JP2018206300A - IC card and IC card processing system - Google Patents

Abstract

An IC card that can be safely traded without inputting a password for a certain period of time. An IC card for authenticating a user based on key information inputted from a user, and having a password valid time management means, and comprising a key authentication valid time, a maximum number of transactions, and key authentication. A means for storing the maximum transaction amount when valid and the execution time of the command, and the password valid time management means compares the command time received from the IC card access device with the execution time of the command previously processed. An IC card that performs a transaction in which key information input is omitted when the elapsed time between commands is within the key authentication valid time, and the transaction is limited according to the maximum transaction count and the maximum transaction amount when the key authentication is valid. Is used. [Selection] Figure 1

Description

  In the present invention, when the IC card receives the key information from the IC card access device using the Verify command or the like and the key information is successfully authenticated, the authentication success status is maintained for a certain period of time and the password is not input. The present invention relates to an IC card and an IC card processing system.

  The IC card provides the IC card service to the user by the user inputting a character string such as a password or password from the IC card access device and authenticating the user to the IC card by the password or the like. ing.

  However, every time a transaction is made using an IC card, the work of inputting a personal identification number is cumbersome and inefficient. In particular, it is troublesome for the user to enter a password every time a small payment is made or a transaction is made continuously.

  In order to improve this problem, Patent Document 1 discloses an IC card and system having a function for exempting the user from entering a personal identification number for a certain period of time and for maintaining the security state after the last successful authentication of the IC card. Proposed.

  In other words, when a user of an IC card first purchases a product or registers an IC card with a device that performs a password protection process, the user can purchase the product without inputting the password for a certain period of time. . Actually, the current time information and the valid time are received from the POS terminal and the device that performs the password protection processing, the IC card stores the information, and when purchasing the product, the purchase time is received from the POS terminal.

  Then, if it is within the valid time stored earlier, it is determined that it is not necessary to input the password, and the determination is returned to the POS terminal, and the card holder can purchase the product without inputting the password. On the contrary, if it is outside the valid time, the IC card requests the POS terminal to input a personal identification number.

JP 2000-105788 A

  However, the technique of Patent Document 1 does not disclose a technique for an IC card to acquire accurate time information with high reliability. In addition, a technique for ensuring the safety of transactions during a period in which the input of a personal identification number is omitted has not been sufficiently disclosed.

  Therefore, an object of the present invention is to obtain an IC card processing system capable of ensuring the safety of transactions in a period in which the IC card acquires accurate time information with high reliability and the input of a password is omitted. And

In order to solve the above-mentioned problem, the present invention is an IC card that performs authentication of a user based on key information input from the user,
Has a password valid time management means,
Means for storing the key authentication valid time, the maximum number of transactions, the maximum transaction amount when the key authentication is valid, and the command execution time;
When the password valid time management means compares the time of the command received from the IC card access device with the execution time of the command processed earlier, and the elapsed time between commands is within the key authentication valid time In transactions where input of key information is omitted, transactions limited according to the maximum transaction count and the maximum transaction amount when the key authentication is valid are performed.
This is an IC card characterized by the above.

  With this configuration, the present invention reduces the burden of key information input by the user by performing a transaction that omits key information input when the elapsed time between commands is within the key authentication valid time. There is an effect that transaction processing can be performed.

  According to another aspect of the present invention, there is provided an IC card according to the above-described IC card, wherein a command including time information is received from the IC card access device to detect the time.

Further, the present invention is the above IC card, comprising a password valid time timer circuit,
The IC card valid time managing means authenticates the time of a command including the time information by using the time of the code number valid time timer circuit.

  The present invention is also the above IC card, wherein the time information is received from the host server via the IC card access device, and the command received from the IC card access device is authenticated and used. An IC card characterized in that time is measured.

  Further, the present invention is the above IC card, comprising a personal identification number valid time timer circuit, wherein the personal identification number valid time management means determines the time of the command including the time information of the personal identification number valid time timer circuit. It is an IC card characterized by authenticating using time.

The present invention also provides an IC card processing system in which key information input by a user from an IC card access device is transmitted to the IC card, and the IC card authenticates the user.
The IC card is
Has a password valid time management means,
Means for storing the key authentication valid time, the maximum number of transactions, the maximum transaction amount when the key authentication is valid, and the command execution time;
When the password valid time management means compares the time of the command received from the IC card access device with the execution time of the command processed earlier, and the elapsed time between commands is within the key authentication valid time In transactions where input of key information is omitted, transactions limited according to the maximum transaction count and the maximum transaction amount when the key authentication is valid are performed.
This is an IC card processing system.

  The present invention is the above IC card processing system, characterized in that a command including time information is transmitted from the IC card access device to the IC card to cause the IC card to detect the time. It is a processing system.

  Further, the present invention is the above IC card processing system, wherein the IC card access device transmits time information from a host server to the IC card, and the IC card authenticates and uses the time information. In the IC card processing system, the time of the command received from the IC card access device is measured.

According to the present invention, the password valid time management means compares the time of the command received from the IC card access device with the execution time of the previously processed command, and the elapsed time between commands is
When the key authentication valid time is not exceeded, the transaction with the input of key information omitted is performed according to the maximum number of transactions and the maximum transaction amount when the key authentication is valid.

  As a result, the present invention provides the user key information when performing transaction settlement continuously by performing a transaction that omits the input of the key information when the elapsed time between commands is within the key authentication valid time. There is an effect that transaction processing can be quickly performed while reducing the burden of input.

  In the present invention, in the transaction in which the input of the key information is omitted, the transaction is limited in accordance with the maximum number of transactions and the maximum transaction amount when the key authentication is valid. This has the effect of ensuring the safety of card transactions.

  Further, the present invention has an effect that the password valid time management means of the IC card can acquire highly reliable and accurate time information by performing processing for authenticating the time information of the command.

1 is a block diagram of an information processing system including an IC card and an external device according to a first embodiment of this invention. It is a figure which shows the data structure of the command which the IC card of the 1st Embodiment of this invention receives. It is a flowchart (the 1) which shows the process sequence of the 1st Embodiment of this invention. It is a flowchart (the 2) which shows the process sequence of the 1st Embodiment of this invention. It is a flowchart (the 2) which shows the process sequence of the 1st Embodiment of this invention. It is a block diagram of the information processing system comprised with the IC card of the 2nd Embodiment of this invention, and an external device. It is a block diagram of the information processing system comprised with the IC card of the 3rd Embodiment of this invention, and an external device.

  Hereinafter, embodiments of the present invention will be described.

<First Embodiment>
The first embodiment constitutes an information processing system as shown in the block diagram of FIG. That is, the IC card 10, the IC card access device 20, and the host server 30 constitute an information system. In the IC card 10, the card manager 14 determines whether or not the IC card access device 20 and the host server 30 can access the dedicated file DF of the IC card 10.

(IC card 10)
The IC card 10 is configured as shown in FIG. That is, the IC card 10 includes a communication unit 11 that performs communication by being supplied with power from the IC card reader / writer 21 of the IC card access device 20, a control unit 12, a volatile memory RAM, and a nonvolatile memory. A storage means 13 and a low power consumption PIN number valid time timer circuit 14c are provided.

(Low power consumption password valid time timer circuit 14c)
The low power consumption PIN number valid time timer circuit 14c is composed of, for example, a low power consumption CMOS circuit. Then, a low power charging circuit capable of storing a small amount of power that can operate the password valid time timer circuit 14c can be installed in the IC card 10, and the power from the IC card reader / writer 21 can be charged and used. .

(Modification 1)
As a first modification of the low power consumption password number valid time timer circuit 14c, a low power consumption password number valid time timer circuit 14c is configured in the IC card 10 by a time measuring capacitor and a discharge resistor. Then, while the power is supplied from the IC card access device 20 to the IC card 10, the password valid time management means 14a charges the time measuring capacitor to start the low power consumption password valid time timer circuit 14c. .

  In the first modification, the password valid time management means 14a starts the timer circuit by charging the time measuring capacitor of the low power consumption password valid time timer circuit 14c. Then, the passage of time is measured by utilizing the fact that the potential of the time measurement capacitor decreases with the passage of time by discharging the charge charged in the time measurement capacitor through the discharge resistor.

  When the IC card 10 receives a command while the power is supplied from the IC card access device 20, the password valid time management means 14a of the card manager 14 uses the low power consumption password valid time timer circuit 14c. Measure the potential of the time measurement capacitor. Depending on the magnitude of the potential, it is possible to measure the passage of time from the time point when the previously inputted key information PSW is valid.

(Storage means 13 of the IC card 10)
The block diagram of FIG. 1 shows a block configuration of the storage means 13 of the IC card 10. The IC card 10 has a volatile memory RAM, and has a storage means 13 constituted by a nonvolatile memory. The storage means 13 is composed of a nonvolatile memory such as a read only memory (ROM), an EEPROM (Electrically Erasable and Programmable ROM), or a flash memory. Further, the storage area of the storage means 13 has a system storage area 13a and a file storage area 13b.

