JPH11134451A - IC card, IC card authentication switching method and system, and storage medium storing IC card authentication switching program - Google Patents

Abstract

(57) [Summary] [Problem] Select between two states in which the card owner holds the IC card corner after verifying the identity and a state in which the card cannot be used without entering the password. An IC card, an IC card authentication switching method and system, and a storage medium storing an IC card authentication switching program. SOLUTION: The present invention requests a password of an IC card user, performs authentication based on the input password, and, when the user is authenticated,
“Authenticated” for enabling the IC card to be used is written in the volatile memory, and “authenticated” is also written in the nonvolatile memory.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to an IC card and an IC card.
The present invention relates to a C card authentication switching method and system, and a storage medium storing an IC card authentication switching program.
The present invention relates to an IC card for switching an authentication method when performing identity verification of an IC card, an IC card authentication switching method and system, and a storage medium storing an IC card authentication switching program.

[0002]

2. Description of the Related Art FIG. 10 shows a configuration of a conventional IC card. Conventionally, when the IC card 10 is used,
Every time the C card 10 is used, the owner of the IC card 10 inputs a password to confirm the identity. As a result, the IC card 10 can be used after the password is input to the RAM 11 and the identity is confirmed. When the use is terminated, the power supply is cut off by pulling out the IC card 10 from the slot (if all the use is completed, the IC card comes out of the return port), and the RAM in which the personal identification information is held. Returns to the state before identification (unauthenticated state).

[0003]

However, as shown in the above-mentioned conventional method, performing identity verification every time a card is used is excellent from the viewpoint of security, but a password is input each time the card is used. Therefore, from the viewpoint of convenience, there is a problem that it is troublesome to perform identity verification one by one.

[0004] The present invention has been made in view of the above points, and the present invention has been made in a state where the card owner has confirmed his / her identity.
An IC card, an IC card authentication switching method, a system, and an IC that can select between a state in which the C card is held and a state in which the C card cannot be used unless a password is input, as in the related art. An object of the present invention is to provide a storage medium storing a card authentication switching program.

[0005]

SUMMARY OF THE INVENTION The present invention relates to an IC card which can be used by inputting a password and authenticating the card. When the password is input and authenticated, the usable state is written. It has a volatile memory in which an unusable state is written when the card is pulled out, and a non-volatile memory in which the contents of the volatile memory are copied and the usable state is kept even when the card is pulled out.

FIG. 1 is a diagram for explaining the first principle of the present invention. According to the present invention, an IC card having a nonvolatile memory and a volatile memory in which a usable state is written when a password is input and authenticated and an unusable state is written when the card is pulled out is used, In the IC card authentication switching method for disabling the IC card, a password is requested to the user of the IC card, authentication is performed based on the input password (step 1), and the user is authenticated as valid. In some cases, I
"Authenticated" for making the C card usable is written in the volatile memory (step 2), and "authorized" is also written in the nonvolatile memory (step 3).

Further, according to the present invention, the content of the non-volatile memory in which the usable state is written is rewritten at an arbitrary timing to "unauthenticated" which makes the IC card unusable. FIG. 2 is a diagram for explaining the second principle of the present invention. According to the present invention, an IC card having a nonvolatile memory and a volatile memory in which a usable state is written when a password is input and authenticated and an unusable state is written when the card is pulled out is used, In the IC card authentication switching method for disabling the IC card, a password is required for the user of the IC card,
Authentication is performed based on the input password (step 10). If the user is authenticated, the IC
"Authenticated", which makes the card usable, is written in the volatile memory (step 11). When the IC card is used, "authenticated" is written in the nonvolatile memory (step 1).
2) After using the IC card, "unauthenticated" is written in the nonvolatile memory (step 13).

