JP2000353216A - Ic card system and ic card terminal and ic card processing method and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To attain the processing of the various kinds of IC cards without substantially depending on a client by simplifying the function of the client or the like. SOLUTION: A client 5 having a card reader/writer 6 reads classification data indicating the classification of the card stored in an IC card 1, and transmits the classification data to a server 7. The server 7 receives the classification information of the IC card 1 from the client 5, and judges the classification of the IC card to be processed according to the classification information, and generates a command corresponding to the judged classification of the IC card, and transmits the generated command to the client 5. The client 5 receives the command corresponding to the IC card 1 from the server 7, and supplies it to the IC card 1, and receives a response to the command from the IC card 1, and transmits the response to the server 7.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an IC card system, an IC card terminal, and an IC card processing method for processing an IC card using a client or the like having an IC card reader / writer.

[0002]

2. Description of the Related Art In recent years, there has been known an IC card system using an IC card as an authentication card, a card for storing electronic money, and the like. I in such a system
The C card performs data processing such as reading and writing data in response to a predetermined command supplied from a card reader / writer possessed by a client or the like, and transmits a predetermined response to a card reader / writer such as a client. Software for issuing a command to the IC card is mounted on, for example, a client or the like, and the client or the like performs predetermined data processing with the IC card by executing the software.

[0003]

The above-mentioned IC cards have been standardized by ISO (International Standards) and the like, and even if various IC cards from different card manufacturers are compatible with each other, the compatibility of the transmission protocol and the like is required. The situation is secured.

However, with respect to commands, formats, ID assignment standards, security, and the like, compatibility between IC cards of card manufacturers is substantially ensured due to the wide range of options in the specifications. It has not been. Therefore, in order to process each type of IC card set in the card reader / writer, each client or the like must install dedicated software for processing each type of IC card for all types of IC cards. . When a new type of IC card is used in the system, it is necessary to install new software corresponding to the IC card in each client or the like.

[0005] The present invention has been made in view of the above-mentioned circumstances, and simplifies the functions and the like of a client, and is capable of processing various IC cards without substantially depending on the client. And an IC card terminal, an IC card processing method, and the like.

[0006]

In order to achieve the above object, an IC card system according to a first aspect of the present invention comprises:
An IC card system comprising: an IC card terminal having an IC card reader / writer; and a server connected to the IC card terminal via a network.
The C card terminal reads type information indicating the type of the card stored in the IC card, transmits the type information to the server, receives a command for the IC card from the server, and transmits the command to the IC card. A command supply unit for supplying a command to the card; and a response transmission unit for receiving a response to the supplied command from the IC card and transmitting the response to the server. From the IC card terminal, determining means for determining the type of the IC card to be processed based on the received type information, and generating a command corresponding to the type of the IC card determined by the determining means; A command transmitting unit for transmitting the generated command to the IC card terminal; and a response transmitting unit. Includes a response processing means for receiving and processing a response, the.

[0007] According to such a configuration, the IC card terminal notifies the server of the type information of the IC card, and the server determines the type of the IC card to be processed from the notified type information. A command conforming to the specifications of the card is generated, and the command is supplied to the IC card via the IC card terminal. Therefore, in this system, the server generates commands conforming to each card type, and these commands and responses to the commands are transmitted and received between the IC card and the server through the IC card terminal. You. Thus, it is possible to realize an IC card system that can process IC cards manufactured by different card manufacturers and having different specifications without depending on the IC card terminal.

[0008] The command transmitting means of the server may further comprise means for connecting a plurality of commands generated for the IC card and transmitting the connected command to the IC card terminal. The command supply means of the card terminal may further include means for receiving the linked command from the server, dividing the command into each command, and supplying each divided command to the IC card. The response transmission unit of the terminal receives a response to each command supplied by the command supply unit from the IC card,
The server may further include means for linking the received responses and transmitting the linked response to the server.

In this way, by transmitting and receiving commands and responses between the IC card terminal and the server in a concatenated manner, it is possible to maintain sufficient system performance even in Internet communication or the like in which sessions are independent. it can.

[0010] An IC card terminal according to a second aspect of the present invention is connected to a server via a network.
Means for reading type information indicating the type of the card stored in the C card and transmitting the type information to the server; and receiving a command for the IC card from the server;
Command supply means for supplying the command to the IC card, and response transmission means for receiving a response to the supplied command from the IC card and transmitting the response to the server.

