JPH0789366B2 - Portable storage medium processing device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial Application] The present invention relates to a portable storage medium processing device that issues a portable storage medium such as an IC card.

(Prior Art) Generally, a card with a magnetic stripe, which is used as an identification card or a credit card, that is, a so-called magnetic card has a small amount of stored data and is easy to read the stored content, so that the security is low. There is.

Therefore, recently, a portable storage medium, which is high in security against reading out stored contents and has a large storage capacity, a so-called IC card is being used. This type of IC card is usually handed to the card issuer from the card manufacturer in an unissued state, issued by writing predetermined data in the card issuer, and given to the user. .

By the way, the conventional IC card issuance processing method is the same as the conventional magnetic card issuance, in which the data written on the magnetic tape or the floppy disk is directly input to the card reader / writer via the host computer. The method of issuing by writing on the issued IC card was used. However, in such a conventional processing method,
There is a great possibility that the data to be written in the IC card will be easily leaked to the outside, and this has the drawback that the security of the processing device is poor.

(Problems to be Solved by the Invention) As described above, in the conventional processing method, there is a great possibility that the data written in the portable storage medium may be easily leaked to the outside, and thus the security is poor. There is.

Therefore, the present invention eliminates the above drawbacks, and an object of the present invention is to provide a portable storage medium processing device having high security suitable for a portable storage medium having high security.

[Structure of the Invention] (Means for Solving the Problems) The portable storage medium processing device of the present invention is arranged such that the personal data including the personal name and personal identification information of the card carrier are stored sequentially for a plurality of issued files. Portable storage medium processing device comprising a host device for reading personal data, and an issuing unit which is connected to the host device online to issue the card by recording the read personal data in the memory of the card to be issued In the issuing unit, first reading means for reading the issuance code from a key card storing the issuance code in a memory; and the name and personal identification information of the issuer of the card provided in the issuance unit. From the fixed data card in which the issuer data and the issue code consisting of Second reading means for reading, and comparing means for comparing the issuing code read from the key card by the first reading means and the issuing code read from the fixed data card by the second reading means. Personal data provided in the issuing unit and connected to the host device and the second reading means, respectively, and consisting of personal name and personal identification information read from the issuing file by the host device, and Holding means for respectively holding the issuer data consisting of the issuer's name and personal identification information read from the fixed data card by the second reading means without passing through the host device, and provided in the issuing unit, As a result of the comparison by the comparison means, the issue code read from the key card and the issue code read from the fixed data card In the memory of the card to be issued personal data consisting of the name and personal identification information of the individual held in the holding means and issuer data consisting of the name and personal identification information of the issuer. And a recording device for recording.

(Operation) The present invention relates to a host device that reads personal data from an issuance file that stores personal data consisting of an individual's name and personal identification information, and a card that should receive and issue the read personal data. In a portable storage medium processing device consisting of an issuing unit that issues a card by recording it in a memory, fixed data consisting of the issuer's name and personal identification information common to each card is sent from the fixed data card without going through the host device. With the configuration that the data is supplied to the issuing unit, the data will not be easily leaked to the outside, and the security can be remarkably improved.

(Example) Hereinafter, one example of the present invention will be described with reference to the drawings.

FIG. 3 shows an example of a portable storage medium according to the present invention.
The external view of the IC card with a magnetic stripe after issuance is shown. That is, 1 is a card body, which is made of, for example, a rectangular thin plastic plate. A magnetic stripe 2 formed in a strip shape in the longitudinal direction is provided on the front end of the card body 1. In addition, emboss information 3 written on the emboss printed on the surface of the card body 1 is formed. The emboss information 3 is made up of identification information of the card carrier, such as the card carrier's name, account number, and card expiration date. Further, the surface of the card body 1 is electrically connected to an integrated circuit (IC) 4 embedded in the card body 1 and serves as an input / output terminal for obtaining electrical contact with a card reader / writer (not shown). The contact part 5 is provided. Integrated circuit 4
Is composed of a control unit (for example, a microprocessor) 6 and a memory unit (for example, EEPROM) 7. It should be noted that the emboss information 3 is not formed before issuance.

FIG. 2 shows an external perspective view of an IC card processing device for issuing an IC card as an example of the portable storage medium processing device according to the present invention, and FIG. 1 shows its block configuration diagram. That is, reference numeral 11 denotes a host control unit, which includes a host processor 12 including a control unit (not shown) and a memory unit that contains a control program, and a hard disk device 13 that stores a program for controlling the entire apparatus and processing contents of the apparatus. And a floppy disk device 14 for inputting data that is a part of the data to be written to the IC card, which is different for each IC card, such as the name of the card carrier, or the account number for a cash card. , Which will be the host of this device. Reference numeral 15 is a magnetic tape unit for inputting different data for each IC card, like the floppy disk device 14, and is connected to the host processor 12, whereby an IC card issuer uses it for its service, for example. From the list of new subscribers registered on the system host computer,
It is also possible to use the magnetic tape created by the magnetic tape unit of the host computer. Reference numeral 16 is a keyboard for performing various operations, 17 is a CRT display device for displaying operating procedures, states, etc. These are connected to the host processor 12. Reference numeral 18 denotes a card reader / writer which is connected to the host processor 12 and into which an access key card AC for activating the apparatus can be inserted. Access key card AC here
For example, an IC card similar to the IC card shown in FIG. 3 is used. However, the magnetic stripe 2 and the emboss information 3 may not be provided.

