JP2004348345A - Ic card and ic card processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To manage expiry time of authentication of a card holder on an IC card using a timer function which operates even without power supply. <P>SOLUTION: The IC card with a batteryless timer is structured so that the expiration (time) of the authentication of the card holder is managed and controlled by the IC card itself even in a period without power supply on an IC card processing system. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card and an IC card processing system capable of performing a password collation internally and performing various transactions when the collation result is satisfactory.
[0002]
[Prior art]
Today, there is a trend to use IC cards in the banking and credit industries. This is because the IC card maintains high security with respect to the data inside the card. In particular, the difficulty of falsification of the data inside the card by another person (third party) is one of the factors for selecting the IC card. is there. However, even if the security of the IC card is high, a problem occurs if the IC card can be easily used by another person. It is a so-called "spoofing" crime.
[0003]
Therefore, in general, when purchasing a product with an IC card, a four-digit personal identification number (PIN) is input to confirm the card holder (person). Since the PIN is information that only the cardholder can know, the cardholder is authenticated. The focus of thought is the same as that of ATMs of banks.
[0004]
However, it is troublesome to enter a PIN every time a product is purchased with an IC card.
[0005]
For example, when shopping is continuously performed in a shopping mall, a tenant building, or the like, the user feels a question as to whether a PIN has been input when purchasing at the next store, and whether the PIN must be input again.
[0006]
Therefore, an IC card and a system having a function of exempting the cardholder from being authenticated for a certain period of time (PIN protection) have been devised. When a cardholder first purchases a product or registers a card with a device that performs a PIN protection process, the cardholder can purchase the product without entering a PIN for a certain period of time. Actually, the current time information and the valid time are received from the POS terminal and the device that performs the PIN protection processing, and the IC card stores the information. When purchasing the product, the purchase time is received from the POS terminal, and the validity stored earlier is stored. If it is within the time, it is determined that the PIN input is unnecessary, and the determination is returned to the POS terminal, and the card holder can purchase the product without inputting the PIN. Conversely, if it is outside the valid time, the card requests the POS terminal to input a PIN (for example, see Patent Document 1).
[0007]
The problem with this system is that
-"Spoofing" by another person is possible within the valid time.-The time of the POS terminal in the system also causes a difference in the expiration date.
Is mentioned. In the former case, the generation of "spoofing" can be reduced by shortening the effective time. However, with regard to the latter, if the system is small, the maintenance and monitoring of each POS terminal is also noticeable, and the time does not differ for each terminal. However, as the system becomes larger, the maintenance and monitoring of the POS terminal becomes more difficult. It can be considered that the time greatly differs for each POS terminal, or in the worst case, the time of the POS terminal is changed by a malicious administrator. By the way, in this system, if the time of the POS terminal is delayed, the effective time of the PIN protection becomes longer.
[0008]
Based on these facts, it is considered necessary to provide a card that has a timer in the IC card itself and does not affect the time of the POS terminal, and the card itself can manage the validity time of the authentication of the card holder. However, since the IC card does not always have a power source and is supplied with power from a reader / writer R / W such as a POS terminal, it is also required that the timer be batteryless.
[0009]
[Patent Document 1]
JP-A-2000-105788.
[0010]
[Problems to be solved by the invention]
SUMMARY OF THE INVENTION It is an object of the present invention to provide an IC card and an IC card processing system that can use a timer function that operates even when power is not supplied and that can manage the effective time of cardholder authentication.
[0011]
[Means for Solving the Problems]
An IC card according to the present invention includes a nonvolatile memory for storing a password and the like, and a control element for verifying the card holder by comparing the password stored in the nonvolatile memory with a password supplied from an external device. A timer function that operates even when power is not supplied, and a timer function that operates even when power is not supplied, when the power is supplied and the card holder is authenticated by the password collation. A timer means for counting the cardholder's authentication valid time by the timer function, and when the power is supplied and the cardholder's authentication is instructed from the outside, the clocking time by the clock means is the authentication valid time. And output means for outputting the authentication to the outside without password collation.
