JP2002007695A - Processing data transfer method in securities processing equipment - Google Patents

Abstract

(57) [Summary] [PROBLEMS] A process in a securities processing apparatus capable of reliably protecting against intentional fraud, easily detecting intentional fraud, and improving the security of processed data. Provide a data transfer method. A processing apparatus main body that inspects securities and classifies them into at least a genuine note and an unfit note, cuts the unfit note, and outputs processing data including the number of cut unfit notes.
And an external computer 2 that controls and monitors the operation of the processing device body 1 and receives and manages the processing data output from the processing device body 1. Sends a key generation instruction to the IC card 6 to generate a key, transfers the generated key from the IC card 6 to the processing device main body 1, and in the processing device main body 1, transmits the key transferred from the IC card 6. And encrypts the processed data, and transfers the encrypted processed data to the external computer 2.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION The present invention relates to a method of inspecting, for example, securities while transporting them one by one, so that at least securities to be reused (hereinafter referred to as genuine securities) and securities not to be reused (hereinafter referred to as "genuine securities") are provided. The present invention relates to a processing data transfer method in a securities processing apparatus that performs a banding process on a fixed number of sheets and a cutting process so that an unfitted one cannot be reused.

[0002]

2. Description of the Related Art In a securities processing apparatus of this kind, when performing a cutting process of a damaged bill, it is necessary to guarantee that the number of processed articles and the electronic number data counted by a counter or the like match. After the electronic number data having the same value as the actual processed number is finally output as a form, the form itself is stored to determine the inspection result.

Conventionally, when the electronic number data, which should have the same value as the actual one, is tampered with (falsification or the like), data matching is performed between the processing apparatus main body and an external computer that manages the processed data. Thus, it was possible to inspect an attack on the processing apparatus main body or an attack on an external computer.

[0004]

In the case of the above-mentioned conventional method, concealment in operation is important for an external computer which manages electronic number data. By moving from dedicated machines to general-purpose personal computers,
Naturally, it becomes easy to attack the processing data.

[0005] More specifically, the followings are possible: (i) fraudulent processing data stored in an external computer; (ii) simulating processing data output from the processing apparatus main body by a different type of machine;・ Unauthorized destruction of the external computer and data inconsistency with the processing unit itself. ・ Unauthorized destruction of the processing unit and inconsistent data with the external computer. By combining them, it is possible to add tampering to the processing data itself, and there is a problem that it is not possible to inspect the fact that such processing has been performed.

Further, since only the processed data itself is output in the final form, even if the output form itself is fraudulent, it cannot be detected. Will be required.

Accordingly, the present invention provides a security processing apparatus capable of reliably protecting against intentional fraud, easily detecting intentional fraud, and improving the security of processed data. It is intended to provide a data transfer method.

[0008]

According to the processing data transfer method in the securities processing apparatus of the present invention, at least the securities to be reused are classified into securities to be reused and securities not to be reused by inspecting the securities input. A processing apparatus main body that performs cutting processing so that securities that are not reused cannot be reused, and outputs processing data of a processing result including at least the number of securities that have been subjected to the cutting processing; and controls the operation of the processing apparatus main body. In a securities processing apparatus comprising an external computer that monitors the operation of the processing apparatus main body and receives the processing data output from the processing apparatus main body and manages the processing data, from the external computer, A key for a portable storage medium that has at least an arithmetic function and a data storage function and is detachable from the external computer. Generating a key using an arithmetic function in the portable storage medium by sending an instruction to the portable storage medium, and processing the key generated in the portable storage medium from the portable storage medium via the external computer. Transferring the process data to the device main body, and encrypting the process data using the key transferred from the portable storage medium, and transferring the encrypted process data to the external computer. I have it.

In the method for transferring processed data in the securities processing apparatus according to the present invention, the portable storage medium encrypts the generated key by using an arithmetic function, and encrypts the encrypted key via the external computer. The data is transferred to the processing apparatus main body.

In the method for transferring processed data in a securities processing apparatus according to the present invention, the portable storage medium receives an encryption key transferred from the processing apparatus main body via the external computer, and receives the key. The generated key is encrypted using the generated encryption key.

