 2012-0168500 (December 22, 2011) relates to an IC card and an IC card security authentication system, in which a fingerprint scanner and a central processing unit connected to an IC chip are provided on the surface of an IC card, The fingerprint data of the stored owner is compared with the fingerprint data of the user inputted through the fingerprint scanner so that the IC chip can exchange information with the external device only when the data match.

The Korean Registered Utility Model No. 0196770 and the United States Patent Publication No. 2012-0168500 which are the prior art documents are technologies for enabling the IC chip to be used by receiving user information on the IC card in order to enhance the security of the IC card Although the fingerprint recognition means is used for both of the prior arts as a means for activating the IC chip, the present invention is applicable to the IC chip through the key input means provided on the IC card, The above prior art document is different from the present invention in that it is a technique for receiving the password of the user.

Also, Chinese Registered Utility Model No. 201159920 (Jan. 25, 2008) relates to a keyboard type IC card member authentication system. More specifically, an IC card equipped with a microprocessor, an IC chip, a monitor, a battery, and a data memory on one PVC substrate is used to allow a card to input a password required for accessing banking services on a card Is described.

The prior art document, Chinese Registered Utility Model No. 201159920, has some similarities with the present invention in that a password is input by having a key input means for inputting a password on an IC card, A technique for inputting an account password inputted through a separate terminal at the time of performing a business, on the card, or inputting a password in the present invention is for controlling on / off of the IC chip itself installed on the card , The preceding document is different from the present invention in that it does not input an account password for banking as in the preceding document.

The present invention has been made to solve the above-described problems, and it is an object of the present invention to provide an IC card that incorporates a key input means, a display means, and a power supply means in an IC card, The state of the chip is activated and the display means displays the information on the active state of the IC card and the financial information such as the remaining amount and the limit of the IC card so as to improve the security of offline transaction of the IC card from loss and theft, The present invention provides an IC chip security card and a security method thereof that can improve user's convenience.

It is another object of the present invention to improve the online transaction security of an IC card by adding the function of an OTP token on the IC chip security card.

An IC chip security card according to an embodiment of the present invention includes an IC chip; battery; A memory for storing an IC chip password; A keypad for receiving an IC chip password; An IC chip switch for turning on and off the activation of the IC chip; An IC chip switch controller for turning on and off the IC chip switch; A display panel capable of displaying on-off status, points, balances, usable levels of IC chip switches, or one or more pieces of information selected therefrom; and comparing the password input from the keypad and the IC chip password stored in the memory Off control signal to the IC chip switch controller, wherein the IC chip maintains the inactivated state during normal operation, and the IC chip password stored in the memory coincides with the password received from the keypad, And is capable of interacting with the reader.

In addition, in the IC chip security card according to an embodiment of the present invention, when the predetermined period of time has elapsed, the IC chip performs an interaction with the reader a predetermined number of times, or a button on the keypad is clicked , And a switch-off control signal is transmitted to the IC chip switch controller to switch the IC chip to an inactive state.

Further, in the IC chip security card according to an embodiment of the present invention, the control unit may further include an OTP generation function capable of generating an OTP (ONTIME PASSWORD) required in an online transaction, The OTP generation button on the keypad, the IC chip password, or a separate OTP generation password, and the generated OTP is output through the display panel.

According to another aspect of the present invention, there is provided an IC chip security method for an IC card, including: storing a password in an IC card; A password input step of inputting a password through a keypad installed on the IC card; A password comparing step of comparing a password received from the keypad and an IC chip password stored in the memory in a controller installed in the IC card; An IC chip switch control step of switching the IC chip from an inactive state to an active state by transmitting a switch on control signal to an IC chip switch controller connected to the IC chip by the control unit when the password comparison result is coincident; And outputting information including at least one selected from a point, a balance, an available degree, or an IC card point of the IC card through a display panel installed on the IC card when the IC chip switch is on, And the chip is in a normally inactivated state.

According to still another aspect of the present invention, there is provided a method for securing an IC chip of an IC card, comprising the steps of: after a predetermined period of time has elapsed after the IC chip switch is turned on to activate the IC chip, And switching the IC chip to an inactive state by transmitting a switch-off control signal to the IC chip switch controller from the control unit when performing a predetermined number of times of interaction with the keypad or by clicking a button on the keypad.