19 is a printer that creates a shipping note for sending the issued IC card to the carrier, 20 is the cardholder's temporary PIN (which can be changed by the card carrier) Is a printer that creates an issuance notice 21 for making another notification, and these are connected to the host processor 12. Issuance notice 21 created by printer 20
Is configured, for example, as shown in FIG. That is, the peripheral portion (the shaded portion 2
An envelope-shaped issuance notice 21 to which 3) is glued is formed so that it can be cut at perforations 24 provided in the peripheral portion thereof. Then, in this issuance notice 21,
Name 25 and temporary PIN 26 are printed. In this case, the area where the address / name 25 is printed is also colored on the first sheet of the front surface, and the area where the temporary secret code 26 is printed is colored only on the second (front) side of the back sheet Does not develop color. As a result, the temporary personal identification number is written so that only the card carrier can know it.

Reference numeral 27 denotes an issuance processing unit for processing an IC card to be issued, which is connected to the host processor 12. The issue processing unit 27 is configured as follows. That is, 28 is a microprocessor, which controls the issuance of the IC card according to an instruction from the host processor 12, that is, the control of writing magnetic data on the magnetic stripe 2 of the IC card, the control of forming the emboss information 3 on the IC card, the IC Controls such as writing data in the memory unit 7 of the card are performed. 29 is a keyboard, 30 is a display, these are microprocessor 28
It is connected to the. The keyboard 29 is for inputting a personal identification number,
It is used as an input for the test operation of the issue processing unit 27, resetting in case of trouble, and the like. The display unit 30 displays the state of the issue processing unit 27, the result of the test operation, and the like. Reference numeral 31 is a hopper for accommodating an unissued IC card, 32 is an encoding unit for writing magnetic data, 33 is an embossing unit for forming and recording emboss information, and 34 is a reader / writer for reading / writing data from / to the IC card. A unit, 35 is a destruction unit for destroying (for example, punching) a defective IC card, and 36 is a partitioning section for distributing the IC cards, which are controlled by the microprocessor 28. 37 is a reject stacker for storing defective IC cards, and 38 is a stacker for storing issued IC cards. A read / write control unit 39 having a data buffer for temporarily holding data and an arithmetic function is connected to the microprocessor 28 and the reader / writer unit 34. Reference numeral 40 is a card reader / writer for reading / writing data from / to the key card KC, 41 is a card reader / writer for reading / writing data from / to the fixed data card, and these are read / write control units. Connected to 39.

That is, the unissued IC cards are stacked and stored in the hopper 31 so that they can be taken out one by one in response to a signal from the microprocessor 28. The IC card taken out from the hopper 31 is sent to the encoding unit 32 for writing magnetic data. The microprocessor 28 is
After a detector (not shown) detects that an IC card has arrived, a write / read head (magnetic head) not shown
Then, the magnetic data is written on the magnetic stripe 2. After the writing is completed, the microprocessor 28 reads the written data, checks whether the written data is correctly written, and then sends the IC card to the embossing unit 33. If the written data is incorrect, the magnetic data is written again and then checked. If the data cannot be correctly written even by this, it passes through the embossing unit 33, then passes through the reader / writer unit 34, and is sent to the destruction unit 35. Here, for example, as shown in FIG. Open. This allows
Prevent the IC card from being used and visually identify it as a defective IC card.
If the embossed information 3 has been formed, a hole 9 is also formed in the embossed information 3 as shown in FIG. 4, for example. Regarding electric recording, since a void command can be written in the memory unit 7 by the control unit 6 of the IC card so that the IC card cannot be used, it is not always necessary to make a break such as making a hole. This not only makes it impossible to use this IC card in a terminal that can be used, but also makes it possible to determine that this IC card cannot be used without using a device. The magnetic stripe 2 and the embossed information 3 are punched and the void command is written in the memory section 7 in the following forms.

The first is that the magnetic stripe 2 is defective, and the error is during the formation of the embossed information 3 after the writing to the magnetic stripe 2 is normally completed. The second is that the embossed information 3 is normally formed. If the embossing information 3 is not normally formed but is normally formed (for example, the last number of the account number is embossed with an incorrect number), the writing to the memory unit 7 is impossible. Is. Third, the magnetic stripe 2 and the embossed information 3 are normal, but the IC card is not a normal IC card because a part of the memory unit 7 is defective. However, this IC card can be partially used by a terminal device. If possible.

In the case of the first case, the destruction unit 35 makes a hole 8 in the magnetic stripe 2, and the reader / writer unit 34 writes a void command in the memory unit 7. Although the embossing information 3 is not formed at all, it can be judged even if it is seen because it is incomplete, and therefore it is not necessary to make a hole in the destruction unit 35.

In the case of the second case, since the magnetic stripe 2 is normally written and the emboss information 3 is normally formed, each part of the magnetic stripe 2 and the emboss information 3 is punched by the destruction unit 35. To do. Since writing to the memory unit 7 is impossible, it is not necessary to write a void instruction with the reader / writer unit 34 (rather, it is impossible to write the void instruction itself).

In the case of the third case, the destruction unit 35 perforates each part of the magnetic stripe 2 and the embossed information 3, and the reader / writer unit 34 writes a void instruction in the memory unit 7.

