JPH10124625A - Ic card system, ic card and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the IC card system in which the issuing of a necessary service can be automatically executed by a card holder himself. SOLUTION: A repeating terminal 2 returns a service menu in response to a request from a card control terminal 3a on which an IC card 4a is mounted. The card control terminal 3a selects a specific service from the service menu, and transmits an identifier corresponding to it to the repeating terminal 2. The repeating terminal 2 enciphers an instruction and data(an issuing command) necessary for the reception of a service corresponding to the received identifier, and transmits it through the card control terminal 3a to the IC card 4a. The IC card 4a decodes the issuing command by using a specific key set in an inside memory, and executes the issuing command so that the service can be issued.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card system in which a service provided by a service provider is enjoyed by using an IC card, and in particular, an issuance process to an IC card for enjoying the service is performed by the service. It is related to a method of performing autonomously without depending on the provider.

[0002]

2. Description of the Related Art IC cards have several advantages over magnetic cards and memory cards. For example, in an IC card, writing and reading of information to and from a memory of the IC unit are controlled by using a microprocessor provided in the IC unit, so that it is difficult to externally rewrite information. There is an advantage that measures can be made easier. Such an IC
In an IC card system in which a card is applied to provide a service, a service provider usually sets a file for each service in a specially designed IC card (IC unit), and includes a file necessary for service provision in this file. Stores information. In this case, the PI to be collated when the file to be set is given file access authority (the authority to set, update, delete, etc. the file, the same applies hereinafter).
N (Parsonal Identification Number: hereinafter referred to as a pin) is also included. The setting of the file on the IC card and the setting of the information necessary for the service on the set file are called issuing the service. The issuing on the IC card in which nothing is set is newly issued. Issuance of a service to a certain IC card is referred to as additional issuance, and deletion of set information is referred to as service issuance deletion. Further, the file access authority is also referred to as issuance processing authority.

With reference to FIG. 11, a conventional process from transfer of an IC card to a card holder from a card manufacturer via a service providing organization will be described. Card manufacturers use IC
Before the card is delivered to the service provider, a temporary pin for the service provider is set on the IC card. Also, the authority of file access to the IC card of the service provider is given by collating the pins. Upon receiving the IC card, the service providing organization checks the provisional pin for the service providing organization set by the card manufacturer, and sets this as the actual pin of the service providing organization. With this IC
The responsibility for the card is transferred to the service provider. Thereafter, the service provider checks the pin set by itself and issues a new service. When the card holder receives the IC card from the service providing organization, the card holder sets a holder pin and causes the card holder to belong to the card holder.

[0004]

In the above-described conventional IC card system, new issuance, additional issuance, and issuance deletion of a service to the IC card are all performed under the control of a service providing organization. Here, being under the management of the service provider means that, for example, a person who does not have file access authority to the IC card can prevent additional issuance or deletion of the IC card, or provide a necessary maintenance action for the IC card as a service. Institutions take the initiative. Accordingly, if the cardholder wishes to issue an additional service provided by a service provider, the service provider may be required to provide the service once, as shown in FIG.
It is necessary to have the C card deposited and issue additional services, or bring the IC card to a place designated by the service provider to have additional services issued. However, such a form not only imposes a burden on the management of the service providing organization, but also imposes a burden on cardholders who want to enjoy the service. When a service provided by another service provider is additionally issued in an IC card issued by a service provider, the burden on the card holder is further increased. FIG. 13 illustrates this point.

[0005] An example shown in FIG. 13 is a case where a service provided by another service provider A is additionally issued to an IC card issued by the service provider B.
In the case shown in the figure, the card holder temporarily deposits the IC card with the service provider B having the file access authority for the IC card, or places the IC card in a location designated by the service provider B.
Bringing the C card, the access right of the IC card is first released by collating the pin of the service provider B, and the additional service file of the service provider A is set. Thereafter, the service provider B transfers the IC card in which the additional service file is set to the service provider A, or asks the card holder to reconvene at the designated place, and the service provider B manages the service under the management of the service provider B. The information required for the service provided by the provider A is set.