According to still another aspect of the present invention, there is provided an IC chip security method for an IC card, the method comprising: generating an OTP (ONTIME PASSWORD) required for online transactions; The OTP generation button on the keypad, the IC chip password, or a separate OTP generation password, and the generated OTP is output through the display panel, Thereby improving the security of the system.

The present invention relates to an IC card having a user authentication function and an OTP generation function, and a method thereof. When a user inputs a password through a key input means such as a keypad provided on an IC card before the IC card is contacted by a reader, The IC chip on the card is activated to read the information of the IC chip from the reader, so that the security risk of the IC card can be solved.

For example, when a credit card or a transportation card on which an IC chip is mounted is lost, in the case of a conventional IC card, it is possible to freely use the IC card of a person learned by the acquirer, but in the case of the IC chip security card of the present invention Since the acquirer can not use the IC card of another person who has mastered the IC chip activation password of the IC card, the IC card security from the loss or theft can be greatly improved.

In addition, not only the status information (activation or deactivation) of the IC chip but also financial information such as points, balance, and usable degrees can be displayed through the display provided on the IC card, And the OTP (One Time Password) function is included on the Internet to further enhance the security of online Internet transactions.

FIG. 1 is a view for explaining the concept of an IC card having a user authentication and OTP generation function according to an embodiment of the present invention.
2 is a block diagram for explaining a structure of an IC card having a user authentication and OTP generation function according to an embodiment of the present invention.
3 is a diagram for explaining an OTP function of an IC card provided with a user authentication and OTP generation function according to an embodiment of the present invention.
4 is a flowchart illustrating a security method of an IC card provided with a user authentication function and an OTP generation function according to an embodiment of the present invention.

Hereinafter, an embodiment of an IC chip security card and a security method thereof according to the present invention will be described with reference to the accompanying drawings.

FIG. 1 is a view for explaining the concept of an IC card having a user authentication and OTP generation function according to an embodiment of the present invention.

As shown in Fig. 1A, the conventional IC card 200 is in a state in which the IC chip 10 is open and can be used at all times, and a security step The IC card can not be used by another person who has learned the IC card until the owner of the card recognizes it and reports the loss or suspension of the card when the card is lost or stolen. There was no security measure to sanction. 1 (b), in order to use the IC chip 10 of the IC card, a keypad 130 provided on the IC card is used So that the IC chip password must be inputted through the IC chip.

In other words, the conventional IC card can use financial services such as traffic and sale by using an IC card even if it is not the owner, but the IC chip security card 100 of the present invention can input the IC chip password The IC chip 10 itself can not transmit a signal to the reader, so that it is possible to greatly improve the security in using the conventional IC card.

A more detailed description of the configuration and role of the IC chip security card 100 of the present invention will be described below with reference to FIG. 2 to FIG.

For reference, the shape, size, and position of each component of the IC chip security card 100 shown in FIGS. 1 to 3 are used for describing the function of the IC chip security card 100 according to the present invention. And may have any number of shapes, sizes, and positions on the IC card that are capable of installing the components.

2 is a block diagram for explaining a structure of an IC card having a user authentication and OTP generation function according to an embodiment of the present invention.

2, the IC chip security card 100 of the present invention includes an IC chip 10, an IC chip switch 110, an IC chip switch controller Controller 120, a keypad 130, a memory 140, a controller 150, a display panel 160, a battery 170, and the like are formed on the surface and inside of the card have. The material constituting the card is not particularly limited, but is preferably made of a polymer material in consideration of flexibility and the like. Examples of the polymer material include PVC, PETG, PE, PP, PC, and the like.

The IC chip stores specific information of a user and includes an antenna capable of performing an interaction such as transmitting specific information in a contact / noncontact close contact with an external reader (card terminal). The IC chip switch 110 receives the control signal of the controller 150 to enable the IC chip to be in an active state or an unusable inactive state. When the IC chip switch 110 is closed, the IC chip is activated and the IC chip switch 110 is opened, the IC chip becomes inactive.

For reference, since the IC chip switch 110 is normally off, the IC chip remains in an inactive state.

In addition, the memory 140 stores the IC chip password. The IC chip password is issued and stored in a bank or a card issuing organization with the consent of the card owner when the card is issued, and the keypad 130 As an input means capable of receiving a password from a user, it plays the role of receiving letters, numbers, symbols, and the like.

The battery 170 supplies power to operate the components of the IC chip security card 100 of the present invention. The battery 170 can be a thin-film type primary battery or a secondary battery that can be installed in the card. , Particularly a secondary battery which can be charged.