After the unusable process described above is applied to the defective IC card, it is sorted by the sorting unit 36, and the reject stacker is sorted.
Bad IC cards are accumulated in 37.

In the IC card in which the magnetic data is normally written and sent to the embossing unit 33, the embossing unit 33 forms the embossing information 3. Here, generally, the raised character is formed on the upper side by a letter type press (convex type and concave type), but the letter may be attached or the raised character may be formed. When the embossing information 3 is formed by pressing a character die, the position of the press die for each character is checked to see if the embossing is done normally or not.
When 28 is checked, if the embossing becomes defective, the embossing is immediately stopped and the unusable process as described above is performed. Of course, the data to be embossed is controlled by the microprocessor 28.

When the emboss information 3 is formed normally, the IC card is sent to the reader / writer unit 34, and the reader / writer unit 34
The contact portion 5 of the IC card comes to the contact position of and is stopped. Thereafter, the microprocessor 28 controls so that the contact portion (not shown) of the reader / writer unit 34 comes into contact with the contact portion 5 of the IC card. When a signal that the contact of the contact unit 5 is completed is input to the read / write control unit 39 by the microprocessor 28,
The read / write control unit 39 supplies power to the control unit 6 and the memory unit 7 via the contact unit 5 and sends a start signal (command). The read / write control unit 39 receives the reply signal (response) from the control unit 6 of the IC card, and then the key card KC inserted into the card reader / writer 40 and the fixed data card inserted into the card reader / writer 41. The data from the FC is written in the memory section 7 of the IC card and checked. Here, when it is confirmed by the read / write control unit 39 that the data has been normally written, the microprocessor 28 receives a signal from the read / write control unit 39, and the microprocessor 28 receives a contact from the contact unit 5 of the IC card (not shown). The reader / writer unit 34 is controlled to separate the parts. After that, under the control of the microprocessor 28, the IC cards which have passed through the destruction unit 35 and are sorted by the sorting section 36 and all writing is normally completed are stacked in the stacker 38. Here, as the key card KC and the fixed data card FC, for example, an IC card similar to the IC card shown in FIG. 3 is used. However, the magnetic stripe 2 and the emboss information 3 may not be provided.

The three writings of magnetic data, embossing information and electronic recording are brought to the end by the electronic recording unit, ie the reader / writer unit 34. Since the writing of the emboss information is a press, the integrated circuit 4 and the contact portion 5 are recorded on the IC card in which the integrated circuit 4 and the contact portion 5 are not destroyed during this work, that is, the product check can be performed.

In FIG. 2, reference numeral 42 designates a take-out door for taking out the IC cards in the stackers 37, 38.

FIG. 6 shows the contents of the memory section 50 of the access key card AC. 51 is a control program area storing a control program, 52 is a terminal access code area storing a terminal access code, 53 is a card access code area storing a card access code, and 54 is a personal identification number. PIN code area, 55 is a user name area that stores a user name (code), 56 is a void area for storing a void instruction, 57 is an error count area for performing an error count, and 58 is This is an issue recording area for recording flight records.

FIG. 7 shows the contents of the memory section 60 of the key card KC. 61 is a control program area storing a control program, 62 is a issuing code area storing a issuing code, 63 is a terminal access code area storing a terminal access code, 64 is a card access code Card access code area, 65 is a personal identification number area that stores a personal identification number, 66 is a user name area that stores a user's name (code), 67 is an issuer that stores a temporary issuer personal identification number Person temporary PIN number area, 68 is an issuer recording area that stores the issuer record, 69 is a void area for storing the void instruction, 70 is an error count area for performing an error count, and 71 is the issue record. This is an issue recording area for performing.

FIG. 8 shows the contents of the memory section 80 of the fixed data card FC. 81 is a control program area storing a control program, 82 is an issue code area storing an issue code, 83 is a terminal access code area storing a terminal access code, 84 is a card access code Card access area, 85 is a personal identification number area storing a personal identification number, 86 is a user name area storing a user name (code), 87 is a void area for storing a void instruction, 88 is An error count area for error counting, 89 is an issued number area that stores the number of issued sheets (processed number), and 90 is a data area that stores data that is common to IC cards and that should be written to the IC card. . The above-mentioned number of issued cards is stored in advance by, for example, an administrator (full-time person), and is the number of IC cards issued this time.

FIG. 9 shows the contents of the memory section 7 of the IC card after issuance. Reference numeral 91 is a basic control program area storing a basic control program, 92 is a manufacturer recording area storing a manufacturer record, 93 is an issuer recording area storing an issuer record, and 94 is an issuing record. An issue recording area for performing, an application program area 95 for storing an application program, a carrier recording area for performing carrier recording, 96 is an empty area.