As described above, it is technically possible to additionally issue a service provided by a service provider other than the service provider that issued the IC card. However, since it takes a lot of trouble, it is not often implemented. The fact is that it has not been done. In the end, in reality, the cardholder must have an IC card for each service provider, and as he receives services from many service providers, he will hold many IC cards, There was a problem that management became complicated.

[0007] Such a problem does not occur when a service is issued online or the like, but instead,
It is necessary to transmit data (pins and the like) for verification together with information necessary for issuing a service on the communication line, which poses a new problem that the service providing organization involves risks. To avoid this problem and ensure security, the encrypted information is sent to the card holder over a communication line, which is decrypted by the IC section of the IC card.
It is possible to issue a service. However, algorithms and keys used for the encryption and decryption are likely to be different for each service provider. If the algorithms and keys are different for each service provider, it is necessary to mount a plurality of algorithms and keys on one IC card.
The limited resources of C cards are not enough.

An object of the present invention is to provide an improved IC card system capable of issuing a plurality of services to a single IC card without a cardholder's consent of a service providing organization. Is to do. Another object of the present invention is to provide an IC card suitable for configuring the IC card system. Another object of the present invention is to provide a recording medium on which a program for realizing the components of the IC card system on a computer is recorded.

[0009]

According to an embodiment of the present invention, there is provided an IC card system comprising: an IC card having issuance processing means for performing issuance processing for enjoying a service provided by a predetermined service providing organization; Means for confidentially distributing issuance commands registered by two service providers to the IC card, and the IC card which has received the confidential distribution of the issuance commands autonomously issues the service for the service. It is characterized by. IC
The fact that the card performs the issuing process autonomously means that new or additional services are issued regardless of the service provider.
This means that the IC card will take the initiative.

[0010] Another IC card system of the present invention comprises an IC card having issuance processing means for performing issuance processing for enjoying a service provided by a predetermined service provider, and an IC card receiving the IC card and receiving the IC card. A card operating terminal for exchanging information between the card operating terminal, a registering means for registering the issued command registered by the service provider in an updatable manner, and the issuing command registered by the registering means through the card operating terminal. And a relay terminal having means for confidentially distributing the service to the IC card, wherein the IC card that has received the confidential distribution of the issued command autonomously issues the service.

In each of the above-mentioned IC card systems, the IC card includes a unique information storage means for storing identification information of the card holder and a unique key assigned to the IC card, and a card holder based on the identification information. Further comprising: authentication processing means for performing authentication of the authentication command and setting an issuance processing authority when the authentication result is valid; and decryption means for decrypting the confidentially distributed issued command using the unique key. When the issuing processing authority is set by the means, the issuing processing means performs the issuing processing based on the decrypted issuing command.

The issuance processing means executes additional issuance or issuance deletion for enjoying a new service after the issuance processing in accordance with the set issuance processing authority.

Another IC card system according to the present invention is a unique information storage means for storing identification information of a card holder and a unique key assigned to the card, and authenticates the card holder based on the identification information. Authentication processing means for setting issuance processing authority when the authentication result is valid, decryption means for decrypting input information using the unique key, and issuance for performing issuance processing for enjoying a service provided by a predetermined service providing organization IC card having processing means, registration means for renewably registering issuance commands registered by the service provider, and card control for receiving the IC card and exchanging information with the IC card Issue processing terminal having means for issuing, wherein the card control means sets the issue processing authority based on the identification information to the IC card. And if the issuance processing authority is set, send at least one issuance command to decrypt based on the unique key, and on the IC card based on the decrypted issuance command. An issuance process for receiving a service provided by the service providing organization is performed.

In the above-mentioned other IC card system, the card control means causes the IC card to execute additional issuance or issuance deletion for enjoying a new service after the issuance processing in accordance with the issuance processing authority. .

According to another aspect of the present invention, there is provided an IC card for performing an issuance process for receiving a service provided by a predetermined service providing institution. Unique information storage means for storing identification information of the card and a unique key assigned to the card; authentication for performing authentication of the card holder based on the identification information and setting issuance processing authority when the authentication result is valid Processing means, and decryption means for decrypting the obtained issued command using the unique key, wherein when the authentication processing means sets the issuance processing authority, the issuance is performed based on the decrypted issued command. Processing is performed.

This IC card executes additional issuance or issuance deletion for enjoying a new service after the issuance processing in accordance with the set issuance processing authority.

According to another aspect of the present invention, there is provided a recording medium for setting an issuance processing right when a cardholder is valid and performing an issuance process for enjoying a service provided by a predetermined service providing organization. And a program that causes a computer interposed between the computer and the service providing organization to execute the following processing in a computer-readable form. (1) a process of acquiring the issuance processing instruction and data (hereinafter referred to as an issuance command) from the service providing organization; (2) determining whether the issuance processing authority is set in the IC card and setting the Processing to confidentially distribute at least one issuance command to the IC card and to perform the issuance processing autonomously. The program further causes the computer to execute the following processing. (3) A process for executing additional issuance or issuance deletion for enjoying a new service after the issuance process according to the issuance process authority.

[0018]

Embodiments of the present invention will be described below in detail with reference to the drawings. First, a process of an IC card used in the IC card system of the present invention from a card manufacturer to a card holder via an intermediary will be described with reference to FIG.

The card manufacturer sets a temporary pin for an intermediary when delivering the IC card. Further, the user sets the file access authority for the intermediary by setting “delivery of the temporary pin is required by the intermediary” as the delivery destination. When the intermediary receives the IC card,
After collating the temporary pin set by the card manufacturer with the C card, the temporary pin is changed to this pin. Thereby, the management right for the IC card is delegated to the intermediary. The mediator sets an encryption / decryption key for encrypting or decrypting information in the IC card and changes the file access authority from “need for the temporary pin collation by the mediator” to “card holder”. It is necessary to verify the holder pin by itself. " When the setting for the IC card is completed, the mediator hands over the IC card to the card holder. When the card holder receives the set IC card from the intermediary,
A holder pin is set, and the IC card is attributed to oneself. Thus, the IC card is not under the control of the service provider but under the control of the card holder, and can be issued to the card only by the holder pin.

Next, I of the present invention using the above IC card
An embodiment of the C card system will be described. As shown in FIG. 2, the IC card system according to this embodiment includes a plurality of service provider terminals 1a to 1m serving as service providers.
And a plurality of card operation terminals 3a operated by the card holder
To 3n, the relay terminal 2 interposed between the service provider terminals 1a to 1m, and the IC cards 4a to 4n. The service provider terminals 1a to 1m and the relay terminal 2, and the relay terminal 2 and the card operation terminals 3a to 3n are connected via public lines L1 and L2, respectively. Each of the service provider terminals 1a to 1m registers in the relay terminal 2 in advance an issue command required for issuing a service handled by the terminal, such as a credit service. The relay terminal 2 is a terminal in the position of an intermediary in the example of FIG. 1, and holds issued commands registered by the respective service provider terminals 1a to 1m together with their menu data, and sends them to the request. The card operation terminals 3a to 3n
Send to The card operation terminals 3a to 3n exchange information with the IC units of the IC cards 4a to 4n.

The structure of the relay terminal 2 is as shown in FIG. 3, and stores the issued commands sent from the service provider terminals 1a to 1m, the encryption / decryption key used for encryption and decryption, and the like. A database (DB) 21, a DB control unit 22 including a menu generated based on the issued command and an issued command management table for managing a storage address of the issued command in the DB 21, and an input / output of information to / from a public line L2 (not shown). A communication control unit 23 for controlling;
And a main control unit 24 for controlling the control of the terminal itself. Note that the relay terminal 2 installs a predetermined program on a general-purpose computer, thereby
1. The functions of the DB control unit 22, the communication control unit 23, and the main control unit 24 are realized. Such a program is stored in a computer-readable recording medium, for example, a CD.
-Statically recorded on a ROM (Compact Disk ROM), a flexible disk, or the like, or dynamically recorded on a line such as a private network, and can be distributed in a form independent of a computer.