[0011] According to such a configuration, the IC card terminal notifies the server of the type information of the IC card, and receives from the server a command generated by the server and conforming to the specifications of the IC card. Supply to IC card.
Therefore, in the present system, commands to the IC card, responses from the IC card, and the like are substantially transmitted through the IC card terminal and exchanged between the IC card and the server. Thereby, the configuration and function of the IC card terminal can be simplified. Further, even if the IC card terminal is analyzed by a fraudulent person, the security of the system can be improved because the IC card terminal holds only low-level information such as a transmission protocol.

The command supply means of the IC card terminal receives the connected command from the server, divides the command into each command, and divides each divided command into the I command.
Means for supplying to the C card.
The response transmission unit of the C card terminal receives a response to each command supplied by the command supply unit from the IC card, connects the received responses, and transmits the connected response to the server. May be further provided.

In this way, by transmitting and receiving commands and responses between the IC card terminal and the server in a linked manner, it is possible to maintain sufficient system performance even by Internet communication or the like in which sessions are independent. it can.

According to a third aspect of the present invention, there is provided an IC card processing method in a system including an IC card terminal having an IC card reader / writer, and a server connected to the IC card terminal via a network. IC
A card processing method, wherein the IC card terminal reads type information indicating the type of the card stored in the IC card and transmits the type information to the server; A command for receiving type information from the IC card terminal, determining the type of the IC card to be processed based on the received type information, generating a command corresponding to the type of the IC card, and transmitting the generated command to the IC card terminal A transmitting step, wherein in the IC card terminal,
A card processing step of receiving a command for the IC card, supplying the command to the IC card, receiving a response to the command from the IC card, and transmitting the response to the server.

According to such a configuration, the IC card type information is notified from the IC card terminal to the server, the type of the IC card to be processed is determined in the server, and a command conforming to the specifications of the IC card is provided. Is generated, and the generated command is transmitted to the IC via the IC card terminal.
Supplied to the card. Therefore, in this system, the server generates commands conforming to each card type, and these commands and responses to the commands are transmitted and received between the IC card and the server substantially through the IC card terminal. Is done. Thus, it is possible to realize an IC card system that can process IC cards manufactured by different card manufacturers and having different specifications without depending on the IC card terminal.

[0016] The command transmitting step may further include a step of connecting a plurality of commands generated for the IC card, and transmitting the connected command to the IC card terminal. ,
Receiving the linked command, dividing the command into the respective commands, and supplying the divided commands to the IC card;
Receiving from the card, concatenating the received response, and transmitting the concatenated response to the server.

Thus, by transmitting and receiving commands, responses, and the like between the IC card terminal and the server, it is possible to maintain sufficient system performance even by Internet communication in which sessions are independent. it can.

According to a fourth aspect of the present invention, there is provided a recording medium comprising: an IC card including a computer; an IC card terminal including an IC card reader / writer; and a server connected to the IC card terminal via a network. A computer-readable recording medium in which a program for functioning as the IC card terminal in the card system is recorded. The computer reads type information indicating the type of the card stored in the IC card, and transmits the type information to the server. Means for receiving a command connected to the IC card from the server, dividing the command, and supplying each divided command to the IC card; receiving a response to each command from the IC card; Means for transmitting the connected response to the server. Recording a program for functioning.

According to such a configuration, the IC card terminal notifies the server of the type information of the IC card and receives from the server a command generated by the server and conforming to the specifications of the IC card. Supply to IC card.
Therefore, commands to the IC card, responses from the IC card, and the like are substantially transmitted through the IC card terminal and exchanged between the IC card and the server. Thereby, the configuration and function of the IC card terminal can be simplified. Further, even if the IC card terminal is analyzed by a fraudulent person, the security of the system can be improved because the IC card terminal holds only low-level information such as a transmission protocol.

[0020]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an IC card system according to an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 shows a system configuration diagram of the IC card system of the present embodiment. This system includes an IC card 1, a client 5, and a server 7. The client 5 and the server 7 are connected via a network such as the Internet, for example.

The IC card 1 is an MPU, an EEPROM
(Electrically Erasable Programmable Read Only Mem
Ory) or the like, in which an IC chip is embedded, and the control unit 11, the memory 13, the input / output control unit 15
And.

The control unit 11 is realized, for example, by the MPU executing a control program read from a ROM or the like. The control unit 11 generates a predetermined response according to the command transmitted from the client 5 and transmits the response to the client 5 via the input / output control unit 15. For example,
In the communication with the client 5, when a card check command requesting the type data indicating the type of the card is supplied, the control unit 11 reads out the type data and the like from the memory 13 and transmits it as a response. Also, for other commands supplied from the client 5, a response to the command is generated and transmitted to the client 5.

