JP2000105788A - Portable electronic device and protection method therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the convenience of a user in an IC card. SOLUTION: When transaction is started, a control element 11 of an IC card 1 reads the latest transaction date/hour/minutes stored in a data memory 12 corresponding to the application number of this transaction, adds a key protection release expiration date preliminarily stored in a data memory 12 to the read latest transaction date/hour/minute. When the transaction start date/hour/minutes are present in the date/hour/minutes being the added result, a password is read from a save address corresponding to the application number of this transaction, and collated with a password stored in the PIN area of the data memory 12. Whether or not the password is made coincident is checked, and when the password is made coincident, it is judged that the transaction is established, and the input of the password is omitted.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a cryptographic code having a built-in IC chip having a control element such as a writable / rewritable non-volatile memory and a CPU, and having external data input / output. The present invention relates to a portable electronic device called a so-called IC card and a protection method.

[0002]

2. Description of the Related Art Recently, as a portable data storage medium, a non-volatile data memory and an IC card having a built-in IC chip having a control element such as a CPU (Central Processing Unit) for controlling the same have been attracting attention. Have been.

[0003] In this type of IC card, a built-in data memory is divided into a plurality of files, and each file stores data necessary for operation of an application to be used. By inputting an application identification name or the like from the device, a state where only the corresponding file can be selectively used is realized. Therefore, by dividing a plurality of application data into files and storing them on one IC card, multi-purpose use is possible.

[0004] However, in such an IC card, the personal identification number is input and collated for each transaction and the like to protect the IC card. However, it is necessary for the user to input the personal identification number every time. It was troublesome.

[0005]

SUMMARY OF THE INVENTION As described above, an IC
With a card, the IC card is protected by inputting and collating a personal identification number for each transaction or the like, but there is a problem that the user is troublesome. Accordingly, it is an object of the present invention to provide a portable electronic device and a protection method with improved user convenience.

[0006]

A portable electronic device according to the present invention has first storage means for storing in advance a validity period for releasing protection accompanying a transaction, and second storage means for storing transaction information including transaction date and time. The storage means, and when a new transaction is started within the validity period stored in the first storage means calculated from the latest transaction date and time stored in the second storage means, And control means for performing control for releasing protection.

[0007] The portable electronic device of the present invention has a first storage means for storing in advance a validity period for releasing protection accompanying a transaction, and a second storage for storing transaction information including transaction date and time for each transaction. Means for reading the latest transaction date and time stored in the second storage means corresponding to this transaction when a new transaction is started, and counting from the latest transaction date and time read by this reading means. If the new transaction has been started within the validity period stored in the first storage means, the control means cancels the protection associated with the new transaction.

[0008] The portable electronic device of the present invention has first storage means for storing in advance collation information to be collated with information entered by a key input accompanying a transaction, and an effective period for canceling collation by a key entry involved in the transaction. A second storage unit for storing transaction information including a transaction date and time and key input information at that time for each transaction, and a third storage for responding to the transaction when a new transaction is started. Reading means for reading the latest transaction date and time and key input information stored in the third storage means, and the second storage means calculated from the latest transaction date and time read by the reading means. If the new transaction has been started within the valid period, the key input information read by the reading means and the first
And a control means for controlling the new transaction in accordance with the result of the check by the check means.

The portable electronic device of the present invention has a first storage means for storing in advance a personal identification number to be collated with a personal identification number inputted with the transaction, and an effective means for canceling the collation by inputting the personal identification number with the transaction. A second storage unit for storing a period, a third storage unit for storing transaction information including a transaction date and a personal identification number for each transaction, and a transaction when a new transaction is started. Reading means for reading out the latest transaction date and time and the personal identification number stored in the third storage means corresponding to the third storage means, and storing in the second storage means calculated from the latest transaction date and time read by this reading means. If the new transaction has been started within the validity period,
Collating means for collating the password read by the reading means with the password stored in the first storage means;
And control means for controlling the new transaction in accordance with the result of matching by the matching means.

