JP2502052B2 - IC card with multiple personal identification information - Google Patents

Description

DETAILED DESCRIPTION [Outline] In an IC card including a processor and a memory, I
In the memory of the C card, a registration area for multiple personal identification information (PIN) and application processing information corresponding to each personal identification information is provided, and each individual responds to the application processing request from the terminal device into which the IC card is inserted. The qualification check corresponding to the identification information is configured to be performed within the IC card, enabling shared use within the group / section of the IC card and realizing the security function for each individual who uses the card. ing.

[Industrial applications]

The present invention relates to an IC card having a plurality of personal identification information, particularly,
The present invention relates to an IC card used for a bank card, a credit card, etc., which has a personal identification function, and which has a plurality of personal identification information that enables shared use within a group / section.

[Conventional technology]

Conventionally, as a bank card, a credit card, or the like, a magnetic card in which a magnetic stripe is put in a plastic card is often used. However, since such a magnetic card is relatively easy to read and write from the outside, there is a possibility that it may be illegally accessed, and there is a problem that the security is not sufficient.

Therefore, as an alternative to this magnetic card,
The use of the IC card 10 as shown in the figure is considered. I c
The card 10 has a thin film microprocessor and memory in the card, and when it is inserted into the terminal device, power is supplied from the terminal device and input / output data is exchanged via the contact 11. It has become so. In the case of a magnetic card, it is necessary to confirm the person's identity by using a personal identification number, etc., but in the case of the IC card 10, since it has a processor, the confirmation process can be executed in the card. Therefore, it is possible to give the IC card 10 a high security function.

FIG. 8 shows an example of using a conventional IC card. In FIG. 8, 12 is a terminal device having an IC card reader / writer, 13 is a center in which a host computer providing banking and other services is installed, 14 is a memory, and 15 is executed by a processor (not shown). Indicates the program part.

In the memory 14, personal identification information PIN (Personal Identification Number) corresponding to a conventional personal identification number or the like is stored in advance.
The cardholder's account number ACC #, etc., and a secret code SC etc. secretly attached to each card or individual are stored so that the system can check the card for unauthorized use.

When the IC card 10 inputs the personal identification information PIN from the terminal device 12, the program unit 15 collates the PIN with the PIN stored in the memory 14, and after confirming that they match, the account number ACC Send #. The terminal device 12 sends this account number ACC # to the center 13 via the line. On the other hand, the center 13 generates a random number E for encryption,
The random number E is output to the IC card 10 via the terminal device 12. The program unit 15 receives the received random number E and the account number AC
An authentication code AC (Authentication Code) is generated from C # and the secret code SC by a predetermined function, and is sent to the center 13. Since the random number E differs for each transaction, the authentication code AC also differs for each transaction. This allows the account number ACC
Prevents plagiarism on the line related to # and secret code SC.

On the other hand, on the side of the center 13 as well, the same function generates the authentication code AC with the same random number E, the secret code SC, etc. as parameters, and the authentication code A generated by the IC card 10
Match with C. When these match, it is considered that the use of the IC card 10 is valid, and the transaction is started.

[Problems to be solved by the invention]

In the above conventional IC card, only one personal identification information PIN is registered on one IC card.
Therefore, for example, when a plurality of people share one IC card in a group / section, the plurality of people must share the same personal identification information PIN. Therefore, according to the conventional IC card, there is a problem that the individual who is the card user in the group / section cannot be identified.

That is, multiple people are all treated as the same person. Therefore, there is a problem in that it is not possible to set an application process that can be started individually for each individual by making a difference in the usage level between the administrator in the group / section and the individual person in charge.

[Means for solving problems]

The present invention solves the above-mentioned problems and provides a means for maintaining the same security as if each person has an IC card separately, even when sharing an IC card within a group / section. To do.

 FIG. 1 shows a basic configuration diagram of the present invention.

In FIG. 1, reference numerals 10 to 15 refer to FIGS.
It corresponds to that shown in the figure. 20 is a processor that executes the program of the program unit 15, 21 is a personal identification information registration area in which the personal identification information PINs that use the IC card 10 are registered for multiple people, and 22 is an individual registered in the personal identification information registration area 21. Correspondence table that stores the correspondence information between the identification information PIN and the application processing permitted to each individual, 23 is the application processing information area in which the application processing information that can be used by this IC card 10 is registered, and 24 is from the terminal device 12. Personal identification information collating unit that collates the entered personal identification information PIN with the personal identification information PIN registered in the personal identification information registration area 21, 25
Represents a qualification check unit that performs qualification check on availability of applied processing specified by the person who uses the card.