(System storage area 13a)
In the system storage area 13a of the storage means 13, card operation software (card OS) including the card manager 14 is written.

(Card Manager 14)
The card manager 14 of the IC card 10 is configured by a software program stored in the system storage area 13 a of the storage unit 13. The card manager 14 includes a password valid time management means 14a.

  The card manager 14 uses the user authentication key RPIN recorded in the security attribute data SEC, the secure communication key, other authentication keys, and the like from the IC card access device 20 or the host server 30 to the dedicated file DF of the IC card 10. When there is an access request to, a process for determining whether or not the access is possible is performed.

  The card manager 14 extracts key information PSW and time information TIME input to the user from the command received from the IC card access device 20. The input key information PSW is checked against the user authentication key RPIN stored in the security attribute data SEC to determine its validity.

  Further, the card manager 14 reads the elapsed time that has elapsed from the start of the timer, from the low power consumption password valid time timer circuit 14c, using the password valid time management means 14a. Then, the command execution time CM-TIM, which is the activation time of the low power consumption password effective time timer circuit 14c, is read from the security attribute data SEC, and the password effective time timer circuit 14c is read at the command execution time CM-TIM. The approximate time is calculated by adding the elapsed time read from.

  The password effective time management means 14a verifies the estimated time with the time information TIME extracted from the command received from the IC card access device 20, thereby authenticating the reliability of the time information TIME. When the time information TIME can be authenticated, the time information TIME is stored in the security attribute data SEC as the command execution time CM-TIM. Then, the time of the power consumption code number valid time timer circuit 14c is set by using the code number valid time management means 14a.

  If the elapsed time between commands calculated by the password valid time management means 14a is within the key authentication valid time PIN-TIM, the card manager 14 omits the input of the key information PSW and provides the service to the user.

  That is, when the card manager 14 first authenticates the key information PSW, the card manager 14 maintains the security valid state during the key authentication valid time PIN-TIM from the time of processing of the previous command, and the user key information PSW (password) Provide transaction services to users without entering (number). In the meantime, the transaction service is provided by limiting the number of transactions and the transaction amount.

(Dedicated file DF in file storage area 13b)
The dedicated file DF (Dedicated File) and the basic file EF (Elementary File) related to the application program of the IC card 10 are arranged in a hierarchical structure under the main file MF (Master File) in the file storage area 13b of the storage means 13. Remember.

  The dedicated file DF is created for each application program installed in the IC card 10 such as a financial card, a transportation card, and an identification card.

  A file identifier that is an application identifier is assigned to the dedicated file DF. An internal basic file IEF and a work basic file WEF are provided under the dedicated file DF. The work basic file WEF stores the individual data 15 of the IC card 10. For example, as shown in FIG. 1, the individual data 15-1 is stored in the dedicated file DF1, and the individual data 15-2 is stored in the dedicated file DF2.

(Security attribute data SEC)
Security attribute data SEC is stored in the internal basic file IEF of the dedicated file DF. The security attribute data SEC stores a user authentication key RPIN such as a user's personal identification number (password), a secure communication key, and other authentication keys.

  In particular, in the present embodiment, key authentication valid time PIN-TIM, maximum transaction count PIN-REP, key authentication valid maximum transaction amount PIN-CASH, and transaction cumulative count CM-NM are stored in the security attribute data SEC.

  Further, the card manager 14 stores the time information TIME extracted from the command received from the IC card access device 20 in the execution time CM-TIM of the command of the security attribute data SEC using the password effective time management means 14a. As the command execution time CM-TIM, the execution times CM-TIM of a plurality of commands having a circular data structure can be stored in the circular storage area by the storage means.

(Judgment of omission of omission of input of key information PSW)
In particular, the card manager 14 compares the command time TIME received by the IC card 10 from the IC card access device 20 with the execution time CM-TIM of the previously processed command using the password valid time management means 14a. The elapsed time between them is calculated.

  The password valid time management means 14a omits the input of the key information PSW by the user or inputs the key information PSW according to whether or not the elapsed time between the commands is within the key authentication valid time PIN-TIM. Or processing with different user authentication means.

  That is, when the elapsed time is within the key authentication valid time PIN-TIM, the service is provided to the user by omitting the input of the key information PSW, and the elapsed time has passed the key authentication valid time PIN-TIM. In this case, the user is made to input key information PSW.