FIG. 4 shows the relationship between the issued command for each service stored in the DB 21 and the issued command management table in the DB control unit 22. FIG. 4A is a diagram showing the storage state of the issuing command in the DB 21, “01”, “0”.
Are storage addresses of issued commands corresponding to service identifiers (symbols for identifying services, the same applies hereinafter). Each issued command is variable length information, and “D” indicates a delimiter of the issued command for each unit size. On the other hand, FIG. 4B is a diagram showing an example of the contents of the issued command management table. The issuance command management table stores, for each service identifier, the storage address of the corresponding issuance command. Each of the storage addresses “01”, “02”, “03”,... Is fixed length information.

FIG. 5 is a configuration diagram of the card operation terminal 3a. The other card operation terminals 3b to 3n have the same configuration. The card operation terminal 3a includes a card operation terminal main body 30, a display device 36 for displaying input information, messages, and the like on a display, a keyboard 37 as an example of data input means, and information reading or information reading from the IC card 4a. R / W for writing (read / write)
The device 38 is provided.

The card operation terminal main body 30 is a general-purpose computer. The computer reads and executes a predetermined program to control information input / output with the relay terminal 2 connected via the public line L2. A main control unit 32 that controls the control of its own terminal;
An input / output control unit 33 for controlling input / output between the display device 36 and the keyboard 37, an R / W control unit 34 for controlling the operation of the R / W device 38, and an I / O controller for controlling the operation of the IC card 41.
The functions of the C card control unit 35 are realized. Such a program is also statically recorded on a computer-readable recording medium, for example, a CD-ROM, a flexible disk, or the like, similarly to the relay terminal 2, or dynamically recorded on a line such as a private network. It can be distributed in a form independent of a computer. This program is installed in the computer when the system is constructed, thereby causing the computer to function as the card operation terminal main body 30.

FIG. 6A is a configuration diagram of functional blocks formed in the IC section of the IC card 4a. IC card 4
a (its IC unit) includes a control processing unit 41, a RAM 42,
ROM 43, EEPROM 44, and control processing unit 41
An input / output control unit 45 for controlling transmission and reception of information between the R / W device 38 and the above-described R / W device 38 is constructed. The control processing unit 41 uses R
According to the program stored in the OM 43, the decryption processing unit 411, the issuance processing unit 412, and the collation processing unit 4
13 functions are realized. The decryption processing unit 411 decrypts the confidential distribution, that is, the issued command that is encrypted and distributed from the relay terminal 2. The issuance processing unit 412 executes the issued command decrypted by the decryption processing unit 411. Issuing services, that is, EE files required for services
The information is set in the PROM 44, and information necessary for receiving the service is stored in the set file. The collation processing unit 413 authenticates the cardholder, and sets the file access authority in the RAM 42 when the authentication result is valid.

As shown in FIG. 6B, in the EEPROM 44, a storage area 441 for a unique key used for decrypting an issued command, and a storage area 442 for a holder pin used for verification with an input pin in a verification processing unit 413. , And a file creation authority storage area 443 used for judging whether the setting of the file access authority for service issuance is formed. The other IC cards 4b to 4n have the same configuration.

Next, a process of additionally issuing a new service to the IC card in the IC card system having the above configuration will be described in detail with reference to FIGS. In the following description, the card operation terminal 3a, the IC card 4
This is an example of the other card operation terminals 3b-3
n, IC cards 4b to 4n.

First, the operation of the card operation terminal 3a will be described. FIG. 7 is an explanatory diagram showing a procedure for exchanging information between the card operation terminal 3a and the relay terminal 2. Card operation terminal 3
a (main control unit 32) displays the display device 36 at the start of the process.
Displays a message requesting insertion of the IC card 4a (step S601), and displays a cardholder input instruction by the cardholder (step S60).
2). Waiting for the input of the holder pin from the keyboard 37 (step S603), and when the completion of the input is detected (step S604), a verification command is transmitted to the IC card 4a (step S605).