[0012]
An IC card system according to the present invention includes a nonvolatile memory for storing a password and the like, and a control element for verifying the card holder by comparing the password stored in the nonvolatile memory with a password supplied from a terminal. And an IC card that operates by power supply from a terminal, and a terminal that handles the IC card, wherein the terminal supplies power to the IC card, and supplies power to the IC card. Setting means for setting a password based on a password request from the IC card; transmitting means for transmitting the password set by the setting means to the IC card; and responding to the transmission of the password by the transmitting means. When the authentication is supplied from the IC card, when the power is supplied by the supply unit, or when the authentication is supplied from the IC card, the process is executed. A timer circuit which operates even when power is not supplied to the IC card; and a timer circuit when the power is supplied and the card holder is authenticated by the password collation. A clock means for counting the cardholder's authentication valid time by a circuit; and the power is supplied, and when the cardholder's authentication is instructed from the terminal, the clocking time by the clock means is within the authentication valid time. In this case, it comprises output means for outputting authentication to the terminal without password collation.
[0013]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an IC card processing system according to an embodiment of the present invention will be described with reference to the drawings.
[0014]
[First Embodiment]
As shown in FIG. 1, this IC card processing system includes a personal computer (PC) 1 as a higher-level device (POS terminal) and an IC card 4 as a transaction target card that is connected to the PC 1 by wireless or the like. I have.
[0015]
The PC 1 includes a control unit 5 that controls the entire PC 1, a memory 6 in which a control program is stored and various data are stored, and an operation unit such as a bar code reader for reading a keyboard sleeping product for instructing operation. 7, a display unit 8 on which operation guidance and the like are displayed, and a communication interface (reader / writer) 9 for supplying power while exchanging data with the IC card 4.
[0016]
As shown in FIG. 2, the IC card 4 stores a CPU (control element) 11 for controlling the entire IC card 4, a coprocessor 12 for assisting the CPU 11, and a program for controlling the internal operation of the card. A mask ROM (program memory) 13, a transmission / reception buffer for messages exchanged with the PC 1, a RAM (working memory, volatile memory) 14 used as a temporary storage buffer for data being processed by the CPU 11, and read / write contents of the contents by application operation Memory (non-volatile memory, NVROM, EEPROM) 15 for storing operation data used for communication, a communication interface (UART) 16 for exchanging data with the PC 1 and supplying power, no power supply Battery-less timer circuit 17 which also operates It is constituted by a timer interlocked bit portion 18 that flag is set in conjunction with the state of the timer circuit 17. Examples of the application programs are bank transaction business processing, credit transaction business processing, and prepaid transaction business processing.
[0017]
The timer interlocking bit section 18 includes a bit (I / O) interlocked with the remaining time of the timer circuit 17.
[0018]
The timer circuit 17 is a timer that operates even without power supply, and can set an arbitrary time. When the set time elapses, the timer value of the timer circuit 17 decreases and finally becomes “0”, and the set value of the timer interlocking bit unit 18 automatically changes.
[0019]
Here, this bit value means a PIN (personal identification) protection function valid bit (flag).
[0020]
This bit is set to “1” when the timer value exists in the timer circuit 17, and is set to “0” when the timer value does not exist in the timer circuit 17. However, depending on the configuration of the hardware H / W, this bit is allocated to a memory such as the NVROM 15 or the RAM 14, and when the timer value becomes “0” or when the timer value is set, the switch S / W is used. It is also possible to rewrite the bit and substitute it.
[0021]
The timer circuit 17 switches from a state in which power is supplied to a state in which power is shut off, whereby the signal level of the output signal gradually decreases due to aging, and the time until the signal level reaches a predetermined signal level is measured. Things.
[0022]
The timer circuit 17 is a field-effect device having a charge storage layer with a leak phenomenon when power is supplied.
[0023]
The timer circuit 17 is an EEPROM having a two-layer gate structure of a floating gate and a control gate.
[0024]
The timer circuit 17 is composed of a nonvolatile cell, and can set a clock time different depending on the impurity concentration of the nonvolatile cell.
[0025]
Further, the timer circuit 17 may be configured by a charging / discharging circuit including a capacitor and a resistor, and a measuring circuit for measuring a time until an output of the charging / discharging circuit decreases to a predetermined value. good.