The memory 13 includes a ROM, a RAM, and an EEPROM.
It is realized by an OM or the like, and stores a control program, type data indicating a type of a card, a card ID, and the like. The input / output control unit 15 exchanges data between the control unit 11 and the client 5.

The client 5 includes a control unit 51, a storage unit 53, and a communication control unit 55. The client 5 is connected to a card reader / writer 6 that writes and reads data to and from the IC card 1.

The control unit 51 transmits a command for acquiring type data indicating the card type to the IC card 1 set in the card reader / writer 6, and acquires the type data. . At this time, for example, the initial response data (Answer-To-Reset) transmitted by the IC card 1 to the client 5 in response to a reset signal or the like transmitted by the client 5 to the IC card 1 in accordance with the regulations of ISO / IEC7816. The type data of the IC card 1 may be obtained by including the type data. The control unit 51 transmits the acquired type data to the server 7 via the communication control unit 55.

The control unit 51 receives the linked command for the IC card 1 transmitted from the server 7, divides the command into each command, performs a predetermined transmission protocol conversion, and converts the command into a command. Via IC
The data is sequentially transmitted to the card 1. In addition, the control unit 51 sequentially receives responses to the transmitted commands from the IC card 1 via the card reader / writer 6 and connects them. Then, the connected response is converted to a predetermined transmission protocol and transmitted to the server 7.

The storage unit 53 stores a command received from the server 7, a response received from the IC card 1, and the like. The communication control unit 55 controls communication between the client 5 and the server 7.

The server 7 includes a control unit 71 and a storage unit 73
And a communication control unit 75. The control unit 71 performs a command generation process for generating a command for the IC card 1 based on the type data received from the client 5. The content of the command generation process differs for each type of the IC card 1. For example, when the received type data is “A”, a predetermined command is generated based on the specification (command, format, ID assignment standard, security, etc.) of the IC card 1 of the type data “A”. The control unit 71 concatenates the generated commands, and transmits the commands to the client 5 via the communication control unit 75 in a lump.

The control unit 71 receives the connected response from the client 5 and divides the response into each response. Then, each of the divided responses is processed as corresponding to each command in the linked command transmitted earlier. The storage unit 73 stores a processing program for generating a command to the IC card 1 for each card type, as shown in FIG. The communication control unit 75 controls communication between the client 5 and the server 7.

FIG. 3 shows the flow of components and commands of the IC card system according to this embodiment. As illustrated, data exchanged between the IC card 1 and the server 7 is transmitted to the client 5 by a transmission control program based on a transmission protocol standardized in common.
Is relaying. That is, in this system, the command and the response substantially pass through the client 5,
It is exchanged between the IC card 1 and the server 7.

The client 5 sends the type data of the IC card 1 to the ATR (Answer-T
o-Reset) or the like, and notifies the server 7. The server 7 executes a command generation program corresponding to the notified type of the IC card 1 to generate a predetermined command, and transmits the command to the client 5. . Thereby, the IC card 1 having different specifications manufactured by the respective card manufacturers is provided.
Can be processed without depending on the client 5.

Next, the operation of this IC card system will be described.
For example, a case where the IC card 1A is used as an authentication card when conducting electronic commerce or the like via the Internet will be described with reference to FIG. Each IC card 1
Each private key and public key are stored in the memory 13 and the server 7
Stores the public key of each IC card 1 in the storage unit 73.

First, the user inserts his / her IC card 1A into the card reader / writer 6 connected to the client 5.
The authentication instruction is input from an input unit of the client 5 (not shown), and the client 5 notifies the server 7 via the network that the authentication instruction of the IC card 1A has been input.
Send to In response, the server 7 sends the IC card 1
A card check request for instructing acquisition of the type data of A is transmitted to the client 5 (step S1).

The client 5 having received the card check request supplies a card check command requesting the type data to the IC card 1A (step S2). The IC card 1A reads out the type data from the memory 13 (step S3) and transmits it as a response (step S4).