Further, the method for transferring processed data in the securities processing apparatus according to the present invention includes a step of selecting the processed data to be audited in the external computer, and transferring the selected processed data to the portable storage medium. In the portable storage medium, encrypting the processing data transferred from the external computer using the key generated by the portable storage medium itself, and transferring the encrypted processing data to the external computer; In the external computer,
Further comprising the step of comparing the encrypted processing data transferred from the portable storage medium with the encrypted processing data transferred from the processing device main body to audit for fraud. I have.

In the method for transferring processed data in the securities processing apparatus according to the present invention, by inspecting the entered securities, at least the securities are classified into securities to be reused and securities not to be reused, and are not reused. A processing unit for cutting and processing the securities so that they cannot be reused, and outputting processing data of a processing result including at least the number of the cut-out securities; controlling the operation of the processing unit; In a securities processing apparatus comprising an external computer that monitors the operation of the main unit and receives the processing data output from the processing apparatus main body and manages the processing data, at least a calculation function and A first portable storage medium having a data storage function and being detachable from the external computer; Sending a generation instruction to generate a first key using an arithmetic function in the first portable storage medium; and transmitting the first key generated in the first portable storage medium to the first key. Transferring from the portable storage medium to the processing apparatus main body via the external computer; and a second computer having at least an arithmetic function and a data storage function from the external computer and detachable from the external computer.
Sending a second key generation instruction to said portable storage medium to generate a second key using an arithmetic function in said second portable storage medium; and Transferring the second key generated in the storage medium from the second portable storage medium to the processing device main body via the external computer; and in the processing device main body, transferring the second key from the first portable storage medium. Encrypting the processing data using the transferred first key and the second key transferred from the second portable storage medium, and transferring the encrypted processing data to the external computer Is provided.

Further, in the method for transferring processed data in the securities processing apparatus according to the present invention, the first portable storage medium encrypts the generated first key using an arithmetic function, and encrypts the generated first key. Is transferred to the processing apparatus main body via the external computer.

Further, in the method for transferring processed data in the securities processing apparatus according to the present invention, the second portable storage medium encrypts the generated second key by using an arithmetic function, and encrypts the encrypted second key. Is transferred to the processing apparatus main body via the external computer.

Also, in the method for transferring processed data in the securities processing apparatus according to the present invention, the first portable storage medium receives an encryption key transferred from the processing apparatus main body via the external computer. And encrypting the generated first key using the received encryption key.

Also, in the method for transferring processed data in the securities processing apparatus according to the present invention, the second portable storage medium receives an encryption key transferred from the processing apparatus main body via the external computer. The generated second key is encrypted using the received encryption key.

In the method for transferring processed data in the securities processing apparatus according to the present invention, the external computer selects processing data to be audited and transfers the selected processing data to be audited to the first portable storage medium. And encrypting the processing data transferred from the external computer in the first portable storage medium using the first key generated by the first portable storage medium itself. Transferring processing data to the external computer;
The external computer checks whether there is any fraud by comparing the encrypted processing data transferred from the first portable storage medium with the encrypted processing data transferred from the processing device body. And the step of performing

Further, in the processing data transfer method in the securities processing apparatus according to the present invention, the external computer selects processing data to be audited, and transfers the selected processing data to be audited to the second portable storage medium. And encrypting the processing data transferred from the external computer in the second portable storage medium using the second key generated by the second portable storage medium itself. Transferring the processing data to the external computer; and in the external computer, the encrypted processing data transferred from the second portable storage medium and the encrypted processing transferred from the processing device main body. Auditing the presence or absence of fraud by comparing the data with the data.

[0019]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 schematically shows the configuration of a securities processing apparatus according to this embodiment. In FIG. 1, the processing apparatus main body 1 determines whether a security is true or false while transporting the security one by one. Then, the genuine bill is subjected to a sealing process for every predetermined number of sheets, and the damaged sheet is cut so as not to be reused, and processing data of at least the processing result including the number of the cut securities is output.

The external computer 2 operates by instructing the operation mode of the processing device main body 1, monitors the operation status of the processing device main body 1 as appropriate, receives processing data output from the processing device main body 1, and receives the data. Manages processing data. The external computer 2 also controls an IC card reader 3 described later.