[0026]
In such a configuration, the following cases can be considered for implementing the PIN protection function: Effective time setting timing of PIN protection function of card holder (1) A command for setting an effective time is newly created, the effective time is included in the command, and the effective time is made effective when the command processing is successful.
(2) A command for setting a valid time is newly created, and the implicit or already set valid time is valid from the time when the command processing is successful.
[0027]
(3) A function for setting an effective time is implicitly added to an existing command (a verify command or the like), and the implicit or already set effective time is made effective from the time of successful command processing. Timing of checking during valid time of PIN protection function of POS terminal This is the timing at which the POS terminal checks whether the IC card to be processed this time is during or outside of the valid time of the PIN protection function.
[0028]
(A) A command for confirming the valid time is newly created, and the valid time is confirmed from the response and the status word of the command.
[0029]
(B) The valid time is confirmed from the response and the status word of the existing command.
[0030]
3. Timing at which the valid time of the PIN protection function of the card holder ends (a) If the valid time is exceeded, the IC card automatically recognizes that the valid time has expired even if power is not supplied, and the valid time ends.
[0031]
(B) When the valid time is exceeded, the IC card recognizes that the valid time has expired at the next power supply timing, and the valid time ends.
[0032]
(C) A command for forcibly terminating the valid time is newly created, and the valid time ends when the command processing is successful.
[0033]
Next, in the above-described configuration, a process for implementing the PIN protection function (timer value of the timer circuit 17, fixed, valid time fixed) associated with the purchase of a product will be described with reference to flowcharts shown in FIGS. I will explain it. The conditions for implementing the PIN protection function are (2), (A) and (a).
[0034]
That is, a description will be given of a process when the card holder purchases a product in a plurality of tenants in the same building or a nearby building.
[0035]
[First product purchase process]
For example, at the time of purchasing a product, the card holder inserts the IC card 4 from a card insertion slot (not shown) of the POS terminal 1 (ST1). As a result, power is supplied to the IC card 4 by wireless communication between the POS terminal 1 and the IC card 4, and data is exchanged between the control unit 5 of the POS terminal 1 and the CPU 11 of the IC card 4 to perform initialization ( ATR) is performed (ST2).
[0036]
At this time, the CPU 11 of the IC card 4 sets the set value of the timer interlocking bit unit 18, that is, the PIN (personal identification) protection function valid bit (flag) to "0" because the timer circuit 17 is in the OFF state.
[0037]
Further, the operator of the POS terminal 1 sets information on a product to be purchased by using the operation unit 7.
[0038]
As a result, the merchandise purchase process starts, and a command and a response are exchanged between the POS terminal 1 and the IC card 4 (ST3, 4). During this process, the POS terminal 1 transmits a command for confirming the valid time (PIN authentication unnecessary time) to the IC card 4 (ST5).
[0039]
Next, the CPU 11 of the IC card 4 performs a confirmation process during the valid time (ST6). That is, the CPU 11 checks whether the set value of the timer interlocking bit unit 18, that is, the PIN (personal identification) protection function valid bit (flag) is "1".
At this time, when the CPU 11 confirms “0”, it determines that a predetermined time or more has elapsed since the previous authentication (out of the valid time), and sends a password request for authentication to the control unit 5 of the POS terminal 1 as a response. Transmit (ST7).
[0040]
Accordingly, the control unit 5 of the POS terminal 1 determines the authentication process based on the password based on the supplied password request (ST8), and guides the card holder to input the password using the display unit 8 (ST9). In response to this guidance, the card holder inputs a password using the operation unit 7 (ST10).
[0041]
Next, the control unit 5 of the POS terminal 1 transmits a command for performing authentication using the password to the IC card 4 (ST11).
[0042]
Thereby, the CPU 11 of the IC card 4 determines whether or not the password registered in the EEPROM 15 matches the password supplied from the POS terminal 1 (ST12). As a result of this determination, the CPU 11 of the IC card 4 transmits a response indicating the authentication result (OK or NG) by the password to the control unit 5 of the POS terminal 1 (ST13).