FIG. 3 is a diagram showing the first principle of the present invention. According to the present invention, an IC card having a nonvolatile memory and a volatile memory in which a usable state is written when a password is input and authenticated and an unusable state is written when the card is pulled out is used, An IC card authentication switching system for disabling use,
Authentication means 21 for requesting a password to an IC card user and performing authentication based on the input password
When the user is authenticated by the authentication means, "authenticated" which indicates that the IC card can be used is set to I
It has an authentication information writing means 22 for writing in the volatile memory of the C card and for writing "authenticated" also in the nonvolatile memory.

Further, the IC card authentication switching system of the present invention writes the contents of the non-volatile memory in which the usable state has been written to "unauthenticated" which makes the IC card unusable at an arbitrary timing. There is further provided an authentication information rewriting means for changing. FIG. 4 is a second principle configuration diagram of the present invention. According to the present invention, an IC card having a nonvolatile memory and a volatile memory in which a usable state is written when a password is input and authenticated and an unusable state is written when the card is pulled out is used, An IC card authentication switching system for disabling use,
Authentication means 21 for requesting a password to an IC card user and performing authentication based on the input password
And a volatile memory writing means 23 for writing, in a volatile memory, "authenticated" for enabling the IC card when the user is authenticated by the authentication means. 20, an in-use non-volatile memory writing means 33 for writing "authenticated" also in the non-volatile memory when using the IC card, and a "after-use non-volatile" writing in the non-volatile memory after using the IC card And a terminal 30 having a non-volatile memory writing unit 34.

According to the present invention, it is possible to use an IC card having a volatile memory in which a usable state is written when a password is input and authenticated, and an unusable state when a card is pulled out, and a nonvolatile memory. An authentication process for requesting a password to an IC card user and performing authentication based on the input password, the authentication process comprising: When the user is authenticated by the process as valid, write "authenticated" in the volatile memory to make the IC card usable,
Further, there is provided an authentication information writing process for writing “authenticated” also in the nonvolatile memory.

Further, the storage medium storing the IC card authentication switching program of the present invention stores the contents of the non-volatile memory in which the usable state is written at an arbitrary timing.
There is further provided an authentication information rewriting process for rewriting the IC card into an “unauthenticated” state that renders the IC card unusable. The present invention relates to an IC having a volatile memory in which a usable state is written when a password is input and authenticated, and an unusable state when a card is removed, and a nonvolatile memory.
I put the card in a usable state or an unusable state
A storage medium storing a C card authentication switching program, mounted on a balance reader for reading an IC card,
An authentication process in which a password is requested from the user of the IC card and authentication is performed based on the entered password, and the IC card can be used if the user is authenticated by the authentication process. And a volatile memory writing process for writing “authenticated” into the volatile memory.

According to the present invention, it is possible to use an IC card having a volatile memory in which a usable state is written when a password is input and authenticated, and an unusable state when a card is pulled out, and a nonvolatile memory. A storage medium that stores an IC card authentication switching program to be set to a state or an unusable state. The storage medium is mounted on a terminal when the IC card is used. Is written,
It has a use-time non-volatile memory writing process of writing “authenticated” also in the non-volatile memory, and a post-use non-volatile memory writing process of writing “unauthenticated” in the non-volatile memory after using the IC card.

As described above, according to the present invention, the role of the card memory is divided by properly using the nonvolatile memory and the volatile memory, and the card holder holds the card in a state where the identity of the card has been confirmed. It has a structure that allows the user to appropriately select between the case where the password is input and the state where the password cannot be used without entering the password. That is, an area of a volatile memory, a RAM, and a non-volatile memory, an EEPROM, is provided in an IC card, and the identity of the card is firstly confirmed by a password, and the card is ready for use.
The card was retained as it was in the PROM so that the card could be used without having to use a password to confirm the identity the next time.
The EEPROM uses the R
Unlike AM, the memory contents are retained even when the power supply is cut off. Therefore, by retaining the identity verification information in the EEPROM, the card owner does not need to confirm the identity unless the card owner cancels the identity verification information. The card can be used. However, at any time at the direction of the cardholder,
Authentication status can be released.