The external computer 2 is connected to the processing unit 1 via a USB (Universal Serial Bus) 4. As a result, control data, processing data, and the like are mutually transmitted and received via the USB 4.

The IC card reader 3 is connected to the external computer 2 via the RS232C interface 5,
The first IC card 6 and the second IC card 7 as portable storage media are controlled. The first IC card 6 and the second IC card 7 are configured to be detachable from the IC card reader 3.

FIG. 2 shows the configuration of the processing apparatus main body 1. In FIG. 2, a main control unit 11 comprehensively controls the processing apparatus main body 1. That is, the main control unit 11 intensively processes data from the sub control unit 12 and the determination control unit 13, and finally exchanges data with the external computer 2, thereby having a function of establishing the present apparatus. Is to be realized.

The cryptographic operation control unit 14 is provided in the main control unit 11 and includes, for example, a triple DES (Trip)
It has an encryption key of (le-DES) and arithmetic logic, and can encrypt necessary data.

The supply control unit 15 takes out and supplies a large number of securities set in a stacked state one by one to a supply unit (not shown). The transport control unit 16 transports the securities supplied by the supply control unit 15 one by one. The count sensor control unit 17 detects and counts securities transported by the transport control unit 16 one by one.

The accumulation control unit 18 determines that a predetermined number of securities (for example, 100) are transported by the transport control unit 16.
Is reached, the 100 securities are sorted and transferred to the sealing control unit 23 described later.

The cutting control unit 19 cuts the specific securities (unfitted bills) conveyed by the conveyance control unit 16 so that they cannot be reused.

The operation switch control section 20 controls switches for starting and stopping the operation of the processing apparatus main body 1 and notifies the main control section 11 of a switch pressed by an operator as appropriate. It has an interface for performing operations.

The USB control unit 21 communicates with the external computer 2, receives an operation mode from the external computer 2, and transmits processing data and an operation state of the processing device 1 to the external computer 2. .

The sub-control unit 12 controls the operation of the processing apparatus main body 1 by operating in synchronization with the main control unit 11 via the internal bus 22. The sealing control unit 23 seals 100 securities transferred from the accumulation control unit 18, and is controlled by the sub control unit 12. The discharge control unit 24 discharges the sealed 100 bundles transferred from the sealing control unit 23 to the outside of the processing apparatus main body 1, and is controlled by the sub-control unit 12.

The judgment control unit 13 includes a true / false judgment control unit 25.
In addition, it controls the fitness judgment control unit 26. The authenticity determination control unit 25 detects each security conveyed by the conveyance control unit 16 and determines whether the security is a genuine one or a counterfeit one. The fitness determination control unit 26 further performs fitness determination (determination of whether or not the securities are reused) only for the securities determined to be genuine. As a result of these determinations, the securities determined to be genuine securities (securables to be reused) are conveyed to the accumulation control unit 18 and damaged (non-reusable securities).
The securities determined to be are transferred to the cutting control unit 19.

FIG. 3 shows the configuration of the external computer 2. In FIG. 3, a CPU (Central Processing Unit) 31 for overall control is connected to a keyboard controller 32 to which a keyboard is connected, a PS2 controller 33 to which a mouse is connected, and a display controller 34 to which a display is connected. Is done.

The magnetic disk controller 35 is connected to the CPU 31.
Is connected to a magnetic disk device 36, which stores electronic data in the magnetic disk device 36,
Reading is performed.

The CPU 31 has a floppy (registered trademark)
A disk controller 37 is connected, and a floppy disk drive 38 is connected to the floppy disk controller 37 so that electronic data and the like stored in the magnetic disk device 36 can be stored on a floppy disk. ing.

The CPU 31 has a USB controller 39
And a serial controller 40 are connected. U
The SB controller 39 performs control for exchanging data with the processing apparatus main body 1. The serial controller 40 controls transmission and reception of data to and from the IC card reader 3 connected via the RS232C interface 5.

