WO2001022359A1

WO2001022359A1 - Non-contact ic card

Info

Publication number: WO2001022359A1
Application number: PCT/JP1999/005201
Authority: WO
Inventors: Mitsuo Uetake
Original assignee: Fujitsu Limited
Priority date: 1999-09-22
Filing date: 1999-09-22
Publication date: 2001-03-29

Abstract

A non-contact IC card is provided with an unauthorized access indicator (7). This unauthorized access indicator (7) judges that a radio wave making an access to an IC chip (1) without following a predetermined procedure is an unauthorized access. When the IC chip (1) judges that it receives an authorized access, it causes a light emitting diode (8) packaged in a card body (4) to emit light and illuminate a window (9) of an optical color changing material formed in the card surface. As a result, the color of the window (9) changes, so that the card owner can recognize at a glance that card receives an unauthorized access unknowingly when the owner takes out the card from the bag or the like. Therefore, after having recognized the reception of the unauthorized access, the owner can take the necessary procedure promptly to ask a reissue or the like of the card.

Description

Details Non-contact type IC card Technical field

The present invention relates to a contactless IC card. Background art

Non-contact IC cards are used as portable data storage media with high security functions for various applications (for example, card media for electronic money, key media for entry and exit, identification cards for various local government service systems). Media · It is beginning to be used for card media for transportation tickets and card media for personal identification for financial transactions such as credit approval.

In particular, non-contact IC cards are superior to contact IC cards in terms of mechanical strength and environmental friendliness, because they have no electrical contacts. There are many applications such as key media for gates.

In a conventional non-contact IC card, in a non-contact IC card reader / writer opposed to a non-contact IC card, interference occurs when there are multiple different similar non-contact IC cards in the same space. A so-called anti-collision function has also been implemented to prevent interruptions in data transfer.

FIG. 1 is a diagram illustrating an example of the anti-collision function.

It is assumed that N01 to N03 noncontact IC cards exist in a radio wave space formed by radio waves radiated from the reader / writer for the noncontact IC card. When detecting the presence of a non-contact type IC card, the reader / writer for the non-contact type IC card allocates a time slot, that is, a data transmission timing, to each non-contact type IC card, and assigns this to each non-contact type IC card. Notify the card. For example, time slot T A No 1 contactless IC card is assigned to SI, a No 2 contact card is assigned to time slot TS2, and a No 3 contactless IC card is assigned to time slot TS3. Each non-contact type IC card that receives this information interprets the information with the built-in IC and transmits the data at the timing allocated to itself, so that one non-contact type IC card Even if there are multiple non-contact type IC cards in the radio wave space formed by the IC card reader / writer, data can be exchanged without interference.

If there is only one non-contact type IC card in the radio wave space, communication is automatically started with the non-contact type IC card reader and the necessary data exchange is performed if the communication distance is within the range.

Conversely, non-contact IC card reader / writers that are not legal and non-contact IC card reader / writers with the same electrical and radio specifications as the relevant non-contact IC card reader / writer are in non-contact with the radio wave space from other unauthorized contactless reader / writers. With the presence of a type IC card, the same communication as that of the original non-contact type IC card reader / writer was realized, and data communication with the original non-matching reader / writer was sometimes possible.

This means that if a malicious third party realizes the radio wave space according to the operating specifications of the contactless IC card, the contactless IC card will be independent of the intention of the holder of the contactless IC card. This indicates the possibility of controlling access to the data in the card, and it cannot completely prevent unauthorized use of the built-in data by alteration / falsification, etc. by a third party.

FIG. 2 is a diagram showing the structure of a conventional non-contact type IC card.

FIG. 2A is a diagram showing the actual configuration of the non-contact type IC card, and FIG. 2B is a diagram showing an electrical equivalent circuit of the non-contact type IC card.

As shown in FIG. 2A, the non-contact type IC card has an IC chip 1 embedded in a card body 4 and an antenna coil 2 attached thereto. I

C chip 1 records necessary information such as ROM and EEPROM in addition to CPU. It also includes a memory for storing. When the non-contact type IC card is brought close to the opposing reader / writer for the non-contact type IC card, the radio wave radiated from the reader / writer for the non-contact type IC card is received by the antenna coil 2. As shown in Fig. 3 (b), the antenna coil 2 forms a resonance circuit in cooperation with the capacitance component 3 of the antenna coil 2. Therefore, if the radio wave radiated from the reader / writer for the non-contact type IC card has the same frequency as the resonance frequency of this resonance circuit, a resonance voltage is generated in the antenna coil 2 and the power is applied to the IC chip 1. Will be supplied. The supplied IC chip 1 starts the stored program, interprets data transmitted according to a predetermined protocol, and communicates with a reader / writer for a non-contact type IC card.

In the conventional technology, for unauthorized access from a contactless IC card reader / writer that is not a legitimate system that a third party has maliciously approached, power / data can be exchanged without any problem in terms of electric field strength When this is realized, there is no response at all because the program code on the IC chip 1 operates only in the original system. However, there is the problem that if a malicious third party knows the communication protocol of the system, it can easily access the contactless IC card and falsify the contents.

Such a problem becomes a serious problem when the contactless IC card is used in fields such as electronic money. That is, assuming that the amount of electronic money held by the holder of the contactless IC card is recorded, the holder usually puts the contactless IC card in a line or a pocket. If the holder is exposed somewhere to the radio waves emitted by the illegal reader / writer for the contactless IC card, the amount in the contactless IC card is rewritten while the holder is unaware. There is a possibility that it will be done. In order to solve this problem, it is known to prevent unauthorized access by checking access keys, PINs, and so on.

However, such measures can prevent unauthorized access. Even so, the card user cannot be aware of such unauthorized access attempts. Therefore, there is no way to know when and where the non-contact type IC card of the holder has been illegally accessed, and there is a problem that it is not possible to take measures such as immediately detecting / tracking the unauthorized device or the user of the device. Disclosure of the invention

In view of the above problems, the present invention considers the fact that unauthorized access from a third party is performed without the knowledge of the contactless IC The unauthorized access display function clearly indicates that the owner of the non-contact type Ic card who received the unauthorized access was aware of the unauthorized access and took an early action to receive the unauthorized access. To prevent disruption of social systems and loss of credibility of social systems by contactless IC cards.

That is, the object of the present invention is to provide a non-contact type IC card

The purpose is to provide a function that distinguishes between legitimate access and unauthorized access, and to provide a contactless IC card that can clearly indicate to the holder if an unauthorized access is received.

The contactless IC power supply of the present invention has an antenna means for receiving power and a signal from a transmitted radio wave, and is activated by the power obtained by the antenna means, and access by the signal is predetermined. If the procedure is not performed, processing means for determining that the access is an unauthorized access; recording means for recording that there has been an unauthorized access if the processing means determines that the access is unauthorized; And unauthorized access display means for providing a display that can be viewed by the holder when an unauthorized access is recorded.

Conventionally, radio waves with a frequency that matches the resonance frequency of the antenna means have been vulnerable to unauthorized access to unauthorized readers and readers for non-contact IC cards that are accessed using a predetermined protocol. In the invention, a predetermined By transmitting a procedure, for example, a system identifier or a hardware identifier, and checking this in the IC card, it is possible to judge whether or not the access is unauthorized. Therefore, an unauthorized access can be detected. In addition, by displaying this on the unauthorized access display means, the IC card holder can know the existence of the unauthorized access explicitly indicated, and promptly perform the procedure for reissuing the card. be able to. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram illustrating an example of the anti-collision function.

FIG. 3 is a diagram showing a structure of a non-contact type IC card which is displayed abnormally on the unauthorized access display device according to the embodiment of the present invention and which can be visually checked.

FIG. 4 is a diagram illustrating an outline of an operation of displaying an abnormality on the unauthorized access display device according to the present embodiment.

FIG. 5 is a flowchart showing a schematic processing flow of the embodiment of the present invention. _C FIG. 6 is a more detailed flowchart of the processing of the embodiment of the present invention using the system ID.

FIG. 7 is a diagram showing another embodiment of the unauthorized access display device.

FIG. 8 is a diagram showing still another embodiment of the unauthorized access display device. BEST MODE FOR CARRYING OUT THE INVENTION

In the embodiment of the present invention, when the non-contact type IC card performs communication with the opposing non-contact type IC force reader / writer, the unauthorized access display device mounted on the surface of the non-contact type IC card becomes It does not work, but a malicious actor from a reader / writer for a non-contact type IC card of a different shape / system brought by a third party with malicious intent Power / data can be transmitted / received with no problem in terms of electric field strength. Abnormal access that does not follow the procedure of the program code for the CPU built in the non-contact IC card and the CPU built in the ROM. If there is, an error is displayed on the programmable detection switch and the unauthorized access display device, which are programmed and function as a system so that the error is detected in the user data area in the EEPROM. A contact type IC card reader and a non-contact type IC card reader / writer system will be established. In the unauthorized access display device itself, for example, when the CPU of the non-contact type IC card is operated, the light emitting diode built in the IC card emits light, thereby discoloring the paint on the window painted on the upper surface thereof. Display windows with such materials should be installed, and even if the non-contact type IC card is far away from the reader / writer, the illegal display function itself is persistent and cannot be changed. As a result, non-contact ICs of different shapes / systems that are approached maliciously by a third party, regardless of the intention of the holder of the non-contact IC card that has been unauthorizedly accessed if this function operates Inform the holder of unauthorized access from the force reader / writer.

Alternatively, if the non-contact type IC card communicates with the opposing non-contact type IC card reader / writer, the unauthorized access display device mounted on the surface of the non-contact type IC card does not operate, but Unauthorized access from a reader / writer for a non-contact type IC card of a different shape / system that the three parties approached with malicious intent can transmit and receive power / data without any problem in terms of electric field strength. When an abnormal condition is detected in the user data overnight area in the EEPROM according to the procedure of the built-in CPU and the program code for the CPU built in the ROM, an abnormal display is displayed on the unauthorized access display device, and visual confirmation is performed. Use a structure that is possible.

As a result, if this function operates, the contactless IC card Unauthorized devices can be notified of unauthorized access from a reader / writer for a non-contact type IC card of a different shape / system brought by a third party with malicious intent. Such measures can be taken promptly.

As shown in FIG. 1A, the non-contact type IC card of this embodiment has an IC chip 1 embedded in a card body 4 and is connected to the IC chip 1 to be provided with an antenna coil 2. Provide an unauthorized access display device 7 on the surface of the main unit 4 _(When a non-contact IC card receives radio waves from a reader / writer for a non-contact IC card that is not opposed to the non-contact IC card owned by the holder, The antenna coil 2 resonates with the capacitor 3 ((b) in the same figure) and receives power. <This activates the IC chip 1. The IC chip 1 is recorded in the internal ROM or the like. If the communication protocol is different, the IC chip 1 cannot interpret the transmitted data, so no response is received. No, so within IC chip 1 However, if a malicious third party knows the communication protocol of the contactless IC card, there is a possibility that unauthorized access may be made to the IC chip 1. Therefore, the IC chip 1 uses a built-in program to detect whether or not the transmitted data is accessed according to a predetermined procedure, and determines whether the access is an illegal access or an authorized access. If it is determined that the access is unauthorized, communication is performed normally, but if it is determined that the access is unauthorized, the IC chip 1 supplies a current to the light emitting diode 8 to emit light. The color of the window 9 is changed by irradiating the light 8 from the photochromic material onto the window 9 (provided on the card surface) The window 9 made from the photochromic material is a light-emitting diode 8 Of the light emitted by It is configured to respond to light of a specific wavelength. It should be configured so that it does not react to the light in the surrounding environment such as sunlight or fluorescent lights, but only to the light of the light-emitting diode 8. This allows the contactless IC card holder to visually confirm the unauthorized access by seeing the discoloration of this window even after unauthorized access. Necessary actions can be taken promptly.

Here, the light emitting diode and the photochromic window 9 are shown as the unauthorized access display device, but they can be realized by other methods as described later. FIG. 4 is a diagram illustrating an outline of an operation of displaying an abnormality on the unauthorized access display device according to the present embodiment.

Data that does not include the procedures that would have to be performed with a valid non-contact IC card reader / writer between the non-contact IC card reader / writer that accessed the non-contact IC card owned by the holder. When the communication is performed, the CPU in the non-contact type IC card records, for example, as an illegal operation mode in the user data overnight area in the EEPROM, for example, in accordance with the program code for the CPU stored in the ROM (step). S 1). Then, the CPU accesses the user data area in the EEPROM and determines whether or not the illegal operation mode is recorded. If the illegal operation mode has been recorded, the CPU turns on the light emitting diode for the illegal access display device (step S 2), so that the window made of the photochromic material on the card surface changes color and unauthorized access is performed. Is displayed (step S3). If the photochromic material is discolored by receiving light once, the color condition is maintained, and the holder must first look at the window on the card surface after unauthorized access. You can know that it was illegally accessed when In the above embodiment, the presence or absence of unauthorized access to the non-contact type IC card can be visually identified at a glance, so that the non-contact type IC card is inadvertently contacted with an invalid non-contact type IC card reader. A function that allows you to immediately discover that you have exchanged overnight Can be realized.

Therefore, by detecting unauthorized access from a third party without the knowledge of the owner, the disruption of the social system and the loss of reliability of the social system due to the contactless IC card are prevented. The effect is great.

Also, if it is determined that the access is unauthorized, the CPU cuts off the communication, thereby preventing the information on the IC card from being rewritten without permission.

5, _t is a flowchart showing a general flow of processing of a embodiment of the present invention First, at step S 5, the non-contact type IC card owned by the holder senses waves. Then, power is supplied to the IC chip and the CPU is started. Next, in step S6, the CPU detects system fixed information from the information carried on the received radio wave. The information fixed to the system is, for example, an identifier such as a hardware serial number of a non-contact type IC card reader / writer that transmits radio waves. Then, in step S7, the CPU searches for the identifier of the reader / writer for the contactless IC card to which access is permitted, written in the ROM or the like, and determines whether or not the received identifier is included. . As a result, it can be determined whether or not the access is valid. Alternatively, instead of a hardware serial number, when constructing a contactless IC card system, a system ID uniquely assigned to each system may be used as an identifier.

If it is determined in step S7 that the access is valid, normal IC card data processing is performed in step S9. On the other hand, if it is determined in step S7 that the access is unauthorized, the unauthorized access is displayed as described above, and the process ends.

FIG. 6 is a more detailed flowchart of the process of the embodiment of the present invention using the system ID. First, in step SI0, the IC card detects reception of a radio wave. At this time, the radio wave detection flag indicating that radio waves are being detected in the EEPROM or the like should be set to ON. Then, at the start of the information transfer, the fixed information of the system is detected (step S11). In the case of this embodiment, the system code (or system ID) transmitted from the accessing reader / writer is detected _(the system code is used to identify the reader / writer and the system stored in the IC card for each system). Information.

Next, in step S12, it is determined whether a system code has been detected. If no system code has been detected, it is determined in step S15 that an unauthorized access has been made, and an unauthorized operation mode flag is set in the EEPROM. Then, in step S16, the light emitting diode for the unauthorized access display device is caused to emit light, and the color of the window on the surface of the force is changed. Then, in step S17, the radio wave detection flag is set to OFF, and the process ends.

If it is determined in step S12 that a system code has been detected, in step S13, it is determined whether the system code matches the one in the card. Proceeding to step S17, the radio wave detection flag is set to 0FF, and the process ends. If it is determined in step S13 that the system codes match, normal IC card data processing is performed in step S14, and when the processing ends, the entire processing ends.

Although an example using a light-emitting diode and a photochromic window as an unauthorized access display device has been described here, a display device having another configuration can be used as described below.

Further, the system code may be a serial number of each hardware as described above. In this case, the CPU in the IC card stores the serial number recorded in the ROM in step S13. It is determined whether or not the transmitted serial number is included. FIG. 7 is a diagram showing another embodiment of the unauthorized access display device.

As shown in FIG. 1A, the non-contact type IC card includes an unauthorized access display device 7 ′ and a solar cell 15 in addition to the IC chip 1 and the antenna coil 2. The power is supplied for displaying the unauthorized access display device 7 '. As shown in FIG. 13B, the unauthorized access display device 7 ′ according to the present embodiment is constituted by a character display (character display unit). If an unauthorized access is made, the fact is indicated. Display on a character basis.

When detecting an unauthorized access, the IC chip 1 sets a flag indicating that an unauthorized access has been made to an internal EEPROM or the like. Then, when the holder of the IC card removes the card from the torch or the like, the solar cell 15 supplies power to the character display unit (illegal access display device) 7 '. At the same time, the solar cell 15 also supplies power to the IC chip 1 so that the IC chip 1 can send a control signal to the character display section 7 '. The CPU of the IC chip 1 detects the flag of the EEPROM and, if there is an unauthorized access, indicates that there has been an unauthorized access.

In such a configuration, the photovoltaic cell 15 generates power when the IC card is taken out of the IC card or the like, and supplies power to the IC chip 1 and the character display section 7 ′ for comparison. Enables the operation of the character display section 7 'such as a liquid crystal panel that consumes electrical power. According to this, the owner can more clearly recognize that the unauthorized access has been made, and if the time of the unauthorized access is displayed on the unauthorized access display, the owner can know where the unauthorized access was made. I can let you know.

FIG. 8 is a diagram showing still another embodiment of the unauthorized access display device.

As shown in FIGS. 7A and 7B, the IC card is provided with an unauthorized access display device 7 ″ in addition to the antenna coil 2 and the IC chip 1. Unauthorized access display device 7 '' is for heating 20, window 24, coil panel 22, 23, and color The board is made up of 2 1. When no unauthorized access has occurred, the coil panels 22 and 23 hold the colored plate 21 in a position invisible from the window 24. When unauthorized access occurs, IC chip 1 applies voltage to heater 20 and generates heat from heater 20. The coil panels 22 and 23 are made of very thin thread-like metal, and can be burned off with little heat. Therefore, the coil panel 22 is burned off by the heat generated by the heat sink 20. As a result, the colored plate 21 is pulled by the coil panel 23 and moves to the position of the window 24. . This allows the window to see a different color than if there was no unauthorized access.

Therefore, the owner can determine whether or not there has been unauthorized access based on the change in the color seen through the window. Industrial applicability

According to the present invention, it is possible to visually indicate on a card that a third party has illegally accessed the non-contact type IC card, and to clearly indicate that the holder has illegally accessed the card. Therefore, the reliability of the non-contact type IC card can be improved, and the non-contact type IC card can be used for applications requiring reliability.

Claims

The scope of the claims

1. Antenna means for receiving power and signals from transmitted radio waves,

Processing means for activating by the power obtained by the antenna means and judging the access as an unauthorized access when access by the signal does not perform a predetermined procedure;

An unauthorized access display means for displaying a display which can be visually recognized by the holder when the processing means determines that the access is unauthorized;

A non-contact type IC card comprising:

2. The non-contact type IC card according to claim 1, further comprising a recording unit that records that the unauthorized access has been made when the processing unit determines that the access is unauthorized. .

3. The unauthorized access display means is made of a light emitting diode and a photochromic material. It comprises a window provided on the surface of the IC card, and the light emitting diode irradiates the window with light to close the window. 2. The non-contact type IC card according to claim 1, wherein the fact that an unauthorized access is made is displayed by discoloring.

4. The unauthorized access display means includes a solar cell and a character display unit, and when there is an unauthorized access, the power of the solar cell is used to inform that the character display unit has been accessed illegally. The non-contact type IC card according to claim 1, wherein the non-contact type IC card is displayed.

5. The non-contact type IC card according to claim 4, wherein the character display section is constituted by a liquid crystal panel.

6. The unauthorized access display means includes a colored plate, at least one coil panel for holding the colored plate, a window for burning the at least one coil panel, and a window capable of displaying a color. If there is an unauthorized access, the burner burns off the coil panel, thereby changing the position of the colored plate and changing the color seen through the window. The non-contact type IC card according to item 1.

7. The method according to claim 1, wherein the processing unit determines that the access is unauthorized when the accessed signal does not include an identifier unique to the contactless IC card system. Non-contact type IC card according to the item.

8. The processing means determines that the access is unauthorized if the accessed signal does not include an identifier of hardware that is allowed to access the contactless IC card. The non-contact type IC card according to claim 1, wherein: