M246733 捌_顧說明 【新型所屬之技術領域】 本創作係關於一種讀卡裝置，尤指一種應用於健保I C卡之讀卡裝置。 【先前技術】 國民健康保險制度爲政府實施已有多年之措施，惟目 前保險人於前往診所或醫院看病時，均以紙卡型態之健康 保檢卡爲憑證，其背面係印刷有數格供就診診所或醫院用 印以作爲就醫記錄的憑證，但有使用次數的限制，當格數 用完後即需更換新卡，此舉往往浪費人力，旦病患就診次 數及就診內容均須經過人力統計，以便作爲診或醫院向中 央健康保險局請領費用，導致大量人力投入且資料容易錯 誤，實有改良之必要。 政府有鑑於此種現象，自九十二年起正式啓用I C健 保卡，可將保險人之背景資料先行記錄於I C卡之晶片內 ，當保險持用I C健保卡就診時，即可透過健保局之電腦 終端機，將保險人之就診次數及相關資料記錄於電腦中， 不僅省時省力且資料不易有錯誤。 惟當民眾持I C卡就診時，須透過一中間介面作爲就 醫單位與中央健保局雙方連絡之用，故能夠讀取I C卡內 部的預錄資料及具有資料驗證功能之讀取裝置，即屬必要 設施。 就習用I C卡之讀卡裝置而言，僅是單純地負責讀寫 M246733 、傳遞資料工作，於此過程中並無法保證I C卡上的資料 不會外洩，而鑑於健保I C卡上係儲存有個人資料，故資 料保密性必須加以謹慎考量；此外讀卡機因必須同時與健 保局連線，故資料的傳輸、運算效率亦必須保有一定的速 度。 【新型內容】 有鑑於此，本創作之主要目的係提出一種健保I C卡 讀卡裝置，係可讀取並驗證健保I C卡內部資料之讀取裝 置，同時確保在資料傳遞過程中不致外洩。 爲達成前述目的，本創作健保I C卡之讀卡裝置係包 括有： 一第一微處理器，係透過一串列傳輸介面電路連線至 中央健保局； 一記憶體，係連接前述第一微處理器，於記憶體內部 係儲存有資料驗證程式以分析健保IC卡內之基本資料； 一第二微處理器，係連接前述第一微處理器及複數I C插卡介面，該第二微處理器係透過前述I C插卡介面讀 取健保I C卡內部資料，進而分析I C卡內部資料； 一顯示單元，係連接至第一微處理器之輸出端，以顯 示讀卡裝置之操作狀態。 前述第一微處理器主要係負責讀卡裝置與中央健保局 之終端機兩者的溝通及資料處理，而第二微處理器則控制 健保I C卡上預錄資料之運算、驗證，又經由兩微處理器 的分工作業令讀卡裝置之整體運作效率大幅提高。 M246733 本創作之又一目的係提供一種具有備用電源之健保I C卡讀卡裝置，於讀卡裝置之內部係設有一備用電池，當 電源正常供應之際可加以充電蓄能，以於電源異常時提供 一穩定的工作電壓令讀卡裝置持續工作。 【實施方式】 請參閱第一圖所示，本創作健保I C卡讀卡裝置主要 具有一電源供應單元（10)、一第一微處理器（20) 、一第二微處理器（3 0 )、複數個I C卡連接介面（4 0 )及一顯示單元（5 0 )。 該電源供應單元（1 0 )係提供5伏特的電壓供整體 裝置運作，同時當外部電源異常之際亦可提供一穩定的直 流工作電壓令讀卡裝置不致中斷運作。該電源供應單元（ 1 0 )具有一電源選擇電路（1 1 )，其第一輸入端係透 過一電源偵測器'(1 2 )連接至一直流電源輸入端（1 3 )，第二輸入端則直接連接於該直流電源輸入端（1 3 ) 。又，前述電源偵測器（1 2 )之輸出端係連接有一電池 充電電路（1 4 )以對一蓄電池（1 5 )進行充電動作， 該蓄電池（1 5 )之輸出則回接至電源選擇電路（1 1 ) 之第三輸入端，當以蓄電池（1 5 )作爲供電裝置時，其 輸出電壓將經由一電壓轉換電路（1 6 )轉換爲裝置所須 的電壓輸出。 當電源偵測器（1 2 )檢測直流電源輸入端（1 3 ) 之輸入電壓正常時，係控制該電源選擇電路（1 1 )直接 以此直流電壓輸出即可；若是電源異常，則切換至蓄電池 M246733 (15)爲供電裝置，此時蓄電池（15)輸出的3 · 6 伏特係通過前述電壓轉換電路（1 6 )轉成5伏特。 前述第一微處理器（2 0 )係經由一串列傳輸介面（ 2 1 )及一串列傳輸埠（2 2 )與中央健保局之終端機（ 圖中未示）構成連線，又第一微處理器（2 0 )係透過一 級栓鎖電路（2 3 )連接一記憶體（2 4 )。 又，第一微處理器（2 0 )係連接有一即時時鐘I C (25)，以取得以六位元組表示的的即時時間資料。 前述第二微處理器（3 0 )除了連接至第一微處理器 (2 0 )外，係與複數個I C卡連接介面（4 0 )連接， 以讀取IC卡內部所儲存的基本資料。 又，前述第一微處理器（2 0 )之輸出端係連接至該 顯示單元（5 0 )，利用顯示單元（5 0 )將讀卡裝置之 工作狀態顯示出來。 而有關於前述電路之動作係如下所述： 當第二微處理器（3 0 )偵測到I C卡連接介面（4 0 )有卡片插入時，第二微處理器（3 0 )將對卡片進行 RESET的程序，係1C卡上預先燒錄有使用者之編碼及數位 式個人資料，若第二微處理器（3 0 )可經由RESET程序 判斷出卡片編碼時，即代表爲合法卡片，則卡片內部的個 人基本資料將會傳遞予第二微處理器（3 0 )以更進一步 分析。反之，若該卡片之格式無法辨識者，則代表爲僞卡 ，同時第二微處理器（3 0 )將會中斷供應予I C卡連接 介面（40)之工作電壓。 M246733 而前述第一微處理器（2 Ο )即經由串列傳輸介面（ 2 1 )與中央健保局之終端機構成連線，進行兩者之間的 資料傳遞驗算。 請參考第二圖所示，當遠端終端機第一次與本創作之 讀卡裝置連線時，雙方必須取得同步信號以進行資料傳遞 。終端機之驅動程式係下達初始化指令予讀卡裝置以取得 同步，再下達連結（link)命令以作爲雙方加解密金鑰同步之 動作，此時讀卡裝置之序號係回傳予終端機’以產生出第 一組 Session key 〇 當第一組Session key建立後’終端機與讚卡機之間即 用此作加解密動作。爾後每當終端機下達取得讀卡機時間 命令而由讀卡機傳回時間資料後，終端機與讀卡機雙方都 必須依照下述方法重新產生新的Session Key’以作爲下一 次傳輸時資料加解密之用。M246733 顾 _GuXun [Technical Field of New Type] This creation relates to a card reader, especially a card reader used in health insurance IC cards. [Previous technology] The National Health Insurance system has been implemented by the government for many years. However, when the insurer visits a clinic or hospital, he uses a paper card-type health insurance card as a voucher. The back of the card is printed with several grids. The clinic or hospital printed the certificate as a voucher for medical records, but there is a limit on the number of uses. When the number of cells is used up, it is necessary to replace the new card. This is often a waste of manpower. Once the number of patients and the content of the visit must be counted In order to obtain fees from the Central Health Insurance Bureau as a clinic or hospital, it leads to a large amount of manpower investment and the data is easy to be wrong, and it is necessary to improve it. In view of this phenomenon, the government has officially launched the IC health insurance card since 1992. The background information of the insurer can be recorded in the IC