Next, the operation of the above configuration will be described with reference to the flowchart shown in FIG. First, when the power of this device is turned on, the host processor 12 performs the initial setting, and if there is no problem, causes the display device 17 to display a message "Insert access key card" (S
1). Here, the operator inserts the access key card AC into the card reader / writer 18 (S2). Then, the access key card AC is supplied with power and activated,
Between the access key card AC and the host processor 12,
It is verified whether the inserted access key card AC is suitable for this device (S3, S4). This matching of conformity is performed by the following method, for example. That is, the terminal access code is stored in the terminal access code area 52 of the memory unit 50 of the access key card AC, the host processor 12 requests this terminal access code, and by returning this to the host processor 12, the host The code registered in the processor 12 is compared. Next, the card access code is sent from the hoft processor 12 to the access key card AC, and collated with the card access code in the card access code area 53 of the memory section 50 in the access key card AC. Host Processor 12 and Access Key Card AC in any way
Check that and can access each other. If here, host processor 12 and access key card AC
If it is not possible to check with, the access key card AC is ejected from the card reader / writer 18 (S5), and the processing is completed. Since the access key card AC is different, if another access key card AC is used, the process starts from the first step.

If the host processor 12 and the access key card AC are compared in step S4, the host processor 12
Reads out all the data in the memory section 50 of the access key card AC and temporarily holds it (S6), and causes the display device 17 to display a message "Enter password" (S7).
Here, the operator inputs the personal identification number using the keyboard 16 (S8). The input personal identification number is sent to the host processor 12, and the host processor 12 receiving the personal identification number reads it from the access key card AC and collates it with the personal identification number in the personal identification number area 54 (S9). If the personal identification numbers do not match, the value in the error count area 57 read from the access key card AC and held therein is checked (S10). For example, if the number of mismatches reaches 3, the access key card
If AC is controlled so that it cannot be used, check whether the number of mismatches (error count) is three.
If the number of mismatches has not reached 3, the error count area 57 of the memory unit 50 of the access key card AC
The value in is incremented by 1 (S11), and the display device 1
No. 7 "PIN code not verified, please enter the PIN again"
Message is displayed, but the operation returns to step S7. Therefore, you will have to enter the password again. On the other hand, when the number of mismatches reaches 3, the host processor 12 clears the data of the access key card AC that was temporarily held (S12), and issues a void instruction to the void area 56 of the memory unit 50 of the access key card AC. Write (S13),
Disable access key card AC after that. This method is performed, for example, by issuing a disabled code instead of the terminal access code when matching the host processor 12 with the access key card AC. In this way, when the access key card AC is voided, the contents of the user name area 55 of the memory unit 50 of the access key card AC is read out, and the printer 19 reads the user name, unmatched comment, date, etc. Is printed (S14), and after the printing is completed, all processing is finished. The access key card AC is ejected from the card reader / writer 18 after the user name is read before the printing.

If the personal identification numbers match in step S9, the host processor 12 causes the display device 17 to display a message "insert key card" (S15). here,
Insert the key card KC into the card reader / writer 40 (S1
6). Then, the key card KC and the read / write control unit 39 are connected to the above-mentioned host processor 12 and access key card.
The verification is performed in the same manner as the verification that AC and each other can access each other (S17, S18). If the key card KC and the read / write control unit 39 cannot be checked here, the key card KC is ejected from the card reader / writer 40 (S19). If there is a new key card KC, that is, if a different key card KC is inserted by mistake, another correct key card KC can be inserted (S20). Keyboard 16 if you do not have another keycard KC
Press the end key with (S21). Then, the read / write control unit 39 clears the contents of the data buffer (S22),
User name area of memory section 50 of access key card AC
After the contents of 55 are read, the access key card AC is ejected from the card reader / writer 18 (S23). At the same time, the user name read from the user name area 55 by the printer 19 is printed with the date (S24),
After this printing is completed, all processing is completed.

When the key card KC and the read / write control unit 39 are compared in step S18, the read / write control unit 39 reads all the data in the memory unit 60 of the key card KC and temporarily holds it in the data buffer (S25 ) Further, by receiving a signal indicating that the collation has been obtained from the read / write control unit 39 via the microprocessor 28, the host processor 12 causes the display device 17 to display a message "Enter password" ( S26). Here, the personal identification number is input using the keyboard 29 (S27). If the administrator, not the operator who uses the access key card AC, inputs the personal identification number, the security of the IC card issuance work is enhanced. In addition, the input of the personal identification number does not depend on the keyboard 16
Since the keyboard 29 provided on the 27 is used, security is enhanced such that wiring is not made to the outside so that eavesdropping cannot be performed on the way.

The personal identification number input by the keyboard 29 is sent from the microprocessor 28 to the reading / writing control unit 39, and the reading / writing control unit 39 receiving the personal identification number reads it from the key card KC and holds the personal identification number area 65. It collates with the password in (S28). The comparison result is sent from the read / write control unit 39 to the host processor 12 via the microprocessor 28. Therefore, the display of the verification result (match, mismatch) can be confirmed on the display device 17, but the verification result is also displayed on the display unit 30 of the issuing processing unit 27, and the PIN of the key card KC is entered in the issuing processing unit 27. The operation is easy for those who are doing it.