The client 5 receives the type data from the IC card 1A and transmits it to the server 7 (step S).
5). The server 7 determines the received type data, executes a command generation process corresponding to the type data (step S6), generates a predetermined command based on the specification of the IC card 1A to be processed, and generates the command. The process of linking commands is repeated (steps S7, S8). In this example, the server 7 sequentially generates and connects commands for requesting the IC card 1 to transmit authentication data generated from the random number R and the secret key of the IC card 1A, for example.
For example, the server 7 transmits, to the IC card 1A, "generate a random number" ... "reads a secret key" ... "encrypts random number R with a secret key" ... "transmits an encrypted random number" Generate a command such as "do" and concatenate them.

After the completion of the command generation and connection, the server 7 sends the connected command to the client 5 (step S9).

The client 5 divides the linked command from the server 7 into each command (step S1).
0), a predetermined transmission protocol conversion is performed on the divided command, and the converted command is supplied to the IC card 1A (step S11).

The IC card 1A is transmitted from the client 5
The divided commands are received (step S12), and the process is executed for each command (step S13). Then, a response is generated based on the processing result (step S14) and transmitted to the client 5 (step S1).
5). In this example, since the command received by the IC card 1A is a request for authentication data generated from the random number R and the secret key of the IC card 1A, the IC card 1A transmits the received random number R to the IC card 1A. Predetermined authentication data is generated by, for example, encryption with a secret key, and transmitted to the client 5 together with a random number R.

The client 5 links the responses received from the IC card 1A (step S16), performs a predetermined transmission protocol conversion on the linked responses, and sends them to the server 7 (step S17).

The server 7 receives the connected response from the client 5 (step S18), divides the response into each response, and performs processing such as analysis (step S1).
9). In this case, the server 7 transmits the authentication data obtained by dividing the response from the IC card 1A to the IC card 1A.
A predetermined analysis process for authenticating the IC card 1A, such as determining whether or not the decryption result matches the random number R, using the public key of A, is performed. If the result of the analysis is proper, the server 7 notifies the client 5 that the authentication result is proper, and the client 5 permits the user to use the service.

Further, another IC card 1 is transmitted to the client 5.
When B is set, the type data of the IC card 1B is transmitted from the client 5 to the server 7. In response, the server 7 generates a command corresponding to the specifications of the IC card 1B and transmits the command to the client 5.

As described above, the client 5 only needs to notify the server 7 of the type data of the IC card 1 and supply the command generated by the server 7 in accordance with the type of the IC card 1 to the IC card 1. . Thereby, since the IC card 1 and the server 7 communicate with each other substantially through the client 5, the client 5
Can be simplified. Also, by connecting and transmitting commands and responses,
Sufficient performance can be maintained even by Internet communication in which sessions are independent.

Further, even if the client 5 is analyzed by an unauthorized person, the client 5 has only information at the level of the transmission protocol, so that the security of the system can be improved.

For example, a new type of IC card 1
Is used, it is sufficient to incorporate the application corresponding to the new IC card 1 into only the server 7, so that the burden on the administrator or the like can be reduced.

In the above description, the client 5 connected to the card reader / writer 6 is used as a device for processing the IC card 1. However, the present invention is not limited to this, and any device having the function of a card reader / writer can be used. I just need.

Further, for example, the present invention may be applied to a two-way communication service system for receiving digital broadcasting or the like. In this case, an STB having a card reader / writer function
(Set top box) acquires the type data of the IC card 1 and transmits it to the host device (server, host, etc.), and the host device performs command generation processing corresponding to the IC card 1. Is also good. This allows, for example,
Authentication processing at the time of receiving a digital broadcast can be easily realized with a simple functional configuration.

The present invention is not limited to a system for e-commerce, two-way communication service, etc., but includes an IC card, a card reader / writer for processing the IC card,
The present invention can be applied to various IC card systems using.

The external appearance of the IC card may be a normal card shape, a bar shape, or a coin shape, and the external shape is not limited. Further, the IC card is a so-called contact type,
Any non-contact type may be used.

It should be noted that the transaction system of the present invention can be realized using an ordinary computer system without using a dedicated system. For example, by installing the program from a medium (a floppy disk, a CD-ROM, or the like) storing a program for executing the above-described operation in a computer, the client 5, the server 7, and the like that execute the above-described processing are configured can do. In the case where the above-described functions are realized by the OS sharing or the OS and the application being jointly used, only the part other than the OS may be stored in the medium.

The medium for supplying the program to the computer may be a communication medium (medium for temporarily storing the program, such as a communication line, a communication network, or a communication system). For example, the program may be posted on a bulletin board (BBS) of a communication network and distributed via the network. Then, by starting this program and executing it in the same manner as other application programs under the control of the OS, the above-described processing can be executed.