card chip. When the IC health insurance card is used for insurance, you can pass the health insurance bureau. The computer terminal records the number of visits and related information of the insurer in the computer, which not only saves time and effort, but also makes the data less prone to errors. However, when the public takes an IC card for medical treatment, they must use an intermediate interface to contact the medical unit and the Central Health Insurance Bureau. Therefore, it is necessary to be able to read the pre-recorded data in the IC card and a reading device with a data verification function. facility. As far as the reading device of the used IC card is concerned, it is simply responsible for reading and writing M246733 and transmitting data. In the process, there is no guarantee that the data on the IC card will not be leaked. Personal data, so the confidentiality of the data must be carefully considered; in addition, the card reader must be connected to the Health Insurance Bureau at the same time, so the data transmission and computing efficiency must also maintain a certain speed. [New content] In view of this, the main purpose of this creation is to propose a health insurance IC card reader device, which can read and verify the internal data of the health insurance IC card, and at the same time ensure that no leakage will occur during the data transfer process. In order to achieve the foregoing purpose, the card reader device of this health insurance IC card includes: a first microprocessor connected to the central health insurance bureau through a serial transmission interface circuit; a memory connected to the first microcomputer The processor stores a data verification program in the memory to analyze the basic data in the health insurance IC card; a second microprocessor is connected to the first microprocessor and the plurality of IC card interfaces, and the second micro processing The device reads the internal data of the health insurance IC card through the aforementioned IC card interface, and then analyzes the internal data of the IC card. A display unit is connected to the output terminal of the first microprocessor to display the operation status of the card reading device. The first microprocessor is mainly responsible for communication and data processing between the card reader and the terminal of the Central Health Insurance Bureau, while the second microprocessor controls the calculation and verification of pre-recorded data on the health insurance IC card. The division of work of the microprocessor greatly improves the overall operation efficiency of the card reading device. M246733 Another purpose of this creation is to provide a health insurance IC card reader device with a backup power supply. A backup battery is installed inside the card reader device. When the power supply is normally supplied, it can be charged and stored, so that when the power supply is abnormal Provide a stable working voltage to keep the card reader working continuously. [Embodiment] As shown in the first figure, the creative health insurance IC card reader mainly includes a power supply unit (10), a first microprocessor (20), and a second microprocessor (30). , A plurality of IC card connection interfaces (40) and a display unit (50). The power supply unit (10) provides a voltage of 5 volts for the operation of the entire device. At the same time, when the external power supply is abnormal, it can also provide a stable DC working voltage so that the card reader will not interrupt operation. The power supply unit (1 0) has a power selection circuit (1 1), the first input end of which is connected to a DC power input end (1 