JP3965920B2 - IC card - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an IC card.
[0002]
[Prior art]
With the advancement of an advanced information society, an information communication system that connects a central processing unit and a terminal device via a network and exchanges information with each other is used. In such information communication system, monitoring item data, monitoring results, evaluation data, etc., between the central processing unit and the terminal unit are constantly monitored and controlled from the central processing unit to the operation and state of the terminal unit. Some of them regularly send and receive monitoring information or monitoring programs. In any case, in order to prevent an unauthorized user for unauthorized use from illegally accessing the central processing unit from the terminal device, a user who has a legitimate authority using the terminal device Authentication technology that proves that occupies an important position.
[0003]
Currently known authentication technologies include those that use the biological features of users such as fingerprints, irises, retinas, handwriting, voiceprints, DNA, etc., and those that are owned by users such as magnetic cards, IC cards, and seals. Some are based on information stored only by the user, such as a password, a password, and a secret key. Devices that use the biological features of the user are very unlikely to recognize someone other than the user, but the device that recognizes the biological features required for authentication is very expensive. . Therefore, a method of authenticating using an IC card and a method of authenticating by combining an IC card and a password stored by a user are widely adopted.
[0004]
[Problems to be solved by the invention]
An example of a method for authentication using an IC card is a non-contact type authentication method. In the non-contact type authentication method, when an IC card passes near an IC card read / write device that reads and writes information on the IC card, the IC card read / write device sends a system ID signal to the IC card. If it matches the stored system ID signal, the subsequent information processing is continued, and if it does not match, the subsequent information processing is interrupted.
[0005]
As another example of a method of authenticating using an IC card, there is a contact type authentication method. In the contact type authentication method, when an IC card is mounted on an IC card read / write device and a user inputs a user ID to the IC card read / write device, the user ID stored in the IC card is stored in the IC card read / write device. In the case of matching, the subsequent information processing is continued, and in the case of not matching, the subsequent information processing is interrupted.
[0006]
The authentication method using the IC card as described above is to authenticate using information stored in the IC card, whether contact type or non-contact type. Therefore, there is a risk that this may be abused and an unauthorized user may rewrite the information inside the IC card and illegally use it. As a method of rewriting information inside the IC card, there is a method of specifying an ID number having an access right that can rewrite information inside the IC card and accessing the internal information using the ID number. In order to check an ID number having an access right, it is possible to use a method in which possible ID number candidates are arranged, accessed sequentially using the ID number candidates, and an accessible ID number is specified. Many. Therefore, in order to prevent such a technique, there is a case in which the IC card is shifted to a blocking operation so that the IC card cannot be used when accessed with a wrong ID number several times.
[0007]
However, for example, a contactless IC card may exchange ID numbers with an IC card read / write device without the user's knowledge. If the condition is satisfied, the operation has been shifted to the closing operation. Therefore, there is a case where the user's own IC card has shifted to a blocking operation without the user's knowledge. In such a case, it is necessary to notify the system administrator to release the blocking state. It was difficult to use.
[0008]
Therefore, an object of the present invention is to provide an IC card that can be easily used by a user and can reduce the risk of unauthorized use to some extent.
[0009]
[Means for Solving the Problems]
The IC card of the present invention compares the function of receiving a data string from an information processing terminal with the received data string and a normal data string stored in advance, and if the data string matches the normal data string, the data It is determined in advance between the function for determining that the column is normal, and determining that the data column is abnormal if they do not match, and the information processing terminal when determining that the data column is normal A function for processing information, and when it is determined that the data string is abnormal, the data string is stored as an abnormal data string, and when there are a plurality of stored abnormal data strings, a plurality of The abnormal data string is analyzed, and if the result of the analysis is that a plurality of abnormal data strings comply with a predetermined rule, at least one of the functions is stopped.
[0010]
According to the present invention, since the input data string is compared with the normal data string stored in advance, it is possible to determine whether the input ID number is correct. If the input data string is different from the normal data string and complies with a predetermined rule, at least one of the functions of the IC card is stopped. Is reduced.
[0011]
Also, the IC card of the present invention compares each character of the plurality of abnormal data strings when the plurality of abnormal data strings are composed of a plurality of characters. If at least some of the characters are rearranged according to a certain rule, at least one of the functions may be stopped. In this way, it is determined that if broad characters such as letters, numbers, and symbols included in the abnormal data string are rearranged according to a certain rule, they are artificially rearranged. The risk of unauthorized use is reduced.
[0012]
Further, the IC card of the present invention calculates the difference between each single digit or plural digits of the plural abnormal data strings when the plural abnormal data strings include one digit or plural digits, respectively. As a result of the calculation, when the difference is in accordance with a predetermined rule, at least one of the functions may be stopped. In this way, if the interval between the numbers included in the abnormal data string conforms to a certain rule, it is determined that the numbers are arranged artificially, so that the risk of unauthorized use of the IC card is reduced.
[0013]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described with reference to the drawings. When possible, the same portions are denoted by the same reference numerals, and redundant description is omitted. In the description of the present embodiment, information flow and processing are schematically shown, and a detailed description of establishment of a communication environment by sending and receiving control signals between the IC card and the IC card read / write device, etc. Detailed descriptions of elements not directly related to the description of the embodiment will be omitted.
[0014]
An IC card 1 according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a diagram showing an IC card 1 and an IC card read / write device 2 (information processing terminal). The IC card read / write device 2 physically includes a CPU, a ROM, a RAM, an input device such as a mouse and a keyboard, and a display device such as a display. The IC card read / write device 2 is functionally composed of an input unit 23, an interface unit 21, and a display unit 22. The input unit 23 is a part for inputting the ID number of the IC card 1. The interface unit 21 is a part that handles data transmission / reception with the IC card 1. The display unit 24 is a part that displays data input from the input unit 23 and results of data transmission / reception with the IC card 1.