Further, in the present invention, in the above description, the personal authentication can be arbitrarily cancelled, but if the authentication is not canceled, there is a possibility that the personal authentication will be used by another person when the user is lost. In the case of postpaid, which has a high price limit, some form of guarding is required. That is, it is necessary to change the personal authentication information held in the EEPROM to “unauthenticated”. In the present invention, the authenticated information in the EEPROM is automatically unauthenticated, so that even if it is lost, it is not used unless a password is input. In other words, in the conventional card, the password must be entered using a terminal immediately before use. However, in the present invention, the password is entered in a private place such as a house using a balance reader in the EEPROM, and the password is entered in the EEPROM. When the authenticated information is held, the card is used by shopping at the store and the card is used, and when the card is taken out from the terminal of the store, "unauthenticated" is also displayed on the RAM,
By setting the status to "unauthenticated" even on the EPROM, the password cannot be entered in public, and after use, the password cannot be used without entering the password, thereby increasing security. Can be.

[0015]

DESCRIPTION OF THE PREFERRED EMBODIMENTS First, a first embodiment of the present invention will be described. In the present embodiment, first, personal identification is performed using a password, and the card which is in a card usable state is retained as it is in the "usable state" in the EEPROM, and the IC card can be used without performing the personal confirmation next time. A case where the present invention is applied to a prepaid card or the like will be described.

FIG. 5 shows the configuration of the IC card of the present invention. The usage state of the IC card is written in the RAM 11 shown in FIG. 3, and the content of the RAM 11 is deleted when the IC card is pulled out from the balance reader. EEPROM
When the usage state of the IC card is written, the written information is held as it is even if the IC card is pulled out from the balance reader.

FIG. 6 shows the configuration of the balance reader according to the first embodiment of the present invention. The balance reader 20 shown in FIG. 1 requests an IC card for a password and authenticates the input password, and a switching control unit 22 that switches the state of the IC card between an authenticated state and an unauthenticated state. Be composed. The authentication unit 21 issues a password input request to the user. When the password is input, the RAM 11 of the IC card 10 is authenticated in order to change the state of the IC card from an unauthenticated state to an authenticated state.
As a result, the IC card 10 copies the “authenticated” written in the RAM 11 to the EEPROM 12 and holds the EEPROM 12 as an authenticated state.

The switching control unit 22 issues to the IC card 10 a status for making the state of the EEPROM "authenticated" in the authentication unit 21 unauthenticated,
The EEPROM 22 is set to the “unauthenticated” state. As a result, even when the IC card 10 is pulled out of the slot, the "usable state" is maintained in the IC card 10, so that there is no need to input a password at the time of use.

Next, a second embodiment of the present invention will be described. In this embodiment, in case the IC card is lost or stolen,
A case will be described in which personal authentication information is set in an “unauthenticated” state after use of a card, and an IC card is used as electronic cash. FIG. 7 shows a configuration of a store terminal according to the second embodiment of the present invention.

The store terminal 30 shown in FIG.
0 indicates “usable state” (EEPRO in IC card 10)
When the state of M12 is “usable state” and used as electronic cash, the purchased price is
And the payment control unit 31 that updates the contents of the IC card 10 with the result as a new balance, and the status that switches the state of the EEPROM 12 of the IC card 10 from the “usable state” to the “unusable state”. It comprises a switching control unit 32 for issuing to the IC card 10.

[0021]

Embodiments of the present invention will be described below with reference to the drawings. [First Embodiment] First, as a first embodiment, a prepaid card whose usage limit is predetermined as an IC card will be described as an example. In this case, it is assumed that the owner of the IC card holds the card after confirming the identity.

FIG. 8 is a sequence chart showing an example of use of the prepaid card according to the first embodiment of the present invention. Step 101) First, when the balance reader 20 acquires the password, the password stored in the IC card (prepaid card) inserted into the slot of the balance reader 20 is compared with the entered password. , If they match, "VERYF
Executing the “Y” command, the RAM 11 of the IC card 10
"Authentication completed" as the authentication information.

