JPS60207963A - Password setting system - Google Patents

Abstract

PURPOSE:To prevent password from danger such that it is known by a person other than its owner and to improve safeness by inputting tentative password previously set up at the formation of a portable medium and registering real password. CONSTITUTION:When an operator inputs a tentative password No. through a keyboard 12, a signal corresponding to the input is supplied from a CPU11 to a CPU3 in an IC card 1 and recorded in a RAM5. The CPU3 compares the tentative password No. stored in the RAM5 with an issuer password No. stored in an E<2>PROM4 and outputs the compared result to the CPU11. When a coincidence signal is supplied as the compared result, the CPU11 discriminates that the real password No. of the issuer can be set up and then the operator inputs the real password No. A signal corresponding said input is supplied from the CPU11 to a CPU3, which stores the supplied issuer's real password No. in the E<2>PROM4.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a password setting method for registering a password in an IC card having an IC chip, for example.

[Technical background of the invention and its problems]

Recently, an IC card having an IC chip whose stored data cannot be easily read has been developed for use in automatic transaction devices in financial institutions or home banking systems.

However, in the above-mentioned devices, the user's PIN has traditionally been set by the inventor;
This system has the disadvantage that anyone other than the customer or user himself or herself can know the password.

[Purpose of the invention]

The present invention has been made in view of the above circumstances, and its purpose is to provide a highly secure password setting method that eliminates the risk of the password being known to anyone other than the user.

[Summary of the invention]

In this invention, when registering the permanent password to the password verification function of the portable medium, the temporary password that is set in advance at the time of creation of the portable medium is inputted, thereby registering the permanent password.

[Embodiments of the invention]

An embodiment of the present invention will be described below with reference to the drawings.

In Figure 1, 1 is an IC card, and IC chip 2 is an IC card.
is built-in. The above IC chip f2 is connected to a control CPU (central processor) as shown in Figure 2.
Units)),? , a control program, a password, data, etc., are stored in an E2FROM 4, a RAM 5 used for data processing, an interface circuit 6, and a connection section 7. g2FROM above
4 has the manufacturer's password and the issuer's password set in advance at the time of manufacture.

3 and 4 show the configuration of an IC card issuing machine 10 according to the present invention.

1 is a CPU (central grossing O unit) that controls the entire system; 12 is an input means for inputting data, such as a keyboard; 13 is a CRT display device;
14 is a ROM (read only memory) in which the control program is stored, and 15 is an RA in which data is stored.
M (random access memory), 16 is a dot printer that outputs various print data, Noah is a floppy disk device that stores and reproduces data on the floppy disk J9 inserted from the floppy disk insertion slot 18, 20 is an IC This is a card reading/writing section.

The IC card reading/writing section 20 reads the data in the memory of the IC chip 2 on the IC card 1 inserted from the card insertion slot 2.

Alternatively, it is designed to write data into a memory, and is connected to the main body of the card issuing machine via a cable 22. That is, as shown in FIG. 5, a transport path 3 is provided for transporting the IC card 1 inserted through the card insertion slot 2. This transport path 3 is located so as to sandwich the IC card 1 from above and below when transporting it.
A plurality of rotatable transport rows 232 are provided in pairs. The transport rows 232 provided in pairs are provided at stop intervals from each other along the transport i4 thread 3. The distance from the center of each of these transport rows 232 to the center of the adjacent transport roller 32 has the width dimension in the card transport direction. Therefore, the transport path 3 of the IC card 1 is defined by the transport guide 33.

Furthermore, the IC card 1 on the IC card 1 is placed on the transport guide 33.
IC chip reading 1. Reading data from chip 2. Inserter 34
is located. This IC chip reader/writer 34 is
By electrically connecting to the connector 7 of the C chip 2, the contents of the E2FROM 4 in the ICC tyranno can be read.

Further, the IC card transaction machine also has the same configuration as the IC card issuing glO. However, the control zologram in ROM J 4 is completely different.

Next, the issuance of an IC card in such a configuration will be explained. For example, now, the operator (issuer) sets the key gate 12 of the IC card issuing machine 1o to the 9 IC card issuing mode and inserts a new IC card 1 into the card insertion slot 2. Then, IC card l is IC
The card reader/writer 34 and the connector 7 of the IC chip 2 in the IC card 1 are electrically connected. In response to this, the CPU II issues a message on the CRT display device 13 saying, "Please enter the issuer's PIN number." In response to this guidance, the operator inputs the password into the key gate 12. The signal corresponding to this input and the number indicating the issuing machine are sent from the CPU 11 to the CPU via the IC chip reader/writer 34, the connector 7, and the interface circuit 6.
Supplied to UJ. Then, the CPU 3 stores the available password numbers in the RAM 5. Next, CPU J
is the input password of RAM 5 and E2PrtOM
4, and outputs the comparison result to the CPU l1. As a result, when a matching signal is supplied, the CPUt Jij cf('r display device 13 displays the message "Please enter the user's temporary PIN number.") In response to this guidance, the operator enters the temporary PIN number. Enter the PIN number manually.This input signal is C.
From PU f 1 to CPU? supplied to Accordingly, CPU 3 inputs the supplied temporary password to E2FRO.
Store it in M4. Further, other transaction data and the like are also stored in the E2pgoM4 in the same way as the above-mentioned password. Then, the IC card 1 storing this temporary password etc. is issued through the card insertion slot 20.