[0043]
When the authentication is OK, the CPU 11 of the IC card 4 starts (turns on) the time counting by the timer circuit 17 (ST14). Further, the CPU 11 sets a set value of the timer interlocking bit unit 18, that is, a PIN (personal identification) protection function valid bit (flag) to "1" (ST15).
[0044]
When the above authentication is OK, another process associated with the purchase of the product is performed by exchanging a command and a response between the POS terminal 1 and the IC card 4 (ST16, 17).
[0045]
Thereafter, with the end of the merchandise purchase processing, the IC card 4 is discharged from a card outlet (not shown) of the POS terminal 1 and returned to the card holder.
[0046]
Further, when the response of the authentication in step 13 is NG, the POS terminal 1 stops the merchandise purchase processing, guides the display through the display unit 8, ejects the IC card 4, and returns the IC card 4 to the card holder.
[0047]
[Product purchase processing for the second and subsequent times]
For example, when purchasing a product, the card holder inserts the IC card 4 from a card insertion slot (not shown) of the POS terminal 1 (ST21). As a result, power is supplied to the IC card 4 by wireless communication between the POS terminal 1 and the IC card 4, and data is exchanged between the control unit 5 of the POS terminal 1 and the CPU 11 of the IC card 4 to perform initialization ( ATR) is performed (ST22).
[0048]
Further, the operator of the POS terminal 1 sets information on a product to be purchased by using the operation unit 7.
[0049]
As a result, the product purchase process starts, and a command and a response are exchanged between the POS terminal 1 and the IC card 4 (ST23, ST24). During this processing, the POS terminal 1 transmits a command for confirming the valid time (PIN authentication unnecessary time) to the IC card 4 (ST25).
[0050]
Next, the CPU 11 of the IC card 4 performs a confirmation process during the valid time (ST26). That is, the CPU 11 checks whether the set value of the timer interlocking bit unit 18, that is, the PIN (personal identification) protection function valid bit (flag) is "1".
[0051]
At this time, when the CPU 11 confirms “1”, it determines that the authentication is within a predetermined time (3 hours) (valid time) from the previous authentication, and transmits the authentication unnecessary to the control unit 5 of the POS terminal 1 as a response (ST27). ).
[0052]
Accordingly, the control unit 5 of the POS terminal 1 determines that the password input processing is unnecessary because the supplied authentication is unnecessary (ST28).
[0053]
Thereafter, another process associated with the product purchase is performed by exchanging the command and the response between the POS terminal 1 and the IC card 4 (ST29, ST30).
[0054]
Thereafter, with the end of the merchandise purchase processing, the IC card 4 is discharged from a card outlet (not shown) of the POS terminal 1 and returned to the card holder.
[0055]
Regardless of whether power is supplied to the IC card 4, when the timer circuit 17 is turned on and a predetermined time (3 hours) has elapsed, the IC card 4 is turned off at "0".
[0056]
[Second embodiment]
In the first embodiment, the case where the valid time (PIN authentication unnecessary time) is one type has been described. However, the present invention is not limited to this, and it is possible to arbitrarily select from a plurality of valid times.
[0057]
In this case, as shown in FIG. 5, the IC card 4 includes a plurality of timer circuits 17a, 17b, 17c, and 17d having different times, and a selection circuit 31 for selecting the timer circuits 17a, 17b, 17c, and 17d to be used. Has been added.
[0058]
For example, the timer circuits 17a, 17b, 17c, and 17d are created in advance so as to be "1 minute", "10 minutes", "3 hours", and "10 days".
[0059]
Next, in the configuration as described above, the PIN protection function associated with the purchase of the product (the timer value of the timer circuits 17a, 17b, 17c, and 17d (“1 minute”, “10 minutes”, “3 hours”, “10 days”)) is selected. , The effective time) will be described with reference to the flowcharts shown in FIGS.
[0060]
That is, a description will be given of a process when the card holder purchases a product in a plurality of tenants in the same building or a nearby building.