(Restriction of service when input of key information PSW is omitted)
Further, when the card manager 14 provides the user with a transaction service in which the input of the key information PSW is omitted, the card manager 14 restricts the transaction service limited according to the maximum transaction number PIN-REP and the maximum transaction amount PIN-CASH when the key authentication is valid. provide.

(IC card access device 20)
The IC card access device 20 notifies the IC card 10 of time information. In other words, the IC card access device 20 transmits a command including the time information TIME. For example, as shown in FIG. 2, a command having a data structure including time information TIME is transmitted to the IC card 10 to notify the time.

  The command transmitted from the IC card access device 20 to the IC card 10 is configured as shown in FIG. The command in FIG. 2 includes a command header part, an Lc field part indicating the data length, a data part Data, a Le field part indicating the maximum data length (bytes) of the response, and time information TIME.

  The command header part is composed of a LEN field indicating the data length of the command, a command classification part (CLA: class), an instruction part (INS: instruction), and parameter data (P1, P2).

  The data portion and the like are configured in a conventional command format, but time information TIME is added after the Le field portion. This time information TIME includes a date part dd, a time part hh, a minute part mm, and a second part ss.

(Modification 2)
As a second modification, the time information TIME can be notified in the data portion of the command. That is, the IC card access device 20 provides a command for notifying the IC card 10 of the time information TIME.

  In the case of the second modification, the IC card is provided with the IC number access time timer circuit 14c whose time is matched with the time information TIME as a reference while the power is supplied from the IC card access device 20. The time of a command transmitted from the card access device 20 to the IC card 10 is measured.

(Processing procedure)
Hereinafter, processing procedures of the IC card 10, the IC card access device 20, and the host server 30 will be described with reference to the flowcharts of FIGS.

(Step S1) Offline Authentication Processing Start The user holds the IC card 10 over the IC card reader / writer 21 of the IC card access device 20, causes the IC card reader / writer 21 to supply power to the IC card 10, and
The C card access device 20 is caused to start communication with the IC card 10.

(Step S2)
The IC card 10 is reset by starting communication with the IC card access device 20, and notifies the IC card access device 20 of an initial response after the reset.

(Step S3)
The IC card access device 20 that has received the notification of the initial response from the IC card 10 transmits a SELECT FILE command to the IC card 10. With this command, the IC card access device 20 requests the IC card 10 to start by specifying a predetermined application program and a dedicated file DF.

(Step S4)
The card manager 14 of the IC card 10 inputs the key information PSW when the application program specified by the SELECT FILE command received from the IC card access device 20 is within the key authentication valid time PIN-TIM. When omitted, a notification requesting the time information TIME is transmitted to the IC card access device 20.

(Step S4 ′)
The IC card access device 20 transmits a command including time information TIME to the IC card 10. As the command, as shown in FIG. 2, a command composed of a command portion and a time information TIME portion can be used.

(Step S5)
The card manager 14 of the IC card 10 extracts time information TIME from the command received from the IC card access device 20.

(Step S6) Authentication processing start of time information TIME Next, the card manager 14 has passed from the start time of the timer from the low power consumption password valid time timer circuit 14c using the password valid time management means 14a. Read time.

  The password effective time management means 14a reads the command execution time CM-TIM, which is the activation time of the low power consumption password effective time timer circuit 14c, from the security attribute data SEC. Then, the approximate time is calculated by adding the elapsed time read from the low-power-consumption password effective time timer circuit 14c to the command execution time CM-TIM.

(Step S7)
The password valid time management means 14a verifies the estimated time with the time information TIME extracted from the command received from the IC card access device 20, thereby authenticating the reliability of the time information TIME.

  If the time information TIME can be authenticated, the password effective time management means 14a calculates the difference between the time information TIME and the execution time CM-TIM of the previous command to calculate an accurate elapsed time.

(Step S8)
The password valid time management means 14a checks whether or not the elapsed time is within the key authentication valid time PIN-TIM. If the elapsed time is within the key authentication valid time PIN-TIM, the process proceeds to step S13, and if not, the process proceeds to step S9.

(Step S9)
If the elapsed time exceeds the key authentication validity time PIN-TIM, the password valid time management means 14a transmits an input request command for key information PSW to the IC card access device 20.

(Step S10)
The IC card access device 20 that has received the key information PSW input request command from the IC card 10 causes the user to input the key information PSW from the input terminal of the IC card access device 20.

(Step S11)
The IC card access device 20 transmits a key authentication command (KEY VERIFY) including the key information PSW input by the user to the IC card 10.