[0010] A portable electronic device of the present invention is a portable electronic device for conducting a transaction by collating a personal identification number inputted with the transaction, and stores in advance a usage limit and a cumulative usage limit of the transaction amount. A first storage means, a second storage means for storing the total usage amount up to the transaction every time the transaction is completed, and a transaction amount and a first storage means for storing the transaction amount when a new transaction is started A first comparing means for comparing the transaction amount with the used limit amount, and when the transaction amount is within the use limit amount by the first comparing means, the transaction amount is stored in the second storage means. A second comparing means for adding the total usage amount and comparing the addition result with the cumulative usage limit stored in the first storage means; and When it is within the limit,
And control means for controlling the transaction completion without collation by inputting the password.

[0011] According to the portable electronic device protection method of the present invention, a validity period for releasing protection accompanying a transaction is stored in advance,
The transaction information including the transaction date and time is stored, and when a new transaction is started within the pre-stored validity period calculated from the stored latest transaction date and time, the protection accompanying this new transaction is released. It is characterized by the following.

According to the portable electronic device protection method of the present invention, an effective period for releasing protection accompanying a transaction is stored in advance,
Stores transaction information including transaction date and time for each transaction, reads out the stored latest transaction date and time corresponding to this transaction when a new transaction is started, and calculates from the read latest transaction date and time. When the new transaction has been started within the previously stored validity period, the protection accompanying the new transaction is released.

According to the method for protecting a portable electronic device of the present invention, collation information for collating with information entered by a key involved in a transaction is stored in advance, and a valid period for canceling collation by key entry involved in the transaction is stored. Stores transaction information including transaction date and time and key input information at that time for each business, and when a new transaction is started, the stored latest transaction date and time and key input information at that time corresponding to this transaction business If the new transaction has been started within the stored validity period calculated from the read latest transaction date and time, the read key input information is compared with the pre-stored collation information. The new transaction is controlled in accordance with the result of the comparison.

According to the method for protecting a portable electronic device of the present invention, a security code to be collated with a security code inputted with a transaction is stored in advance, and a validity period for canceling the collation by inputting a security code with the transaction is stored. The transaction information including the transaction date and time and the personal identification number at that time is stored for each transaction business, and when a new transaction is started, the stored latest transaction date and time and the personal identification number at that time corresponding to this transaction business are stored. If the new transaction has been started within the validity period stored in the second storage means calculated from the latest transaction date and time read out, the read password and the pre-stored password are stored. The new transaction is controlled in accordance with the result of the collation.

A method for protecting a portable electronic device according to the present invention is a method for protecting a portable electronic device for conducting a transaction by collating a password inputted at the start of a transaction. The cumulative usage limit is stored in advance, and each time the transaction is completed, the cumulative usage up to that transaction is stored, and when a new transaction is started, this transaction amount is compared with the previously stored usage limit. When the transaction amount is within the usage limit in this comparison, the stored total usage amount is added to the transaction amount, and the addition result is compared with the previously stored cumulative usage limit. In this comparison, when the result of the addition is within the cumulative usage limit, the transaction is controlled without collation by inputting the password.

[0016]

An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows a configuration example of a card terminal device 20 to which an IC card as a portable electronic device according to the present embodiment is applied, such as a financial system or a shopping system. That is, the card terminal device 20 enables the IC card 1 to be connected to the control unit 3 composed of a CPU or the like via the card reader / writer 2, and the keyboard 4, the CRT display device 5, the printer 6, And a hard disk drive (HHD) 7 connected thereto. In the hard disk device 7 of the card terminal device 20, a terminal code for confirming the type of the card terminal device is stored.

FIG. 2 shows an example of the configuration of the IC card 1, in which a control element (for example, a CPU) as a control unit is used.
11. Non-volatile data memory 1 whose storage contents can be erased
2, a working memory 13, a program memory 14, and a contact portion 15 for obtaining electrical contact with the card reader / writer 2. Of these, the portions within the broken lines (control element 11, data memory 1
2, the working memory 13 and the program memory 14) are composed of one IC chip (or a plurality)
Furthermore, as known from Japanese Utility Model Laid-Open No. 2-17381,
The IC chip 10 and the contact portion 15 are integrated into an IC module and embedded in the IC card body.

The data memory 12 is used for storing various data, and is, for example, an EEPROM (Electrically Erased).
able PROM). The working memory 13 is a memory for temporarily storing processing data when the control element 11 performs processing, and is, for example, a RAM.
Etc. The program memory 14 is configured by, for example, a mask ROM, and stores a program of the control element 11 and the like.