[0061]
[First product purchase process]
For example, at the time of purchasing a product, the card holder inserts the IC card 4 from a card insertion slot (not shown) of the POS terminal 1 (ST1). As a result, power is supplied to the IC card 4 by wireless communication between the POS terminal 1 and the IC card 4, and data is exchanged between the control unit 5 of the POS terminal 1 and the CPU 11 of the IC card 4 to perform initialization ( ATR) is performed (ST2).
[0062]
At this time, the CPU 11 of the IC card 4 sets the set value of the timer interlocking bit unit 18, that is, the PIN (personal identification) protection function valid bit (flag) to "0" because the timer circuit 17 is in the OFF state.
[0063]
Further, the operator of the POS terminal 1 sets information on a product to be purchased by using the operation unit 7.
[0064]
As a result, the merchandise purchase process starts, and a command and a response are exchanged between the POS terminal 1 and the IC card 4 (ST3, 4). During this process, the POS terminal 1 transmits a command for confirming the valid time (PIN authentication unnecessary time) to the IC card 4 (ST5).
[0065]
Next, the CPU 11 of the IC card 4 performs a confirmation process during the valid time (ST6). That is, the CPU 11 checks whether the set value of the timer interlocking bit unit 18, that is, the PIN (personal identification) protection function valid bit (flag) is "1".
[0066]
At this time, when the CPU 11 confirms “0”, it determines that a predetermined time or more has elapsed since the previous authentication (out of the valid time), and sends a password request for authentication to the control unit 5 of the POS terminal 1 as a response. Transmit (ST7).
[0067]
Accordingly, the control unit 5 of the POS terminal 1 determines the authentication process based on the password based on the supplied password request (ST8), and guides the card holder to input the password using the display unit 8 (ST9). In response to this guidance, the card holder inputs a password using the operation unit 7 (ST10).
[0068]
Next, the control unit 5 of the POS terminal 1 transmits a command for performing authentication using the password to the IC card 4 (ST11).
[0069]
Thereby, the CPU 11 of the IC card 4 determines whether or not the password registered in the EEPROM 15 matches the password supplied from the POS terminal 1 (ST12). As a result of this determination, the CPU 11 of the IC card 4 transmits a response indicating the authentication result (OK or NG) by the password to the control unit 5 of the POS terminal 1 (ST13).
[0070]
Further, when the authentication is OK, the CPU 11 of the IC card 4 transmits a request for setting an effective time to the control unit 5 of the POS terminal 1 as a response (ST31).
[0071]
Thereby, the control unit 5 of the POS terminal 1 transmits a command including selection data of an arbitrary valid time to the CPU 11 of the IC card 4 in response to the supplied valid time setting request (ST32). Then, the CPU 11 of the IC card 4 controls the selection circuit 31 based on the supplied selection data, and starts time measurement by one of the timer circuits 17a, 17b, 17c, and 17d corresponding to the selected valid time. (ON) (ST33). For example, the timer circuit 17c having a valid time of 3 hours is turned on. Further, the CPU 11 sets a set value of the timer interlocking bit unit 18, that is, a PIN (personal identification) protection function valid bit (flag) to "1" (ST15).
[0072]
When the above authentication is OK, another process associated with the purchase of the product is performed by exchanging a command and a response between the POS terminal 1 and the IC card 4 (ST16, 17).
[0073]
Thereafter, with the end of the merchandise purchase processing, the IC card 4 is discharged from a card outlet (not shown) of the POS terminal 1 and returned to the card holder.
[0074]
Further, when the response of the authentication in step 13 is NG, the POS terminal 1 stops the merchandise purchase processing, guides the display through the display unit 8, ejects the IC card 4, and returns the IC card 4 to the card holder.
[0075]
The second and subsequent merchandise purchase processes are the same as those in the first embodiment, except for the time required for the timer circuit to time up.
[0076]
When the valid time of card holder authentication (hereinafter referred to as PIN protection valid time) is set on the card, a timer operates and holds a judgment flag during the PIN protection valid time or outside the valid time, and the time elapses and the valid time is exceeded. In the event that the power is turned off, a flag is automatically set outside the valid time regardless of the presence or absence of the power supply.
[0077]
Also, when the PIN protection valid time is set in the card, a timer is operated, and a determination flag during the PIN protection valid time or outside the valid time is held. At the time of application, a function of setting a flag outside the valid time by checking the timer value by S / W is provided.