FIG. 4 shows the configuration of the IC card reader 3. In FIG. 4, a CPU 41 that controls the overall control
, A serial controller 42 and an IC card controller 43 are connected. The serial controller 42 controls transmission and reception of data to and from the external computer 2 connected via the RS232C interface 5. I
The C card controller 43 controls transmission and reception of data to and from the set IC card 6 or 7.

FIG. 5 shows the configuration of the IC cards 6 and 7. In FIG. 5, a CPU 51 for overall control includes a cryptographic operation unit 52, a cryptographic key storage memory 53, and
The card reader controller 54 is connected. The cryptographic operation unit 52 uses, for example, a triple DES (Triple-DE
The encryption key of S) is generated and the data is encrypted.

The encryption key storage memory 53 includes an encryption operation unit 52
Is stored. The card reader controller 54 controls data exchange with the IC card reader 3.

Next, generation and copying of the encryption key according to the present invention in the above configuration will be described. First, a key is generated for the first IC card 6. That is, after setting the first IC card 6 in the IC card reader 3, the external computer 2 generates a key for the set first IC card 6 via the RS232C interface 5 and the IC card reader 3. Send instructions.
The first IC card 6 receiving this generates a predetermined encryption key by the cryptographic operation unit 52 and stores the generated encryption key in the encryption key storage memory 53. Hereinafter, this encryption key is referred to as key S1. The encryption key S1 thus generated is
It is stored only in the first IC card 6 and does not flow out.

Next, using the key S1, the processing device body 1
Transfers the key S1 to the cryptographic operation control unit 14 of the processing device main body 1 in order to encrypt the processing data. In order to prevent the key S1 in the first IC card 6 from leaking out in the process, The following processing is performed.

First, the cryptographic operation control unit 1 of the processing device body 1
4 (eg RSA key)
Is transferred from the processing device body 1 to the cryptographic operation unit 52 of the first IC card 6 via the external computer 2 and the IC card reader 3. The cryptographic operation unit 52 encrypts its own private key (key S1) with the received public key, and transmits the encrypted key S1 to the cryptographic operation control unit 14 of the processing device main body 1.

The cryptographic operation control unit 14 extracts the key S1 by decrypting the received encrypted key S1 with a secret key corresponding to the public key transmitted to the first IC card 6, and extracts the key S1 from the internal memory. To be stored. Thus, the key S1 does not leak.

When the first IC card 6 sends the encrypted key S1 to the cryptographic operation control unit 14, the first IC card 6 also sends the first I
An identifier indicating the C card 6 is also transmitted.

As described above, the unique key S 1 exists in the first IC card 6, and the cryptographic operation control unit 1
4, the key S1 is stored as the secret key of the first IC card 6.

Similarly, for the second IC card 7,
A unique secret key (key S2) is generated, and the key S2 is stored in the cryptographic operation control unit 14 of the processing device main body 1 as a secret key of the second IC card 7.

Next, encryption of processing data and inspection by an IC card will be described.

First, encryption of processing data will be described. When the processing apparatus main body 1 is in operation, the processing data of the processed securities (for example, the number of processed sheets = the number of stacked sheets + the number of cut sheets)
Is transferred to the external computer 2 together with each data obtained by encrypting the processed data with the keys S1 and S2.

Here, in order to prevent the data processed by the processing unit body 1 of the other machine from being tampered with,
The processing data includes, for example, (1) the I
A D number, (2) processing date and time, and (3) count data (number data) are used. Therefore, the data transferred from the processing device body 1 to the external computer 2 is, for example, (1) +
(2) + (3) + (processed data encrypted by key S1) + (processed data encrypted by key S2).

The external computer 2 receives the data of the above configuration transferred from the processing unit 1 and stores it in the magnetic disk device 36.

Next, inspection using an IC card will be described.
For this inspection, the first IC card 6 is used (the same applies to the second IC card 7). First, the first IC card 6 is
After setting in the C card reader 3, a predetermined operation is performed in the external computer 2 to select processing data to be inspected. Then, of the selected processing data, (1) the ID number of the processing device main body 1, (2) the processing date and time, and (3) the count data are transferred to the first IC card 6.

The first IC card 6 receives the data transferred from the external computer 2, encrypts the data with the key S 1 generated by itself, and sends it back to the external computer 2.
The external computer 2 converts the data encrypted by the key S1 of the processing data held in its own magnetic disk device 36 with the data encrypted by the key S1 returned from the first IC card 6. The data is collated, and if the two data match, an inspection result indicating that no fraud has been committed is output by text or voice.

When the second IC card 7 is used, the same operation is performed using data encrypted by the key S2. As a result, a false report of the processed data of the inspector himself who owns the first IC card 6, for example, although the data is falsified and not certified by the first IC card 6 (does not agree with the above procedure) Even if there is a report that it has been certified, it is possible to detect this fraud by inspecting with the second IC card 7.

As described above, the secret key is concealed only in the IC cards 6 and 7 and the processing device main body 1, so that the key does not leak to the outside and that a person who does not have the IC card does not. Process data is protected against fraud.

In addition, it is possible for another person to inspect the fraud of the person who owns the IC card. In addition, it is possible to detect fraud from a device that disguises the processing device body 1.

Further, processing against fraud on the IC card reader 3 (for example, even if an IC card is used, the program of the external computer 2 is modified so as to be disguised as being always certified by the external computer 2). Data is (1) +
(2) + (3) because the data can be visually observed in the format (2) + (3), the isolated data inspector (external computer 2 + IC card reader 3 + IC card 6,7) processes the data correctly into the encrypted data and determines whether the data can be matched. be able to.

The above description is one embodiment, and various modifications can be made without departing from the scope of the present invention. For example, although the case where two IC cards are used has been described, basically one IC card may be used. Also, the case where an IC card is used as a portable storage medium has been described. However, the present invention is not limited to a card shape, and may have another shape. Any removable storage medium may be used as long as it is removable.

[0058]

As described in detail above, according to the present invention, intentional fraud can be reliably protected, intentional fraud can be easily detected, and the security of processed data can be improved. And a processing data transfer method in a securities processing apparatus capable of performing the above.

[Brief description of the drawings]

FIG. 1 is a block diagram schematically showing a configuration of a securities processing apparatus according to an embodiment of the present invention.

FIG. 2 is a block diagram illustrating a configuration of a processing apparatus main body.

FIG. 3 is a block diagram showing a configuration of an external computer.

FIG. 4 is a block diagram showing a configuration of an IC card reader.

FIG. 5 is a block diagram showing a configuration of an IC card.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Processing apparatus main body 2 ... External computer 3 ... IC card reader 6 ... 1st IC card (portable storage medium) 7 ... 2nd IC card (portable storage medium) 11 ... Main control Unit 12 Sub-control unit 13 Determination control unit 14 Encryption operation control unit 15 Supply control unit 16 Transport control unit 17 Count sensor control unit 18 Integration control unit 19 Cutting Control unit 21 USB control unit 23 Sealing control unit 24 Ejection control unit 25 Authenticity judgment control unit 26 Damage judgment control unit 31 CPU 32 Keyboard controller 34 Display Controller 35: Magnetic disk controller 36: Magnetic disk device 39: USB controller 40: Serial controller 41: CPU 42: Serial controller 43: IC card Card controller 51 CPU CPU 52 Cryptographic operation unit 53 Encryption key storage memory 54 Card reader controller

Claims (12)

[Claims] Inspection of the entered securities is performed to separate the securities into at least the securities to be reused and the securities not to be reused, and the securities not to be reused are cut so that they cannot be reused. A processing apparatus main body for outputting processing data of a processing result including the number of securities subjected to the cutting processing, and controlling the operation of the processing apparatus main body and monitoring the operation of the processing apparatus main body, and from the processing apparatus main body. In a securities processing apparatus comprising an external computer for receiving the output processing data and managing the processing data, the securities processing apparatus has at least an arithmetic function and a data storage function from the external computer, and is attached to and detached from the external computer. By sending a key generation instruction to a flexible portable storage medium, a key can be generated using arithmetic functions in the portable storage medium. Transferring the key generated in the portable storage medium from the portable storage medium to the processing device main body via the external computer; and, in the processing device main body, transferring the key generated from the portable storage medium. Encrypting the processing data using the generated key, and transferring the encrypted processing data to the external computer. 2. The portable storage medium encrypts a generated key using an arithmetic function, and transfers the encrypted key to the processing device main body via the external computer. 2. A processing data transfer method in the securities processing apparatus according to 1. 3. The portable storage medium receives an encryption key transferred from the processing apparatus main body via the external computer, and uses the received encryption key to generate the generated key. 3. The method according to claim 2, wherein the data is encrypted. A step of selecting processing data to be audited in the external computer, and transferring the selected processing data to be audited to the portable storage medium; and transferring the selected processing data to the portable storage medium from the external computer. Encrypting the processed data using the key generated by the portable storage medium itself, transferring the encrypted processing data to the external computer, and transferring the encrypted processing data from the portable storage medium to the external computer. 2. The method according to claim 1, further comprising the step of comparing the encrypted processing data with the encrypted processing data transferred from the processing apparatus main body to audit for fraud. Process data transfer method in the securities processing device of the present invention. 5. Inspection of the entered securities is carried out to separate them into at least securities to be reused and securities not to be reused, and the securities not to be reused are cut so that they cannot be reused. A processing apparatus main body for outputting processing data of a processing result including the number of securities subjected to the cutting processing, and controlling the operation of the processing apparatus main body and monitoring the operation of the processing apparatus main body, and from the processing apparatus main body. In a securities processing apparatus comprising an external computer for receiving the output processing data and managing the processing data, the securities processing apparatus has at least an arithmetic function and a data storage function from the external computer, and is attached to and detached from the external computer. By sending a first key generation instruction to a flexible first portable storage medium, an operation is performed in the first portable storage medium. A step of generating a first key using the ability, first the key first generated in the first portable storage medium 1
Transferring from the portable storage medium to the processing device main body via the external computer; and a second computer having at least an arithmetic function and a data storage function from the external computer and detachably attached to the external computer. Sending a second key generation instruction to the portable storage medium to generate a second key using an arithmetic function in the second portable storage medium; The second key generated on the medium to the second key
Transferring from the portable storage medium to the processing device main body via the external computer; and in the processing device main body, the first key transferred from the first portable storage medium, and the second key. Encrypting the processing data using the second key transferred from the portable storage medium, and transferring the encrypted processing data to the external computer. Process data transfer method in the device. 6. The first portable storage medium encrypts the generated first key using an arithmetic function, and transmits the encrypted first key to the processing device main body via the external computer. The method according to claim 5, wherein the processing data is transferred. 7. The second portable storage medium encrypts the generated second key by using an arithmetic function, and transmits the encrypted second key to the processing device main body via the external computer. The method according to claim 5, wherein the processing data is transferred. 8. The first portable storage medium receives an encryption key transferred from the processing apparatus main body via the external computer, and uses the received encryption key to perform the generation. 7. The method according to claim 6, wherein the first key is encrypted. 9. The second portable storage medium receives an encryption key transferred from the processing apparatus main body via the external computer, and uses the received encryption key to generate the encryption key. 8. The method according to claim 7, wherein the second key is encrypted. 10. In the external computer, a step of selecting process data to be audited and transferring the selected process data to be audited to the first portable storage medium; Encrypting the processing data transferred from the external computer using the first key generated by the first portable storage medium itself, and transferring the encrypted processing data to the external computer; Auditing the computer for the presence or absence of fraud by comparing the encrypted processing data transferred from the first portable storage medium with the encrypted processing data transferred from the processing device body; The processing data transfer method in the securities processing apparatus according to claim 5, further comprising: 11. In the external computer, a step of selecting process data to be audited and transferring the selected process data to be audited to the second portable storage medium; Encrypting the processing data transferred from the external computer using the second key generated by the second portable storage medium itself, and transferring the encrypted processing data to the external computer; Auditing the computer for the presence or absence of fraud by comparing the encrypted processing data transferred from the second portable storage medium with the encrypted processing data transferred from the processing device main body. The processing data transfer method in the securities processing apparatus according to claim 5, further comprising: 12. The method according to claim 1, wherein the portable storage medium is an IC card.