FIG. 3 shows a configuration example of the management information of the data in the data memory 12. As shown in FIG. 3A, the management information of the data in the data memory 12 is stored in the PIN area 3
1, a credit area 32, and an electronic money area 33. With the management information configured in this manner, the IC card 1 has a credit function as a credit card and an electronic money function.

In the PIN area 31, a plurality of personal identification numbers of the user of the IC card are stored in advance. This IC
The password is compared with the password input by the password stored in the card 1.

The credit area 32 is an area where reading and writing are performed when performing a credit transaction. Further, the credit area 32 is provided with a PIN area 34 in which various information is stored in advance and a transaction information area 35 which is stored and updated for each transaction.

The electronic money area 33 is an area where reading and writing are performed when performing electronic money transactions. As shown in FIG. 3B, P of the credit area 32
In the IN area 34, information such as a key protection release validity period 34a, a key protection release enable terminal code 34b,.

Here, the key protection release validity period is a period in which the protection is released by inputting a key (password), that is, a period in which a transaction is established without inputting a password. For example, as shown in FIG. 4, there is a password protection period, and a transaction is performed by inputting the password at H: m on the nth day to obtain the latest key protection release date. From this date and time, the security code (key) protection release validity period (for example, 2 days and 2 hours)
During the period, cancel the input of the security code.

During this period, if two hours and two hours have passed without any input, ie, n + 2 days, (H + 2) hour, m
From the minute, the password protection is started again, that is, the period in which the input of the password is required.

Further, the key protection-cancelable terminal code 34b
Is used to specify a card terminal device that can release the key protection. As described above, the card terminal device 2
The terminal code is stored in the hard disk device 7 of the “0”.

As shown in FIG. 3C, the transaction information area 35 of the credit area 32 stores the latest transaction date and time for each application and the save address of the personal identification number collated at the time of the transaction.

Next, the operation of the credit function in the IC card 1 in such a configuration will be described with reference to the flowchart of FIG. First, when the IC card 1 is inserted into the card terminal device 20 at the start of the transaction (ST
1) The control element 11 of the IC card 1
5, date / hour / minute information from the card terminal device 20 via
The terminal code and the application number stored in the hard disk device 7 are received (ST2).

The control element 11 of the IC card 1 stores the received terminal code of the card terminal device 20 and the data memory 12
Is checked with the key protection releasable terminal code stored in the PIN area 34, and it is checked whether there is a match (ST3). If there is no matching terminal code, the control element 11 stops the transaction (ST14).

The control element 11 continues the process if the terminal code matches, and stores the latest transaction date and time corresponding to the application number received from the card terminal device 20 in the transaction information area 35 of the data memory 12. It is checked whether there is (ST4).

When there is the latest transaction date and time corresponding to the application number, the control element 11 reads the key protection release validity period 34a stored in the PIN area 34 of the data memory 12, and reads the key protection release period 34a corresponding to the application number. (ST5). The “transaction date and time” as the result of this addition is defined as (A).

The control element 11 writes the transaction date and time received from the card terminal device 20 as the latest transaction date and time (B) in the transaction information area 35 (ST6), and checks whether (B) ≦ (A). (ST7). That is, the transaction date and time (A) is the expiration date of the key protection release validity period, and it is checked whether the latest transaction date and time (B) is within this key protection release validity period.

When (B) ≦ (A), the control element 11 reads out the personal identification number from the save address corresponding to the application number received from the card terminal device 20 and stores it in the PIN area 31 of the data memory 12. The password is compared with the password (ST8), and it is checked whether the password matches (ST9).

The control element 11 concludes the transaction if the passwords match (ST10), and cancels the transaction if the passwords do not match (ST14). Step ST
4. If there is no record for the latest transaction date and time corresponding to the application number received from the card terminal device 20 in 4,
Alternatively, if (B) ≦ (A) is not satisfied in step ST7, a password must be input from the keyboard 4 of the card terminal device 20, and the password is input (ST11).

The control element 11 sends the password input from the keyboard 4 of the card terminal device 20 to the contact section 15.
(ST12), the received personal identification number is collated with the personal identification number stored in the PIN area 31 of the data memory 12 (ST13), and it is checked whether the personal identification numbers match (ST9). If the numbers match, the transaction is concluded (ST10), and if the passwords do not match, the transaction is stopped (ST14).