(Step S12) The input key information PSW is collated with the user authentication key RPIN. Upon receiving the key authentication command (KEY VERIFY) from the IC card access device 20, the card manager 14 of the IC card 10 sends the key authentication command to the user. The input key information PSW is extracted and stored in the volatile memory RAM.

  Then, the card manager 14 reads out the user authentication key RPIN of the user of the security attribute data SEC stored in the dedicated file DF of the IC card 10 and compares it with the input key information PSW.

  If the input key information PSW matches the user authentication key RPIN of the user, the process proceeds to step S13. If not, the process returns to step S9.

(Step S13) Checking the Maximum Number of Transactions The card manager 14 of the IC card 10 determines the maximum number of transactions PIN-REP according to whether the transaction is the key information PSW input or the key information PSW input is omitted. Compare the cumulative number of transactions CM-NM. If the accumulated transaction count CM-NM exceeds the limit of the maximum transaction count PIN-REP, the process returns to step S1.

(Step S14) User Authentication The card manager 14 of the IC card 10 authenticates the IC card access device 20 and the user when the cumulative number of transactions is within the maximum number of transactions PIN-REP. Then, an access permission notification (success notification of offline authentication) to the dedicated file DF of the IC card 10 is transmitted to the IC card access device 20.

(Step S15)
The IC card access device 20 that has received the notification of permission to access the dedicated file DF from the IC card 10 notifies the host server 30 of the status of access to the IC card 10.

(Step S16) Online Authentication Processing The IC card 10 performs encrypted communication with the host server 30 using the common key as a secure communication key. If authentication of the secure communication key for encrypted communication with the host server 30 is successful, the card manager 14 of the IC card 10 permits access to the dedicated file DF from the host server 30.

(Step S17) Start of Online Service The host server 30 checks the dedicated file DF of the IC card 10 online to authenticate the IC card 10 online and starts the service. Then, a service start command is transmitted to the authenticated IC card 10. The time information TIME is attached to the service start command.

(Step S18)
The password valid time management means 14a of the card manager 14 of the IC card 10 that has received the service start command from the host server 30 extracts the time information TIME from the service start command received from the IC card access device 20, and executes the command. Stored in the security attribute data SEC as time CM-TIM.

(Step S19)
Then, the password effective time management means 14a activates the timer of the low power consumption password effective time timer circuit 14c.

(Step S20) Approval of Transaction Amount The card manager 14 of the IC card 10 receives the user transaction amount from the IC card access device 20. When the key information PSW is input, a normal transaction amount approval notification is transmitted to the IC card access device 20.

  In the case of a transaction in which the input of the key information PSW is omitted, the card manager 14 compares the user transaction amount with the maximum transaction amount PIN-CASH when the key authentication is valid, using the password valid time management means 14a. When the user transaction amount is within the range specified by the maximum transaction amount PIN-CASH when the key authentication is valid, the transaction proceeds to transaction processing and a transaction approval notification is transmitted to the IC card access device 20.

  In this process, the PIN valid time management means 14a records the total amount of transactions during the period when the input of the key information PSW is omitted, and the total amount of transactions is the maximum transaction amount PIN-CASH when the key authentication is valid. It is desirable to process so as not to exceed.

(Step S21)
When receiving a transaction approval notification from the IC card 10, the IC card access device 20 provides a transaction service to the user. Then, the IC card access device 20 reports the transaction service provision result to the user of the IC card 10 to the host server 30.

  When the service of the IC card 10 is completed, the card manager 14 of the IC card 10 then returns to step S1 and repeats the process.

<Second Embodiment>
In the second embodiment, the IC card 10 includes a charging circuit 16 as shown in FIG. Then, the card manager 14 of the IC card 10 uses the personal identification number valid time timer circuit 14c provided in the IC card 10 to measure the time elapsed from the command execution time CM-TIM, and uses the elapsed time as the key authentication valid time. Compared with PIN-TIM, it is determined whether or not the input of key information PSW can be omitted.

  In the second embodiment, since the charging circuit 16 can supply power during a period when the password valid time timer circuit 14c is necessary and cause the password valid time timer circuit 14c to measure the time, the IC card access device 20 It is not necessary to attach the time information TIME to the command transmitted to the IC card 10, and the command data structure can be simplified.

<Third Embodiment>
In the third embodiment, as shown in FIG. 7, the card manager 14 includes reference time receiving means 14 d. The reference time receiving unit 14d authenticates the time information TIME received from the host server 30 as reliable time information by encrypted communication using the common key as the secure communication key with the host server 30.