Step 102) Next, the balance reader 20 executes the "STORE STATUS" command to store the R in the EEPROM 12 of the inserted IC card 10.
Copy the contents of AM11 ("authenticated"). Step 103) When the IC card 10 is pulled out of the slot of the balance reader 20, R
The content of AM 11 automatically becomes “unauthenticated”.

Step 104) When the IC card 10 is used by the owner, the IC card 10 is inserted into the shop terminal 30, and the terminal 30 issues a password input request without issuing a password input request. MOVE S
TATUS "to execute the EEPROM 12 of the IC card.
Is copied to the RAM 11, the IC card 10 becomes usable.

Step 105) The terminal 30 deducts the amount of money for the purchase of the product by the user from the denomination stored in the IC card 10. Step 106) The user who has completed the payment enters the terminal 30
When the IC card 10 is pulled out, the contents of the RAM 11 automatically become "unauthenticated" due to the power stop.

Step 107) When the user inserts the IC card 10 into the balance reader 20 installed in a private place such as home, the balance reader 2
0 issues a “CLEAR STATUS” command and rewrites the contents of the EEPROM 12 of the IC card 10 to “unauthenticated”. Thus, the EEPROM 1 of the IC card 10
By writing “authenticated” in 2, the content of the EEPROM 12 of the card 10 can be used by copying the contents of the EEPROM 12 of the card 10 to the RAM 11 without inputting the password at the terminal to be used. In addition, since the balance reader 20 can release the authentication state (unauthenticated state) at any time according to the instruction of the card user, when the owner does not use the balance reader 20, the IC card is stored in the balance reader 20. Just performing the process of inserting 10 makes it impossible for others to use maliciously.

[Second Embodiment] Next, a second embodiment will be described.
In the case of the prepaid card in the first embodiment, the personal authentication can be canceled arbitrarily. However, if the card is lost in a state where the authentication has not been canceled, there is a possibility that the card is used by another person. Particularly in the case of postpaid where the limit of the amount is set high, further guard is required.

In this embodiment, a case where a postpaid (electronic cash) is used as an IC card will be described as an example. FIG.
It is a sequence chart which shows the example of use of the postpaid of the 2nd Example of this invention. Step 201) In the slot of the balance reader 20, I
When the C card 10 is inserted, the balance reader 20 requests the input of a password. When the password is input, the balance reader 20 collates the password stored in the IC card 10 with the input password.

Step 202) If there is a match in the collation, a “VERYFY” command is executed to execute the IC card 1
"Authentication completed" is written as authentication information in the RAM 11 of "0". Step 202) Next, the "STORE STATUS" command is executed, and the balance reader 20 copies the contents ("authenticated") of the RAM 11 to the EEPROM 12 of the inserted IC card 10.

Step 203) When the IC card 10 is pulled out from the slot of the balance reader 20, the contents of the RAM 11 are automatically set to "unauthenticated" due to the power stop. Step 204) When the user inserts the IC card (postpaid) into the slot of the store terminal 30 that uses the IC card (postpaid), the terminal 30 transmits “MOVESTATUS” from the upper module.
By executing the command, the EEPROM 12
Is copied to the RAM 11 (“authenticated”). As a result, the IC card becomes usable.

Step 205) The terminal 30 makes a payment by purchasing a product by the user, updates the balance by subtracting the payment amount from the balance of the IC card (host pay). Step 206) When the settlement is completed, the terminal 30 displays “CLEA
By executing the “R STATUS” command, the contents of the EEPROM 12 are set to “unauthenticated”.

Step 207) When the user pulls out the IC card 10 from the slot of the terminal 30, the contents of the RAM 11 automatically become "unauthenticated" due to the stop of the power supply. As described above, even when the IC card 10 is used as a postpaid in the store terminal 30, the card can be used without inputting the password in public, and when the use is completed, the “unauthenticated” state is automatically set. Therefore, even if another person tries to pick up and use it, it cannot be used unless a password is input.