Next, the payment operation by electronic money in the IC card 1 will be described with reference to the flowchart of FIG. First, at the start of the transaction, the I
When the C card 1 is inserted (ST21), the IC card 1
The control element 11 receives the transaction amount from the card terminal device 20 via the contact unit 15 (ST22), reads out the usage limit stored in advance in the electronic money area 33 of the data memory 12, and obtains the transaction amount ≦ use It is checked whether the limit is reached (ST23). That is, it checks whether the transaction amount is within the usage limit. This is a check for eliminating the input of a password when the transaction amount is low.

When the transaction amount is within the usage limit, the control element 11 adds the total usage amount stored for each transaction to the electronic money area 33 of the data memory 12 to the transaction amount, and The cumulative usage limit stored in the electronic money area 33 is read in advance, and it is checked whether the transaction amount + the total usage amount ≦ the cumulative usage limit (ST)
24). This is to check whether or not the total of the current transaction silver amount and the total usage amount up to the previous time is within the cumulative usage limit.

When there is a total of the transaction silver amount and the cumulative usage amount within the cumulative usage limit amount, the control element 11 skips the collation of the personal identification number and completes the transaction (ST25). If the transaction amount is not equal to or less than the transaction amount in step ST23, or if the transaction amount is not equal to or smaller than the cumulative amount in step 24, the input of the personal identification number from the keyboard 4 of the card terminal device 20 is required. A number is input (ST26).

As shown in FIG. 7, since the (n + 2) -th transaction in the low-priced transaction (within the usage limit) exceeds the cumulative usage limit, it is necessary to input a personal identification number. The control element 11 receives the personal identification number input from the keyboard 4 of the card terminal device 20 via the contact part 15 and compares it with the personal identification number stored in the PIN area 31 of the data memory 12 (ST27). It is checked whether the numbers match (ST27). If the passwords match, the transaction is concluded (ST25), and if the passwords do not match, the transaction is stopped (ST28).

As described above, according to the embodiment of the present invention, when using the credit function of the IC card,
When another process is performed within a certain period of time, the trouble of inputting the password again can be omitted. In addition, when an IC card is used as electronic money, it is possible to save the trouble of inputting a password at the time of a low-priced (usage limit) transaction.

[0040]

As described in detail above, according to the present invention,
A portable electronic device and a protection method with improved user convenience can be provided.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration example of a card handling device to which an IC card according to an embodiment of the present invention is applied.

FIG. 2 is a block diagram showing a configuration example of an IC card.

FIG. 3 is a diagram showing a configuration example of data management information in a data memory.

FIG. 4 is a view for explaining a password protection period and a password protection release effective period.

FIG. 5 is a flowchart for explaining the operation of the credit function in the IC card.

FIG. 6 is a flowchart illustrating a payment operation by electronic money in an IC card.

FIG. 7 is a view for explaining input of a personal identification number in a low-value transaction (within a usage limit).

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... IC card (portable electronic device) 3 ... Control part 4 ... Keyboard 11 ... Control element (control means, read means, collation means) 12 ... Data memory (storage means) 13 ... Working memory 15 ... Contact part 20 ... Card Terminal device 31 PIN area 32 Credit area 33 Electronic money area 34 PIN area 35 Transaction information area

Claims (10)