Next, the customer to whom the VC1 IC card 1 has been issued inserts it into the card insertion slot 2 of an IC card transaction machine (not shown). Then, the IC card reader 34 of the IC card 1 and the connector 7 of the IC chip 2 in the IC card 1 are electrically connected. With this F), CPU II is I
C1) Check whether the C card is set to the transaction machine for the first time
Judgment will be made according to the signal from UJ. If the result of this judgment is that it is not the first time use, transaction processing according to the IC card 1 is executed.

In addition, when using the computer for the first time, the CPU 11 prompts the CRT display device 13 to ``please enter a temporary password.'' In response to this guidance, the customer enters a temporary password into the keymate 12. The signals corresponding to this input and the signals indicating the transaction machine are sent from CPU J7 to C.
I"U 3. Then, the CPU 3 stores the supplied PIN number in the RAM 5. Tweet, CP
U 3 is RAM 5 (7) Input PIN and g2
It compares it with the temporary password stored in FROM 4, and outputs the comparison result to CPU 11. As a result,
When the match number 3 is supplied, the CPU 1 determines that it is possible to set the real PIN number, and the CRT display device 1
At step 3, a message will be displayed that says ``Please enter your certificate of authenticity as it will be registered.'' With this guidance, the customer can use the key de-
Enter the original PIN number in the field 12.

A signal corresponding to this input is sent from the CPU 11 to the CPU ?
supplied to Then, the CPUJ stores the supplied real password in the E2)) ROM 4. At this time, c
pus sets a flag that prohibits the use of the temporary password stored in the E2PROM 4.

After registering the actual PIN number, the transaction may be carried out as is, or the IC card 1 may be returned to the customer.

Furthermore, when checking the coincidence of temporary PIN numbers, if a predetermined number of mismatches has been reached, the IC card cannot be used.

Since then, when making a transaction using the above-mentioned transaction machine, the transaction can be made using the above-mentioned PIN code.

In addition, if the issuer instructs the customer to confirm the actual PIN number of the IC card 1, the issuer will insert the IC card 1 into the card insertion slot 2 of the IC card issuing machine 0. do. Then, the IC card 1 is transferred to the IC card reader/writer 34.
and IC chip f2 coi-cut part 7 in IC card 1
are electrically connected. As a result, the CPU 11 prompts the CIζT display device 13 to ``please enter the issuer's personal identification number''. In response to this guidance, the issuer will receive a key y? - Enter your password into the code 12. The signal corresponding to this input and the signal indicating the issuing machine are sent to the CPU.
11 to the CPU 3. Then, CPU 3
stores the supplied password in RA)/15. Next, CPU 3 inputs the input password of RN/15 and E.
2P#gI4 is compared with the issuer's password stored in I4, and the comparison result is output to C1) U I J. As a result, when the matching Buddhist name is supplied, the CPU J 1 issues a message on the CRT display device 13 saying, ``Please enter the user's temporary password.'' In response to this guidance, the operator inputs a temporary password. This human input signal is supplied from the CPU 11 to C1)U3.

Accordingly, CPU3 uses the supplied temporary PIN number and E2.
The temporary password stored in the EPROM 4 is compared with the temporary password, and if the comparison results match, the permanent password stored in the EPROM 4 is output to the CPU JJ. Then, the CPU 1 inputs the original PIN number to the CRT 7J.
The island is shown using the ISSOLE device 13. This results in
The issuer can inform the customer of the actual PIN number.

Additionally, the issuer entered the temporary PIN using the issuing machine.''0
The output of the real L number may be prohibited even if the actual L number is used.

In the above embodiment, the case where the present invention is used in an IC card has been described, but the present invention is not limited to this, and the present invention may be used in a security device built into a terminal. Also, IC
When transferring the data stored in the card to the outside, the memory data may be encrypted by generating a specific key and then output.

〔Effect of the invention〕

As described in detail above, according to the present invention, there is no risk that the password will be known to anyone other than the user himself/herself, and a highly secure password setting method can be provided.

[Brief explanation of drawings]

The drawings show one embodiment of the present invention, and FIG. 1 shows an rc
Fig. 2 is a block diagram schematically showing the 4'i# configuration of the IC chip, Fig. 3 is an external view of the 56 rows of the card, and Fig. 4 is a schematic configuration of the card processing machine. Block diagram & (Figure 5 is a sectional view showing the schematic configuration of the IC card βC reading/writing section. 1... IC card (portable EJ function medium), 2... Bow C chip, 3... CPU, 4...E2PROM, 5.
...RAM, 6...interface circuit, 7...
Connect section, 10... IC card issuing machine, 11...
CPU, 12...Key bead, 13...CRT display device 61.2θ...IC card reading 175! Writing section, 34...IC chip 7'' reading?Y writing device.

Claims (4)

[Claims] (1) When registering the permanent PIN for the PIN verification function of the portable medium, the main PIN is registered by inputting the temporary PIN that is set in advance at the time of creating the portable medium. Password setting method. (2) The password setting method according to claim 1, wherein the portable medium is an IC card. (3) The password setting method according to claim 1, wherein after the permanent password is registered, the temporary password cannot be used. (4) The password setting method according to claim 1, characterized in that the temporary password can read the original password.