JP7619138B2 - Electronic information storage medium, processing method, and program - Google Patents

Description

Relates to technical fields such as IC cards that can acquire human biometric data.

Conventionally, IC cards with fingerprint authentication functions have been proposed. For example, Patent Document 1 discloses an RFID device that includes an antenna for receiving RF (Radio Frequency) signals, an RFID chip that is powered by contactless communication using the antenna, and a fingerprint authentication engine. The fingerprint authentication engine is configured to compare a fingerprint read by a fingerprint reader with pre-stored fingerprint data.

Special table 2017-538188 publication

However, when the RFID device disclosed in Patent Document 1 is used as a credit card, for example, there is a possibility that a function (e.g., a payment function) of an application in the device may be misused by a third party via contactless communication during the process of delivering a newly issued credit card to a user by mail or other means.

The present invention has been made in consideration of these problems and aims to provide an electronic information storage medium, processing method, and program that can prevent unauthorized use of functions by applications.

In order to solve the above problem, the invention described in claim 1 is an electronic information storage medium having one or more interfaces for receiving commands from an external device and equipped with an application for executing processing in accordance with the command, comprising: an acquisition means for acquiring biometric data from a user's body by a biometric data acquisition sensor, the biometric data being used for user authentication, from the biometric data acquisition sensor; a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium; and a setting means for setting the payment processing application to be selectable via the specific interface when biometric data is registered by the registration means in a state in which selection of all payment processing applications via a specific interface among the applications is set to be impossible.

The invention described in claim 2 is characterized in that in the electronic information storage medium described in claim 1, the specific interface is a non-contact communication interface.

The invention described in claim 3 is the electronic information storage medium described in claim 2, characterized in that the electronic information storage medium has multiple interfaces including the non-contact communication interface and the contact communication interface.

The invention described in claim 4 is characterized in that, in the electronic information storage medium described in any one of claims 1 to 3, it comprises a determination means for determining whether or not the payment processing application is set to be selectable via the specific interface when a selection command for the payment processing application is received from the external device via the specific interface, and a selection means for selecting the payment processing application when the determination means determines that the payment processing application is set to be selectable.

The invention described in claim 5 is a processing method executed by a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and equipped with an application for executing processing in response to the command, comprising the steps of: acquiring biometric data from a user's body by a biometric data acquisition sensor, the biometric data being used for user authentication; registering the acquired biometric data in the electronic information storage medium; and, when the biometric data is registered in a state in which selection of all payment processing applications via a specific interface among the applications is set to be impossible, setting the payment processing application to be selectable via the specific interface.

The invention described in claim 6 is characterized in that a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and equipped with an application for executing processing in response to the command is made to function as an acquisition means for acquiring biometric data from a user's body by a biometric data acquisition sensor, the biometric data being used for user authentication, from the biometric data acquisition sensor, a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium, and a setting means for setting the selection of the payment processing application via a specific interface to be possible when biometric data is registered by the registration means in a state in which selection of all payment processing applications via a specific interface is set to be impossible among the applications.

The present invention makes it possible to prevent unauthorized use of application functions.

1 is a diagram showing an example of a schematic configuration of an IC card 1. FIG. FIG. 11 is a diagram showing an example of an operation sequence for fingerprint registration; FIG. 11 is a diagram showing an example of an operation sequence when a payment processing application is selected. FIG. 11 is a diagram showing an example of an operation sequence during payment processing.

The following describes in detail an embodiment of the present invention with reference to the drawings. The embodiment described below is an embodiment in which the present invention is applied to an IC card with a fingerprint authentication function (one example of the electronic information storage medium of the present invention) that has multiple interfaces for receiving commands from external devices and is equipped with an application for executing processing according to the commands. Examples of such IC cards include credit cards and electronic money cards.