3) through a power detector (1 2), and the second input The terminal is directly connected to the DC power input terminal (1 3). In addition, a battery charging circuit (1 4) is connected to the output end of the power detector (1 2) to charge a battery (1 5), and the output of the battery (1 5) is returned to the power source selection. When the third input terminal of the circuit (1 1) uses the battery (1 5) as the power supply device, its output voltage will be converted into a voltage output required by the device through a voltage conversion circuit (16). When the power detector (1 2) detects that the input voltage of the DC power input terminal (1 3) is normal, it is only necessary to control the power selection circuit (1 1) to directly output this DC voltage; if the power is abnormal, switch to The battery M246733 (15) is a power supply device. At this time, the 3 · 6 volt output of the battery (15) is converted to 5 volts by the aforementioned voltage conversion circuit (16). The first microprocessor (20) is connected to a terminal (not shown in the figure) of the Central Health Insurance Bureau through a serial transmission interface (21) and a serial transmission port (22). A microprocessor (20) is connected to a memory (24) through a first-level latch circuit (23). In addition, the first microprocessor (20) is connected with a real-time clock IC (25) to obtain real-time time data represented by six bytes. In addition to being connected to the first microprocessor (20), the second microprocessor (30) is connected to a plurality of IC card connection interfaces (40) to read basic data stored inside the IC card. In addition, the output terminal of the first microprocessor (20) is connected to the display unit (50), and the display unit (50) is used to display the working status of the card reading device. The operation of the aforementioned circuit is as follows: When the second microprocessor (30) detects that a card is inserted in the IC card connection interface (40), the second microprocessor (30) will perform a card operation. The procedure for performing RESET is that the user ’s code and digital personal data are pre-programmed on the 1C card. If the second microprocessor (30) can determine the card code through the RESET program, it represents a legal card. The personal basic information inside the card will be passed to the second microprocessor (30) for further analysis. Conversely, if the format of the card cannot be recognized, it means a fake card, and the second microprocessor (30) will interrupt the working voltage supplied to the IC card connection interface (40). M246733, and the first microprocessor (20) is connected to the terminal of the Central Health Insurance Bureau through the serial transmission interface (21) to perform data transfer verification between the two. Please refer to the second figure. When the remote terminal is connected to the card reader of this creation for the first time, both parties must obtain a synchronization signal for data transfer. The driver of the terminal sends an initialization instruction to the card reader to obtain synchronization, and then issues a link command as an action for the encryption and decryption keys of both parties to synchronize. At this time, the serial number of the card reader is passed back to the terminal. Generate the first set of session keys. When the first set of session keys is established, the terminal and the Zanka machine use this as the encryption and decryption action. Whenever the terminal issues a time command to the card reader and the time data is returned by the card reader, both the terminal and the card reader must re-generate a new Session Key according to the following method as the data for the next transmission For encryption and decryption.