[Claims] 1. A first storage means for storing in advance a validity period for releasing protection accompanying a transaction; a second storage means for storing transaction information including a transaction date and time; Control means for controlling, when a new transaction is started within the validity period stored in the first storage means calculated from the latest transaction date and time, the protection accompanying this new transaction is released. A portable electronic device characterized by the following. 2. A first storage means for storing in advance a validity period for releasing protection accompanying a transaction, and a second storage means for storing transaction information including a transaction date and time for each transaction business.
Reading means for reading the latest transaction date and time stored in the second storage means corresponding to the transaction when a new transaction is started; and latest transaction date and time read by the reading means. And if the new transaction has been started within the validity period stored in the first storage means calculated from the following, control means for performing control to release protection accompanying the new transaction. A portable electronic device characterized by: 3. A first storage means for storing in advance collation information for collating with information inputted by a key input associated with a transaction, and a second storage means for storing a validity period for canceling the collation by the key input associated with the transaction. A third storage unit for storing, for each transaction, transaction information including a transaction date and time and key input information at that time; and a third storage unit corresponding to the transaction when a new transaction is started. Reading means for reading out the latest transaction date and time and key input information stored at that time, and said new information within the validity period stored in said second storage means calculated from the latest transaction date and time read out by said reading means. If a transaction has been started, the key input information read by the reading means is compared with the matching information stored in the first storage means. Portable electronic device being characterized in that comprises a control means for controlling the new deal. 4. A first storage means for storing in advance a personal identification number to be collated with a personal identification number inputted in accordance with a transaction, and a second storage means for storing a validity period for canceling the collation by inputting a personal identification number in accordance with said transaction. Storage means; third storage means for storing, for each transaction, transaction information including a transaction date and time and a personal identification number at the time; and a third transaction corresponding to this transaction when a new transaction is started. Reading means for reading the latest transaction date and time and the password at that time stored in the storage means; and within the validity period stored in the second storage means calculated from the latest transaction date and time read by the reading means. When a new transaction has been started, a collating means for collating the personal identification number read by the reading means with the personal identification number stored in the first storage means; new Portable electronic device being characterized in that includes control means for controlling the transaction, the. 5. A portable electronic device for conducting a transaction by collating a personal identification number inputted with the transaction, a first storage means for preliminarily storing a usage limit and a cumulative usage limit of the transaction amount, A second storage means for storing a cumulative usage amount up to the transaction every time the transaction is completed; and a new transaction amount when the new transaction is started, the transaction amount and a usage limit stored in the first storage means. The first to compare
When the transaction amount is within the usage limit by the first comparison unit, the cumulative usage amount stored in the second storage unit is added to the transaction amount. A second comparing means for comparing the cumulative use limit stored in the first storage means with the personal identification number when the addition result is within the cumulative use limit by the second comparing means; And control means for controlling the transaction completion without collation by input of (1). 6. A validity period for releasing protection accompanying the transaction is stored in advance, transaction information including a transaction date and time is stored, and a new validity period within the previously stored validity period calculated from the stored latest transaction date and time is stored. When a new transaction is started, the protection accompanying the new transaction is released. 7. A method for preliminarily storing a validity period for canceling protection accompanying a transaction, storing transaction information including a transaction date and time for each transaction, and storing a transaction corresponding to the transaction when a new transaction is started. Read out the latest transaction date and time, and if the new transaction has been started within the previously stored validity period calculated from the read latest transaction date and time, release the protection associated with the new transaction. A method for protecting a portable electronic device, comprising: 8. Preliminarily storing collation information for collating with information input by key input accompanying a transaction, storing a validity period for canceling collation by key input associated with the transaction, transaction date / time and key input at that time for each transaction business Information, and when a new transaction is started, the stored latest transaction date and time and the key input information at that time corresponding to the transaction business are read out, and the read latest transaction date and time are read out. If the new transaction has been started within the stored validity period calculated from the above, the read key input information and the previously stored collation information are collated, and the new A method for protecting a portable electronic device, comprising: controlling a secure transaction. 9. A security code to be collated with a security code inputted with the transaction is stored in advance, a validity period for canceling the collation by inputting the security code with the transaction is stored, and a transaction date and time and a time and date are set for each transaction business. When a new transaction is started, the stored latest transaction date and time and the password at that time corresponding to this transaction are read out, and the read out latest transaction is stored. If the new transaction has been started within the validity period stored in the second storage means starting from the date and time, the read-out personal identification number is compared with the previously stored personal identification number. A method for protecting a portable electronic device, wherein the new transaction is controlled according to a result. 10. A method for protecting a portable electronic device for conducting a transaction by collating a password entered at the start of a transaction, wherein a usage limit and a cumulative usage limit of a transaction amount are stored in advance, Each time the transaction is completed, the total usage amount up to that transaction is stored,
When a new transaction is started, the transaction amount is compared with the previously stored use limit, and when the transaction amount is within the use limit in this comparison, the transaction amount stored in the transaction amount is stored. Add the total usage amount, compare this addition result with the previously stored cumulative usage limit amount, and if the addition result is within the cumulative usage limit amount in this comparison, there is no collation by inputting the password A method for protecting a portable electronic device, comprising: