KR20100067997A - Apparatus for reading and writing smartcard, and data security method thereby - Google Patents

Abstract

The present invention relates to a device for reading / writing a smart card having a memory chip and a data security method thereof, and in particular, to decrypt encrypted data stored in a memory chip with a card identification key of a smart card used for various payments. The present invention relates to a smart card read / write device having a memory chip which encrypts data input from an external device (eg, a personal computer) with a card identification key and stores the data in a memory chip, and a data security method thereof.

In addition, the smart card read / write device having a memory chip of the present invention is a smart card comprising a memory chip and an IC chip for performing various payment functions, IC chip connection terminal for connecting to the IC chip ; An IC chip reader unit for reading a card identification key from the IC chip through the IC chip connection terminal; A memory chip connection terminal for connecting to the memory chip of the smart card; A memory chip reader / writer unit for reading data stored in the memory chip through the memory chip connection terminal and writing data to the memory chip; A computer connection terminal for connecting to a computer; A computer connection unit for transmitting and receiving data to and from the computer through the computer connection terminal; A storage unit in which a card identification key is stored; And when the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit, transfer the data read by the memory chip reader / writer unit to the computer. It includes a control unit for controlling the connection.

Description

Apparatus for reading and writing smartcard, and data security method hence}

The present invention relates to a device for reading / writing a smart card having a memory chip and a data security method thereof, and in particular, to decrypt encrypted data stored in a memory chip with a card identification key of a smart card used for various payments. The present invention relates to a smart card read / write device having a memory chip which encrypts data input from an external device (eg, a personal computer) with a card identification key and stores the data in a memory chip, and a data security method thereof.

In general, such a card used for payment of goods or services such as credit card, check card and transportation card may be referred to as a smart card. Recently, according to the development of the technology in the memory field, such a smart card has a high capacity, A memory chip having a capacity of 1 to 2 GB is mounted.

In addition, a read / write device for inserting a smart card having a high capacity memory chip and using data of the memory chip, such as an MP3 player, has been released.

On the other hand, the memory chip can contain the credit information that is important for the security of any one person, or any one organization that issues or provides it.

Applicant has come to the present invention while researching the data security technology of the smart card read / write device equipped with a memory chip.

The present invention identifies whether a smart card to be connected is a registered card, and in the case of an unregistered smart card, prevents data from being stored in a memory chip or extracted data stored in the memory chip. It is an object of the present invention to provide a read / write device for a smart card with a memory chip and a data security method thereby preventing illegal use.

In order to achieve the above object, a smart card read / write device having a memory chip of the present invention includes a memory chip and an IC chip for performing various payment functions. IC chip connection terminal for; An IC chip reader unit for reading a card identification key from the IC chip through the IC chip connection terminal; A memory chip connection terminal for connecting to the memory chip of the smart card; A memory chip reader / writer unit for reading data stored in the memory chip through the memory chip connection terminal and writing data to the memory chip; A computer connection terminal for connecting to a computer; A computer connection unit for transmitting and receiving data to and from the computer through the computer connection terminal; A storage unit in which a card identification key is stored; And when the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit, the data read by the memory chip reader / writer unit to be transmitted to the computer. It includes a control unit for controlling the computer connection.

In the above-described configuration, it is preferable that the IC chip reader reads the data extraction authentication key from the IC chip through the IC chip connection terminal. Accordingly, the control unit reads the IC chip reader, and the card identification key stored in the IC chip matches the card identification key stored in the storage unit, and the data extraction authentication key is stored in the IC chip. If so, the computer connection unit is controlled such that data read by the memory chip reader / writer unit can be transferred to the computer.

The control unit may further include the memory chip reader / writer unit when the card identification key read by the IC chip reader unit coincides with the card identification key stored in the storage unit. It is desirable to control.

In addition, the read / write apparatus of the present invention preferably further comprises an encryption / decryption unit for encrypting and decrypting data. Accordingly, the controller controls the encryption / decryption unit to decrypt the encrypted data read by the memory chip reader / writer unit using a card identification key read by the IC chip reader unit, and the encryption / decryption unit Control the computer connection unit so that the data decrypted by the computer can be transmitted to the computer, and control the encryption / decryption unit to encrypt data input to the computer connection unit using a card identification key read by the IC chip reader unit. The memory chip reader / writer unit is controlled so that the data encrypted by the encryption / decryption unit can be written to the memory chip.

In addition, the read / write device of the present invention may further comprise a wireless Internet connection for wirelessly connecting to the Internet. When the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit, the controller is further configured to record data inputted from the wireless Internet connection unit to the memory chip. The memory chip reader / writer unit is controlled.

In addition, the control unit transmits the data read by the memory chip reader / writer unit to the Internet when the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit. To control the wireless Internet connection. Alternatively, the controller may read a card identification key stored in the IC chip as a result of being read by the IC chip reader and match the card identification key stored in the storage unit, and the data extraction authentication key may be stored in the IC chip. In this case, the wireless Internet connection unit is controlled so that data read by the memory chip reader / writer unit can be transferred to the Internet.

Further, the read / write device of the present invention comprises a speaker; And an audio processor configured to process audio data read by the memory chip reader / writer to be output to the speaker.

Further, the read / write apparatus of the present invention includes an indicator; And a video processor that processes the video data read by the memory chip reader / writer to be displayed on the display.

The data security method of the present invention is performed by a smart card read / write device including a memory chip and an IC chip for performing various payment functions, and a user moves data from the memory chip of the smart card to a computer or (A) reading a card identification key by accessing the IC chip when a copy command is issued; And the data stored in the memory chip of the smart card when the card identification key of the IC chip and the card identification key previously stored in the read / write device match as a result of the reading in step (a). (B) the step of delivering to.

In the above configuration, it is preferable that the step (a) further includes a step of reading a data extraction authentication key by accessing the IC chip. Therefore, the step (b) is to transfer the data stored in the memory chip of the smart card to the computer when the data extraction authentication key is stored in the IC chip as a result of the reading in the step (a). It becomes.

In addition, the data security method of the present invention, when the user commands the data movement or copy from the computer to the memory chip of the smart card, accessing the IC to read the card identification key; And when the card identification key of the IC chip matches the card identification key previously stored in the read / write device as a result of reading in step (c), data input from the computer is stored in the memory chip of the smart card. Preferably, the method further comprises the step (d) of recording.

In the step (d), it is preferable to encrypt the data input from the computer with the card identification key of the IC chip and to write the data to the memory chip of the smart card.

In addition, in the step (b), it is preferable to decrypt the encrypted data stored in the memory chip of the smart card with the card identification key of the IC chip and transmit it to the computer.

The smart card read / write device and data security method of the smart card provided with the memory chip of the present invention identify whether the smart card connected to the read / write device is a card registered in the read / write device, and an unregistered smart card. In this case, the data is stored in the memory chip without permission or the data stored in the memory chip cannot be extracted without permission.

Accordingly, even if the smart card is lost, the illegal use of the smart card is prevented. That is, the device other than the read / write device cannot extract data stored in the memory chip of the smart card or store the data in the memory chip.

Hereinafter, with reference to the accompanying drawings will be described in detail with respect to the read / write device and a data security method of a smart card equipped with a memory chip according to an embodiment of the present invention.

1 is an external view of a smart card that can be applied to the present invention, Figure 2 is an external view of a read / write device according to an embodiment of the present invention, Figure 3 is a read / write according to an embodiment of the present invention Electrical block diagram of the device.

As shown in FIG. 1, the smart card 100 has an IC chip connection terminal 120 and a memory chip connection terminal 110 formed on the front thereof, and the expiration date, card number, etc. of the card are described. . In addition, as shown in FIG. 3, the smart card 100 includes an IC chip 140 for performing various payment functions and a nonvolatile memory chip 130 for storing various data. Here, the IC chip 140 stores a card identification key for identification of the smart card 100 during various payments. In addition, the IC chip 140 may store a data extraction authentication key for authenticating an external leakage of data stored in the memory chip 130. Here, the data extraction authentication key may have a validity period set. If so, it is desirable that the validity of authenticating the external leakage of data is lost.

 In addition, the data stored in the memory chip 130 is preferably encrypted by the card identification key stored in the IC chip 140 by the read / write device according to the present invention. That is, the data stored in the smart card 100 is encrypted with the card identification key of the smart card. As a result, even if the encrypted data of the smart card 100 is illegally leaked to the external device, the encrypted data cannot be decrypted unless the smart card 100 is present.

As shown in FIG. 2, the smart card read / write device 200 according to the present invention has an insertion hole 215 formed at one side to enable the smart card 100 to be inserted into the front side thereof, and the front surface of the smart card read / write device 200 according to the present invention. The indicator 205 and the key button 210 may be formed. In addition, although not shown, a battery is provided therein, and a power connection terminal connected to a charger may be formed at one side to charge the battery.

As shown in FIG. 3, the configuration of the read / write device 200 according to the present invention is performed in the smart card 100 inserted into the read / write device 200 through the insertion hole 215. IC chip reader unit 225 for reading the card identification key and the data extraction authentication key from IC chip 140 through IC chip connection terminal 225 and IC chip connection terminal 225 ( 235, the data stored in the memory chip 130 through the memory chip connection terminal 230 and the memory chip connection terminal 230 for connecting to the memory chip 130 in the smart card 100, A computer that exchanges data with a computer through a memory chip reader / writer unit 240 for recording data in the memory chip 130, a computer connection terminal 285 for connecting to a computer, and a computer connection terminal 285. Controls the connection unit 285, the storage unit 260 in which the card identification key is stored, and the read / write device 200 collectively. It comprises a fisherman 220.

In addition, the read / write device 200 according to the present invention includes an encryption / decryption unit 245 for encrypting and decrypting data with a card identification key read by the IC chip reader unit 235, a key button 210, A key input unit 255 for generating a key signal according to a user's manipulation of the key button 210, a speaker 280, an audio processor 270 for processing audio data to be output to the speaker 280, and a display unit 205. ), A video processing unit 265 for processing video data to be displayed on the display unit 205, and a wireless internet connection unit 250 for wirelessly connecting to the Internet.

In the above-described configuration, the control unit 220 matches the card identification key read by the IC chip reader unit 235 with the card identification key stored in the storage unit 260, and the resultant IC of the IC reader unit 235 reads. When the data extraction authentication key is stored in the chip 140, the computer connection unit 275 is controlled so that the data read by the memory chip reader / writer unit 240 can be transmitted to the computer. As a result, when the card identification key stored in the IC chip 140 and the card identification key stored in the read / write device 200 are different from each other, the external leakage of data stored in the memory chip 130 is impossible. That is, only the card registered in advance in the reading / writing device 200 can leak out of the data. However, even if a smart card is registered in the read / write device 200, if the smart card does not have a data extraction authentication key, it is preferable to prevent the leakage of data. Furthermore, even if the smart card has a data extraction authentication key, it is preferable that the controller 220 block an external leakage of data when the validity period has passed.

In addition, when the card identification key read by the IC chip reader unit 235 matches the card identification key stored in the storage unit 260, the controller 220 connects the computer connection unit 275 to the memory chip 130. Alternatively, the memory chip reader / writer 240 may be controlled to record data input from the outside through the wireless Internet connection unit 250.

Also, the controller 220 decrypts the encrypted data read by the memory chip reader / writer 240 using the card identification key read by the IC chip reader 235. It is desirable to control. Accordingly, the controller 220 controls the computer connection unit 275 so that the decoded data can be transmitted to the computer.

In addition, the controller 220 may control the encryption / decryption unit 245 to encrypt data input to the computer connection unit 275 using the card identification key read by the IC chip reader unit 235. . Accordingly, the memory chip reader / writer unit 240 may write the encrypted data to the memory chip 130.

