TW413799B - Preloaded IC-card, system using preloaded IC-card, and method for authenticating same - Google Patents

Abstract

A system comprising a card reader (1) with a terminal (3) and a security module (4) accepts a portable preloaded IC-card (2) having an integrated circuit (8) with a lock (9) to prevent unauthorised use of the IC-card (2), and a cash value unit counter content (10); which represents the cash value and is devaluated during a transaction at a stand alone point of sale. The IC-card (2) generates a card random number, whereas the security module (4) generates a security module random number. The IC-card (2) encodes the security module random number into a card signature, and the security module (4) decodes the card signature again to verify the authenticity of the IC-card (2). The security module (4) creates a security module signature from the card random number being decoded by the IC-card (2) to verify the authenticity of the security module (4). If the mutual authentication is positive, the lock (9) allows the payment transaction to take place.

Description

413799 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the Invention (1) The present invention relates to pre-stored IC cards such as those in the scope of application for patents 1, 4 and 10, and pre-stored IC cards System and method for interactive confirmation with card reader. Deposited IC cards and systems for mutual confirmation between pre-stored IC cards and related card readers are used for mobile or public telephones, commodity billing devices, vending machines, lock-in points, and so on. The 1C card is based on DE-PS 25 60 080 and DE-PS 25 12 935 and is widely used in various parts of the world today. Information exchange between the card reader and the IC card may be blocked when writing to a memory area already occupied by data. W09 7/2 1 1 9 7 describes the payment operation of the pre-stored 1 c card of the conventional art. It will recognize the 1 c card before the payment operation and check the IC card content for the correct deduction. US-A4,710,613 reveals that the identification system checks the validity of the data transfer between the card reader and the IC card. After the IC card is inserted into the card reader, the user will input a personal identification code into the card reader 'card reader, and then use RS encryption encryption to generate the identification code information and calculate the estimated time required for the IC card processor to process the identification code information. The reader measures the true time required for the 1 c card processor to process the identification code information, and prevents the further data transmission if the real processing time does not match the estimated time. W09 4 2 4 6 7 3 reveals that a 1 c card microprocessor containing a microprocessor and a paged non-volatile memory area. The microprocessor writes only one page at a time. The memory will assign the first non-volatile memory to the data and the second non-volatile memory to the status information. If you successfully execute the data entry -------- LI! — I — III — I order--------- (Please read the dignified matters on the back before filling this page) Applicable Chinese Standard 0 (CNS) A4 (210 X 297 mm) -4- Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 413799 A7 ___B7___ 5. Description of the invention (2) During the operation, the data was written to The first area and the information are written to the second area to perform a data writing operation. This procedure confirms and indicates that the data transfer is completely completed. U S — A 5, 5 7 2 · 0 0 4 is a payment method that uses a pre-stored IC card to pay for services or goods. The pre-stored IC card communicates with the security module via an electronic terminal located in the card reader. This method determines the correct deduction of the IC card and the correct amount of the security module transmitted from the IC card to the reader-F R — A 2 5 8 0 8 3 4 is revealed to protect the memory from fraud detection with a cover. The shield includes a resistive layer on the integrated circuit. The resistive layer represents two of the four resistors of the Wheatstone bridge integrated in the integrated circuit. Any physical damage to the shield will be sensed by the integrated circuit and the integrated circuit will render any further access inactive. These IC cards with cryptographic capabilities can be used as electronic wallets. Before any transaction occurs, the owner of the wallet or smart card must verify his identity to the card reader terminal with a personal identification number. If the personal identification code is valid or invalid, the card reader will present the signature to the IC card according to the personal identification code, and then the IC card will check the signature. The signature is also called " password '. In the case of a valid personal identification code, the card reader is allowed to continue the transaction ', for example, reading the IC card limit and changing the IC card limit in order to pay for the transaction. In contrast, the pre-stored IC card can be used as money for general use. The holder of any IC card will be authorized to use the IC card without any identification. The IC card verification is performed by the card reader in conjunction with the security module. * As the number of like cards increases, it will not be possible to track the correct position of outdated card readers and the still-operating security proofreaders. Harmony tampered with through fraud methods 丨 All machines of I cp can be ordered ------------ (Please read the notes on the back before filling this page) This paper size applies to the national standard of China (CNS) A4 (210x297); -5- 413799 A7 _B7 5. Description of the invention (3) (Please read first Note on the back, please fill out this page again) The total amount of cash is deducted instead of the point of sale to notify the cardholder of the correct total amount and illegally transmit valuable money to the security module of the tampered card reader, and then 'store in security The cash in the module will be transferred to the bank account of the scammer without question. Most IC cards are standardized according to I S 0 / I E C 7 8 1 6 parts 1 to 5. The main object of the present invention is to prevent unauthorized cash transfers between an IC card and an unidentified card reader and a security module thereof, and to provide a pre-stored IC including a card reader and a card reader connected thereto. Card system, security method for the system, and IC card. According to the present invention, the features of claims 1, 6 and 10 of the scope of patent application meet these objectives. After reading the detailed description of the preferred embodiment in conjunction with the accompanying drawings, the present invention will be fully understood, in which FIG. 1 is a system view for interactive confirmation of a pre-stored IC card, and FIG. 2 is a block circuit of an integrated circuit of an IC card Figure, Figure 3 is a flowchart of the interactive confirmation operation. The employee ’s consumer cooperation of the Intellectual Property Bureau of the Ministry of Economic Affairs has printed a flowchart of the payment transaction. Figure 5 is a random number generation circuit, and Figure 6 is a counter record. 7 series display count area without backup 'Figure 8 is a flow chart of key change operation, Figure 9 series shows a brute force attack counter' Figure 10 Series 0 shows a two-memory area, and this paper standard applies the China Standard® (CNS) Al specifications (210x297 male; S) -6- 413799 A7 _B7 V. Description of the invention (4) Figure 1 1 shows the complete inspection. Comparison table of main components Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs 1 2 1- 丄 * · 51 Card machine 2 IC card 3 Electronic card 4 Security module 5 Contact pad 6 Livestock line 7 Security module socket 8 Body circuit 9 Electronic lock 1 0 Cash / unit counter content 1 1 — Heavy data encryption standard unit 1 2 Random number M generator 1 3 Microcontroller 1 4 Memory area 1 5 Memory area 1 6 Memory area 1 7 Memory area 1 8 Note • fa area 1 9 memory area 2 0 memory 丨 product-2 1 asynchronous receiver / transmitter unit 2 2 1 2 bit wide address bus 2 3 bidirectional 8 bit wide data bus 2 4 double ^ FL Day and second line 2 5 Timepiece line 2 6 Two-way single-line input / output line 2 7 Shelter 2 8 Generator circuit 2 9 Deduction unit 3 0 Invalid line 4 7 Comparator 4 9 Random access memory section ----- ----, --- .. install --------- order .-------- (Please read the back Note: Please fill in this page again.) This paper size applies the Chinese National Standard (CNS) AI specification (210x297). 413799 A7 B7 The counter printed by the employees ’cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs and the counter of brute force attack. 8 V. Description of invention (5 5 2 Point of sale 8 0 Memory section 9 2 Key holder in Figure 1 1 '1 represents the card reader, 2 is the I c card, 3 is the electronic terminal of the card reader 1' 4 is the security module, 5 is the connection Point pad, 6 series animal feed line '7 series security module 4 socket, 8 series integrated circuit, 9 series electronic lock' 1 0 series cash / unit counter content, 1 1 series generated T — DES signature of security module Unit, 12 series random number generator. The electronic circuit 8 can be a tiny module when it is applied. It can be installed in the plastic parts representing the IC card 2. The contact pads 5 of this module can make the electronic circuit. 