  Then, while the IC card 10 is being supplied with power from the IC card reader / writer 21 of the IC card access device 20, the IC number 10 is based on the password valid time timer circuit 14c whose time is matched with the time information TIME. The time of a command transmitted from the card access device 20 to the IC card 10 is accurately measured.

  In this way, by measuring the time by the password valid time timer circuit 14c that matches the time with the reliable time information TIME, the reception time of the command received from the IC card access device 20 can be accurately measured. The card manager 14 of the IC card 10 compares the reception time of the command with the execution time CM-TIM of the previously processed command stored in the IC card 10.

  That is, the card manager 14 calculates the time elapsed from the command execution time CM-TIM of the previously processed command as the command reception time. Then, the elapsed time is compared with the key authentication valid time PIN-TIM to determine whether or not the key information PSW can be omitted.

  In the third embodiment, a command to be transmitted from the IC card access device 20 to the IC card 10 is obtained by accurately measuring the time using the password valid time timer circuit 14c that matches the time using the reference time receiving means 14d. There is an effect that the attachment of the time information TIME can be omitted.

(Modification 3)
As a third modification of the third embodiment, the time information TIME received and authenticated from the host server 30 is used as the reception time and execution time of the command, so that the IC card valid time timer circuit 14c is omitted. 10 can also be used.

  The present invention is not limited to the above-described embodiment, and the IC card 10 is not limited to a non-contact type card, but can be applied to an IC card 10 of a contact type card.

DESCRIPTION OF SYMBOLS 10 ... IC card 11 ... Communication part 12 ... Control means 13 ... Storage means 13a ... System storage area 13b ... File storage area 14 ... Card manager 14a ... PIN Effective time management means 14c ... (low power consumption) password effective time timer circuit 14d ... reference time receiving means 15, 15-1, 15-2 ... individual data 16 ... charging circuit 20 .. IC card access device 21... IC card reader / writer 30... Host server CM-NM... Cumulative transaction count CM-TIM .. command execution time DF, DF1, DF2. IEF, IEF1, IEF2 ... Internal basic file MF ... Main file PIN-TIM ... Key authentication valid time PIN-REP ... Maximum number of transactions PIN-CA H: Maximum transaction amount when key authentication is valid PSW: Input key information RAM ... Volatile memory RPIN ... User authentication key SEC ... Security attribute data TIME ... Time information WEF, WEF1, WEF2 ... Work basic file

Claims (8)

An IC card for authenticating the user based on the key information input from the user,
Has a password valid time management means,
Means for storing the key authentication valid time, the maximum number of transactions, the maximum transaction amount when the key authentication is valid, and the command execution time;
When the password valid time management means compares the time of the command received from the IC card access device with the execution time of the command processed earlier, and the elapsed time between commands is within the key authentication valid time An IC card characterized in that a transaction in which input of key information is omitted is limited according to the maximum number of transactions and the maximum transaction amount when the key authentication is valid.   2. The IC card according to claim 1, wherein a command including time information is received from the IC card access device to detect the time. The IC card according to claim 2, further comprising a password valid time timer circuit,
The IC card wherein the password valid time management means authenticates the time of a command including the time information using the time of the password valid time timer circuit.   2. The IC card according to claim 1, wherein the time of the command received from the IC card access device is measured by receiving the time information from the host server via the IC card access device and authenticating and using the time information. IC card characterized by   5. The IC card according to claim 4, further comprising a password effective time timer circuit, wherein the password effective time management means uses the time of the command including the time information as the time of the password effective time timer circuit. IC card characterized by authentication. An IC card processing system in which key information input from an IC card access device by a user is transmitted to the IC card, and the IC card authenticates the user,
The IC card is
Has a password valid time management means,
Means for storing the key authentication valid time, the maximum number of transactions, the maximum transaction amount when the key authentication is valid, and the command execution time;
When the password valid time management means compares the time of the command received from the IC card access device with the execution time of the command processed earlier, and the elapsed time between commands is within the key authentication valid time An IC card processing system for performing a transaction in which the input of key information is omitted and limited according to the maximum number of transactions and the maximum transaction amount when the key authentication is valid.   7. The IC card processing system according to claim 6, wherein a command including time information is transmitted from the IC card access device to the IC card to cause the IC card to detect the time.   7. The IC card processing system according to claim 6, wherein the IC card access device transmits time information from a host server to the IC card, and the IC card authenticates and uses the time information. An IC card processing system for measuring the time of a command received from an access device.

Images