In addition, when the card identification key read by the IC chip reader unit 235 matches the card identification key stored in the storage unit 260, the controller 220 may input data from the wireless Internet connection unit 250. It is preferable to control the memory chip reader / writer unit 240 to enable writing to the memory chip 130.

In addition, the control unit 220 matches the card identification key read by the IC chip reader unit 235 with the card identification key stored in the storage unit 260, and the IC chip 140 reads the IC reader unit 235 as a result. In the case where the data extraction authentication key is stored, it is preferable to control the wireless internet connection unit 250 so that data read by the memory chip reader / writer unit 240 can be transmitted to the Internet.

Next, the audio processor 270 processes the audio data of the memory chip 130 read by the memory chip reader / writer 240 and decoded by the encryption / decoding unit 245 to be output to the speaker 280. It is.

Next, the video processing unit 265 processes the video data of the memory chip 130 read by the memory chip reader / writer unit 240 and decoded by the encryption / decoding unit 245 to be displayed on the display unit 205. It is.

4 to 6 are flowcharts illustrating a data security method according to an embodiment of the present invention. Specifically, FIG. 4 illustrates a procedure for registering the read / write device 200 to the authentication server 500 through the Internet so that the read / write device 200 according to the present invention can be used.

First, when a user purchases the read / write device 200 according to the present invention, although the user can play audio or video data stored in the smart card 100, the user can read the smart device via the read / write device 200. It is preferable that the data exchange between the card 100 and the computer 300 is in a state in which a so-called zero setting is impossible. Therefore, the user needs to register the purchased read / write device 200 with the authentication server 500 to release the zero setting. Here, the authentication server 500 may be a manufacturer of the read / write device 200 or an agency thereof or an issuer of the smart card 100.

As shown in FIG. 4, the smart card 100 is inserted into the read / write device 200 by the user. Then, it is connected to a computer 300 that can be connected to the Internet 400. Then, in step S11, the read / write device 200 connects to the IC chip 140 of the smart card 100 to read the card identification key.

Next, in step S13, the computer 300 transmits the card number of the smart card 100 input by the user and the unique number of the reading / writing device 200 to the authentication server 500. Then, the authentication server 500 releases the zero setting, that is, means that the data exchange between the smart card 100 and the computer 300 through the read and write device 200, the smart card 100 and The corresponding read / write device 200 is registered in the database, and then the common encryption / decryption key is transmitted to the computer 300 (steps S15 and S17). Thus, the computer 300 transmits the common encryption / decryption key to the read / write device 200.

As a result, the read / write device 200 in step S19 encrypts the payment authentication key read in step S11 with the public encryption key input from the computer 300 and stores it in the storage unit 260.

Meanwhile, the read / write device 200 may transmit / receive data directly with the authentication server 500 using its wireless Internet access function without the media of the computer 300.

FIG. 5 illustrates a procedure of transmitting data stored in the smart card 100 to the computer 300 by the read / write device 200 in which the zero setting is released.

As shown in FIG. 5, in step S21, a user command to move or copy data from the memory chip 130 to the computer 300 is received. In this case, the user may issue a data move (or copy) command to the read / write apparatus 200 by manipulating the key button 210 provided in the read / write apparatus 200. Alternatively, the data movement (or copy) command can be given to the read / write device 200 by operating the computer 300. In this case, the computer 300 transmits a user's command signal to the read / write device 200.

Next, in step S23, the IC chip 140 is connected to read the data extraction authentication key in accordance with the user command.

The process then advances to step S25 to determine whether data extraction is possible.

As a result of the determination in step S25, if the data extraction authentication key is not stored in the IC chip 140, the flow advances to step S27 to indicate to the user that the data extraction is impossible.

On the other hand, if the data extraction authentication key is stored in the IC chip 140 as a result of the determination in step S25, the flow advances to step S29 to access the IC chip 140 to read the card identification key. In operation S31, the encrypted card identification key stored in the storage unit 260 is decrypted with a public decryption key downloaded from the authentication server 500.

Then, the flow advances to step S33 to determine whether the card identification key of the IC chip 140 and the card identification key decrypted with the common decryption key match.