The control unit 150 includes a circuit unit including a microprocessor for controlling the IC chip on / off of the IC chip security card 100. Upon receiving a password from the keypad 130, If the two passwords match, the IC chip switch 110 is turned on to switch the IC chip to the active state so that the user can use the IC chip security card 100 . If the two passwords do not coincide with each other, the control unit 150 does not transmit any IC chip switch control signal or transmits a switch-off control signal to the IC chip switch controller 120 to keep the IC chip in an inactive state Disable the IC card.

More specifically, the control unit 150 transmits an IC chip switch-on control signal to the IC chip switch controller 120 when the two passwords match, The chip switch controller 120 turns on the IC chip switch 110 only. The IC chip switch controller 120 may be included in the IC chip switch 110 or may be included in the controller 150 or may be separately disposed between the IC chip switch 110 and the controller 150 .

On the other hand, the IC chip, which is normally inactive as described above, is switched to the active state and then returns to the inactive state after the user completes the necessary work, so that the security of the IC chip is continuously maintained. The chip switch 110 must be controlled to be turned off again. Thus, the IC chip security card 100 of the present invention automatically transmits a switch-off control signal from the control unit 150 to the IC chip switch controller 120 after a preset period of time has elapsed, The control unit 150 automatically transmits a switch-off control signal to the IC chip switch controller 120 after performing a predetermined number of interactions or a button on the keypad 130 By switching the IC chip to an inactive state by transmitting a switch-off control signal to the IC chip switch controller 120 in the control unit 150 when the user clicks one of the buttons on the keypad So that the IC chip can be kept in an inactive state.

The display panel 160 outputs the information including the on / off state, point, balance, usable degree, etc. of the IC chip switch 110 so that the user can confirm the information. Information can be set in various ways depending on the type of IC chip security card.

On the other hand, the display panel 160 basically consumes electric power only when video or text is outputted to the screen, since power consumption is very low and usually power consumption is little, and outdoor lightness is high, It is preferable to construct e-paper material that can check information immediately.

For reference, the display panel 160 may be replaced with an LED (Light Emitting Diode) so that the active state of the IC chip can be simply checked.

2 is a block diagram for explaining the present invention when the IC chip is of an active type (a battery is required for the IC chip). When the IC chip is passive type (operates by receiving power from the reader) The IC chip switch 110 may be installed at another position where the activation of the passive IC chip can be controlled. That is, it is not important whether the IC chip is passive or active, and the active / inactive state of the IC chip can be controlled through the structure of the present invention.

3 is a diagram for explaining an OTP function of an IC card provided with a user authentication and OTP generation function according to an embodiment of the present invention.

As shown in FIG. 3, the IC chip security card 100 of the present invention can generate an OTP (One Time Password) required for on-line distance in addition to improving the security on the off-line by inputting an IC chip password It may also include a function.

Conventionally, a separate OTP generating device such as an OTP token is required to generate an OTP. However, it is inconvenient and inefficient to carry an OTP token only for OTP generation. Thus, the IC chip security card 100 of the present invention enhances offline security by controlling the active state of the IC chip, and includes an OTP generation function in the components of the present invention, thereby enhancing on-line security. Can be obtained.

More specifically, in order to generate an OTP in the IC chip security card in the online transaction of the present invention, a specific OTP creation button on the keypad 130 is clicked, the IC chip password is input, or a separate OTP generation password The control unit 150 generates an OTP.

The OTP thus generated is output through the display panel 160, thereby improving the security of the IC chip security card 100 of the present invention during on-line transaction.

In order to generate the OTP in the controller 150 as described above, a clock having time synchronization with the OTP authentication server and OTP data according to time are required. The OTP generation including the clock is included in the controller 150 , And the OTP data may be stored in the memory 140. As described above, the OTP generation function is preferably included in the components of the IC chip security card 100 described in FIG. 2, but it is also possible to embed the OTP generation device in the IC chip security card 100 separately will be.

4 is a flowchart illustrating a security method of an IC card provided with a user authentication function and an OTP generation function according to an embodiment of the present invention.

4, in the security method of the IC chip security card of the present invention, when the IC chip security card is issued by the bank or the card issuing agency, the IC chip password desired by the owner is stored in the memory And stores the IC chip security card (S101).