8 communicates with terminal 3. The card reader 1 can be part of or connected to the independent point of sale 5 2 and is contrary to the device of the smart card, it can be operated without directly connecting to an external host computer, independent point of sale 5 2 as an example For example, it can be a pay phone, a low-cost point of sale. Sell machine, and so on. In addition to the mechanical parts not shown here, the card reader 1 provides a recessed wall or slot to accommodate an IC card 2 and includes an electronic terminal that cooperates with the security module 4 to control read / write operations. At least one security module 4 (ETSI ENE726 — 7) used in the card reader has a seemingly small 1C card 2 (CEN / ENV 1 3 7 5-^ Additional ICC Formats, -parti: ID-0 0 0 Cai. d）) standard size, and can confirm an issuer's IC card 2 and process transactions of the identified IC card 2. If the 1 C card 2 is inserted into the card reader 1, the contact pad 5 will contact the contact finger (not shown here) of the card reader i, so that the terminal 3 can communicate with the data line 6 through ---- --r ---------------- order --------- line (please read the precautions on the back before filling this page) This paper size applies to Chinese national standards (CNS) A4 specifications (210 X 297 male 5) -8-A7 413799 ___B7___ 5. Description of the invention (6) < Please read the notes on the back before filling this page) IC card 2 exchange information. Each security investment group 4 will be inserted into the socket 7 so as to be connected to the terminal 3 in an easy exchange or removal manner, and provide specific information for the secure IC card 2 and cash collected from the IC card 2 The memory space of the total number of units is given to the terminal 3. Socket 7 and data line 6 are indicated by double arrows in the diagram, indicating that the data is transmitted to terminal 3 and the double arrows from terminal 3 "All data exchanged between IC card 2 and security module 4 will be transmitted by the terminal 3 processing. Card reader 1 represents the outside world of IC card 2. Other implementations of the system use electromagnetic waves to establish a two-way data link between the terminal 3 and the IC card 2. The IC2 card may have these electromagnetic contact mechanisms to incorporate data transmission through the contact pad 5, and the card reader may actuate the appropriate contact mechanism. The consumer cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs has printed the integrated circuit 8 of the pre-stored IC card 2 as it is known in the art. The card identification code and cash counter are stored in its memory. protection. The security module 4 will identify the IC card 2 with the identification code of the IC card 2, and if the test is positive, the lock 9 will be opened and the cash will be transmitted from the IC card 2 to the security module 4. The disadvantages of this system have already been addressed in the introduction. Therefore, the pre-stored card 2 has additional features such that not only the security module 4 recognizes the IC card, but also reverse operation, that is, the IC card 2 can check the confirmation of the security module 4 in use. FIG. 2 shows the IC card 2 and the integrated circuit 8 in more detail. The integrated circuit 8 allows the security module (FIG. 1). The interaction with the IC card 2 is confirmed. The straw circuit 8 may be a microprocessor based on an 8-bit microcontroller 13. Memory area 14 to 20, physical security crucible as beryllium 9, and the Chinese national standard (CN'S) A * 1 specification (210 * 297 mm > A7 413799 _B7___) applicable to this paper size V. Description of the invention ( 7) Asynchronous receiver / transmitter unit 2 1 will be connected to this controller 1 3 by wide address bus 2 2 and bidirectional 8-bit wide data bus 2 3. Reset line 2 4 allows terminal 3 (Figure 1) Reset controller 1 3 and lock 9 = Regarding records, lock 9 and receiver / transmitter unit 2 1 will be directly connected to controller 1 through interrupt and status lines. Terminal 3 will be connected via The timepiece signal synchronization contact pad 5 on the timepiece line 2 5 sends or receives data to or from the integrated circuit 8 to be transmitted on the two-way single wiring input / output line 26. Synchronous receiver / transmitter The controller unit 21 will serve as the interface of the data bus 2 2 controlled by the controller 1 3. The contact pad 5 allows the reset line 2 4, the timepiece line 2 5 and the power line (not shown here) to be connected to the terminal 3. The data transmission on single wiring input / output line 2 6 can be based on 130/1 £ (: standard 7816 — 3 (] _ 989): electronic signal and Sending agreement, including amendment 1 (1992): Article 9, and characterized by asynchronous half-multiplexed block transmission according to agreement T = 1. Memory can be divided into seven memory areas 14 to 20 for storing data and program information. Read-only memory (ROM) is used for areas 14 and 15. The two R 0 M areas 14 and 15 can be flash memory or traditional ROM 0. For example, a total of 4 096 bytes The third area 16 has random access memory (RAM memory area 16) such as 128 bytes, which can provide RAM area 49 for data lost due to reset or power failure. The remaining cells with hexabytes such as 176 bytes can be electrically erasable and programmable R 0 M (= E: PR 〇) cell type and are divided into four regions 17 to 20. Ε 2 PR 〇Memory area 17 to 2 ◦ Provide non-prompt storage space for sensitive or secret data, for example 'for the first ------ 1 ----' I --- -^ ----- I--t --------- ^ Ϊ (Qi first read the notes on the back and then fill out this page) Printed on paper again by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs Applicable to China National Standard (CNS) A- 丨 size (210x297 male ) -10- Intellectual Property Co-operative Consumers' Cooperative, India, Ministry of Economic Affairs, India 413709 A7 __B7____ V. Description of the Invention (8) The secret key K in the third memory area 19 is used in the fourth E ^ P ROM memory area 20 The contents of the cash counter unit 10 are used for the use cycle status LS in the first E 2 PR Ο Μ memory area 17 and so on, and these E 2 FR are masked by the use. The special mask 2 7 of 20 can protect these four areas from being analyzed by scanning electron microscope. The physical integrity of the shielding member 27 of the shielding member 27 is tested at least by the controller 13 during the power-on step (FIG. 3) of the IC card 2. Any physical damage to the shield will be sensed and cause the controller 13 to set the use cycle status LS to "invalid" and by storing the E2PROM in the 17 million to 20 million cells that store confidential information Set to zero to erase the contents of all these cells in the memory area of E 2 PR OM and thus lose the secret data. At least the password key K must be erased to make IC card 2 useless. Lock 9 includes a generator that generates a random number of the card. Circuit 2 8. As the electronic circuit of the deduction unit 29, for example, this electronic circuit is made of hardware-connected logic elements, according to the triple data encryption standard (TRIPLE DATA ENCRYPTION STANDARD (= Ding Yi DES: DES And T-DES, see Applied Cryptography > ISBN 0 — 47 1 — 11709 — 9 'P. 2 9 4) by Bruce Schneier), perform DES conversion and can perform very fast calculations (millisecond level) signature. DES conversion And anti-DES conversion is used to encode and decode according to T-DES conversion and is processed by the same deduction unit 29 by T-DES unit (Figure 1). The cryptographic key κ is in the T-DES coding process Yichuan was used in the preface. In the [C card 2 and safety, this paper standard applies to China Standards (CNS) A < 1 Specifications (21〇x 297mm. ¾) -11-— — — — — ^ — — — —111 · ^^ ·· — II — II Order --------- 1, {Please Read the notes on the back before filling this page) A7 413701; B7______ V. Description of the invention (9) Sensitive data exchanged between modules 4. Therefore, the IC card 2 and the security school group 4 both store the identification key K in their individual memories and use the same deduction method in the deduction method unit 29 and the encoder 1 1 (Figure 1), respectively, to Encoding and decoding of exchanged data. Another job of the lock is to decode any access request made by the terminal 3 to the IC card to compare the request with the use cycle status LS (for example, "test mode", "issuer mode", "user mode", " Invalid ") and act accordingly. At the beginning of the cycle test, 1C card 2 will be connected to the power supply of card reader 1 (Figure 1) »Lock 9 will read the cycle state LS. The "test mode" using the test program located in the first R 0 Μ 1 4 is used only once during factory quality control. After the "test mode" program is executed, the test mode in the first R Ο Μ 1 4 will make it Do not act on your own. The second ROM 15 stores the operation program. If the use cycle state L S of the IC card 2 is in the "issuer mode" or "user mode", the controller 1 3 will operate in the operating program and will be actuated by the test program. "Issuer mode" is also used only once, in which at least individual card numbers, cash and unit counter contents 10 (Figure 1), date, key, other required parameters of the IC card, etc. will be fed under the control of the operating program To E2PROM memory area 17 to 20. If the IC card 2 is issued to the user, the lock 9 must generally only distinguish between "invalid" and "user mode". In "User Mode", check the number of invalid access attempts. If the limit of invalid access attempts has been exceeded, the use cycle status LS will be set to "invalid" u It is impossible to set the use cycle status LS cocoon = "invalid" ϋ If lock 9 does not detect the use cycle status LS = "Using the standard paper size of this paper is applicable to China's 0 standard (CNS) A4 specification (210 X 297 g) ------ r -------- I --------- order —------- line (Please read the notes on the back before filling this page) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs-12- 413799 Λ7 ______B7___ V. Description of Invention (1〇) "'is invalid The signal on line 30 will block any access to memory area 14 to (please read the precautions on the back before filling this page) 2 0. The number of erroneous accesses, such as in the fourth E 2 P R 0 Μ memory area 20, will limit unsuccessful access attempts to a certain limit 値. In "Publisher Mode", the maximum number of unsuccessful access attempts allowed is stored as the number of error accesses 4 8. In order to transmit the status information from the IC card 2, the periodic status bytes stored in the RAM memory area 16 can be used. For example, the seven bits of the usage cycle state in the first Ε 2 P R 0 Μ memory area 17 will be copied into the usage cycle state bytes. The eighth component represents the confirmation flag, which indicates the status of the current confirmation process. The following procedure is explained on the assumption that the number of erroneous accesses 4 8 in the "issuer mode" is set to the number of F such as 1 5 or hexadecimal. Fig. 3 is a flowchart showing the interaction confirmation process between the IC card 2 and the card reader 1 (Fig. 1). The flowchart indicates which steps occur in the IC card 2, the terminal 3, and the security module 4, respectively. The interactive confirmation process starts at step 3 1 after the terminal 3 contacts the IC card 2 and supplies power. The reset signal on reset line 2 4 (Figure 2) will be sent to IC card 2 during reset step 32. Controller 1 3 (Figure 2) will be set at the starting address and then rewrite the ram memory area 16 (Figure 2) »Reset the printed signal of the employee consumer cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs will also lock 9 (Figure 2) Initialize to start the life cycle test on the life cycle state LS during the preparation steps 33. Using the comparator 4 7 (Figure 2) of the lock 9, the controller 1 3 can check the card 3 3 1 to compare the number of wrong access 4 8 and zero. "If the number of wrong access 4 8 is equal to zero, then no more is allowed. Confirm and set the use cycle status LS to "Invalid" and erase the confidential information to 'make the IC card 2 invalid. Step 3 3 This paper