JPS636659A - Person in question confirming system - Google Patents

Abstract

PURPOSE:To detect the destruction of data stored in a card and to avoid the illegal use of the card by transposing the data with an identification number used as a key and giving the hash total processing to the transposed identification number. CONSTITUTION:A card is set to a card reader 2 and an identification number is supplied through an identification number input circuit 1. The identification number is collated with a code in the card by an identity collation circuit via a register 12 for confirmation of identity. The data read out of the reader 2 and the certification codes are stored in a register. The data of this register is divided into plural blocks and one of these blocks is fetched by a register 42. This block is supplied to a cipher I circuit 43 to perform the transposed cipher processing with the identification number of the register 12 used as a key. Then a cipher II circuit 44 performs the converted character ciphering process with a register 45 defied as a key. This ciphering result is supplied to the register 45. Then the contents of the register 45 are collated with a certification code (c) in the register to decide the propriety of the contents of the register 45.

Description

[Detailed Description of the Invention] [Industrial Field of Application] The present invention relates to electronic shopping, electronic checkbooks, credit cards, etc., and particularly to prevention of data corruption, number mismatch, etc., and confirmation of card users. Regarding.

[Prior art] In Japan, cash card systems using magnetic cards have become widespread, and the magnetic stripe has a PIN number, name code,
Account number, etc. is entered.

Since the amount of information is small and the memory contents can be easily read out, theft and fraud are likely to occur.

[Problems to be Solved by the Invention] The purpose of the present invention is to provide a method for detecting card forgery, destruction of card data, and quantity in CD cards, credit cards, etc., and confirming the authenticity of the card user. It's about doing.

[Means for solving the problem] By transposing the data using the password as a key and performing hash total processing on the replacement code, it is possible to prevent the above-mentioned fraud from the data in the card.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described regarding a cash dispenser using a memory card.

This fraudulent occurrence in the cache dispenser is caused by the CD
Change 1 of the deposit data from the bank in the card! Possible causes include forgery of CD cards, fraudulent use of stolen or stolen cards, etc.

A CD card block diagram for preventing this is shown in FIG.

When using a CD card, first, identification using a PIN is performed at the bank terminal CD, and a block diagram of this process is shown in Figure 2.
In the processing of the person verification circuit 4, since the influence of each bit of data is propagated backward in sequence, the bits affected by this influence are added to the end of the data by an appropriate length to form a data corruption detection code. Therefore, the additional code for the first correct data and the detection code for the revised data will be different.

An example of this is shown in FIG.

First, it is assumed that a card written in the format shown in FIG. 1 has been sent from the bank. Here, the header section A is used for control signals indicating the beginning of reading and writing, and for displaying new/old and version information. The data department is
This is data used when the card is offline, such as account number and balance.

The authentication section C writes an authentication code according to the present invention.
In the control section 2, data end, misoperation count, etc. are entered.

To withdraw money using this card, the card is set in the card reader 2 of the bank terminal of the present invention, and the password is input from the password input circuit 1 (keyboard).

The personal identification number is passed through the register 12 and compared with the code inside the card in the personal verification circuit 4 to confirm the user's identity. That is, the third
In the figure, the data read from the card reader 2 and
The authentication code C is stored in the register 22. - On the other hand, the password from the code input circuit 1 is entered into the register 12.

The data in the register 22 is divided into a plurality of blocks, and one block is taken into the register 42. The block is cipher 1
The code is input to the circuit 42 and performs a transposition encryption process using the password of the register 12 as a key.Next, in the encryption circuit 44,
Substitution encryption processing is performed using the register 45 as a key. At this time, the contents of the first register 45 are the password number. The result of encryption by the encryption circuit 44 is stored in the register 45.

Here, as an example of the processing of the cipher 1 circuit, there is a method of shifting by the number of keys, and as an example of the processing of the cipher 1 circuit, there is a method of calculating the modulo 2 sum of the contents of the register 45 and the processing result of the cipher 1 circuit corresponding to bits, etc. There is.

When the processing of the last block is completed, the contents of the register 45 are compared with the authentication code C in the register 22 to determine pass/fail. As a result, if there is a match, the process will proceed to the withdrawal process. If there is a discrepancy, the PIN number is incorrect, the data is corrupted, or the data is incorrect.

After the withdrawal process is completed, the data row is changed depending on the balance and other information and is written into the write register 32.

The data row in the register 32 is divided into a plurality of blocks and input into the register 42 in the same manner as described above.

These blocks are processed by the cryptographic circuit 1 43 and the cryptographic circuit 44 in the same manner as described above.

Finally, the contents of the register 45 are entered as the authentication code C in the write register 32, and the card formatting is completed. Write this on the card.

At this time, it is also possible to change the password. With this, the withdrawal process is completed.

The algorithm in this example is as follows: When the password is X, the block data is a, and the block length is S, the cipher 1
The conversion sentence g by the circuit 43 is n = x (mod s) g = aX2n (mad 2s) + (aX2'''') where A (mod B) is the remainder of A/B, and (A) is A
indicates the integer part of

Next, in the case of the first block, the converted sentence h1 output from the cryptographic circuit 44 is h = g = X. Here, ■ indicates a bit-based modulo 2 operation.

After the second block, it becomes h i''gi + g i-1, and the authentication code becomes an analysis problem regarding the password X. Also, the influence of the block data ad is on the converted sentence gi. It affects and appears in h of the processing result.

Therefore, it is possible to detect data corruption, card forgery, etc.

[Effects of the Invention] According to the present invention, it is possible to detect data destruction or constitutional amendment within a card, and there is an effect of preventing unauthorized use of the card.

Furthermore, since it is not possible to derive the PIN number from the card contents due to the algorithm, it is effective in preventing card forgery.

[Brief explanation of drawings]

FIG. 1 is a card format diagram of this embodiment, FIG. 2 is a block diagram of an embodiment of the present invention, and FIG. 3 is a block diagram of a personal identification circuit.

Claims (1)

[Claims] 1. In a card usage system, double conversion processing is performed using the data on the card and the input PIN number, and the data is recorded in the card, and when the user inputs the PIN number when using the card. An identity verification method characterized by determining whether or not the result of the above processing matches the record in the card, and if they match, the use of the card is recognized as legitimate. 2. The double conversion processing consists of a combination of many types of encryption processing and a compression encryption processing in which only encryption exists but no decryption, and the PIN number is used for the encryption processing and the compression encryption processing. By using a private key, the double processing result can be produced unless the PIN is obtained, and it is extremely difficult to find the PIN from the double processing result and the data in the card. The first
Identity verification method described in section.