Session Key之產生係由讀卡裝置之序號及一即時時鐘 之時間編碼組成，以下爲Session Key之演算方式： (SN_Byte 3，SN-Byte 0，SN-Byte 2，SN_Byte 1，RND-A， RND-B, CSN-Byte 05 CSN-Bytel) XOR (RTC Byte 0, RTC-The generation of the session key consists of the serial number of the card reader and the time code of a real-time clock. The following is the calculation method of the session key: (SN_Byte 3, SN-Byte 0, SN-Byte 2, SN_Byte 1, RND-A, RND -B, CSN-Byte 05 CSN-Bytel) XOR (RTC Byte 0, RTC-
Byte 1，RTC-Byte 2, RTC Byte 3, RTC-Byte 4, RTC-Byte 5 CRTC-Byte 1, CRTC Byte 0) 當兩組資料經邏輯運算X 0 R後，所得到的8位元^組 資料即爲新的Session Key。其中前述各符號所代表的章義 如下： SN-Byte X :讀卡機號之第X位元組。 M246733 CSN-Byte χ :讀卡機之第x位元位之二進位補數。 RTC-Byte X :即時時鐘之第X位元組。 CRTC-Byte χ :即時時鐘之第χ位元組之二進位補數。 前述SN-Byte χ即CSN-Byte χ的取得方式，係當終端 機下達連結指令（LINK)後，由讀卡裝置回應共12位元組的 資料（前4位元組爲讀卡裝置序號，中間6位元組爲即時時 鐘（2 5 )之時間，後2位元組爲讀卡機產生之亂數）。 由前述詳細說明可知，本創作之健保I C卡讀卡裝置 ，除提供一健保局與民眾就診單位兩者之間的資料傳遞橋 樑外，更賦予資料於傳遞過程中一加解密程序，以確保I C卡內部所存之個人資料不致外洩，再者藉由雙微處理器 的分工設計，將使得讀卡機與健保局兩者之連線作業效率 大爲提高，更見其進步性與實際應用性，係符合發明專利 之申請要件，爰依法具文提出申請 【圖式簡單說明】 (一） 圖式部分 第一圖··係本創作之電路方塊圖。 第二圖：係本創作之資料驗算流程圖。 (二） 元件代表符號 (1 0 )電源供應單元（1 1 )電源選擇電路 (1 2 )電源偵測器 （1 3 )直流電源輸入端 (1 4 )電池充電電路（1 5 )蓄電池 (1 6 )電壓轉換電路 (2 0 )第一微處理器（2 1 )串列傳輸介面 M246733 (2 2 )串列傳輸埠 （2 3 )栓鎖電路（latch) (2 4 )記憶體 （2 5 )即時時鐘I C (Real time clock IC ) (3 0 )第二微處理器（4 0 ) I C卡連接介面 (5 0 )顯示單元Byte 1, RTC-Byte 2, RTC Byte 3, RTC-Byte 4, RTC-Byte 5 CRTC-Byte 1, CRTC Byte 0) When the two sets of data are logically calculated by X 0 R, the resulting 8-bits ^ group The data is the new Session Key. The chapters represented by the aforementioned symbols are as follows: SN-Byte X: The Xth byte of the reader number. M246733 CSN-Byte χ: The two's complement of the xth bit of the card reader. RTC-Byte X: Xth byte of the real-time clock. CRTC-Byte χ: The two's complement of the χth byte of the real-time clock. The foregoing method of obtaining SN-Byte χ, ie, CSN-Byte χ, is that when the terminal issues a link command (LINK), the card reader responds to a total of 12 bytes of data (the first 4 bytes are the serial number of the card reader, The middle 6 bytes are the time of the real-time clock (2 5), and the last 2 bytes are the random number generated by the card reader). As can be seen from the foregoing detailed description, in addition to providing a data transmission bridge between the health insurance bureau and the public consultation unit, the health insurance IC card reading device of this creation also gives the data an encryption and decryption process during the transmission process to ensure the IC The personal data stored inside the card will not be leaked. Furthermore, the division of labor by the dual microprocessor design will greatly improve the efficiency of the connection between the card reader and the health insurance bureau, and it will be more progressive and practical. It is in accordance with the application requirements of the invention patent, and the application is submitted according to the law. [Schematic description] (a) The first diagram of the diagram part is the circuit block diagram of this creation. Figure 2: The flow chart of the data verification of this creation. (2) Symbols of components (1 0) Power supply unit (1 1) Power selection circuit (1 2) Power detector (1 3) DC power input terminal (1 4) Battery charging circuit (1 5) Battery (1 6) Voltage conversion circuit (2 0) first microprocessor (2 1) serial transmission interface M246733 (2 2) serial transmission port (2 3) latch circuit (latch) (2 4) memory (2 5 ) Real time clock IC (3 0) second microprocessor (4 0) IC card connection interface (50) display unit