JPS63282899A - Ic card - Google Patents

Abstract

PURPOSE:To improve the safety of an IC card by providing the IC card with a personal identification coincidence storing means for storing the input of a correct identification number and a timer circuit means for starting count at the time of inputting the correct identification number, and deciding the validity of transaction only when both means are set. CONSTITUTION:The IC card is provided with the identification coincidence storing means 45 to be a nonvolatile memory for storing the input of the correct identification number from an input means 2, the timer circuit means 46 for starting count at the time of inputting the correct identification number and an AND means 43. When one's own identification number is inputted after inputting transaction selection from a keyboard on the card in case of executing transaction through the card, an internal circuit collates the keyed number with a previously stored identification number, sets its coincidence in the means 45, starts the counting of the means 46 and continues the counting up to a prescribed effective time of about 3-5min which is previously fixed. During the period, the transaction can be validated by finding out the AND operation of outputs from both means.

Description

DETAILED DESCRIPTION OF THE INVENTION (Industrial Application Field) The present invention relates to an IC card, and particularly to an IC card having a self-verification function with an enhanced function to prevent misuse by unauthorized users.

(Prior Art) Conventionally, this type of device is disclosed in, for example, Japanese Unexamined Patent Publication No. 61-5389, in which a so-called IC card is equipped with an input means, a display means, and a power supply means, and the card itself is equipped with an input means, a display means, and a power supply means. This is an identification card with a self-verification function. In other words, you enter your PIN number etc. from the keyboard provided on the identification card, and then enter the electrically erasable programmable ROM (EEE) in advance.
Verification data (PIN number) stored in PROM)
The system performs self-verification by comparing the number and - of the card to identify whether or not the user of the card is the card user. In other words, when attempting to conduct a transaction using a card,
Enter your PIN number from the keyboard on the card, and when you have finished entering the number, press the verification key for verification, and the internal circuit will match the pre-stored PIN number with the key-entered number. A match is made and if there is a match.

"OK" is displayed on the liquid crystal display for 10 seconds to show that the user of the card is the card user, and transactions can be made while "OK" is displayed. Also, if the next number you enter does not match, "OK" will not be displayed and the EEP
The number of discrepancies was stored in the ROM and the user was requested to enter the password again.

(Problems to be Solved by the Invention) However, with the identification card of the above configuration, the transaction possible time is as short as 10 seconds.
Even though you set K, your transaction period ends while you are queuing at the counter, and you have to enter your PIN again. ■Since you have to set the transaction OK near the terminal device such as an ATM, there is a risk that your PIN number will be intercepted by someone else. There was a problem.

The object of the present invention is to provide an IC card that eliminates one or more of the problems mentioned above.

(Means for Solving the Problem) The present invention provides an IC card that is equipped with an input means, a display means, and a power supply means, and has a self-verification function on the card itself, in which a correct password is input from the input means. This system is provided with a password matching storage means which is a non-volatile memory for storing information, a timer circuit means which starts counting when a correct password is input, and an AND means for these. If you wish to make a transaction using your card, enter your PIN after entering your PIN from the key date on the card. The number is compared with the number manually entered by the key, and if they match, a match is set in the password matching storage means, and at the same time, the timer circuit starts counting, and a predetermined number of 3 is set. Counting continues until a predetermined effective time of about 5 minutes is reached, and during that period, both A
By taking ND i, υ trading becomes possible.

(Function) Once the password matching storage means is set, it remains set until a transaction is made at a terminal device such as an ATM, so it solves the problems of the prior art mentioned above. On the other hand, if it is lost while still set, there is a possibility that it could be misused by a malicious person only once. Therefore,
In order to prevent this, the possibility of trading is determined based on the effective time of about 3 to 5 minutes, which is regulated by the timer circuit means.

(Embodiment) FIG. 2 is a schematic external view of an IC card according to an embodiment of the present invention, in which (A) is a front view of one side, and (B) is a front view of the opposite side. l is an IC card, and keyboard 2 is
It is an input section for inputting a PIN number and inputting instructions for a function to an IC card, etc., and a display section 3 displays a display for confirming the entered key and provides instructions on how to operate the key. This is a display unit for displaying guidance, etc., such as a liquid crystal display (LC).
(abbreviated as D).

IC=1 is a microcomputer that has a CPU, memory, etc. built into one chip for performing various controls, and is embedded inside the IC card.
When the C card is separated from terminal equipment such as an ATM and operated independently (hereinafter referred to as offline operation), the IC
A power supply section for supplying power to each circuit section of the card, and is composed of, for example, a solar cell. The external connection terminal 6 is
This is a group of terminals used when an IC card is connected to a card reader/writer to exchange information with an external terminal device (hereinafter referred to as online operation).

FIG. 1 is a functional block diagram of an embodiment of the invention.

When the operator 7 inputs a transaction mode instruction from the key power section 2 on the IC card l and then enters the PIN number from the key power section 2, the random access memory (hereinafter referred to as RAM) inside the C4 is The input password is stored in the input password storage unit 41, which consists of
Matches the registered password stored in advance in the registered password storage unit 42 configured in the internal EEPROM/
A match determination unit 43 determines whether there is a mismatch. Here, the match determination section 43 is read-only inside the IC4.

It consists of programs stored in memory (hereinafter abbreviated as ROM). If the match determining section 43 determines that there is a "match," the above-mentioned transaction mode has been instructed, so the gate by the mode determining section 44 is open.
The counting operation of the timer circuit section 46 is started at the same time as setting 1'' in the password number storage circuit section 45 constituted by EEPRCIM inside the IC4.The mode determination section 44 is stored in the ROM inside the IC4. The timer circuit section 46 includes a time constant circuit and a switching circuit that rapidly charge a capacitor while the "work 04 interior 1: a match" determination signal is being output, and then discharge the capacitor in a predetermined period of time. It is constructed by providing a circuit. Note that the match determination output from the match determination unit 43 is also sent to the display unit 3, and if the PIN numbers match,
It functions to permit the display section 3 to display the balance stored in advance in the balance storage section 47 configured in the EEPROM inside the IC4. Although not shown in the drawings, when the match determining unit 43 determines that there is a "mismatch", the number of incorrect inputs is stored in the EEFROM for counting the number of incorrect inputs of the password.

The transaction permission determination unit 81 inside the terminal device 8 allows the transaction only when both the output of the password storage circuit unit 45 and the output of the timer circuit unit 46 are set, that is, under the AND condition. After executing the transaction process, the password number storage circuit section 45 is reset.

By the way, in the explanation so far, only the case where the counting operation of the timer circuit section 46 is started by the "match" judgment output from the match judgment section 43 has been explained, but once the correct password is input, If the PIN number memory circuit 45 has been set, but the predetermined validity period of the timer circuit 46 has elapsed while the transaction has not yet been completed while in the queue, the user must enter the correct PIN again. I had to fix it and entered it in a crowded queue.
There is a risk that someone else may be able to see your PIN number. In order to prevent this problem, by setting a second registered password in advance and inputting the second password from the key operator 2, a "match" is detected from the second match determination section 48.
It is desirable that the counting operation of the timer circuit section 46 is also started by the determination output. For example, at home, etc., enter the correct PIN number and set the PIN number storage circuit 45, and at a counter, enter a simple PIN such as your initials and reset the timer circuit 46. Ba,
Transactions can be made without worrying that the first PIN number will be intercepted. Of course, it goes without saying that the first password may be entered for reset.

In the explanation so far, the transaction permission determination section 81 inside the terminal device 8 ensures extremely strict security by permitting the transaction under the AND condition of both the PIN number storage circuit section 45 and the timer circuit section 46. Although we have discussed the case of a system in which
There are systems, such as prepaid card systems in vending machines that have an upper limit on the number of transactions that can be made, in which the user has to endure the abuse of the one-time limit υ immediately after the loss. In such a system, it is also possible to construct a system in which the strictness of security is relaxed to some extent, for example, by examining only either the password number storage circuit section 45 or the timer circuit section 46 to permit a transaction. It is also possible to construct a system that selects the signals to be investigated depending on the size of the transaction amount.

Further, in the explanation so far, a case has been described in which a personal identification number is used as the personal identification code, but it goes without saying that a code other than a number may be used.

Furthermore, we have described the case where a one-chip microcomputer with a CPU, memory, etc. built into one chip is used as IC4, but for example, it is possible to use a multi-chip microcomputer with a CPU, memory, etc. separated into separate chips. Needless to say, it's fine.

(Effects of the Invention) As described above in detail, according to the present invention, in an IC card provided with an input means, a display means, and a power supply means, it is possible to memorize that a correct password has been inputted from the input means. A password matching storage means, which is a non-volatile memory, and a timer circuit means that starts counting when a correct password is input are provided, and only when both of these are set9, it is determined that a transaction is possible. Because it was done,
It can be used for highly secure cash card systems and electronic passbook systems.

In addition, as a self-verification function, it is equipped with both a password matching storage means to confirm the password and a timer circuit means to set the validity time, making it a highly flexible system that can meet the strict security requirements of the system. It also has the effect of making it possible to construct.

[Brief explanation of drawings]

FIG. 1 is a functional block diagram of an IC card according to an embodiment of the present invention, and FIG. 2 is an external view of the IC card. DESCRIPTION OF SYMBOLS 1... IC card, 2... Key manual section, 8... Terminal device, 41... Input password storage section, 42...-Registered password storage section, 43... Match determination section, 45...
Password number memory circuit section, 46... Timer circuit section, 48
. . . second coincidence determination section, 81 . . . transaction possibility determination section. Patent applicant: Oki Electric Industry Co., Ltd. L-J

Claims (1)

[Scope of Claims] An IC card comprising an input means, a display means, and a power supply means, and the card itself has a self-verification function, comprising: a password matching storage means composed of a non-volatile memory; a timer circuit means; , a registered password storage means for storing one or two passwords registered in advance, and one or two matching determination means, and the password matching storage means stores the output of one matching determination means. The timer circuit means starts a counting operation based on the output of one or two coincidence determination means, and enables a transaction by ANDing the password coincidence storage means and the timer circuit means. . IC card.