As a result of the determination in step S33, if the two card identification keys are different, the process proceeds to step S35 to indicate to the user that the smart card is impossible to extract data.

On the other hand, when the determination result in step S33, if the two card identification keys match, the flow proceeds to step S37 to read the encrypted data stored in the memory chip 130 and decrypted with the card identification key.

Finally, in step S39, the data decrypted in step S37 is transmitted to the computer 300.

Meanwhile, the read / write device 200 may transmit the decrypted data to the internet 400 using its wireless internet access function.

FIG. 6 illustrates a procedure for transmitting data stored in the computer 300 to the smart card 300 by the read / write device 200 in which the zero setting is released.

As shown in FIG. 6, in step S41, a user command to move or copy data from the computer 300 to the memory chip 130 is received.

Next, in step S43, the IC chip 140 is connected to read the card identification key in accordance with the user command.

Next, in step S45, the encrypted card identification key stored in the storage unit 260 is decrypted with the public decryption key downloaded from the authentication server 500.

Then, the flow advances to step S47 to determine whether the card identification key of the IC chip 140 and the card identification key decrypted with the common decryption key match.

As a result of the determination in step S47, if the two card identification keys are different from each other, the flow proceeds to step S49 to indicate to the user that data storage by the smart card 100 is impossible.

On the other hand, when the determination result in step S47, if the two card identification keys match, the flow proceeds to step S51 to encrypt the data input from the computer 300 with the card identification key.

Then, the process proceeds to step S53 to store the data encrypted in the step S51 to the memory chip 130.

Meanwhile, the read / write device 200 may store data received through the wireless internet connection unit 250 in the memory chip 130.

The smart card read / write device and data security method provided with the memory chip of the present invention can be implemented in various modifications within the scope of the technical idea of the present invention.

For example, in the above description, the memory chip and the IC chip are illustrated as being physically separated, but may be a single chip including the memory and the IC.

In addition, the computer performs the processing and operation of the input data, and should be interpreted as a concept including a handheld based information terminal such as a desktop computer, a notebook computer, or a personal digital assistant (PDA). .

For example, the Department of Defense may provide soldiers with a smart card equipped with a memory chip and a read / write device such as an MP3 player according to the present invention capable of reading it and recording data therein.

Accordingly, military service personnel use the smart card received as a credit card, check card, or transportation card, as a means of storing music files.

On the other hand, the smart card may contain important files for security of military units. As such, these files may be leaked to the outside through a read / write device provided to military service personnel. To prevent this, the Pentagon will issue a smart card without a data extraction authentication key.

1 is an external view of a smart card that can be applied to the present invention.

2 is an external view of a read / write device according to an embodiment of the present invention.

3 is an electrical block diagram of a read / write device according to an embodiment of the present invention.

4 to 6 are flowcharts illustrating a data security method according to an embodiment of the present invention.

*** Explanation of symbols for the main parts of the drawing ***

100: smart card

130: IC chip 140: memory chip

200: read / write device

205: Indicator 210: Key Button

215: insertion hole 220: control unit

225: IC chip connection terminal 230: Memory chip connection terminal

235: IC chip reader unit 240: Memory chip reader / writer unit

245: encryption / decryption unit 250: wireless Internet connection

255: key input unit 260: storage unit

265: video processing unit 270: audio processing unit

275: computer connection 280: speaker

285: computer connection terminal

300: computer

400: Internet

500: authentication server

Claims (15)