[1. Configuration and Functions of IC Card 1]
First, the configuration and functions of an IC card 1 according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of a schematic configuration of the IC card 1. As shown in Fig. 1, the IC card 1 is configured to include an antenna unit 11, an I/O circuit 12, a fingerprint sensor 13, a fingerprint controller 14, and a main controller 15.

The antenna unit 11 receives radio waves (RF signals) transmitted from a reader/writer (RW) included in the external device and outputs the electrical signal to the main controller 15 via the I/O circuit 12. The antenna unit 11 also transmits the electrical signal output from the main controller 15 via the I/O circuit 12 as radio waves. This allows contactless communication between the main controller 15 and the external device. Note that each component of the IC card 1 can be supplied with power by the induced voltage from the antenna unit 11.

The I/O circuit 12 is electrically connected to the main controller 15, and has eight terminals, C1 to C8, defined in ISO/IEC7816, for example. For example, the C6 terminal is electrically connected to the antenna unit 11, and can be used as part of a contactless communication interface for contactless communication with an external device. The C7 terminal is electrically connectable to an external device, and can be used as part of a contact communication interface for contact communication with an external device. Note that power can be supplied to each component of the IC card 1 from an external device via the C1 terminal.

The fingerprint sensor 13 (an example of a biometric data acquisition sensor) is mounted on the surface of the IC card 1, reads a fingerprint from the pad of a finger of a user who uses the IC card 1, and acquires the fingerprint data (an example of biometric data). For example, the fingerprint sensor 13 has tens of thousands of electrodes and a contact surface that the pad of the user's finger comes into contact with, and when the pad of the user's finger comes into contact with this contact surface, an amount of charge corresponding to the proximity of the unevenness of the pad of the user's finger (i.e., the unevenness that constitutes the fingerprint) to the contact surface accumulates in the electrodes. The fingerprint sensor 13 acquires fingerprint data by detecting the amount of charge accumulated in each electrode and converting it into a numerical value (i.e., a numerical value corresponding to the amount of charge). Note that the fingerprint sensor 13 may acquire fingerprint data by a method other than the above.

The fingerprint controller 14 and the main controller 15 each include a RAM (Random Access Memory), a ROM (Read Only Memory), an NVM (Nonvolatile Memory), and a CPU (Central Processing Unit). The fingerprint controller 14 and the main controller 15 are electrically connected. The main controller 15 is capable of sending and receiving commands and responses to and from external devices via the I/O circuit 12. The fingerprint controller 14 and the main controller 15 may be configured on a single IC chip or on separate IC chips.

The fingerprint controller 14 drives the fingerprint sensor 13 to read the user's fingerprint and transmit the fingerprint data. As a result, the fingerprint controller 14, as the acquisition means of the present invention, acquires fingerprint data from the fingerprint sensor 13 to be used for user authentication. Communication between the fingerprint sensor 13 and the fingerprint controller 14 is performed, for example, via an SPI (Serial Peripheral Interface). The fingerprint controller 14 may be incorporated in the main controller 15.

The main controller 15 is an example of a computer in the present invention. An OS (Operating System), applications, and an API (Application Programming Interface) are stored in the ROM or NVM of the main controller 15. Here, the applications include a management application and a payment processing application. The management application is configured to include the program of the present invention. The NVM may be a flash memory or an "Electrically Erasable Programmable Read-Only Memory".

The NVM also includes payment data. The payment data may be a payment ID (identification information) unique to the user of the IC card 1. In this case, the payment ID is linked to the user's payment information and managed by a specified payment processing server. The payment information includes information necessary for payment according to the payment method. Payment methods include electronic money payment and credit card payment. For example, when the payment method is credit card payment, the payment information includes data such as the credit card number, the cardholder's name, and expiration date required for credit card payment. When the payment method is electronic money payment, the payment information includes data such as the electronic money number and electronic value required for electronic money payment. The NVM may also include payment information as payment data.

In the IC card 1 configured as above, for example, the following two parameters (a) and (b) are set to True or False when the card is issued.

Parameter (a): Disables the selection of a specific application via the contact communication interface when a fingerprint is not registered.
Parameter (b): Disables the selection of a specific application via the contactless communication interface when a fingerprint is not registered.

Here, the specific application is, for example, a payment processing application, and is set in advance when the card is issued. The True or False associated with each parameter may be represented by a flag stored in the NVM of the main controller 15. When the flag of either one of parameters (a) or (b) is set to True, the specific application cannot be selected in the contact communication interface or the contactless communication interface when a fingerprint is not registered. This state is called an inactive (deactivated) state of the contact communication or contactless communication interface. On the other hand, when the flags of both parameters (a) and (b) are set to True, the specific application cannot be selected in either the contact communication interface or the contactless communication interface when a fingerprint is not registered. This state is called an inactive state of the specific application.

The main controller 15 executes the program of the present invention, thereby functioning as the registration means, setting means, determination means, and selection means of the present invention. The main controller 15 writes the fingerprint data acquired from the fingerprint controller 14 to a specified area of the NVM. This causes the fingerprint data to be registered (fingerprint registration) in the IC card 1. Then, when a fingerprint is registered in a state in which the selection of a specific application via a specific interface is set to be disabled, the main controller 15 sets the selection of a specific application via the specific interface to be enabled. This causes the flags of both or either one of parameters (a) and (b) to be set to False.

Here, the specific interface refers to both or either of the contactless communication interface and the contact communication interface. In this way, when the user's fingerprint is registered on the IC card 1, the inactivated specific interface or specific application is activated. Furthermore, when the main controller 15 receives a selection command for a specific application from an external device via the specific interface, it determines whether or not the specific application is set to be selectable via the specific interface, and selects the specific application if it determines that the specific application is set to be selectable.

The command transmitted and received between the main controller 15 and the external device is composed of a command APDU (Application Protocol Data Unit) defined in ISO7816, for example. The command APDU is composed of at least CLA, INS, P1, and P2. CLA indicates a command class, and INS indicates a command code. For example, the INS identifies the type of command. Furthermore, P1 and P2 indicate command parameters. A response indicating the result of processing according to the command is returned to the external device. This response is composed of a response APDU defined in ISO7816, for example. The response APDU is composed of a SW (status word), for example. Alternatively, the response APDU is composed of Data and SW, for example.

2. Operation of IC card 1
Next, the operation of the IC card 1 will be described. In the following operation example, an IC card 1 is taken as an example, which is shipped with a specific application as a payment processing application, a specific interface as a contactless communication interface, the contact communication interface activated, and the contactless communication interface deactivated. In other words, immediately after the shipment of the IC card 1, only payment by contact communication is possible. The shipped IC card 1 is delivered to the user by mail or other means.

(2.1. Fingerprint registration operations)
First, the operation during fingerprint registration will be described with reference to Fig. 2. Fig. 2 is a diagram showing an example of an operation sequence during fingerprint registration. In Fig. 2, the registration terminal 2 is an example of an external device having a reader/writer, and may be, for example, a small fingerprint registration device delivered to a user together with the IC card 1, or may be a fingerprint registration device installed at a predetermined location such as a store. In the latter case, the user of the IC card 1 visits the location where the registration terminal 2 is installed to register his/her fingerprint. The user of the IC card 1 brings the IC card 1 close to the reader/writer of the registration terminal 2 or attaches it while touching his/her finger on the fingerprint sensor 13 of the IC card 1.

Note that, since a certain amount of power is required to write the fingerprint data to the NVM of the main controller 15, it is preferable that the IC card 1 and the registration terminal 2 are electrically connected to each other to perform contact communication. However, if the IC card 1 can secure the power required to write the fingerprint data to the NVM of the main controller 15 by electromagnetic induction coupling with the registration terminal 2 (i.e., by induced voltage), non-contact communication may also be performed between the IC card 1 and the registration terminal 2.

In FIG. 2, the registration terminal 2 starts communication when it recognizes the IC card 1, and after a management application is selected in the main controller 15, it transmits a fingerprint registration command to the IC card 1 (step S1). The fingerprint registration command is transmitted to the main controller 15 via the I/O circuit 12. Next, when the main controller 15 receives the fingerprint registration command from the registration terminal 2, it uses the management application to transmit a fingerprint reading command to the fingerprint controller 14 in response to the fingerprint registration command (step S2).

Next, when the fingerprint controller 14 receives a fingerprint reading command from the main controller 15, it transmits a fingerprint reading signal to the fingerprint sensor 13 in response to the fingerprint reading command (step S3). Next, when the fingerprint sensor 13 receives a fingerprint reading signal from the fingerprint controller 14, it reads a fingerprint from the pad of the finger of the user using the IC card 1 in response to the fingerprint reading signal (step S4), and transmits the fingerprint data to the fingerprint controller 14 (step S5).

Next, when the fingerprint controller 14 receives the fingerprint data from the fingerprint sensor 13, it transmits a response including the fingerprint data to the main controller 15 (step S6). Next, when the main controller 15 receives the response from the fingerprint controller 14, it registers the fingerprint by writing the fingerprint data included in the response to a specified area of the NVM using a management application (step S7).

Then, the main controller 15 enables the selection of a payment processing application via the contactless communication interface by the management application (step S8). That is, the flag of parameter (b) is set to False (that is, the value in the NVM is rewritten). However, it is also possible to not set the flag of parameter (b) to False (that is, not to rewrite the value in the NVM). That is, the parameter (b) is configured to restrict behavior when a fingerprint is not registered, and after a fingerprint is registered, no restrictions are imposed on the selection of applications regardless of whether the parameter (b) is True or False. Next, the main controller 15 transmits a response indicating normal termination (SW: 9000) to the registration terminal 2 via the I/O circuit 12 (step S9).

(2.2. Operation when a payment processing application is selected)
Next, the operation when a payment processing application is selected will be described with reference to Fig. 3. Fig. 3 is a diagram showing an example of an operation sequence when a payment processing application is selected. In Fig. 3, a payment terminal 3 is an example of an external device having a reader/writer, and is, for example, a payment device installed at a predetermined location such as a store. A user of an IC card 1 visits a predetermined location such as a store, and brings the IC card 1 close to the reader/writer of the payment terminal 3 or attaches it when making a payment for a product or service, for example.

In FIG. 3, the payment terminal 3 starts communication when it recognizes the IC card 1, and after a management application is selected in the main controller 15, it transmits a selection command (including an application ID) to select a payment processing application to the IC card 1 (step S11). The selection command is transmitted to the main controller 15 via the I/O circuit 12.

Next, when the main controller 15 receives a selection command from the payment terminal 3, it calls an API (function) for confirming the fingerprint registration status from the management application (step S12). The fingerprint registration status is confirmed by this confirmation API, and the confirmation result is returned to the management application as a return value (return value of the function). In this operation example, since a specific interface is set as a contactless communication interface, the confirmation API confirms the flag of parameter (b), and the return value is either True or False, as indicated by the flag. Here, if the user's fingerprint has already been registered by the operation sequence shown in FIG. 2, False is returned as the return value.

Next, the main controller 15 determines whether or not a fingerprint has been registered based on the result of the fingerprint registration status check (True or False) (step S13). In other words, it determines whether or not the payment processing application is set to be selectable via the contactless communication interface. If the main controller 15 determines that a fingerprint has not been registered (the check result is True) (step S13: NO), it proceeds to step S14. On the other hand, if the main controller 15 determines that a fingerprint has been registered (the check result is False) (step S13: YES), it proceeds to step S17.

In step S14, the main controller 15 calls an API for confirming the communication protocol from the management application (for example, a function called APDU.getProtocol()). This confirmation API confirms whether the communication at that time is contact communication or contactless communication, and returns the confirmation result as a return value to the management application. In other words, it confirms whether the selection command was received by contact communication or contactless communication, and returns the confirmation result as a return value.

Next, the main controller 15 determines whether the current communication is contactless communication based on the communication protocol confirmation result (step S15). If the main controller 15 determines that the current communication is contactless communication (step S15: YES), it sends a response indicating an abnormal end to the payment terminal 3 via the I/O circuit 12 (step S16). If the payment terminal 3 receives a response indicating an abnormal end, it does not proceed to payment processing. On the other hand, if the main controller 15 determines that the current communication is not contactless communication (i.e., it is contact communication) (step S15: NO), it proceeds to step S17.

In step S17, the main controller 15 selects a payment processing application. As a result, even if the user starts using the IC card 1 after receiving the IC card 1 without registering fingerprint data (e.g., forgetting to register), payment can be made with the IC card 1 if the current communication is contact communication. Next, the main controller 15 transmits a response indicating normal completion (including FCI (File Control Information)) to the payment terminal 3 via the I/O circuit 12 (step S18). If the payment terminal 3 receives the response indicating normal completion, it proceeds to payment processing.

(2.3. Operation during payment processing)
Next, the operation during payment processing will be described with reference to Fig. 4. Fig. 4 is a diagram showing an example of an operation sequence during payment processing. Note that the operation during payment processing described below is premised on the premise that a fingerprint has been registered according to the operation sequence during fingerprint registration shown in Fig. 2. In Fig. 4, when the payment terminal 3 starts payment processing, it transmits a payment command to the IC card 1 (step S22). The payment command is transmitted to the main controller 15 via the I/O circuit 12.

Next, when the main controller 15 receives a payment command from the payment terminal 3, it uses the payment processing application to send a fingerprint reading command to the fingerprint controller 14 (step S23). Next, when the fingerprint controller 14 receives the fingerprint reading command from the main controller 15, it sends a fingerprint reading signal to the fingerprint sensor 13 in response to the fingerprint reading command (step S24). Next, when the fingerprint sensor 13 receives the fingerprint reading signal from the fingerprint controller 14, it reads a fingerprint from the pad of the finger of the user using the IC card 1 in response to the fingerprint reading signal (step S25) and sends the fingerprint data to the fingerprint controller 14 (step S26). Next, when the fingerprint controller 14 receives the fingerprint data from the fingerprint sensor 13, it sends a response including the fingerprint data to the main controller 15 (step S27).

Next, when the main controller 15 receives a response from the fingerprint controller 14, the payment processing application acquires fingerprint data from the response and acquires registered fingerprint data from the NVM (step S28). Next, the main controller 15 uses the payment processing application to compare the fingerprint data acquired from the response with the fingerprint data acquired from the NVM and determines whether the degree of match between the two is equal to or greater than a threshold (for example, whether the two fingerprint data match) (step S29). That is, the payment processing application performs user authentication. If the main controller 15 determines that the degree of match between the two is not equal to or greater than a threshold (step S29: NO), it transmits a response indicating an abnormal end to the payment terminal 3 via the I/O circuit 12 as a failure of user authentication (step S30). If the payment terminal 3 receives a response indicating an abnormal end, it stops the payment processing. On the other hand, if the main controller 15 determines that the degree of match between the two is equal to or greater than a threshold (step S29: YES), it determines that the user authentication is successful and proceeds to step S31.

In step S31, the main controller 15 uses the payment processing application to obtain payment data from the NVM. Next, the main controller 15 uses the payment processing application to send a response (including payment data) indicating normal completion to the payment terminal 3 via the I/O circuit 12 (step S32). When the payment terminal 3 receives the response indicating normal completion, it obtains the payment data from the response, accesses the payment processing server as necessary, and uses the payment data to execute payment to charge the user for the product or service.