When a normal response notifying that the input holder pin matches the one set in the IC card 4a is received (step S606: Ye)
s), a signal for requesting transmission of menu data is transmitted to the relay terminal 2 (step S607). Upon receiving the menu data sent from the relay terminal 2 in response to this request (step S608), the display device 36 displays a service menu for prompting the user to select a service (step S609). When a specific service is selected from the service menu by the card holder, the selected service identifier is transmitted to the relay terminal 2 (step S61).
0), the response is received, and the process is temporarily terminated (S611). On the other hand, when a normal response cannot be received in step S606 (step S6
06: No), if retry is possible (step S61)
1: Yes), and repeats the processing from step S603. If retry is not possible (step S611: N
o) Display a message indicating abnormal termination on the display device 36 and end the process.

The processing procedure in the relay terminal 2 is as shown in FIG. That is, when the relay terminal 2 (main control unit 24) detects that a signal requesting transmission of a service menu has been sent from the card operation terminal 3a (step S701),
By controlling the DB control unit 22 and the communication control unit 23, the service menu is downloaded to the card operation terminal 3a (step S702), and a response from the card operation terminal 3a, that is, the return of the service identifier is waited (step S702).
703). When a service identifier is received from the card operation terminal 3a (step S704), an issuance command corresponding to the service identifier is searched (step S70).
5). If there is a corresponding issued command (issued command group) (step S706: Yes), the
1 is encrypted using the encryption key in
The message is transmitted to a (step S707), and the process ends. If there is no corresponding issued command (step S7
06: No), a message to that effect is transmitted to the card operation terminal 3a (step S708), and the process ends. In this case, the card operation terminal 3a causes the display device 36 to display a message that the service cannot be issued because there is no issue command.

FIG. 9 is an explanatory diagram showing a procedure for transmitting and receiving information between the card operation terminal 3a and the IC card 4a, and shows an example in the case of receiving an issued command group from the relay terminal 2. The card operation terminal 3a is in a state of waiting for reception of an issued command group as a response from the relay terminal 2 (step S801). When a command group is issued as a normal response from the relay terminal 2 (step S80)
2: Yes), the received issued command is transmitted to the IC card 4a.
(Step S803), and waits for a response from the IC card 4a (step S804). IC card 4
If the response from a is abnormal (step S80)
2: No), a message notifying that the service does not exist is displayed on the display device 36 (step S80).
7), the process ends.

If the response from the IC card 4a is normal (step S805: Yes), it is checked whether all issued commands in the issued command group have been received (step S806). If all the issued commands have not been received (step S806: No), the processing from step S803 is repeated. If all issuance commands have been received (step S806: Yes), a message indicating that the issuance processing has ended is displayed on the display device 36 (step S807), and the processing ends.

In step S805, the IC card 4a
Is not normal (step S80)
5: No), a message indicating an abnormal end is displayed on the display device 36 (step S809), and the process ends.

FIG. 10 is an explanatory diagram of the procedure of the issuing process by the IC card 4a. When the IC card 4a receives the holder pin (referred to as an input pin) and the collation command input from the card operation terminal 3a in the procedure shown in FIG. 7 (step S901), the input pin and the holder pin set in the EEPROM 44 are (Step S9)
02). If the two match, the authentication is determined to be valid, the file access authority is set in the RAM 42, and a normal response is sent to the card operation terminal 3.
Send to a. On the other hand, when the input pin does not match the set holder pin, an abnormal response is transmitted to the card operation terminal 3a (step S903).

When a response is received from the card operation terminal 3a (step S904), the issued command is decrypted using the unique key stored in the EEPROM 44 (step S905). After that, the service is issued by executing the decrypted issuance command (step S90).
6). If there are a plurality of issuance commands, the issuance process is repeated (step S907). If the issuance process is completed (step S907: Yes), a signal notifying the fact is transmitted to the card operation terminal 3a (step S90).
8). By this issuing process, the EEP of the IC card 4a is
A service file is set in the ROM 44, and the file stores information necessary for receiving the service.