In the first and second embodiments,
Although a prepaid card and a postpaid card are taken as examples, the present invention is not limited to this example, and the present invention can be applied to general IC cards that require an authenticated and unauthenticated mode. Each component of the balance reader and the shop terminal shown in FIGS. 6 and 7 is constructed as a program and stored in a memory in the apparatus, a floppy disk, a portable storage medium such as a CD-ROM, and the like. The present invention can be used for general purposes in a system in which use must be restricted by IC card authentication or non-authentication as in the invention.

The present invention is not limited to the above embodiment, but can be variously modified and applied within the scope of the claims.

[0035]

As described above, according to the present invention, an identity is firstly confirmed by a password, and the card which is in a card usable state ("authenticated") is held in a nonvolatile memory in the IC card. By removing the card reader from the card reader, the power supply will be cut off, and even if the personal identification information stored in the volatile memory is "unauthenticated", the password will not be entered again when used. There is no need to input a password that should be kept secret in public.

Further, after use, it is possible to rewrite the "authorized" state written in the non-volatile memory again to "unauthenticated" at the will of the user, and any one of them can be appropriately changed according to the intention of the user. Can be selected. Further, according to the present invention, a password is entered in a private place, “authenticated” is held in the nonvolatile memory, and after using the card, the state of the nonvolatile memory is written as “unauthenticated”. By changing, when the card is taken out from the store terminal, both the volatile memory and the non-volatile memory are in the “unauthenticated” state, so that misuse of the card can be avoided.

[Brief description of the drawings]

FIG. 1 is a diagram for explaining a first principle of the present invention.

FIG. 2 is a diagram for explaining a second principle of the present invention.

FIG. 3 is a first principle configuration diagram of the present invention.

FIG. 4 is a second principle configuration diagram of the present invention.

FIG. 5 is a configuration diagram of an IC card of the present invention.

FIG. 6 is a configuration diagram of a balance reader according to the first embodiment of the present invention.

FIG. 7 is a configuration diagram of a store terminal according to a second embodiment of the present invention.

FIG. 8 is a sequence chart showing a usage example of the prepaid card of the first embodiment of the present invention.

FIG. 9 is a sequence chart showing an example of using postpaid according to the second embodiment of the present invention.

FIG. 10 is a configuration diagram of a conventional IC card.

[Description of Signs] 10 IC card 11 RAM 12 EEPROM 20 Balance reader, IC card authentication switching system 21 Authentication unit, authentication unit 22 Switching control unit, authentication information writing unit 23 Volatile memory writing unit 30 Store terminal 31 Payment control Unit 32 Switching control unit 33 Non-volatile memory writing means in use 34 Non-volatile memory writing means after use

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Kenichi Suzuki 3-19-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Nippon Telegraph and Telephone Corporation

Claims (11)