As described above, according to the above embodiment, when the selection of a specific application via a specific interface is set to be disabled, the selection of the specific application via the specific interface is set to be enabled at the time the user's fingerprint data is registered, thereby preventing the functions of the application from being misused.

In the above embodiment, the present invention has been described as being applied to an IC card with a fingerprint authentication function that has multiple interfaces for receiving commands from an external device and is equipped with a specific application for executing processing in response to the command. However, the present invention can also be applied to an IC card with a fingerprint authentication function that has only one interface (e.g., a contactless communication interface) for receiving commands from an external device and is equipped with a specific application for executing processing in response to the command. For example, the present invention can also be applied to an IC card that has only a contactless communication function or an IC card that has only a contact communication function. In this case, the application cannot be selected until the user's fingerprint data is registered in the IC card. If the application is a payment processing application, payment processing cannot be performed. In other words, payment cannot be performed using the IC card until the fingerprint data is registered, and payment can be performed using the IC card at the same time as the fingerprint data is registered. The specific application may be an application other than the payment processing application (e.g., an application for viewing confidential information). In the above embodiment, the IC card is the electronic information storage medium of the present invention, but the main controller 15 (or the IC chip that constitutes the main controller 15) may be the electronic information storage medium of the present invention.

In the above embodiment, a fingerprint sensor, which is an example of a biometric data acquisition sensor, is mounted on the IC card 1, but the present invention can be applied even if the fingerprint sensor is not mounted on the IC card 1. In this case, the fingerprint sensor is installed in a predetermined location such as a store, and is capable of communicating with the IC card 1. In the above embodiment, fingerprint data is used as an example of biometric data used for user authentication, but the user's face, the pattern on the user's palm (palm print), the blood vessels (veins) in the user's palm or fingers, or the iris of the user's eye may be configured to be acquired as biometric data, and the present invention can be applied in such cases as well.

REFERENCE SIGNS LIST 1 IC card 2 Registration terminal 3 Payment terminal 11 Antenna unit 12 I/O circuit 13 Fingerprint sensor 14 Fingerprint controller 15 Main controller

Claims (6)

An electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing a process in response to the command,
an acquisition unit that acquires biometric data from a biometric data acquisition sensor, the biometric data being acquired from a user's body by the biometric data acquisition sensor and used for user authentication;
a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium;
a setting means for setting the application for payment processing to be selectable via a specific interface when biometric data is registered by the registration means in a state in which all of the applications for payment processing are set to be unselectable via the specific interface; and
An electronic information storage medium comprising: The electronic information storage medium according to claim 1, characterized in that the specific interface is a non-contact communication interface. The electronic information storage medium according to claim 2, characterized in that the electronic information storage medium has multiple interfaces including the contactless communication interface and the contact communication interface. a determination means for determining whether or not the payment processing application is set to be selectable via the specific interface when a selection command for the payment processing application is received from the external device via the specific interface;
a selection means for selecting the payment processing application when the determination means determines that the payment processing application is set to be selectable; and
4. The electronic information storage medium according to claim 1, further comprising: A processing method executed by a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing processing in response to the commands, comprising:
acquiring biometric data from a biometric data acquisition sensor, the biometric data being acquired from a body of a user and used for user authentication;
registering the acquired biometric data in the electronic information storage medium;
when the biometric data is registered in a state in which all of the applications for payment processing are set to be unselectable via a specific interface, setting the application for payment processing to be selectable via the specific interface;
A processing method comprising the steps of: A computer that is included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and an application for executing a process in response to the command,
an acquisition unit that acquires biometric data from a biometric data acquisition sensor, the biometric data being acquired from a user's body by the biometric data acquisition sensor and used for user authentication;
a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium;
A program characterized by functioning as a setting means for setting the selection of the payment processing application via a specific interface to be possible when biometric data is registered by the registration means in a state in which selection of all payment processing applications via a specific interface is set to be impossible among the applications.

Images