As described above, in the IC card system according to the present embodiment, the card holder himself obtains the file access authority for the IC card based on his / her own pin, and issues the necessary service to the service provider. It is possible to perform autonomously without depending. In addition, when a certain service is completed while the card is used, or when the service becomes unnecessary, it is easy to issue and delete the service.

In the above-described embodiment, the issuance command is distributed using the encryption technique. However, if the secret distribution is possible without using the encryption, the issuance command need not always be encrypted. In this case, the relay terminal 2 or I
There is no need to set encryption / decryption keys or unique keys in the C cards 3a to 3n.

Further, in the above embodiment, an example in which the issuance processing means is provided in the IC card has been described, but it is assumed that the file access authority belongs to the holder pin set in the IC card, and 2 and card operation terminal 3a
3n may be provided with an issuance processing means, and these may function as an issuance processing terminal. In this case, the relay terminal 2 or the card operation terminals 3a to 3n described above
A card control processing unit having an issuance processing function is added. The card control unit determines whether or not the file access right is set for the IC card. If the file access right is set, the card control unit transmits at least one issuance command to the IC card and sends the unique key to the IC card. And issues a service to the EEPROM of the IC card based on the decrypted issuing command. In addition, additional issuance and issuance / deletion are executed in accordance with the file access authority set on the IC card.

Furthermore, even if the IC card is removed from the card operation terminal, the file for issuing the service is EE.
Although this is an example of the case where the information remains in the PROM, the service may be enjoyed only while the IC card is mounted on the card operation terminal. The service in this case is issued to the RAM of the IC card, and is erased when the IC card is removed.

[0040]

As is apparent from the above description, according to the present invention, a card holder can autonomously issue a plurality of services to a single IC card without obtaining the consent of a service provider. Has the unique effect of being able to

[Brief description of the drawings]

FIG. 1 is an explanatory diagram showing a process in which an IC card used in the present invention passes from a card manufacturer to a card holder via an intermediary.

FIG. 2 is a block diagram of an IC card system according to an embodiment of the present invention.

FIG. 3 is a block diagram of a relay terminal according to the embodiment;

FIG. 4A is an explanatory diagram of a storage state of issued commands in a database according to the embodiment, and FIG. 4B is an explanatory diagram showing an example of the contents of an issued command management table.

FIG. 5 is a block diagram of a card operation terminal according to the embodiment;

FIG. 6A is a block diagram of an IC card according to the embodiment, and FIG. 6B is an explanatory diagram showing an example of contents in an EEPROM.

FIG. 7 is an explanatory diagram of a processing procedure of the card operation terminal according to the embodiment.

FIG. 8 is an explanatory diagram showing a procedure for transmitting an issue command from the relay terminal to the card operation terminal according to the embodiment;

FIG. 9 is an explanatory diagram showing a procedure for transmitting an issuance command from the card operation terminal to the IC card according to the embodiment;

FIG. 10 is an explanatory diagram showing a procedure of an IC card issuing process according to the embodiment;

FIG. 11 is an explanatory diagram showing a process in which an IC card is transferred from a card manufacturer to a card holder via an intermediary agent in the related art.

FIG. 12 is an explanatory diagram showing a procedure for additionally issuing a new service provided by a service provider that has issued an IC card in the related art.

FIG. 13 is an explanatory diagram showing a procedure for additionally issuing a new service provided by a service provider different from the service provider that issued the IC card in the related art.

[Explanation of symbols]

 1a to 1m Service provider terminal 2 Relay terminal 3a to 3n Card operation terminal 4a to 4n IC card 21 Database (DB) provided in relay terminal 22 DB control unit provided in relay terminal 23 Communication control unit provided in relay terminal 24 Main control unit of relay terminal 30 Card operation terminal body 31 Communication control unit provided in card operation terminal 32 Main control unit of card operation terminal 33 Input / output control unit provided in card operation terminal 34 R / W provided in card operation terminal Control unit 35 IC card control unit provided in card operation terminal 36 Display unit provided in card operation terminal 37 Keyboard provided in card operation terminal 38 R / W device provided in card operation terminal 41 Provided in IC unit of IC card Control processing unit 42 RAM 43 ROM 44 EEPROM 4 Input and output control unit

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁶ Identification code FI H04L 9/32 H04L 9/00 673E

Claims (10)

[Claims] 1. An IC card having an issuance processing means for performing issuance processing for enjoying a service provided by a predetermined service providing institution, and an issuance processing instruction and data registered by at least one service providing institution. The following issuance command)
Means for confidentially distributing the issued command to the IC card, and wherein the IC card which received the confidential distribution of the issued command autonomously issues the service for the service. 2. An IC card having an issuance processing means for performing issuance processing for enjoying a service provided by a predetermined service providing institution, and receiving and receiving said IC card and exchanging information with said IC card. A card operation terminal, a registering means for updating the issuance processing instruction and data (hereinafter referred to as an issuance command) registered by the service provider, and an issuance command registered by the registration means, I through the operation terminal
A relay terminal comprising means for confidentially distributing the service to a C card, and wherein the IC card that has received the confidential distribution of the issued command autonomously issues the service. 3. The IC card further comprises: unique information storage means for storing identification information of the card holder and a unique key assigned to the IC card; and authenticating the card holder based on the identification information. Authentication processing means for setting issuance processing authority when the authentication result is valid, and decryption means for decrypting the confidentially issued command using the unique key. 3. The IC card system according to claim 1, wherein when authority is set, the issuing processing unit performs the issuing process based on the decrypted issuing command. 4. The IC according to claim 3, wherein the issuance processing means executes additional issuance or issuance deletion for enjoying a new service after the issuance processing in accordance with the set issuance processing authority. Card system. 5. A unique information storage means for storing identification information of a card holder and a unique key assigned to the card.
Authentication processing means for performing authentication of a cardholder based on the identification information and setting issuance processing authority when the authentication result is valid, decryption means for decrypting input information using the unique key, and provision of a predetermined service An IC card having an issuing processing means for performing an issuing process for enjoying a service provided by the institution; and an issuance processing instruction and data (hereinafter referred to as an issuance command) registered by the service providing institution are renewably registered. Registration means, and the IC card
An issue processing terminal having card control means for exchanging information with the C card, wherein the card control means determines whether the IC card has an issuance authority based on the identification information. And if the issuance processing authority is set, transmitting at least one issuance command and decrypting it based on the unique key, and based on the decrypted issuance command, the service providing organization on the IC card. An issuance process for enjoying services provided by the IC card system. 6. The card control unit according to claim 5, wherein the IC card causes the IC card to execute additional issuance or issuance deletion for enjoying a new service after the issuance processing in accordance with the issuance processing authority. IC card system. 7. An IC card for performing an issuance process for enjoying a service provided by a predetermined service provider, a means for acquiring the issuance process instruction and data (hereinafter, issuance command), and a card holder Unique information storage means for storing identification information of the card and a unique key assigned to the card; authentication for performing card holder authentication based on the identification information and setting issuance processing authority when the authentication result is valid Processing means; and decryption means for decrypting the acquired issued command using the unique key. When the authentication processing means sets the issuing processing authority, the issuing is performed based on the decrypted issued command. An IC card for performing processing. 8. The IC card according to claim 7, wherein additional issuance or issuance deletion for enjoying a new service after the issuance processing is executed in accordance with the set issuance processing authority. 9. An IC card for setting issuance processing authority when the card holder is legitimate and performing an issuance process for enjoying a service provided by a predetermined service providing organization;
A recording medium in which a program that causes a computer interposed between the service providing organization and the following process to execute the following processing is recorded in a form readable by the computer. (1) a process of acquiring the issuance processing instruction and data (hereinafter, issuance command) from the service providing organization;
(2) It is determined whether or not the issuance processing authority is set in the IC card, and if it is set, at least one issuance command is confidentially distributed to the IC card to perform the issuance processing autonomously. processing. 10. The program further causes the computer to perform a process of executing additional issuance or issuance deletion for enjoying a new service after the issuance process according to the issuance process authority. The recording medium according to claim 9, wherein