In a smart card comprising a memory chip and an IC chip for performing various payment functions, IC chip connection terminal for connecting to the IC chip; An IC chip reader unit for reading a card identification key from the IC chip through the IC chip connection terminal; A memory chip connection terminal for connecting to the memory chip of the smart card; A memory chip reader / writer unit for reading data stored in the memory chip through the memory chip connection terminal and writing data to the memory chip; A computer connection terminal for connecting to a computer; A computer connection unit for transmitting and receiving data to and from the computer through the computer connection terminal; A storage unit in which a card identification key is stored; And If the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit, the computer reads the data so that the data read by the memory chip reader / writer unit can be transferred to the computer. Smart card read / write device having a memory chip comprising a control unit for controlling the connection. The method of claim 1, The IC chip reader unit reads the proof key for data extraction from the IC chip through the IC chip connection terminal, The control unit reads the IC chip reader, and as a result, the card identification key stored in the IC chip matches the card identification key stored in the storage unit, and the data extraction authentication key is stored in the IC chip. In this case, the smart card read / write device having a memory chip, characterized in that for controlling the computer connection unit so that the data read by the memory chip reader / writer unit can be transferred to the computer. The method of claim 1, The controller controls the memory chip reader / writer to write data to the memory chip when the card identification key read by the IC chip reader matches the card identification key stored in the storage. Smart card read / write device having a memory chip, characterized in that. The method of claim 1, It further comprises an encryption / decryption unit for encrypting and decrypting data, The control unit, Control the encryption / decryption unit to decrypt the encrypted data read by the memory chip reader / writer unit using the card identification key read by the IC chip reader unit, The computer connection unit is controlled to transmit data decrypted by the encryption / decoding unit to the computer. Controlling the encryption / decryption unit to encrypt data inputted into the computer connection unit using a card identification key read by the IC chip reader unit, And controlling the memory chip reader / writer to write data encrypted by the encryption / decryption unit to the memory chip. The method of claim 1, It further comprises a wireless Internet connection for wireless access to the Internet, The controller controls the memory to allow data input from the wireless Internet connection unit to be recorded in the memory chip when the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit. Smart card read / write device equipped with a memory chip, characterized in that for controlling the chip reader / writer. The method of claim 5, If the card identification key read by the IC chip reader unit matches the card identification key stored in the storage unit, the control unit may transmit data read by the memory chip reader / writer unit to the Internet. Smart card read / write device equipped with a memory chip, characterized in that for controlling the wireless Internet connection. The method of claim 6, The IC chip reader unit reads the data extraction authentication key from the IC chip through the IC chip connection terminal, The control unit reads the IC chip reader, and as a result, the card identification key stored in the IC chip matches the card identification key stored in the storage unit, and the data extraction authentication key is stored in the IC chip. In the case, the smart card read / write device having a memory chip, characterized in that for controlling the wireless Internet connection to transfer the data read by the memory chip reader / writer unit to the Internet. The method according to any one of claims 1 to 7, speaker; And And an audio processing unit for processing audio data read by the memory chip reader / writer unit to be output to the speaker. The method according to any one of claims 1 to 7, Indicator; And And a video processor for processing video data read by the memory chip reader / writer to be displayed on the display. It is performed by a smart card reader / writer including a memory chip and an IC chip for performing various payment functions. (A) reading a card identification key by accessing the IC chip when a user commands data movement or copy from a memory chip of the smart card to a computer; And As a result of reading in step (a), when the card identification key of the IC chip and the card identification key previously stored in the read / write device match, the data stored in the memory chip of the smart card is transferred to the computer. A data security method comprising the step of delivering (b). The method of claim 10, The step (a) further includes the step of reading the data extraction authentication key by connecting to the IC chip, In the step (b), when the data extraction authentication key is stored in the IC chip as a result of reading in the step (a), the data stored in the memory chip of the smart card is transferred to the computer. Data security method. The method of claim 10, (C) reading a card identification key by accessing the IC when the user commands data movement or copy from the computer to the memory chip of the smart card; And As a result of the reading in step (c), when the card identification key of the IC chip and the card identification key previously stored in the read / write device match, data input from the computer is recorded in the memory chip of the smart card. (D) further comprising the step of data security. The method of claim 12, In the step (d), the data input from the computer is encrypted with a card identification key of the IC chip so as to write the data to the memory chip of the smart card. The method according to any one of claims 10 to 13, In the step (b), the encrypted data stored in the memory chip of the smart card is decrypted with the card identification key of the IC chip to be transmitted to the computer. A computer-readable medium having recorded thereon a program for executing the data security method according to any one of claims 10 to 14.

Images