If the PIN numbers do not match in step S28,
The read / write control unit 39 checks the value of the error count area 70 read from the key card KC and held in the data buffer (S29). For example, if the number of times of disagreement is three, and if the key card KC is controlled to be unusable, it is checked whether the number of times of disagreement (the number of times of error) is three. If the number of mismatches has not reached 3, the value in the error count area 70 of the memory unit 60 of the key card KC is incremented by 1 (S30), and the display device 17 displays "PIN code mismatch, The message "Please input the password again" is displayed, but the operation returns to step S26. Therefore, the personal identification number will be input again. On the other hand, if the number of times of disagreement has reached 3, the read / write control unit 39 clears the contents of the data buffer (S31), and writes the void command to the void area 69 of the memory unit 60 of the key card KC (S32), Disable the use of key card KC after that. This method is performed, for example, by issuing an unusable code instead of the terminal access code when the read / write control unit 39 and the key card KC are collated. In this way
Access key card if key card KC is voided
After the contents of the user name area 55 of the memory unit 50 of the AC and the contents of the user name area 66 of the memory unit 60 of the key card KC are read, respectively, the access key card AC receives the key from the card reader / writer 18. Card KC is a card reader
Each is discharged from the writer 40. At the same time, the printer 19 prints the user name read from the user name area 55 and the user name read from the user name area 66, the unmatched comment and the date (S33). After such processing, the operation of this device ends,
In case of re-operation, it is necessary to start from the beginning.

If the personal identification numbers match in step S28, the host processor 12 causes the display device 17 to display a message "Insert fixed data card" (S3).
Four). Here, the fixed data card FC is inserted into the card reader / writer 41 (S35). Then, the fixed data card FC and the read / write control unit 39 perform the collation by the same method as the above-mentioned collation that the read / write control unit 39 and the key card KC can access each other (S36). , S37). If the fixed data card FC and the read / write control unit 39 cannot be compared here, the fixed data card FC is ejected from the card reader / writer 41 (S38). When there is a new fixed data card FC, that is, when a different fixed data card FC is inserted by mistake, another correct fixed data card FC can be inserted (S39). If there is no other fixed data card FC, press the end key on the keyboard 16 (S40).
Then, the read / write control unit 39 clears the contents of the data buffer (S41), and the memory unit 5 of the access key card KC.
After the contents of the user name area 55 of 0 and the contents of the user name area 66 of the memory part 60 of the key card KC are read respectively, the access key card AC is the card reader / writer 18 and the key card KC is the card. Each is discharged from the reader / writer 40 (S42). At the same time, printer 1
The user name read from the user name area 55 and the user name, comment, date, etc. read from the user name area 66 are printed by 9 (S43). After such processing, the operation of the present apparatus ends, and in the case of re-operation, it is necessary to start from the beginning.

In step S37, when the fixed data card FC and the read / write control unit 39 are compared, the read / write control unit 39 determines that the fixed data card FC has the memory unit.
All data of 80 are read and temporarily held in the data buffer (S44), and then the fixed data card FC and the key card KC are compared (S45, S46). This match is
For example, the issue code in issue code area 62 read from key card KC and held in the data buffer is compared with the issue code in issue code area 82 read from the fixed data card FC and held in the data buffer. It is done by doing. Both the key card KC and the fixed data card FC are used as a pair, and therefore the above verification needs to be performed. Fixed Data Card FC can be used with Key Card KC when issued by different issuers but used in the same way (for example, if XX Bank and XX Bank can cooperate with each other and use each other). It is effective to separate it from the fixed data card FC. In this case, if a plurality of issue codes are provided in the issue code area 82 of the memory unit 80 of the fixed data card FC, it is possible to deal with key cards KC of different issuers. Of course, the key card KC
By storing all the data of the fixed data card FC (data to be written to the IC card to be issued) in, it is possible to activate this device only with the key card KC. In this case, this can be done by initializing the keyboard 29 of the issuing processing unit 27.

In step S46, when the key card KC and the fixed data card FC cannot be collated, the fixed data card FC is discharged, and the process proceeds to step S38.
The same processing is performed as when the collation with 39 cannot be obtained.

In step S46, when the key card KC and the fixed data card FC are compared, by receiving a signal to that effect from the read / write control unit 39 via the microprocessor 28, the host processor 12 causes the display device 17 to display. The message "Enter password" is displayed (S47). Here, as in the case of inputting the personal identification number of the key card KC, the personal identification number is input using the keyboard 29 (S4
8). If this is also done by the administrator instead of the operator who uses the access key card AC as in the case of inputting the personal identification number of the key card KC, the security of the IC card issuance work will be enhanced.

The personal identification number input by the keyboard 29 is sent from the microprocessor 28 to the read / write control unit 39, and the read / write control unit 39 receiving the secret code receives the fixed data card FC.
The identification number in the identification number area 85 read out from the data buffer and held in the data buffer is collated (S49). The comparison result is sent from the read / write control unit 39 to the host processor 12 via the microprocessor 28. Therefore, the display of the verification result (match, mismatch) can be confirmed on the display device 17, but the verification result is also displayed on the display unit 30 of the issuing processing unit 27, and the PIN of the fixed data card FC is displayed on the issuing processing unit 27. The operation is easy for the person who is inputting.

If the PIN numbers do not match in step S49,
The read / write control unit 39 checks the value of the error count area 88 read from the fixed data card FC and held in the data buffer (S50). For example, when the number of mismatches is 3, if it is controlled that the fixed data card FC cannot be used, it is checked whether or not the number of mismatches (error count) is 3. If the number of mismatches has not reached 3, the value in the error count area 88 of the memory unit 80 of the fixed data card FC is incremented by 1 (S5
1), the display device 17 displays a message "PIN code not collated, enter PIN again", but the operation returns to step S47. Therefore, you will have to enter the password again. On the other hand, when the number of mismatches reaches 3, the read / write control unit 39 clears the contents of the data buffer (S52), and writes the void command to the void area 87 of the memory unit 80 of the fixed data card FC (S53). ),
Prevent use of the Fixed Data Card FC after that. This method is performed by issuing an unusable code instead of the terminal access code when the read / write control unit 39 and the fixed data card FC are collated. In this way, if the fixed data card FC is voided, the access key card
After the contents of the user name area 55 of the memory section 50 of the AC and the user name area 86 of the memory section 80 of the fixed data card FC are read respectively, the access key card AC is read from the card reader / writer 18. , The fixed data card FC is ejected from the card reader / writer 41, respectively. At the same time, the printer 19 prints the user name read from the user name area 55 and the user name read from the user name area 86, unmatched comment, date, and the like (S54). After such processing, the operation of the present apparatus ends, and in the case of re-operation, it is necessary to start from the beginning.

If the personal identification numbers match in step S49, the host processor 12 "puts data in" on the display device 17.
Is displayed (S55). Here, a floppy disk (or magnetic tape), which is a file of data different for each IC card to be written in the issued IC card, is set in the floppy disk device 14 (or magnetic tape unit 15) (S56). Next, an unissued IC card is set in the hopper 31 of the issue processing unit 27 (S57). Next, by depressing the start key with the keyboard 16 (S58), the activation of this apparatus is completed.

When the start-up is completed in this way, the host processor 12 reads out the data for issuing one IC card from the floppy disk device 14 and sends it to the microprocessor 28. Then, the microprocessor 28 takes out one IC card from the hopper 31 (S59). When the IC card taken out reaches the encoding unit 32, the microprocessor 28 writes the data sent from the host processor 12 in the magnetic stripe 2 of the IC card (S60). After the writing is finished, the microprocessor 28 reads the written data and compares the written data with the data sent from the host processor 12 stored in the microprocessor 28 to determine whether the written data is correctly written. Is checked (S61). If the writing is incomplete in this check, the microprocessor 28 writes the data again (S62). Then, the check is performed again (S63), and if the writing is still incomplete, the IC card is sent to the destruction unit 35 as a defect, and the hole 8 is made in the magnetic stripe 2 portion (S64). The data is accumulated in the reject stacker 37 by 36 (S65). Then, the record is recorded in the hard disk device 13 by the host processor 12. Defective reject stacker 37
When the IC card is integrated, the microprocessor 28
Returns to step S59 to take out the next IC card from the hopper 31.

If the writing is normal in the check in step S61 or S63, the IC card in which the magnetic data is written is sent to the embossing unit 33, and the microprocessor 28 forms the embossing information 3 (S66). Since the embossing is performed by pressing the characters one by one, the microprocessor 28 performs the embossing while checking the pressed character position one by one (S67). Therefore, the embossing is stopped at the time when one character is miss-embossed during the embossing, and the IC card is sent as a defect to the destruction unit 35 (S68). The embossed information is usually at least the IC card carrier's number (bank account number) and name, so it seems impossible to use one of them or both of them. The part of the emboss information 3 is destroyed. Here, since the embossment of the number of the carrier is formed first, the destruction unit 35 makes a hole 9 in the portion of that number. In this case, the progress of emboss formation is judged (the time of the emboss interruption is determined by the microprocessor 28).
(S69), the microprocessor 28 punches only the magnetic stripe 2 (S70), or punches both the magnetic stripe 2 and the embossed information 3 (S71). Proceeding to step S65, they are accumulated in the reject stacker 37.

When the emboss information 3 is formed correctly, the IC card is sent to the reader / writer unit 34, and the reader / writer unit 34
The contact portion 5 comes to the contact position and is stopped.
Then, the microprocessor 28 controls the contact portion (not shown) of the reader / writer unit 34 so as to contact the contact portion 5 of the IC card, and then sends a signal indicating that the contact portion is contacted to the read / write controller 39. .
Receiving this signal, the read / write control unit 39 supplies power to the control unit 6 and the memory unit 7 of the IC card to exchange initial signals (the basic control program in the basic control program area 91 of the memory unit 7 is Since it was written when the IC card was manufactured, it is possible to send and receive initial signals). When the initial exchange of signals is completed, the key card KC is compared with the IC card to be issued via the read / write control unit 39 (S72, S73). This collation method is performed, for example, by collating the issuer temporary personal identification number. It is considered that when a manufacturer gives an unissued IC card to the issuer, a personal identification number is set for the delivery between the manufacturer and the issuer so that the third party does not illegally use the IC card. Also, this PIN is IC
Since it is necessary only when the card is handed over, use a different issuer temporary PIN after issuing it. Verification using this issuer's provisional PIN is performed as follows. First, the read / write control unit 39 sends it to the control unit 6 of the IC card which issues the temporary issuer secret code in the temporary issuer secret code number area 67 read from the key card KC and held in the data buffer. The control unit 6 has an issuer recording area 93 of the memory unit 7 (an area for writing data such as an issuer name and an issuer code).
The temporary issuer secret code number written by the manufacturer is read out and collated with the temporary issuer secret code number sent from the read / write control unit 39. If the issuer temporary PINs do not match in this verification, the IC card is sent to the destruction unit 35 (S74) because the writing of magnetic data and the formation of embossing information have been completed (S74). Information 3
Is drilled (S75), and then step S65
Proceed to and the files are accumulated in the reject stacker 37.

When the issuer provisional personal identification numbers match in step S73, the read / write control unit 39 determines the fixed data in the issuer recording area 93 and the application program area 95 of the memory unit 7, or the IC card issued by the carrier recording area 96. Write different variable data (name of carrier, account number, etc.) to (S76). This writing is performed as follows. First, the fixed data in the data area 90 read from the fixed data card FC and held in the data buffer is written in the memory unit 7. The contents of the fixed data include the application program to be written in the application program area 95, the area division of the issue recording area 94 and the carrier recording area 96, and the like. When the writing of the fixed data is completed, the contents of the issuer recording area 68 read from the key card KC and held in the data buffer are written in the issuer recording area 93 of the memory unit 7. When the writing of these data is completed, the read / write control unit 39 writes the variable data for the carrier sent from the host processor 12 via the microprocessor 28 in the carrier recording area 96 of the memory unit 7.

Thus, when the data writing to the memory unit 7 is completed,
The read / write control unit 39 reads the written data,
The write data in the memory unit 7 is checked by collating with the data from the fixed data card FC and the key card KC and the data from the host processor 12 held in the data buffer (S77). If the result of this check is that there is a write error, write again in the memory section 7 (S7
8). If the writing is not successful again (S79) and the application is not complete but can be applied to some extent (S80), the void data is written in the issue recording area 94 of the memory unit 7 (S82). If the void data cannot be written, it is sent as a defective IC card to the destruction unit 35 as it is, and holes are made in the magnetic stripe 2 and the emboss information 3 (S81, S83), and then step S
Proceeding to 65, they are accumulated in the reject stacker 37. Bad IC
When the card is integrated in the reject stacker 37, it is checked by the microprocessor 28, and it is sent from the microprocessor 28 to the host processor 12,
The number of defective sheets is recorded in the hard disk device 13.

If the writing is normal in the check in step S77 or S79, the read / write control unit 39 calculates a temporary carrier secret code number by a random number (S84), and the calculated temporary carrier secret code number is carried by the carrier of the memory unit 7. Write to recording area 96 (S8
Five). Next, the read / write control unit 39 writes the names of the users of the access key card AC, key card KC, and fixed data card FC held in the data buffer in the issue recording area 94 of the memory unit 7 (S86). ). When this is completed, the read / write control unit 39 writes the non-rewritable hold data in the basic control program area 91 of the memory unit 7 (S87), and the personal identification number which is the provisional personal identification number of the carrier or the service provided by the carrier. Rewriting is not possible except where you write it when you receive it. Then, this IC card has already been issued and is sent to the stacker 38 for stacking (S8
8). At the same time, the host processor 12
The IC card's shipping form (all this data can be created from the data recorded on the floppy disk of the floppy disk device 14 or the magnetic tape of the magnetic tape unit 15) is printed by the Create an issuance notice 21 with a personal identification number printed (S89). When the printer 20 prints the temporary personal identification number of the carrier, the memory in the read / write control unit 39 is erased, which makes the temporary personal identification number highly secure.

When the issued IC cards are accumulated in the stacker 38, the read / write control unit 39 counts up the number of issued cards (S9
0), by comparing the count value with the number of issued sheets in the issued number area 89 read from the fixed data card FC held in the data buffer, it is determined whether the issued number has reached the planned number. Check (S91).
If the result of this check is that the planned number has not been reached, a signal to that effect is sent to the host processor 12. Therefore, after receiving data from the host processor 12, the microprocessor 28 takes out one IC card from the hopper 31 ( S59).
As a result of the check in step S91, if the planned number has been reached (the issued number after counting up and the issued number in the issued number area 89 are the same), the issuance ends. Of course, the issue ends even if there is data to be issued on the host processor 12 side.

Before writing the hold data in step S87, the manufacturing number written in the manufacturer recording area 92 of the memory unit 7 (a serial number is assigned to each IC card controlled by the manufacturer together with the manufacturing record). Read the stored number),
By writing as the serial number of the issued IC card in the issuance recording area 71 of the memory unit 60 of the key card KC, the check including from the manufacturing becomes possible, which is effective in management.

When the issuance is completed in this way, the read / write control unit 39
The counted number of issued sheets is written together with the date in the issued recording area 71 of the memory section 60 of the key card KC (S92). When this writing is completed, the host processor 12 causes the display device 17 to display a message "Press the end key" (S93). Here, the end key is pressed by the keyboard 16 (S94). This allows the host processor 12
Prints the issue record stored in the hard disk device 13 by the printer 19 (S95). This issue record is, for example, as shown in FIG. 11, the serial number read from the IC cards issued in the order of issue numbers, and the name and address of the carrier input by the floppy disk device 14 (or the magnetic tape unit 15). Is printed. Further, by opening the outlet door 42 of the issuing processing unit 27, the reject stacker 37 and the stacker 38
Take out the IC card and the issued IC card respectively (S96). Since a defective IC card has a hole in at least the magnetic stripe 2 or both the magnetic stripe 2 and the embossed information 3, it can be easily distinguished from the issued IC card. There is.

After that, when the end key is pressed again by the keyboard 16 (S97), the host processor 12 determines that the access key card AC is entered in the same manner as the issue record is written in the key card KC.
Write the issue date, number of issued sheets, key card code, fixed data card code, etc. in the issue recording area 58 (S98). As a result, a record of what, when, and how many sheets were issued is recorded. Next, the read / write controller
39 clears the contents of the data buffer (S99). Then, the access key card AC, the key card KC, and the fixed data card FC are ejected (S100), and all the operations of the apparatus are completed.

The IC card processing device described above uses the key card KC and fixed data card FC that hold the data common to the IC card that should be written to the unissued IC card. Read / write control unit 39 for common data held in the IC card
The data is stored in the built-in data buffer and then written in the IC card by the read / write control unit 39.
And data reading from fixed data card FC, holding read data, and holding data IC
Writing to the card is performed by the read / write controller 39 (and the microprocessor 28) as described above. As a result, data can be read from the key card KC and the fixed data card FC, the read data can be retained, and the retained data can be written to the IC card without using the host processor 12. The data written in will not be leaked to the outside easily, and the security will be very high.

In the above embodiment, the number of issued sheets (the number of processed sheets) is input by the fixed data card FC, but the number is not limited to this, and may be input by, for example, the key card KC, or the keyboard 29 of the issuing processing unit 27. You may input by.

Further, the present invention is not limited to the above embodiment, and various modifications can be made. For example, instead of the key card KC and its card reader / writer 40, a read / write control unit 39 is provided as a data holding device having a control unit and a memory unit that stores information for identifying the user and can perform collation inside. It is conceivable that the and are connected by a detachable contact. Similarly, the fixed data card FC and its card reader / writer 41 also store information for identifying the user, and are a data holding device having a control unit and a memory unit capable of collating internally, and read / write control. It is conceivable to connect the portion 39 with a detachable contact. In addition, although the personal identification number was used for the information that identifies the user of the key card KC and the fixed data card FC, it is also possible to memorize physical characteristics such as the user's fingerprint and signature, and to verify it with it. is there. In that case, it is necessary to provide the keyboard 29 of the issuing processing unit 27 with means for inputting a fingerprint, a signature, or the like.

Further, in the above-described embodiment, the case where the present invention is applied to the IC card processing device that issues the IC card by writing the predetermined data to the unissued IC card has been described, but the present invention is not limited to this. Instead, for example, write initialization data to the IC card at the IC card manufacturing stage.
The same can be applied to the IC card processing device.

Furthermore, in the above-described embodiment, the case where the portable storage medium is an IC card with a magnetic stripe has been described, but the present invention can be similarly applied to an IC card without a magnetic stripe or an optical memory card called a laser memory card.

[Effects of the Invention] As described in detail above, according to the present invention, it is possible to provide a portable storage medium processing device having high security suitable for a portable storage medium having high security.

[Brief description of drawings]

1 is a block diagram of an IC card processing device, FIG. 2 is an external perspective view of the IC card processing device, and FIG. 3 is an IC after issuance. External perspective view of card, FIG. 4 is an external perspective view of defective IC card, fifth
FIG. 6 is a diagram showing an example of printing a notice of issuance of a provisional personal identification number of a carrier, FIG. 6 is a diagram showing contents of a memory unit of an access key card, FIG. 7 is a diagram showing contents of a memory unit of a key card,
FIG. 8 is a diagram showing the contents of the memory unit of the fixed data card, FIG. 9 is a diagram showing the contents of the memory unit of the IC card after issuance, FIG. 10 is a flowchart explaining the operation, and FIG.
The figure shows an example of printing the issuance record. 6 ... IC card control unit, 7 ... IC card memory unit,
11 …… Host control unit, 12 …… Host processor,
27 …… Issuing processing unit, 28 …… Microprocessor,
34 …… Reader / writer unit, 39 …… Read / write control unit, 40,41 …… Card reader / writer, 60 …… Key card memory unit, 80 …… Fixed data card memory unit, KC …… Key card , FC …… Fixed data card.

Continuation of front page (56) References JP-A-61-184792 (JP, A) JP-B 54-37462 (JP, B2) JP-B 60-9881 (JP, Y2)

Claims (1)

[Claims] 1. A host device for sequentially reading the personal data from an issued file in which personal data consisting of personal names and personal identification information of cardholders are stored for a plurality of persons, and the host device is connected to the host device online to read the personal data. In a portable storage medium processing device comprising an issuing unit for issuing a card by storing personal data in the memory of the card to be issued, a key card provided in the issuing unit and storing an issue code in the memory First reading means for reading an issuance code; fixed data card provided in the issuance unit and having issuer data consisting of the name and personal identification information of the issuer of the card and the issue code stored in a memory; Second reading means for reading data and the issuing code; and reading from the key card by the first reading means. Comparing means for comparing the issued code read with the issued code read from the fixed data card by the second reading means; and the host device and the second reading means provided in the issuing unit. And personal data consisting of personal name and personal identification information read from the issuance file by the host device, and read from the fixed data card by the second reading means without passing through the host device. Holding means for respectively holding issuer data consisting of the issuer's name and personal identification information; and an issue code read from the key card and the fixed data card provided in the issuing unit, as a result of comparison by the comparing means. If the issue code read from the document matches the name and the name of the individual held in the holding means, Storage device for recording personal data including personal identification information and personal identification information, and issuer data including the name and personal identification information of the issuer in the memory of the card to be issued. .