After issuing the IC chip security card in which the IC chip password is stored, the user inputs a password through the keypad installed on the IC card (S102).

When the user inputs a password through the keypad, the controller installed in the IC chip security card compares the password received from the keypad with the IC chip password stored in the memory (S103).

When the result of the password comparison is identical, the control unit transmits a switch-on control signal to the IC chip switch controller to close the IC chip switch to switch the IC chip from the inactive state to the active state (S104).

If the result of the password comparison in the control unit does not match, no signal is transmitted or a switch-off control signal is transmitted to the IC chip switch controller to keep the IC chip in an inactive state so that the IC card can not be used (S105).

In addition, when the IC chip switch is turned on and the IC chip becomes active, one or more pieces of information selected from points, balances, usable degrees, or the IC cards are outputted through a display panel provided on the IC card (S106).

After the IC chip switch is turned on and the IC chip becomes active, the IC chip performs a predetermined number of times of interaction with the reader after a predetermined period of time has elapsed, The control unit sends a switch-off control signal to the IC chip switch controller to return the IC chip to the inactive state (step S107), if it is clicked on the specific button provided on the keypad or one of the buttons on the keypad for turning off the IC chip) .

On the other hand, in addition to controlling the IC chip on / off as described above, an OTP that generates an OTP (ONE TIME PASSWORD) required in an online transaction may be generated.

In this method, an input satisfying an OTP generation condition such as clicking an OTP generation button on the keypad, inputting the IC chip password, or inputting a separate OTP generation password is performed.

If the input satisfies the OTP generation condition, the generated OTP is output through the display panel.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be taken by way of limitation, I will understand. Accordingly, the technical scope of the present invention should be defined by the following claims.

10: IC chip 100: IC chip security card
110: IC chip switch 120: IC chip switch controller
130: keypad 140: memory
150: control unit 160: display panel
170: Battery 200: Conventional IC card

Claims (6)

IC chip; battery;
A memory for storing an IC chip password;
A keypad for receiving an IC chip password;
An IC chip switch for turning on and off the activation of the IC chip;
An IC chip switch controller for turning on and off the IC chip switch;
A display panel capable of displaying on-off status, points, balances, usable degrees of IC chip switches, or one or more information selected therefrom; and
And a controller for comparing the password received from the keypad with an IC chip password stored in the memory and transmitting a switch on / off control signal to the IC chip switch controller, wherein the IC chip maintains a normal deactivation state Wherein the IC chip is activated only when the password input from the keypad matches the IC chip password stored in the memory, so that the IC chip can interact with the reader. The method according to claim 1,
Wherein,
When the predetermined time passes or when the IC chip performs the interaction with the reader a predetermined number of times or clicks a button on the keypad, the switch control signal is transmitted to the IC chip switch controller to switch the IC chip to the inactive state Wherein the IC card is a card. The method of claim 2,
Wherein,
And an OTP generation function capable of generating an OTP (ONTIME PASSWORD) required in an online transaction,
The OTP generation function is generated by clicking on the OTP generation button on the keypad, inputting the IC chip password, or inputting a separate OTP generation password, and the generated OTP is output through the display panel IC chip security card. A password storing step of storing an IC chip password in a memory installed in the IC card;
A password input step of inputting a password through a keypad installed on the IC card;
A password comparing step of comparing a password received from the keypad and an IC chip password stored in the memory in a controller installed in the IC card;
An IC chip switch control step of switching the IC chip from an inactive state to an active state by transmitting a switch on control signal to an IC chip switch controller connected to the IC chip by the control unit when the password comparison result is coincident; And
And outputting information including at least one selected from a point, a balance, an usable degree, or an IC card point of the IC chip when the IC chip switch is on, through a display panel installed on the IC card, Is in a normal inactive state. The method of claim 4,
After the IC chip switch is turned on to activate the IC chip,
When the predetermined time elapses or when the IC chip performs the interaction with the reader a predetermined number of times or when the button on the keypad is clicked, the control unit transmits a switch-off control signal to the IC chip switch controller, The method further comprising the step of: switching the IC chip to an IC chip. The method of claim 4,
An OTP generation step of generating an OTP (ONE TIME PASSWORD) required in an online transaction,
The OTP generation step is generated by clicking on the OTP generation button on the keypad, inputting the IC chip password, or inputting a separate OTP generation password, and the generated OTP is output through the display panel, The security of the IC card in the online transaction using the card can be improved.

Images