When the IC card 10 is set in the terminal device 12 and the personal identification information PIN is input from the terminal device 12, the personal identification information matching unit 24 determines whether the personal identification information PIN is registered in the personal identification information registration area 21. Check whether or not. The personal identification information PIN in the personal identification information registration area 21 corresponds to the correspondence table 2
2 is associated with the application processing APL registered in the application processing information area 23, and the qualification checking unit 25 determines whether the specified application processing APL is permitted for the input personal identification information PIN. Check whether or not. When it is confirmed that the service is permitted, a service request is issued to the center 13.

[Action]

The personal identification information PIN is of a nature that only the cardholder himself should know. According to the present invention, even if one IC card 10 is shared within a group / section,
Since a plurality of personal identification information PINs can be registered in the IC card 10, the person who is currently using the card can be identified by the personal identification information collating unit 24. And
The qualification checking unit 25 can determine whether or not the application processing designated by the user can be started.

〔Example〕

FIG. 2 is a block diagram for explaining an embodiment of the present invention, FIG. 3 is an explanatory diagram of correspondence between personal identification information and applied processing information, and FIG. 4 is an internal configuration example of a personal identification information registration area. FIG. 5 shows an example of the internal structure of the correspondence table, and FIG. 6 is a process explanatory diagram of an embodiment related to the invention.

In the embodiment shown in FIG. 2, the area of the memory 14 is divided into zones and managed. Memory 14
Is composed of so-called EPROM and EEPROM. ZS is
This is a secret zone, and in this area, a personal identification information registration area 21 and a secret code SC storage section are provided. In this embodiment, the lead type secret code SC
The R and the secret code SCW of the light system can be set separately, and are used for checking the upstream message 47 and the downstream message 48, respectively.

ZL is a label zone, and label information such as cardholder name and issue date is stored in this area. ZD is a directory zone in which area management information of the memory 14 is set. ZC is a confidential zone in which information such as an account number is stored. ZT is a transaction zone, and historical information such as transactions is stored in this area.

The IC card 10 is set in the terminal device 12, and the terminal device 12
When the personal identification information PIN is input from the PIN pad 30 provided on the personal identification information PIN, the personal identification information PIN is collated by the PIN collation processing 31. When the collation of the personal identification information PIN is successful, the file open process 32 next refers to the directory zone ZD and prepares to start the application process. At this time, a random number request is issued to the center 13, and the center 13 causes the random number generator 41 to generate a random number Eu for the upstream message.
And generate this random number Eu together with the read request, and the IC card 10
To notify.

In response to this read request, the IC card 10 causes the read processing 33
Then, transaction data such as corresponding secret code SCRi of the lead system and account number ACC # i is read. Next, by the read system authentication code generation process 34, the parameters of SCRi, Eu and ACC # i are applied to the predetermined function f, so that the read system authentication code ACu, “ACu = f (SCRi, Eu, A
CC # i) "is generated. Then, the transaction data such as ACu and ACC # i is transmitted to the terminal device 12.

The terminal device 12 has a random number generator 40 for checking the legitimacy of the downlink message, which generates a random number Ed, a text start code (STX), an authentication code ACu, a random number E.
d, transaction data (ACC # i, etc.), text end code (ET
X) etc. to create an upstream message 47 and send it to the center 13.

The center 13 reads the secret code corresponding to the account number ACC # i registered in advance in the secret code file 42, and this, the random number Eu notified previously, and ACC # i.
From i and a predetermined function f, read system authentication code AC
u is generated, and the ACu collation process 43
To match. If they match, the requested transaction or the like is executed, and the account number ACC # i
Update the ledger 45 related to. Then, in the write-system authentication code generation processing 46, the write-system authentication code ACd is generated based on the random number Ed and the write-system secret code SCWi, ACC # i, similarly to the generation of ACu. A downlink message 48 is created from this ACd and transaction processing information, and sent to the terminal device 12.

The terminal device 12 sends the contents of the downlink message 48 and the random number Ed to the IC card 10, and the IC card 10 performs the ACd matching process 35 to perform a predetermined function, the secret code SCWi, the random number Ed, and the ACC.
ACi is generated by applying #i and sent from the center 13.
Match with ACd. If they do not match, it can be seen that the received information is the information on the suspected center that has entered through the line. If ACd matches, the write processing 36 writes the history information about the transaction in a predetermined transaction zone ZT area and notifies the write result.

The present invention is particularly related to the PIN matching process 31, the file open process 32, etc., and the personal identification information registration area
The personal identification information PIN can be registered in the 21. The correspondence table 22 shown in FIG.
It may be considered that the application processing information area 23 provided in ZD and shown in FIG. 1 is provided in the confidential zone ZC.

Correspondence between the personal identification information PIN, the application processing information and the history information is as shown in FIG. 3, for example.

In this example, the owner of the personal identification information PIN1 is
You can receive APL1 service. PIN2 is defined as the master and PIN21 and PIN22
Is defined as a slave to PIN2, and PIN2, PIN21, PIN
22 has a parent-child relationship. PIN21 can activate the application processing APL21, and PIN22 can activate the application processing APL22. However, neither of them can receive the service of applied processing APL2. On the other hand, the master PIN2 is
You can receive all of PL21 and APL22. That is, the personal identification information PIN can be hierarchically managed, and for example, the master PIN owner who is the manager of the group can be given special authority.

The history area of the transaction zone ZT can be managed by the history management information set in the directory zone ZD, for example, for each personal identification information PIN or each application process.

Personal identification information registration area corresponding to the contents shown in FIG.
The data of 21 are as shown in FIG. 4, for example.
Each personal identification information PIN has a flag indicating whether it is a master or a slave. It also has a group pointer that forms a group of personal identification information having a parent-child relationship. Of course, what is shown in FIG. 4 is an example, and information management having similar contents can be realized by other table configurations.

The correspondence between the personal identification information PIN and the application processing information is managed by a correspondence table 22 as shown in FIG. 5, for example. Each personal identification information PIN has a permission flag for each application processing APL, and when the flag is "1", it is determined that the application processing can be received. It may be managed by a group of pointers to the application processing information instead of the flag.

Next, a processing example of a portion related to the present invention will be described with reference to FIG. The following process numbers ~ correspond to the numbers shown in FIG.

The personal identification information PIN and the application processing APL information are input from the terminal device.

The personal identification information registration area 21 is searched and the registered personal identification information PIN and the entered personal identification information PIN are collated.

This collation determines the application processing APL that can receive the service.

It is judged from the input applied processing APL information whether or not there is a qualification, and if there is a qualification, the processing is shifted to. If you do not have the qualification, move to the processing.

The entered personal identification information PIN is not qualified and cannot be traded.

The error log information is sent to the terminal device, the process is returned to, and preparations are made to input the personal identification information PIN and the application process APL information again. Alternatively, instruct the terminal device to eject the IC card.

The history pointer is updated to secure a writing area for history information. In the case of the present embodiment, the history area is divided for each personal identification information PIN, and the divided blocks are further subdivided for each writing unit. Then, each writing area is cyclically used.

By updating the history pointer, it is determined whether or not the address overflows, that is, whether or not the allocated write area is full, and if the write area still remains, the process jumps to processing.

In order not to lose the previously written history information, the previous history information is sent to the center and saved.

Start trading. The following processing may be considered to be the same as the conventional one.

The above-mentioned applied processing APL may be processing related to different processing in a single service, such as balance inquiry processing and deposit / withdrawal processing in a banking service, or a plurality of processing such as a banking service and a credit service. It may be related to the service of.

〔The invention's effect〕

As described above, according to the present invention, it is possible to share an IC card within a group / section while maintaining the security function for each individual. Also, the usage level of the application processing can be differentiated by the personal identification information used, and a wide range of applications in the service provision by the IC card becomes possible.

[Brief description of drawings]

FIG. 1 is a basic configuration diagram of the present invention, FIG. 2 is a block diagram for explaining an embodiment of the present invention, FIG. 3 is an explanatory diagram of correspondence between personal identification information and applied processing information, and FIG. FIG. 5 is an internal configuration example of a personal identification information registration area, FIG. 5 is an internal configuration example of a correspondence table, FIG. 6 is a process explanatory diagram of an embodiment of a portion related to the present invention, FIG. 7 is an external view of an IC card, FIG. FIG. 8 shows an explanatory view of the conventional method. In the figure, 10 is an IC card, 12 is a terminal device, 13 is a center, 14 is a memory, 15 is a program section, 20 is a processor, 21 is a personal identification information registration area, 22 is a correspondence table, 23 is an application processing information area, Reference numeral 24 represents a personal identification information collating unit, and 25 represents a qualification checking unit.

Claims (1)

(57) [Claims] 1. A processor (20) and a memory (1
4) and a contact (1
A personal identification information registration area in which a plurality of personal identification information is stored in an IC card (10) adapted to input and output information to and from a terminal device (12) into which the card is inserted via 1) (21) and an application processing information area (23) for storing application processing information related to a service provided corresponding to each of the personal identification information are provided in the memory (14), and the terminal device is also provided. Personal identification information is input from (12), the personal identification information registration area (21) is searched, and the personal identification information collating unit (24) that collates the input personal identification information with the registered personal identification information. ), And the application processing information obtained from the application processing information area (23) and the application processing information input from the terminal device (12) based on the verification result by the personal identification information verification unit (24). , The above terminal device (12) IC card having a plurality of personal identification information, characterized in that a qualification check unit for checking the entitlement of the requested application processing (25) the input of.