[0078]
In the above IC card, the function to set the PIN protection valid time to an arbitrary value, the function to add a new valid time when the valid time remains, and the function to forcibly subtract the valid time from the valid time And a function of temporarily fixing the remaining effective time.
[0079]
As described above, in an IC card having a battery-less timer, the expiration date (time) of card holder authentication can be set by using the timer in the IC card even if there is a period in which power is not supplied. , The IC card itself can manage and control. It is also possible to arbitrarily set the valid time.
[0080]
【The invention's effect】
As described above in detail, according to the present invention, it is possible to provide an IC card and an IC card processing system capable of managing the validity time of cardholder authentication using a timer function that operates even when power is not supplied. .
[Brief description of the drawings]
FIG. 1 is a block diagram showing a schematic configuration of an IC card processing system for explaining an embodiment of the present invention.
FIG. 2 is a block diagram showing a schematic configuration of an IC card.
FIG. 3 is a flowchart for explaining merchandise purchase processing using an IC card.
FIG. 4 is a flowchart for explaining merchandise purchase processing using an IC card.
FIG. 5 is a block diagram showing a schematic configuration of an IC card.
FIG. 6 is a flowchart for explaining merchandise purchase processing using an IC card.
[Explanation of symbols]
1 PC, 4 IC card, 5 control unit, 11 CPU, 15 data memory, 17 timer circuit, 18 timer interlocking bit unit.

Claims (8)

A non-volatile memory for storing a password and the like, and a control element for verifying the card holder by comparing the password stored in the non-volatile memory with a password supplied from outside; In an IC card operated by power supply,
A timer circuit that operates even when power is not supplied;
When the power is supplied and the cardholder is authenticated by the password collation, the timer circuit measures the cardholder's authentication valid time by the timer circuit,
The power is supplied, and when the authentication of the cardholder is instructed from the external device, if the time measured by the time counting unit is within the authentication valid time, the output unit outputs the authentication to the external device without password collation. ,
An IC card characterized by comprising: The timer circuit switches from a state in which power is supplied to a state in which power is shut off, whereby the signal level of the output signal gradually decreases due to aging, and the time until the signal level reaches a predetermined signal level is measured. The IC card according to claim 1, wherein the IC card is a card. 2. The IC card according to claim 1, wherein a plurality of timer circuits having different measurement times are prepared and can be selectively used. 2. The IC card according to claim 1, wherein the timer circuit is a field effect device having a charge storage layer with a leak phenomenon when power is supplied. 2. The IC card according to claim 1, wherein the timer circuit is an EEPROM having a two-layer gate structure including a floating gate and a control gate. 4. The IC card according to claim 3, wherein the timer circuit is constituted by a nonvolatile cell, and the time counted differs depending on the impurity concentration of the nonvolatile cell. The timer circuit includes a charging / discharging circuit including a capacitor and a resistor, and a measuring circuit for measuring a time until an output of the charging / discharging circuit decreases to a predetermined value. The IC card according to claim 1. A non-volatile memory for storing a password, etc., and a control element for collating the password stored in the non-volatile memory with a password supplied from the terminal and for authenticating a card holder; In an IC card processing system including an IC card operated by supply and a terminal that handles the IC card,
The above terminal,
Supply means for supplying power to the IC card;
Setting means for setting a password based on a password request from the IC card when power is supplied by the supply means;
Transmitting means for transmitting the password set by the setting means to the IC card;
In response to the transmission of the password by the transmitting means, when the authentication is supplied from the IC card, or when the power is supplied by the supplying means, or when the authentication is supplied from the IC card, the execution of the process is permitted. Permission means,
The above IC card is
A timer circuit that operates even when power is not supplied;
When the power is supplied and the cardholder is authenticated by the password collation, the timer circuit measures the cardholder's authentication valid time by the timer circuit,
When the power is supplied, and when the authentication of the cardholder is instructed from the terminal, if the time measured by the timer is within the authentication valid time, the output means outputs the authentication to the terminal without password collation. Become,
An IC card processing system characterized by the above-mentioned.

Images