[Claims] Claims: 1. An IC card which can be used by inputting a password and authenticating the information. When the password is input and authenticated, the usable state is written, and when the card is pulled out, the unusable state is written. An IC card comprising: a volatile memory to be used; and a non-volatile memory in which the content of the volatile memory is copied and which can be used even when the card is pulled out. 2. An IC card having a volatile memory, in which a password is input and authenticated, a usable state is written when the card is authenticated, and an unusable state when the card is pulled out, and a non-volatile memory, is used in the usable state or Requesting a password for a user of the IC card,
Authenticates based on the input password. If the user is authenticated, the IC
An IC card authentication switching method, characterized in that "authenticated" for enabling a card is written in a volatile memory, and "authorized" is also written in the nonvolatile memory. 3. At any time, the contents of the non-volatile memory in which the usable state is written are stored in the IC.
3. The IC card authentication switching method according to claim 2, wherein the card is rewritten to "unauthenticated" in which the card cannot be used. 4. An IC card having a volatile memory and a nonvolatile memory in which a usable state is written when a password is input and authenticated, and an unusable state is written when the card is pulled out, is used in an enabled state or a non-volatile state. Requesting a password for a user of the IC card,
Authenticates based on the input password. If the user is authenticated, the IC
Write "authenticated" to the volatile memory to make the card usable, and write "authenticated" to the non-volatile memory when using the IC card. After using the IC card, write to the non-volatile memory An IC card authentication switching method, wherein "unauthenticated" is written. 5. An IC card having a nonvolatile memory and a volatile memory in which a usable state is written when a password is input and authenticated, and an unusable state is written when the card is pulled out, is used in an enabled state or a non-volatile state. An IC card authentication switching system for disabling the IC card, requesting a password for a user of the IC card,
An authentication unit for performing authentication based on the input password; and when the user is authenticated by the authentication unit, “authenticated” for enabling the IC card to be used is stored in the volatile memory. An IC card authentication switching system, further comprising: an authentication information writing unit for writing, and further, writing “authenticated” in the nonvolatile memory. 6. At any time, the contents of the non-volatile memory in which the usable state is written are stored in the IC.
6. The IC card authentication switching system according to claim 5, further comprising authentication information rewriting means for rewriting the card to an "unauthenticated" state that renders the card unusable. 7. An IC card having a volatile memory and a nonvolatile memory in which a usable state is written when a password is input and authenticated, and an unusable state is written when the card is pulled out, can be used in a usable state or a non-volatile state. An IC card authentication switching system for disabling the IC card, requesting a password for a user of the IC card,
An authentication unit that performs authentication based on the input password; and a volatile memory that sets the IC card to a usable state when the user is authenticated by the authentication unit. Balance reader having volatile memory writing means for writing data into the memory, and in-use non-volatile memory writing means for writing "authorized" also in the non-volatile memory when using the IC card; and using the IC card. A terminal having after-use non-volatile memory writing means for writing "unauthenticated" in the non-volatile memory. 8. An IC card having a volatile memory and a nonvolatile memory in which a usable state is written when a password is input and authenticated, and an unusable state is written when the card is pulled out, is used in a usable state or a non-volatile memory. A storage medium storing an IC card authentication switching program for disabling, requesting a password for a user of the IC card,
An authentication process for performing authentication based on the input password; and, when the user is authenticated by the authentication process, "authenticated" for enabling the IC card to be used in the volatile memory. A storage medium storing an IC card authentication switching program, further comprising: an authentication information writing process of writing “authorized” in the nonvolatile memory. 9. At any time, the contents of the non-volatile memory in which the usable state is written are stored in the IC.
9. The IC according to claim 8, further comprising an authentication information rewriting process for rewriting the card to an "unauthenticated" state that renders the card unusable.
A storage medium storing a card authentication switching program. 10. An IC card having a volatile memory and a non-volatile memory in which a usable state is written when a password is input and authenticated, and an unusable state is written when the card is pulled out, can be used in the usable state or the non-volatile state. A storage medium storing an IC card authentication switching program for disabling the IC card, mounted on a balance reader for reading the IC card, and requesting a password for a user of the IC card;
An authentication process of performing authentication based on the input password; and a volatile memory that sets the IC card in a usable state when the user is authenticated by the authentication process. A storage medium storing an IC card authentication switching program having a volatile memory writing process for writing into a memory. 11. An IC card having a volatile memory, in which a usable state is written when a password is input and authenticated, and an unusable state when a card is pulled out, and a non-volatile memory, is used in an available state or a non-volatile state. A storage medium storing an IC card authentication switching program for disabling the IC card, wherein the IC card authentication switching program is mounted on a terminal when the IC card is used, and when the IC card is used, “volatile” is stored in the volatile memory of the IC card. When “OK” has been written, the in-use nonvolatile memory writing process of writing “authenticated” also in the nonvolatile memory, and writing “unauthenticated” in the nonvolatile memory after using the IC card And a non-volatile memory writing process after use.