[0051]

As described above, according to the present invention,
The IC card terminal notifies the type information of the IC card to the server, and the server determines the type of the IC card to be processed from the notified type information, and generates a command conforming to the specifications of the IC card. Then, the command is supplied to the IC card via the IC card terminal. Therefore, in the present invention, the server generates commands conforming to each card type, and these commands and responses to the commands are transmitted and received between the IC card and the server substantially through the IC card terminal. You. Thus, it is possible to realize an IC card system that can process IC cards manufactured by different card manufacturers and having different specifications without depending on the IC card terminal.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram of an IC card system according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating an example of a processing program for each type of IC card stored in a storage unit of a server.

FIG. 3 is a diagram showing a flow of components and commands of the IC card system of FIG. 1;

FIG. 4 is a flowchart for explaining the operation of the IC card system of FIG. 1;

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 IC card 5 client 6 card reader / writer 7 server 11 control unit 13 memory 15 input / output control unit 51 control unit 53 storage unit 55 communication control unit 71 control unit 73 storage unit 75 communication control unit

Claims (7)

[Claims] 1. An IC card system comprising: an IC card terminal having an IC card reader / writer; and a server connected to the IC card terminal via a network, wherein the IC card terminal is stored in an IC card. Means for reading type information indicating the type of the card, and transmitting the command to the server; command supplying means for receiving a command for the IC card from the server and supplying the command to the IC card; A response transmitting unit that receives a response to the supplied command from the IC card, and transmits the response to the server, wherein the server receives type information of the IC card from the IC card terminal, Determining means for determining the type of the IC card to be processed based on the received type information; Generating a command corresponding to the type of the IC card determined by the determining means;
An IC card system comprising: a command transmitting unit that transmits to a card terminal; and a response processing unit that receives and processes a response from the response transmitting unit. 2. The IC card according to claim 2, wherein the command transmitting means of the server further comprises means for connecting a plurality of commands generated for the IC card, and transmitting the connected command to the IC card terminal. The command supply unit of the terminal further includes a unit that receives the linked command from the server, divides the command into each command, and supplies each of the divided commands to the IC card. The response of the IC card terminal The transmitting means further includes means for receiving a response to each command supplied by the command supplying means from the IC card, connecting the received responses, and transmitting the connected response to the server. The IC card system according to claim 1, wherein: 3. An IC card terminal connected to a server via a network, wherein the means reads type information indicating the type of the card stored in the IC card, and transmits the type information to the server. A command supply unit for receiving a command for the IC card from a server and supplying the command to the IC card; a response for receiving a response to the supplied command from the IC card and transmitting the response to the server An IC card terminal comprising: transmitting means. 4. The command supply means of the IC card terminal receives the linked command from the server and divides the command into each command, and divides each command into the I command.
The IC card terminal further includes a unit that supplies a response to each command supplied by the command supply unit from the IC card, and concatenates the received responses. The IC card terminal according to claim 3, further comprising: means for transmitting a connected response to the server. 5. An IC card processing method in a system comprising: an IC card terminal having an IC card reader / writer; and a server connected to the IC card terminal via a network. A type information transmission step of reading type information indicating the type of the card stored in the card and transmitting the type information to the server; and the server receives the type information of the IC card from the IC card terminal, and A command transmission step of determining a type of the IC card to be processed based on the type information, generating a command corresponding to the type of the IC card, and transmitting the generated command to the IC card terminal; Receiving a command for the IC card and supplying the command to the IC card , IC card processing method characterized by comprising, a card processing step of transmitting a response to the server to receive from said IC card to said command. 6. The command transmitting step further includes a step of linking a plurality of commands generated for the IC card, and transmitting the linked command to the IC card terminal. Receiving the connected command, dividing the received command into each command, supplying each divided command to the IC card, receiving a response to each command from the IC card, connecting the received responses, The method according to claim 5, further comprising transmitting the connected response to the server. 7. A program for causing a computer to function as the IC card terminal in an IC card system including an IC card terminal having an IC card reader / writer, and a server connected to the IC card terminal via a network. Means for reading type information indicating the type of the card stored in an IC card and transmitting the read information to the server, wherein the server is connected to the IC card from the server. A command supply unit for receiving and dividing a command, supplying each divided command to the IC card, receiving a response to each command from the IC card, coupling the response, and transmitting the coupled response to the server; A program that records a program to function as Computer-readable recording medium.