is reapplied to the Chinese Standard (CNS) A4 specification (210 X 297 meals) ) -13- 413799 A7 _B7_____ V. Invention Description (11) (Please read the notes on the back before filling out this page) The Intellectual Property Bureau Employees ’Consumer Cooperatives’ Seal of Printing is invalid during t 2 and will be sent to the output. Step 3 3 3. Otherwise, processing will continue to random steps 3 3 4. The use cycle state LS is now in the "user mode", and the generator circuit 2 8 (Figure 2) prepares the card random number, and the controller 13 stores the card random number in the RAM section 4 9 of the RAM memory area 16 and Continue to output step 3 3 3. Here, the usage cycle status byte is updated and transmitted with any data related to terminal 3. The relevant information is, for example, individual card serial number, integrated circuit number, issue date, number of cash units, card random number, etc. After receiving at least the updated usage cycle status byte, 'Terminal 3 will test the true usage cycle status byte during the terminal check period 3 4' and if IC card 2 is in the "user mode", then Terminal 3 The initial confirmation is performed in the initialization step by sending the relevant information of the IC card 2 and the initial request to the security module 4. Otherwise, if the use cycle status byte is set to "invalid", the processing will stop at 3 6 by Terminal 3 terminates. In the generator step 37, the random number generator 12 (Fig. 1) will generate a security module random number, and the security module random number will be stored in the security module 4 together with the relevant IC card 2 data. The random number of the security module will be returned to the terminal 3 in the receiving step 3 8. Then, the terminal 3 sends the random number of the security module to the lock 9 in the encoding request step 3 and initializes the card encoding step 4 by reducing the number of incorrect access times 4 8 by one. Then, the deduction method unit 2 9 (圊2) Calculate the signature of the card. The signature of the card is the random number of the security module using the cryptographic key and the T-DES conversion of the relevant information of the IC card 2. The signature of the card and the random number of the security module are also stored in the RAM area 49. Card signing session Xingshi's new usage cycle status byte is sent back to terminal 3. Terminal 3 This paper size is in accordance with Chinese National Standard (CNS) Al specifications (210 * 297 mm) -14- Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 413799 Λ7 _____B7____ 5. The invention description (12) will sign the card as The confirmation request is sent to the security module 4. During the confirmation test 4 2, the T-DES unit 1 1 (Figure 1) will decode the converted card signature with the cryptographic key K, for example, by comparing the converted The card signature is compared with the card signature calculated by the T-DES unit 11 using the cryptographic key K, and the stored random number of the original security module and the relevant information of the IC card stored in the security module 4 are compared. According to the comparison result, if the IC card 2 is acceptable, the security module status byte will be set to "card confirmation", if not, it will be set to "card unconfirmed". If the security module status byte is "card confirmation", the card signature will be stored in the security module 4 and the T-DES unit 11 using the cryptographic key K will be based on the card random number and the previous confirmation result, that is, the card signature , And encode the security module signature. The security module signature (if any) and the security module status byte will be presented to terminal 3. If it is decided that the establishment of the security module status byte is "Card Unconfirmed", the processing will be aborted at 4 4. However, if the card signature is correct and the IC card 2 is therefore acceptable to the security module 4, then the decision of the security module status byte 4 3 will branch the processing to a confirmation request 4 5. Here, the terminal 3 will present the security module signature to the lock 9 = during the verification step 4 6, the lock 9 will test the security module signature. The deduction method unit 2 9 (Figure 2) will recalculate the security module signature with the password Si and the card signature stored in the RAM memory area 16 and the original card random number, and the controller i 3 will use the comparator 4 7 Compare the result with the signature of the security module transmitted. If the recalculated and transmitted security module signatures are equal, the interactive confirmation is valid. The number of incorrect accesses 4 8 will increase by one yuan, and the tl confirmation flag β will It is set to "access correct". "Sufficiently, if the paper size of the party and the paper is applied to the National Standard (CNS) A4 specification (210 X 297 g) -15- — — — — — l · — — — — — — — ! -------- ^ '1 — — — — — — — (Please read the precautions on the back before filling out this page) 413799 Λ7 __B7____ 5. The description of the security module sent by the invention (13) is different, The confirmation will fail and the confirmation flag will be set to "Access Error". IC card 2 will transmit the updated usage cycle status byte to terminal 3, and terminal 3 will test the usage cycle status byte again in the second decision 50. "If the usage cycle status byte is marked" user mode " And confirm that the flag issued by the security module 4 is acceptable to the IC card 2 ("accepted correctly"), then the lock 9 will be unlocked and the cash / counter content 10 in the 4th billion area 20 will be allowed (Figure 2) Was changed. The mutual confirmation will be successfully stopped at service step 51 and the terminal 3 connected to the authorized security module 4 will be allowed to continue the payment transaction. If the second decision 50 senses an erroneous confirmation, that is, the confirmation flag is set to "access error", the process ends at stop 4 4. At the end of the successful interactive confirmation process, both the IC card 2 and the security module 4 store the card signature and the security module signature in separate memories. "Figure 4 is a flowchart representing the payment process. Before transmitting from the IC card 2 to the security module 4, check again. After the interaction confirmation is processed correctly and the terminal 3 reaches the service step 51, the terminal 3 will accept the payment request 5 3 from the sales point 5 2 | that is, the content of the cash unit counter 1 0 (Figure 2). Reduced number of cash units. Only when the transaction (less than the cash) unit calculator content 10, the terminal 3 will continue the process and send a reduction request 54 and a transaction to the security module 4. According to the previously calculated and stored security module signatures and transactions, a new security module is created in the signature step 5 5 and the previous security module signature in the memory is replaced. In the receiving step 5 6, the terminal 3 will receive the signature of the new security module and in step 5 of the request, it will be handed over with a paper standard applicable to the national standard (CNS) A, 1 specification (2 丨 0 X 297 public money) (Please read the notes on the back before filling out this page) -I ------ 1. Order I · -------- 1. System -16- Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs ^ 13799 Λ7 _____B7__ 5. The description of the invention (14) is presented to [lock 9 of card 2] (Figure 2). In arithmetic steps 5 8, the controller 1 3 first reduces the number of erroneous accesses 4 8 by one unit and sets the confirmation flag to f access error ". Then, the deduction circuit 2 9 (Fig. 2) will sign and trade the old security module stored in the RA M section 4 9 (Fig. 2) in the RA M memory area 16 in the arithmetic step 58. , Recalculate the new security module signature. The signature of the old security module in the R AM section 49 will be replaced by the signature of the new security module. If the calculation result is the same as the signature of the converted new security module, the confirmation is confirmed. The real cash / unit counter content 10 will be copied to the fourth E2PROM memory area 20 as the previous cash / unit counter content 10, and then the transaction is deducted to obtain the current cash / unit counter content 10, that is, The current cash rate is the previous cash rate minus the transaction rate. After completing the deduction of the cash unit counter 10, the controller 1 3 (Fig. 2) will increase the number of incorrect accesses 4 8 (Fig. 2) by one unit and set the confirmation flag to "correct access" . The updated usage cycle status byte is sent to terminal 3, where the third decision 5 9 for this status byte will cause the program to branch. If the confirmation flag indicates "access error", terminal 3 will abort the process at 60. If the third decision 5 9 senses that the confirmation flag is in the state of "acceptance is correct", the terminal 3 sends the signature request 6 1 to the IC card 2. In the encoding step 62, the IC card 2 will sign according to the cipher key K, the current cash card and the previously used card, and a new card signature will be generated in the deductive circuit 29. The new card signature will replace the old signature in the RAM memory area 16 and be sent to the terminal 3 (terminal step 6 3 u. At the same time, the security group 4 will separately calculate the party account from the data stored in the security module 4 This paper size applies to the Chinese National Standard (CNS) AU see grid mo X 297) -17- IIIII l · I-* ----. II! — I Order ---------! (Please read the notes on the back before filling this page) 5 ^ 413799 _B7____ printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs V. Cash in front of the invention description (15) in order to enhance security and harmonious input / round-out Transmission time on 6 (with 2). In the transfer step 64, the terminal 3 will transfer the new card signature to the security module 4 and initialize the incremental step 65. In the incremental step 65, the new card signature will replace the stored old signature. The T-DES unit 11 (Figure 1) confirms the confirmation of the new card signature based on the previously used card signature and the current cash card. If the confirmation of the new card signature is true, the status byte will be set to "correct" and the transaction counter 6 6 (Figure 1) will be incremented by the transaction. If the confirmation is not confirmed, only the security module status will be available. Bytes will be set to "incorrect". The security module status byte will return to terminal 3 for testing in the fourth decision 6 7. If the security module status byte is "incorrect", the transaction process will be terminated at stop 6 8. However, if the security mode status byte is "correct", the terminal 3 successfully completes the transaction process and the point of sale 5 2 in the acceptance step 6 9 will accept the payment. Then, the terminal 3 returns to the service step 51 and waits for the removal of the new transaction program or the IC card 2. From the terminal step 6 3, the program will be executed forward without any connection with the IC card 2, until the step 6 9 is acknowledged and the service step 5 1 'if the IC card 2 is removed, the terminal 3 It will go to sleep until it comes into contact with the IC card 2 again. If the processing ends at 3 6 (Figure 3), 4 4 (Figure 3), and 60, the IC card 2 will be locked by the signal on the invalid line 30 (Figure 3) and must be reset at step 32 ( 1113) Reset by signal on reset line 24 (Figure 2) to restart the confirmation process. By returning to step 32, any other execution of terminal 3 will be stopped at 4 4 and / or 60 — — —, I 1 III — ----- 1 IIIII (Please read the note on the back first Please fill in this page again for details) Chinese National Standards (CNS) A'l Specification (210 X 297 mm) for this paper -18- Consumption Cooperation between Employees and Intellectual Property Bureau of the Ministry of Economic Affairs 413799 Λ7 Β7 V. Description of Invention (16) Automatically restart the confirmation and / or transaction process for a limited number of times. The supervision of the cross-confirmation process covers at least the standardization of the encrypted data and the exchange period ', that is, from the start of the encoding step 40 (Figure 3) to the second decision 50 (Figure 3) and during the arithmetic step 58, and has the following Advantages: Identify any abnormally ended access, that is, access that does not end normally due to invalid IC card 2, power failure, or disconnection of IC card 2 from card reader 1, etc., and by using The number of erroneous accesses stored in E 2 PR Ο Μ memory area 20 is decremented to limit the number of these abnormal accesses. The preparation and exchange cycle of encrypted data requires time-consuming calculations and may last for several seconds and thus have sufficient time to end the interactive confirmation processing in an abnormal manner. The parent program has a single wiring. The data flow on the input / output lines 26 is greatly reduced and the calculation time in the individual circuits of the IC card 2 and the security module 4 is minimized without sacrificing security. Cryptographic processing can advantageously save time by calculating only two random numbers each time the confirmation process starts and then using the previous individual signature to replace the time-consuming new random number generation. 0 At terminal 3, such as reset step 3 2 (Figure 3), encoding request 3 9 (Figure 3), verification request 4 5 (Figure 3), request steps, signature request 61, etc., under the conditions that the IC card 2 is effectively contacted in the steps, etc., the use cycle state LS can be determined by the terminal 3 set up. This may happen, for example, when the card number transmitted by the security module 4 is detected on a stolen or suspected slip. In the case where the use cycle state LS is set to "invalid j", the controller 13 will wipe at least the third dimension as described above, and apply the Chinese National Standard (CNS) A4 specification (210 * 297 mm) -19- ------ L ---, 1 --- install -------- order --------- line (please read the general notice on the back before filling this page) Ji Zou wisdom% Production Bureau member X Consumer Cooperative printed 413799 Λ7 87 V. Description of the invention (17) The secret key in the E2P ROM memory area 19. In FIG. 5, the display generator device 7 0 'can be used as Random number generator 12 (Figure 1) and generator 2 8 (Figure 2) that generate random numbers for security modules and card random numbers, respectively. Device 7 0 includes a linear offset register 7 1. Free-running timepiece 72, and Bollinger unit 73. In the embodiment shown, the eight-bit shift register 71 will move its content from the least significant bit to the most significant bit, for example, as shown in the diagram in FIG. In the middle, the shift register 7 1 moves its content to the right. The output of the most efficient or true content of the octet and the sixth and third bits will be provided by the Bollinger unit 7 3 in a free-running timepiece 7 2 Signal Mix Together to form a combined signal that is fed to the least significant bit input. The signal of the free-running timepiece 7 2 is not synchronized with the clock signal of the shift register 7 1. The type of the Bollinger Unit 7 3 and the Bollinger Unit 7 3 The signal of the combined shifter register 71, the size of the shift register 71, and the frequency of the free-running timepiece 72 are determined by the needs of the generator device 70. For example, the device 70 generates The random number must conform to the basic statistical distribution law and the criteria developed by SWG0l0mb (SWGolomb, Holden-Day, San Fancisco, 1976, w Shift Register Sequence 〃 or Aegean Park Press, 1 9 8 The second edition of 2). Now returning to FIG. 2, the feature of tracking the number of invalid access attempts and limiting this number to a predetermined number of allowed invalid access attempts has the advantage of using the deductive circuit 2 9 The cryptographic key K used for signature cannot be retrieved by trial and error, so the cryptographic key can be kept secret. Before the confirmation process, the reduction of the number of lead-in mistaken access 48 can prevent the system in the following situations --- ： --------- install · ------- order · --- I ---- (Please read the notes on the back before filling out this page) This paper size applies to Chinese National Standard (CNS) A4 (210x 297 meals) -20- A7 413799 B7__ 5. Description of the invention ( 18) Fooled: IC card 2 and Zanka machine (Figure 1) were separated before the number of incorrect access 4 8 because of verification step 4 6 and arithmetic step 5 8 (Figure 4) before the transaction was successfully completed and incremented again. . In another implementation of the IC card 2, the confirmation test is started at the beginning of the preparation step 3 3 instead of at the beginning of the encoding step 40 (Figure 3), so that the entire process from the preparation step 3 3 to the verification step 4 6 They were all under supervision at the end. In another implementation of the IC card 2, the controller 1 3 is programmed to directly compare two digital groups under the control of an operating program, without the need for a hard-wired comparator 47. The cash unit counter content 10 is stored in the fourth memory area 20 and the cash unit will be decremented by the controller 13 when requested by terminal 3 until all the cash units are used up and the cash unit is zero. Then, the 1C card 2 is used up and discarded. The implementation of the IC card 2 may be able to refill the predetermined cash limit, for example, equal to CHF300. 00. In one of its E2PROM memory areas 17 to 20, the number of retry attempts set in the "Publisher Mode" is stored. If the allowable number of retry times is set to zero, the IC card 2 is available once until the cash unit counter content 10 reaches zero. As long as the number of allowed retransmissions is different from zero, the terminal 3 (Fig. 1) may request the IC card 2 to prepare the retransmission cash counter unit contents 10. This service can be initiated after the service step 5 1 (Figure 3) establishes an interactive confirmation. The controller 13 will test the allowable number of slugs. If the allowed number of 01 塡 is not zero, the controller 13 will apply the allowed paper size to the Chinese national standard (CNSM4 gauge (210 X 297 mm) I! III L ------- -I 1 IIIII Order * ιί1 · — · * * 5 ^ < Please read the notes on the back before filling out this page) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs ^ A7 413799 ____B7___ V. Description of the invention (19) 塡 The number of times is reduced by one unit and the cash 値 unit counter content 1 0 is acceptable New cash unit. ® Filling can occur on a special card reader 1 connected to the bank's computer instead of to point of sale 5 2 (Figure 1). In addition to the interactive confirmation between the IC card 2 and the card reader 1, the bank will also require user identification through the increase of the personal identification code. It is advantageous to limit the number of repetitions so as to minimize any misuse and invalidate the old IC card to avoid malfunctions due to the life limit of E 2 P R ◦M. For example, the limit of the contents of the cash counter unit 10, the limit of the number of error access 48, the limit of the number of retry times, etc. will be set to the maximum allowed number in the "Issuer Mode", which are stored in the memory 2 0 in. If an individual event occurs, the appropriate limit will be reduced by at least one unit. This method is faster because the controller 13 compares individual numbers with zeros than it does with the numbers stored in memory. In the verification step 46 and the arithmetic step 5 8, the number of wrong access 4 8 will increase by one unit. The pre-stored IC card 2 and card reader 1 system (Figure 1) has the advantage that the pre-stored card 2 and the security module 4 (Figure 1) can interactively confirm the counterparties of data transmission and provide a mechanism to the system to reject any Unconfirmed access attempt to a user payment institution. This will significantly enhance the level of confidence that customers have in their IC cards2 and the issuer's overall system. In order to enhance the integrity of the IC card 2 memory module, the integrated circuit 8 must prevent the effects caused by sudden power failure, for example, before the transaction is completed or in the Ε 2 PR Ο Μ memory area 17 to 20 During the renewal of one of the counting areas, the 1C card 2 is separated from the card reader 1 (Fig. 1). In the know-how of the pre-stored card technology, the hard-wired Logger Tun Road will be used by: This paper size applies to China National Standard (CNS) A. 丨 size mo X 297 mm) ---- I l · II L--II * 1 IIIIII ^ *-1 ----- (Please read the precautions on the back before filling out this page) Printed by the Intellectual Property Bureau Employee Consumer Cooperatives of the Ministry of Economic Affairs -22-41379 ^ Ministry of Economic Affairs Printed by the Intellectual Property Bureau employee consumer cooperative A7 B7 V. Description of the invention (20) When the content of the counter is changed, the flag or certification bit will be changed to prevent the card removal effect during the update of the counting area. Since the certification bit 'cannot be written exactly parallel to the counter, it is still possible that an error may occur due to a sudden power failure. This may even cause a state where the contents of the counter 10 can be illegally increased. The new Ic card 2 has an automatic backup mechanism for each sensitive counter to track changes in the contents of the counter by storing at least the previous and actual contents of the individual counter. In Fig. 6, an embodiment of the counter record 74 is shown. The counter record 7 4 includes three columns. The management column 7 5 indicates the number of years of the counter record 74. The counter 7 6 stores the counter. 7 4 The real IC card when storing files. 10 (Figure 2). The total check column 7 7 Check the total. Its (total check) content is based on counter 値 76. Each sensitive counter of the IC card 2 has at least two counter records 7 4 and is located in the backup count area 7 8 of the memory area 20. The integer of the counter record 7 4 is greater than 1 but smaller than the capacity of the management column 7 5. The most sensitive counter handles cash puppet units. The cash / unit counter will be explained further. In the embodiment shown in Fig. 7, the backup area 78 has a set of four counter records 74. The controller 13 will determine the maximum content of the four management columns 7 5 a to 7 5 d of the backup counter 7 8 during the preparation step 3 3 (Figure 3), and set the four management columns 7 5 a to 7 The maximum volume of 5 d is stored in the activation column 79 in the RAM memory area 16. The controller 1 3 always changes the oldest login in the backup counter area 7 8. The oldest registered address is calculated according to the following rules: "To the content of Zhixun fl ^ I79 will be ^^ 1 * ^ 1 ^^ 1 ^^ 1 ^^ 1 1 1 ^ 1 ί I ft nk J f— I 1 ^ 1 m ^^ 1 V n ^^ 1 ^^ 1 I n «^ 1 n I (Please read the precautions on the back before filling out this page) This paper size is applicable to the CNS A4 specification Γ210 X 297 mm) -23-Printed by the Economic Village Intellectual Property Bureau—Industrial and Consumer Cooperatives 413799 Λ7 Β7 V. Invention Description (21) Added one and used as a counter record in the backup counter area 7 8 7 4 a to 7 4 full number of d. " If the contents of the counter, that is, the cash / unit counter content 10 (Fig. 2) must be changed, the controller 13 will access the memory area 2 0 with the backup counter area 7 8 on the data bus 2 3. Then the 'controller 1 3 reads out the content of the actuation column 7 9 and determines the address of one of the counter records 7 4 a to 7 4 d by the operation of "the content of the actuation column 7 9 is 4", for example In other words, the counter record 7 4 b, which has been used when the counter was previously changed, is recalculated based on the counter 値 7 6 b (for example, 'cash 値 unit counter content 1 0'). If the recalculated total check is the same as the total check stored in block 7 7 b > the previous change of the counter will be successfully terminated. The controller 13 will increase the content of the actuation column 7 9 by one unit, read the counter 値 7 6 b, and decrease the content of the counter 値 7 6 b by one or several units as needed. Then, the new content of the activation column 7 9 will be used by the controller 13 to calculate the new address of the next counter record 7 4 (the counter record 7 4 c in this embodiment). The controller 13 will store the next counter 値 7 6 c decrement 値 and the increment of the actuation column 7 9 in the management column 7 5 c ′ and calculate a new total check based on the contents of the counter 値 7 6 c The new total check is stored in column 7 7 c. If there is a power failure before the total check is properly stored in column 7 7 c, the total check is incorrect. During the next access period between I c card 2 and the card reader (circle 1) 'controller 1 3 will give the address to the counter' record 7 4 c and re-read according to the contents of the counter 7 7 c Calculate the total paper size ii to check that the Chinese paper standard (CNS) A4 (210 X 297 cm) is applicable to this paper size -24- IIIII l · --LI —---- · I f ----- Order ----- — — — — — (Please read the notes on the back before filling out this page) A7 413799 B7_ V. Description of the invention (22). Obviously, due to the previous transaction processing that failed at arithmetic step 5 8 (Figure 4), that is, the 1 increment step (Figure 4) and the acknowledgement step 6 9 (Figure 4) in the previous transaction were not executed and deducted. The amount is not used for payment, so the newly recounted total reconciliation is now different from the total reconciliation block 7 7 c. If the total comparison check fails, the controller 13 will thus decrement the content of the actuation column 7 9 by one unit and read out a counter 値 7 6 b such as the previous cash 値 unit counter content 10 e (Figure 2), As a real cash 値 unit counter content 10. The controller 13 will continue the test as described above. It is obviously correct to check the total in column 7 7 b, increase the activation column 7 9 by one unit, increase the cash / unit counter content 1 ◦ decrement according to the new transaction, and The actual contents of are stored in columns 75c, 76c, and 77c of the counter record 74c. This procedure has the advantage that the owner of the IC card 2 cannot deceive the system by artificially interrupting the transaction processing, and it is not sensitive to the accidental mishandling or the failure of the IC card 2 to the fault of the card reader 1. If the total comparison is more than two consecutive failures, the controller 1 3 will determine that the individual counter record 7 4 contains defective memory cells and invalidate the IC card 2 by setting the use cycle state L S to "invalid". Once the secret key is found, the system with the pre-stored IC card 2 of the known technology cannot change the key except to replace all IC cards 2 with the new series of IC cards 2 and the related security module 4, which will cause Issuer's credit is compromised and financial damage is significant. In FIG. 2, the third E2PROM memory area 19 provides a memory section 80 to the auxiliary key AK. The auxiliary key A K is not applicable to the standard office. In "----- U --------- installation -------- order -------- {Please read the unintentional matter on the back before filling this page) Economy Printed by the Ministry of Intellectual Property Bureau ’s Consumer Cooperatives The paper size is applicable to the Chinese National Standard (CNS) A4 (210 X 297 gong) -25- 413799 Printed by the Intellectual Property Bureau ’s Consumer Cooperatives of the Ministry of Economic Affairs A7 Β7 V. Invention Description (23 During the "Publisher Mode" period, it will be filled in the memory section 80 and used as the auxiliary key AK. Only in the case where the key is downloaded from the security module 4 (Figure 1), for example, after the cryptographic key K used in the deductive circuit 29 is found, the integrated circuit 8 will interpret the new key with the auxiliary key AK Password key. Obviously, the auxiliary key A K is also available in the security module 4. The advantage of this design is that the issuer only needs to initiate the key replacement procedure within the security module 4 (Figure 1) during additional repairs to the card reader 1 C (Figure 1) that is not obvious to the public. During the additional maintenance period, the new cryptographic key K is transmitted to the security module 4 to replace the outdated old key K * stored in another billion-dollar body stored in the security module 4. This will also trigger the key replacement process. Therefore, since the key change process is already part of the confirmation process, it is not necessary to close the card operation during this additional maintenance of all the card readers 1, for the sake of brevity. The key replacement process is not shown in FIG. Figure 8 shows the relevant parts of the confirmation process with the additional key replacement process steps. The card signature is transmitted to the security module 4 in the confirmation request 41. If in the confirmation test 4 2 using the new key K, the security module 4 classifies the IC card 2 as unconfirmed according to the card signature, the IC card 2 can still use the outdated old key K *, or it is truly unconfirmed. The switch 8 1 which is activated during the extra maintenance will cause the process to shift to the second confirmation test 4 2 ′, in which the outdated old key K * is used to recalculate the card signature and the result will be compared with the transmitted card signature. If the re-calculated and transmitted card signatures are different, the IC card 2 is unconfirmed and the processing will be transferred from the second DPJ gate 8 2 to the terminal with the security module status byte set to "unconfirmed" 3. However, if the paper size of the recalculated and transmitted card signature is applicable to the Chinese National Standard (CNS) A4 (210 X 297 mm) -26-— — — — — illj—— — — i IIIIII ^ > — — — — — < Please read the notes on the back first and fill in this page) Printed by the staff of the Intellectual Property Bureau of the Ministry of Economic Affairs and printed by the cooperative 413799 Λ7 Β7 V. Description of the invention (24) The words of the security module status byte will be The setting is "replace the key", and the second switch 8 2 will cause the key to be transferred to the key sending step 8 3. In step 83 of sending the key, the T-DES unit 11 (Fig. 1) will use the DES-transform and the auxiliary key AK stored in the 80 million (Fig. 2) and the transferred card to sign, and will sign the new Key K code. T-DES unit 1 1 Use the new key K and the card sent to sign the message confirmation code. The security module 4 then transmits the security module status byte, the encrypted new key, and the message confirmation code to the terminal 3. Among them, the first decision 4 3 detects the security module status byte set in the "replace key", and the terminal 3 sends the encrypted new key and message confirmation code as a key replacement request to the 1 C card 2 . In the key verification step 84, the deductive circuit 29 (FIG. 2) decodes the encryption key by using the inverse DES conversion of the auxiliary key AK stored in the memory section 80. The result is a new key K, which is then used to recalculate the message confirmation code in step 85. Comparator 4 7 (Figure 2) will compare the recalculated message confirmation code and the transmitted message confirmation code "if the two codes are the same, that is, if comparator 4 7 senses" true ", then the controller 1 3 (Figure 2) The encryption key transmission will be considered and the message confirmation code will be considered correct. The new key K will replace the old cryptographic key K in the third E 2 PR 0 Μ memory area 1 9 (Figure 2), and the confirmation flag will be Set to "Accept correct", and increase the number of incorrect access by 48 units. Processing will return to terminal 3 at the second decision 50. From then on, IC card 2 will use the new key K to replace the old but now outdated gun K. However, if the result of comparator 4 7 is "false", the confirmation flag will be set to "access "Correct", the wrong reception of the next defeat 4 8 will maintain a reduction of a rogue bit, that is, the reception will be controlled by the controller — I! — — — — — — — — Order-I — --- (Please read the back first Please pay attention to this page and fill in this page again) This paper size applies Chinese National Standard (CNS) A4 size X 297 mm) -27-Printed by the Ministry of Economic Affairs J. Bureau Consumer Cooperatives 413799 A7 __B7__ V. Description of the invention (25) 1 3 is considered an invalid access attempt. Finally, the 'use cycle status byte will be updated to the "user mode" and the processing will return to the second decision 5 0 (Figure 3) 13 If the increment and decrement directly affect the number of wrong access as above 4 8 Above, the logical state change of the inefficient bit with the wrong access times of 4 8 will change at least four times. The limited life of the E2PROM memory cell of about 10,000 cycles will limit the confirmation times to about 5 0, 0 0 〇. Another way to track effective access attempts will now be explained in detail. In FIG. 9, two columns of the fourth E2PROM memory area 20 are shown. The first column is called a BRUTE FORCE ATTACK (FBA) counter 86, which includes the number of error accesses, and the second column has Approved area 8 7 with even bits 8 8. During the previous access of the IC card 2 (Fig. 1), for example, in the "Issuer Mode", the number of erroneous accesses 4 8 is set to the initial frame representing the maximum number of valid attempts allowed. At the same time, bit 8 8 of the approval area 8 7 is set to one. For example, if the approval area 8 7 is 16 bits wide from bit 8 8 a to bit 8 8 q, The sixteen-digit content is "FFFF". The logic state of one of the 16 bits 88a to 88q is reversed by the controller 1 3 (Figure 2) so that the number of bits 8 8 in the same logic state (zero or one) is an odd number (sign step) to replace each One unit is deducted from the number of erroneous accesses 48 when the confirmation process is started, for example, at the beginning of the encoding step 40 (FIG. 3), at the beginning of the arithmetic step 58 (FIG. 4), and so on. Bits 8 and 8 in the same logic state (zero or one) are called "bit parity" 丨 Division-------------- ^-III I --- ^ -------- (Please read the notes on the back before filling out this page) This paper size applies to Chinese national standard (CNS > A4 size (210x297 mm) -28- Member of Intellectual Property Bureau, Ministry of Economic Affairs ΗConsumer Cooperation Du printed 4137S9 A7 _B7 V. Description of the invention (26) Bits are used as the content of the confirmation flag 'for example' a logical tree zero indicates even parity, and a logical one is odd parity ϋ If confirmation fails, terminal 3 ( (Figure 1) The processing will be abandoned at stop 44 (Figure 3) or 60 (Figure 4) and the controller 13 will set the invalid line 3 0 (circle 2) to actuate and no longer receive from the second R 0 Μ 1 5 Any further instructions. The IC card 2 must be reset by a signal on the reset line 24 (Figure 2) in order to restart the confirmation process. On the other hand, if the confirmation is correct, the controller 13 will cause the adjacent bit 8 The logic state of 8 is reversed to change the bit parity to an even number (adjustment step) 0 Now go back to the confirmation process of FIG. 3. After resetting step 3 2 after resetting the IC card 2, The controller 1 3 (Figure 2) will test the card in preparation step 3 3 to check the number of incorrect access 48 48 (Figure 2). If the number of incorrect access 4 8 exceeds zero, the confirmation process starts at the random number step. Before working on 3 3 4, first enter the random parity check 3 3 5 added in the random step 3 3 4. The bit parity check 3 3 5 will determine the parity of the approved area 8 7 (Figure 9) and treat the bit Parity will handle branching. Even parity makes the controller 1 3 sure that any previous confirmation is correct. If the parity is odd, it indicates that the previously used IC card 2 is abnormal, and the controller 1 3 will change the bit parity to an even number by reversing the logical state of one of the 16 bits 8 8 a (Figure 9) to 8 8 q (Figure 9) in the approval area 8 7 and the wrong access The number of times 4 8 is reduced by one unit. Then, the confirmation process will leave the bit parity check 3 3 5 and continue the work of random steps 3 3 4. The advantage of using the approval area 8 7 is that the number of incorrect access 4 8 will only reduce the paper size. Applicable to CNS A'l specification (210x297 male) -29- I _ ^ innn 一 nn 1 nn II (Please read the precautions on the reverse side before filling out this page) The Intellectual Property Bureau of the Ministry of Economic Affairs, Employee Consumption Cooperative, India 413799 A7 _B7 V. Description of the invention (27), and the change of E ^ PR Ο Μ memory cell only occurs After the correct event (power failure, etc.), the life of E 2 PR 0 μM can be enhanced. At the beginning of the encoding step 40, before the deduction method unit 2 9 (Fig. 2) calculates the card signature, the controller 13 will reverse the 16 bits 8 8 a to 8 8 q in the approval zone 8 7 One of the logical states, while changing the bit parity into an odd number. In the implementation of the IC card 2 that the supervision of the interactive confirmation process has been initiated in preparation step 3 3, the bit parity change may occur between the bit parity check 3 3 5 and the random number step 3 3 4. And * At the beginning of arithmetic step 5 8 (Figure 4), if the use cycle state LS is set to "user mode" and the interactive confirmation is determined, the controller 13 will change the bits in the approval zone 8 7 in the same position. Is odd. At the end of the verification step 4 6 (Figure 3) and the end of the arithmetic step 5 8, if the controller 13 senses that the interactive confirmation is successful and the total check is appropriately placed in the total check column 7 7 (Figure 6) • The controller 13 will change the bits in the approval zone 8 7 to an even number again. Alternatively, if the controller 13 senses an unsuccessful acknowledgement, the controller 13 will keep the bits in the approval zone 8 7 in an odd state in the same position. Then, the confirmation flag containing bit parity information will be presented to the terminal 3. If the confirmation flag is set to logic 1, the controller will branch the program at the second decision 50 to stop 4 4 and the third Decide the program branch at 59 to stop at 60. This unsuccessful access will leave the parity of odd bits in the approved area 87. Only by reversing one bit 8 8 in the approval area 8 7 can a considerable increase in confirmations be made, for example • In the example of a 16-bit wide approval area 8 7, the increase is 1 6 times to about 8 0,0 0 〇 confirmed that the Chinese paper (CNS) A4 specification (210 X 297 mm) is not applicable to this paper size -30- -------------- * Equipment * ------- Order · ------- line (please read the precautions on the back & fill in this page first) Printed by the Consumers' Cooperative of Intellectual Property Bureau of the Ministry of Economic Affairs 413799 A7 _B7_ V. Invention Explanation (28) With the advantage of sacrificing E 2 PR Ο Μ memory cells, the configuration of bits 8 8 in the confirmation area 8 7 will be lost during the no-power cycle until the next access to the card reader 1 (Figure 1) until. In addition, in most access attempts, the content of the incorrect access number 4 8 will be changed by more than one bit. This is for the slow and energy-consuming processing of the E 2 PR 0M memory cell and is generally confirmed. And payment conversions are not acceptable. The changes in bit parity will now be described in detail. The controller 13 will read the calibration area 8 7 and test each bit 8 8 from the lowest effective bit 8 8 a to the most efficient bit 8 8 q. If the most efficient bit 8 8 Q is a logic 1, the controller 13 will determine and mark the first bit containing logic 1 starting at bit 8 8 a. If the most efficient bit 8 8 Q is logic 0, the controller 1 3 will determine and mark the first bit containing logic 0 starting at bit 8 8 a. If the flagged bit is one of the bits 8 8 a, 8 8 c, 8 8 e, 88g, 88i, 881, 88n, and 88p, the controller 13 will set the bits in the approved area 8 7 Parity is considered even. In the case where one of the other bits 88 is marked, the bit bits are treated as odd. The parity bits in the verification zone 8 7 are stored in the confirmation flag. For each change in bit parity, the controller 13 will only reverse the logic state of the flagged bits, that is, the controller 13 will convert logic 1 to logic 0, or vice versa. The benefits of security in messaging are now clear. The usage cycle status byte and the confirmation flag including the usage cycle status LS are the only information that must be sent clearly. However, the information of the usage cycle status byte does not allow any conclusion about the information contained in the IC card 2. . Other exchanges I ------------ Order --------- (Please read the precautions on the back before filling this page ) This paper size is in accordance with Chinese National Standard (CNS) A4 (210x 297g) -31-ΑΓ 413799 ___ Β7 1 __..-------------------- 5. Description of the invention (29) Information is scrambled efficiently and reliably. In FIG. 1 ′ 'shows an example of the usage cycle status byte located in the RA memory area 16 ° The first E 2 p R 0 Μ memory area 17 includes a memory space 8 9' memory space 8 9 seven Units 8 8 are used to store the use cycle state LS in non-volatile memory. Only the information in the space of billions of bodies will be changed to change the life cycle status. In order to update the above-mentioned use period byte, the byte area 90 of the RAM memory area 16 is used. In preparation step 3 3 (Fig. 3) and whenever this update process starts, the controller 1 3 (Fig. 2) will read the memory space 8 9 and copy its contents into the byte area 9 0 'for example , Copy to the seven least significant bits marked by lS. The controller will then determine the status of the confirmation flag and place the single bit flag 9 1 with the information about the confirmation flag in the most efficient bit of the byte area 90. Therefore, the use cycle status byte includes the use cycle status L S and the acknowledge flag. The controller 1 3 always reads out the use cycle status byte from the byte area 9 and presents it to the terminal 3 (Fig. 1) 0 The pre-stored IC card 2 (Fig. 2) of the conventional technique does not have a mechanism to Identify themselves before ordering at the issuer. During the ordering process in the "Issuer Mode", the secret password key and ordering information will be copied to the pre-stored IC card 2. There is no mechanism to prevent the loading of secret cryptographic keys into a similar IC card 2, which is an imitation of the actual IC card 2. Similar to the IC card 2, the secret key and customized data will be accepted, and the key and customized data can be taken out of it. Secret cryptographic keys are thus discovered and the security of the entire system is compromised. II ---- 1 IIJI --- IIII I--Order --- — — — — — (Please read the notes on the back and fill in this page first) The paper printed by the Intellectual Property Bureau Staff Consumer Cooperatives of the Ministry of Economy applies Chinese SS Home Standard (CNS) A: 1 specification (210 * 297 mm) -32- 413799 Α7 Β7 V. Description of the invention (3〇) (Please read the precautions on the back before filling this page) In Figure 1 1 , Displays the overall inspection at the terminal 3 dedicated to the card used by the issuer. The IC card 2 is connected to the terminal 3 and the key holder 9 2 * The key holder 9 2 is lent to the issuer from a trusted third party. The key holder 9 2 has the integrated circuit 9 2 of the same design as the integrated circuit 8 of the IC card 2 and therefore includes the same functional blocks. These same functional blocks have the same code but are marked by the following lines: deductive circuit 2 9 ROM memory area with operating system 1 5 < At least the fourth E 2 P R ◦ M memory area 2 0 and so on. For example, the key holder 92 has a physical form of a general 1C card 2 or one of the security modules 4 (FIG. 1) so that the key holder 92 can fit one of the sockets 7 (FIG. 1) of the card reader 1. . R Ο Μ memory area 1 5 > stores the same operating program as R ◦ Μ memory area 15 and may be empty fourth E2PROM memory area 2 0 > is the fourth E2PR of IC card 2 to be personalized. Copy of M memory area 20. The IC card 2 printed by the employee's consumer cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs will be placed in the reader 1 to start the order. The terminal 3 will supply power to the IC card 2 in the reset step 32 (Fig. 3). The IC card 2 starts the test according to the preparation cycle 33 (Fig. 3) and presents the updated use cycle status byte to the terminal 3. The terminal test 3 4 tests the use of periodic status bytes. If the use cycle state L S is set to the "test mode", the program will switch to the identification step 9 4; otherwise, the program 1 will be abandoned at the stop 3 6. In the identification step 9 4, the terminal 3 transmits the same announcement 9 5 (for example, date and / or real time or random number) to the IC card 2 and the key holder 92. Announcement 9 5 may be sent to the IC card 2 and the key garden holder 9 2 at the same time or at different times. Yan-33- This paper size is applicable to Chinese Standards (CNS) / V1 (210 X 297 mm) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 413799 A7 _ B7 ____________ 5. Explanation of the Invention (31) Interpretation Circuit 2 9 and 2 9 疋 are independently based on the contents of this report 95 and contents such as ROM record protection area 15 and 15-, and the fourth E 2 p ROM record storage area 20 and 20-, respectively Perform their own 0E s operation ° The results of a DES operation are presented to the terminal 3. The result of one of the DEs is presented to the identification decision 9 6 for comparison. If the two results are different, the IC card will be regarded as a defective or unconfirmed simulator (Trojan horse (', Troj an hórs e 〃))', so the program will be aborted on 9 7. If the two results are equal, then the terminal 3 will open the subscription of the IC card 2 and take at least the relevant information and the second secret mirror removed from the key holder 9 2 (for example, stored in the third E2P ROM memory area 1 9) Load the third and fourth E 2 PR via the terminal 3 ◦ M memory area 19 and .20. After confirming the transmission content, the usage cycle state L S stored in the memory space 8 9 (Fig. 10) will be set by the controller 1 3 (Fig. 2) to "user mode". Terminal 3 —When receiving the updated usage cycle status byte and sensing the usage cycle status L S = "user mode" and the confirmation flag "accepted correctly", the terminal 3 will end the subscription of the IC card 2. The content of the fourth E2 PROM memory area 20 now differs from the content of the fourth E2PROM memory area 20 $, which may still be empty. Therefore, even if the IC card is removed from the card reader 1 before the use cycle state L S is set to "user mode", these sensitive data cannot be loaded into the IC card 2 a second time. The response of the IC card 2 in the identification decision 9 6 is different from that of the key holder 92. When the personal IC card's life cycle status is no longer in "issuer mode", IC card 2 will be checked at the terminal 3 4 and rejected and sent to stop 3 6. Confirmed before this order. — — — —-F ----] II 1 · 11111111 (Please read the precautions on the back before filling out this page) The standard of this paper applies to 0® House Standard (CNS) A4 Specifications (210 X 297 public money) -34- Consumption cooperation by employees of the Intellectual Property Bureau of the Ministry of Economic Affairs 413799 A7 _B7_ V. Description of the invention (32) The point is to strengthen security to prevent the secret key from being discovered and issued by the issuer The card used was "illegal updated". ----- fi ---- Installation -------- Order · -------- Line (Please read the note H on the back first: fill in this page) -35- This paper size Applicable to China National Standard (CNS) A4 specification (210 X 297 mm)

Claims (1)

Attachment 2A: Chinese Patent Application No. 88109224, Amendment of Chinese Patent Application Range, March 1989, 413799, Patent Application Range 1. A system, including a card reader 1C card (2), the card reader (1 less one security The module (4) is amended to supplement the printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs 1) and the portable electronic terminal (3) and the integrated pre-stored IC card (2) with integrated circuits (8) and Deduction mechanism 'The integrated circuit (8) has a lock (9) to prevent unauthorized use of the IC card (2) and a non-volatile memory area (20) to store the current IC card (1 0) , The deduction agency will 'gradually deduct the current ί C card' during the transaction at the independent point of sale (5 6) of the terminal (3) connected to the card reader (1). The terminal (3) Tihong IC The channel (5, 6; 7) between the card (2) and the security module (4) is characterized in that the 1C card (2) has a mechanism (9, 21, 28, 29) to generate a card random number and Sign the card and supply them to the security module (4) 'The security module (4) has a mechanism (1 1, 1 2) to generate random security modules And security module 'and supply them to the IC card (2), the IC card (2) has a cryptographic key K and a mechanism (29) to generate a card signature based on at least the security module random number and decode the security module signature To confirm the confirmation of the security module (4) 'The security module (4) has a cryptographic key K and a mechanism (1 1) to generate the security module signature from at least the card random number and decode the card signature to confirm 1 c Confirmation of the card (2), the integrated circuit (8) includes a general memory area (16), and the general memory area (16) has an area (49) to store at least the card random number and the security module random number. The lock (9) can allow payment transactions when the interaction confirmation between the IC card (2) and the security module (4) is positive. 2. If the system of item 1 of the scope of patent application is characterized in that the paper size of this paper is applicable _ National Standard (CNS) A4 (210 X 297 mm) ------------- One by one ^ — i (Please read the precautions on the back before filling this page) Order-Line Attachment 2A: Patent Application No. 88109224 Chinese Application for Patent Scope Amendment March 1989 413799 and Application for Patent Scope 1. The system includes a card reader 1C card (2), the card reader (1 less one security module (4) amended and supplemented by the consumer property cooperative printed by the Intellectual Property Bureau of the Ministry of Economy 1) and portable electronic terminals (3) And the portable pre-stored IC card (2) has an integrated circuit (8) and a deduction mechanism 'the integrated circuit (8) has a lock (9) to prevent unauthorized use of the IC card (2) and With non-volatile memory area (20) to store the current IC card (1 0), the deduction mechanism will be at an independent point of sale (5 6) at the terminal (3) connected to the card reader (1) The channel between the terminal (3) and the IC card (2) and the security module (4) is gradually deducted during the transaction. Road (5, 6; 7), characterized in that the 1C card (2) has a mechanism (9, 21, 28, 29) to generate card random numbers and card signatures and supply them to the security module (4) 'Security The module (4) has a mechanism (11, 12) to generate a random number of the security module and a signature of the security module 'and supply them to the IC card (2), which has a cryptographic key K and a mechanism ( 2 9) Generate a card signature based on at least a random number of the security module and decode the security module signature to confirm the confirmation of the security module (4) 'The security module (4) has a cryptographic key κ and a mechanism (1 1) to At least the random number of the card generates the signature of the security module and decodes the card signature to confirm the confirmation of the 1 c card (2). The integrated circuit (8) includes a general memory area (1 6), and the general memory area (1 6 ) Has an area (49) to store at least the card random number and the security module random number. The lock (9) can allow payment transactions when the interaction between the IC card (2) and the security module (4) is positive. 2. If the system of item 1 of the scope of patent application is characterized in that the paper size of this paper is applicable _ National Standard (CNS) A4 (210 X 297 mm) ------------- One by one ^ — i (Please read the precautions on the back before filling this page) Order-line 413799 BS CS D8 VI. Patent application scope (Please read the precautions on the back before filling this page) Card (2) and security The module (4) includes a deduction circuit (2 9) and a T-DES unit (11) respectively, and performs T-DES conversion on the data to be exchanged and verified with a cryptographic key. 3. If the system of item 1 or 2 of the scope of patent application, characterized in that the security module (4) has a mechanism to replace the outdated password key K 'of the IC card (2) with a new password key K stored in the IC card (2 ) The auxiliary key AK in the memory (80) and the auxiliary key AK are used solely to decode the new cryptographic key downloaded to the IC card (2). 4. A pre-stored 1C card (2), which has an integrated circuit (8) and a comparator (47). The integrated circuit (8) has a lock (9) to prevent unauthorized use of the IC card (2), non- Volatile data memory area (printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 17 to 20) to store at least real IC cards (1 0), communication channels (5, 2 1) that will gradually decrease during payment transactions To supply data to the outside world, the segment (80) of the general memory region (16), and the card random number generator circuit (2 8) to generate card random numbers, which is characterized in that the general memory area (1 6) includes The organization temporarily stores at least the card random number, the card signature, the security module random number, and the security module signature. The non-volatile data memory area (17: 18; 19; 20) includes the organization to store at least the wrong access The number of times (4 8), the cipher key K and the previous IC card 値 (1 0 ^). The lock (9) includes the mechanism to prevent access to the card depending on the number of incorrect accesses (4 8), and it further Including the organization to update the number of incorrect accesses in the case of invalid access attempts (4 8), and use the password The key K is a deductive method unit (2 9) that decodes the card signature and decodes the security module signature. The comparator (4 7) confirms that the received security module is in accordance with the Chinese National Standard (CNS) A4 specification. (210 X 297 public love) 413799 Benefit B8 B88 Six, signature of the scope of patent application. (Please read the phonetic on the back? Matters before filling out this page) 5. If the 1C card (2) in item 4 of the patent application scope is characterized in that the non-volatile data memory area (20) includes an error containing the number of incorrect accesses The access area (80) and the approval area (87) as a marker for the abnormal end of the previous access, and the integrated circuit (8) is provided with a mechanism (9, 13) to investigate the approval area (87) and The number of incorrect accesses (48) is updated in the case where the approved area (87) indicates abnormal access. 6. If the 1C card (2) in item 4 or 5 of the scope of patent application, the non-volatile data memory area includes a backup counter area (7 4) divided into at least two counter records (70), each record includes A counter (7 6) representing the real IC card (10) or at least the previous IC card (1〇_) and management data (75 '77) indicating the number of transactions stored in the counter record (70), and Provide institutions to update the management data (75, 77) of the real 1C card (10) and the updated management data and the management information of the real IC card (10) stored in the individual counter record (70) At the same time, the previous 1 C card (10 ^) is used for payment transactions. 7. If the IC card in any one of the patent application scope items 4 to 5 (printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 2), the non-volatile data area (17 to 20) will be covered by a shield ( 2 7) cover, and the integrated circuit (8) has a mechanism (1 3) to wipe and store in the non-volatile data memory area (1 7 to 2 0) when any damage to the shield (2 7) is falsely detected ). 8. If the IC card (2) of any of the items 4 to 5 of the scope of patent application, the non-volatile data is recorded in the 100 million area (19) to provide memory space. The paper size applies the national standard (CNS) A4 specification. (210x297 mm) B3 CS D8 413799 6. The scope of patent application is for the auxiliary key AK for decoding the cryptographic key and the controller (1 3) Ken g can replace the outdated key K * with a new key. 9. The IC card (2) according to any one of claims 4 to 5, in which the non-volatile data memory area (17) includes an individual card number, and the individual card number is a parameter calculated by a password. 10 · A method of interactive confirmation, interactively confirming the IC card (2) and the security module (4) between the 1C card (2) and the security module (4) in the card reader (1) with the terminal (3) The data exchange between) includes the following steps:-the card random number is generated by the IC card (2) and transmitted to the security module (4)--the security module random number is generated by the security module (4) and Send it to the IC card (2),-Sign the IC card with at least the cryptographic key K and the random number of the security module, and send it to the secure module,-Use the cryptographic key K and the random number of the security module by The security module (4) calculates the card signature and compares it with the transmitted card signature. If the two signatures are different, the processing is stopped. One uses at least the cryptographic key K, the card random number, and the card signature to be calculated by the security module (4). Sign the security module and send it to the IC card (2),-Use at least the cipher key K, the card random number and the card signature to calculate the security module signature by the IC card (2) and send it to the security module that was transmitted Comparison of group signatures' If the two signatures are different, processing will stop. 1 1 'The method according to item 10 of the scope of patent application is characterized by a card -------------- installation -------- order --------- line (Please read the precautions on the back before filling out this page.) The consumer cooperation and spitting of the Intellectual Property Bureau of the Ministry of Economic Affairs. Printed paper is applicable to the Chinese National Standard (CNS) A4 specification (210 X 297 mm) -4-Ministry of Economic Affairs Printed by the Intellectual Property Bureau employee consumer cooperative 413789 § D8 6. The patent application scope random number will be transmitted from the IC card together with at least the unique serial number of the IC card. The key K is determined by the unique serial number of the security module. 1 2 · The method as claimed in item 10 or 11 of the patent application scope is characterized in that it further includes updating the number of incorrect accesses in the case of unsuccessful comparison (4 8). 1 3 · The method according to item 12 of the scope of patent application is characterized in that before starting the interactive confirmation process, the IC card (2) will check the content of the number of incorrect accesses (4 8) representing the number of invalid access attempts and When the number of wrong accesses (48) reaches a predetermined limit, the access of the IC card (2) is deactivated. 14. The method of claim 10 in the scope of patent application, characterized in that it further comprises the steps of: when transmitting the first card signature, the IC card marks the approved area * in the non-volatile data memory area and the successful Organize the approved area after signing and comparing. 15. The method according to item 14 of the scope of patent application, characterized in that 'updating the approval area includes the following steps:-after the card check (3 3 1) and before generating a card random number ^ check the approval area (87) Stored bit (88),-in the case where the approved area is marked with an unterminated area, the number of incorrect accesses (4 8) is updated and the bits (8 8) of the approved area (8 7) are organized '— marking Approve the bits (8 8) in the area (8 7) to mark the beginning of the area ^-In the case of a successful termination zone, organize the bits (8 8) in the approved area (8 7) . — Lit · 1 -------- I order ------(Please read the notes on the back before filling this page) This paper size is applicable to China National Standard (CMS) A4 (210 X 297) (%) Printed by the Consumers ’Cooperative of the Ministry of Intellectual Property,« 3799 § VI. Application for Patent Scope 16. The method for applying for Patent Scope Item 15 is characterized by reversing single bits one by one and Mark and organize the bits (88) a 1 7 in the approval area (87). The method of item 10 in the scope of patent application is characterized by a payment transaction including at least the following steps:-According to at least the previously exchanged password and The amount to be reduced is calculated by the security module (4), and it is transmitted to the IC card (2) with the amount to be reduced. One is calculated by the IC card (2) based on at least the previously exchanged password and the amount to be reduced. Password, comparing it with the received password and decrementing the internal counter if the two passwords are the same-based on at least the previously exchanged password and the current IC card, the IC card C 2) calculates the password and transmits it to security Module (4),-based on at least the previously exchanged The password and the expected current IC card are calculated by the security module (4), and compared with the received password, and if the two passwords are equal, the transaction is successfully terminated and the IC card is updated. 18. The method according to item 17 of the scope of patent application, characterized in that updating the IC card includes the following steps:-Addressing the next counter's record 'Each record includes at least a counter' (76) 'The counter' ( 76) On behalf of the real 1C card (1 0) or the previous IC card (1 0 1) and management information (7 5 '7 7)'-store the current IC card in the address counter's record. ' -Update and store the corresponding management in the address counters and records ------------- ^ -------- Order --------- line (please Please read the notes on the back before filling in this page.) This paper size applies to China National Standard (CNS) A4 specification (210 χ 297 mm) -6-413799, patent application data. 1 9 · If the method in the scope of patent application No. 10 is characterized in that the security module (4) recognizes that the IC card (2) still makes the outdated password K *, the following key replacement processing steps are performed :-The security module (4) uses the auxiliary key AK to transmit the encrypted new key κ to the IC card (2) and the confirmation password (MAC), the confirmation code (MA C) is at least based on the new key K or the encrypted new key κ and the previously transmitted card signature, the IC card (2) uses the auxiliary key AK to decode the encrypted new key K,-calculates the confirmation password (MAC) 'the confirmation password is at least based on the new key K or the encrypted new key K and the previous Signature of the transmitted card,-Compare the transmitted and calculated confirmation passwords, and if they are the same *-replace the current drawing K with a new record K *. —1 ^ — ^^ 1 ^^ 1 n I n I mi HI 1 nnn 1 ^ 1 I ^ i I (Please read the notes on the back before filling out this page) Printed by the Consumer Consumption Agency, Intellectual Property Bureau, Ministry of Economic Affairs -7-The size of this paper applies to the national standard (CNS) A4 (21〇χ 297 mm)