[0015]
The IC card 1 physically includes a CPU, ROM, RAM, EEPROM (rewritable ROM), and an external interface. The IC card 1 includes an authentication unit 11, a normal ID storage unit 12, an abnormal ID storage unit 13, an interface unit 14, an unauthorized operation analysis unit 15, and a blocking operation transition unit 16 as functional components. Hereinafter, each component will be described in detail.
[0016]
The interface unit 14 is a part that handles transmission and reception of data with the interface unit 21 of the IC card read / write device 2. The data transmission / reception method may be performed in contact with each other, or may be performed in a non-contact manner using radio waves or the like as a medium. The authentication unit 11 is a part that determines whether the ID information (data string) received by the interface unit 14 is normal or not by comparing with normal ID information stored in the normal ID information storage unit 12. If they do not match, the received ID information is stored in the abnormal ID information storage unit 13. The normal ID information storage unit 12 is a part for storing ID information for specifying the IC card 1, ID information for giving authority to rewrite information in the IC card 1, and the like. Note that the ID information in the present embodiment refers to ID information that gives authority to view at least information in the IC card.
[0017]
The abnormality ID information storage unit 13 is a part for storing the ID information received by the interface unit 14 that the authentication unit 11 determines to be abnormal ID information because it does not match the normal ID information. The unauthorized operation analysis unit 15 is a part that analyzes the abnormality ID information stored in the abnormality ID information storage unit 13 and determines whether an unauthorized operation is performed. As an analysis method, a plurality of abnormality ID information is rearranged, a numerical value in one abnormality ID information is replaced, a difference between two abnormality ID information is calculated, and the abnormality ID information is arranged. To examine whether or not regularity can be found. When the unauthorized operation analysis unit 15 analyzes the abnormal ID information and determines that an unauthorized operation is being performed, the blocking operation transition unit 16 receives the determination result, and the authentication unit 11, the interface unit 14, etc. It is a part that plays a role of stopping the function inside the card 1.
[0018]
Next, functions of the IC card 1 will be described with reference to FIG. FIG. 2 is a flowchart showing a flow of information processing after the IC card 1 receives the ID information from the IC card read / write device 2. First, the interface unit 14 of the IC card 1 receives ID information from the interface unit 21 of the IC card read / write device 2 (step S01). The authentication unit 11 determines whether the received ID information is the same as the normal ID information stored in the normal ID information storage unit 12 (step S02). If it is determined that they are the same, other functional parts (not shown) shift to a process for performing normal information processing (step S03). If the received ID information and the normal ID information are not identical, the received ID information is stored in the abnormal ID information storage area 13 as abnormal ID information (step S04). If the same abnormality ID information has already been stored, the newly received abnormality ID information is overwritten without redundant storage.
[0019]
When the abnormality ID information is newly stored in the abnormality ID information storage area 13, the unauthorized operation analysis unit 15 checks whether or not the abnormality ID information has been previously stored (step S05). When the abnormality ID information is singular (that is, when only the newly stored abnormality ID information is present), the unauthorized operation analysis unit 15 uses the interface unit 14 to indicate that “the input ID is incorrect” or the like. An error message is transmitted to the IC card read / write device 2.
[0020]
If there is a plurality of abnormality ID information in the abnormality ID information storage unit 13, whether or not there is a relationship between the plurality of abnormality ID information stored in the abnormality ID information storage unit is determined in detail. The unauthorized operation analysis unit 15 analyzes whether or not a certain rule is being followed (step S07). If the relevance is not recognized as a result of the analysis, the unauthorized operation analysis unit 15 transmits an error message such as “the input ID is incorrect” to the IC card read / write device 2 via the interface unit 14 ( Step S08). Further, for example, when 8 pieces of abnormality ID information are stored in the abnormality ID information storage unit 13, the abnormality ID information stored in the oldest order may be deleted.
[0021]
When the relationship is recognized between the abnormality ID information stored in the abnormality ID information storage unit 13, the closing operation transfer unit 16 shifts the IC card 1 to the closing state (step S09). The closed state is sufficient if the IC card 1 can stop outputting some information in response to an external input, and the function of the interface unit 14 is stopped or the function of the authentication unit 11 is stopped. This is realized.
[0022]
Next, a method for determining whether or not there is a relationship between the abnormality ID information stored in the abnormality ID information storage unit 13 will be described with an example. FIG. 3 is a diagram illustrating an example of a case where a relationship is recognized between the abnormality ID information. FIG. 3A is a diagram illustrating a state where the abnormality ID information storage unit 13 stores abnormality ID information. The abnormality ID information storage unit 13 stores ID information determined as abnormality ID information in association with the reception order as a reception number. In this state, as shown in FIG. 3A, the difference between adjacent abnormality ID information is also different, and no relevance can be found.
[0023]
The unauthorized operation analysis unit 15 sorts the abnormality ID information in ascending order as shown in FIG. Then, as shown in FIG. 3B, the difference between the adjacent abnormality ID information after the rearrangement is equal, and the mutual relationship is recognized. In such a case, the unauthorized operation analysis unit 15 determines that there is a relationship between the abnormality ID information. In the case of this example, each abnormality ID information forms a so-called arithmetic sequence, but the relationship is not limited to this, and when each abnormality ID information forms a geometric sequence, If the differences form an arithmetic sequence, and if the differences follow a certain law, such as the case of forming a geometric sequence, they can be related to each other.
[0024]
FIG. 4 is a diagram illustrating another example in the case where a relationship is recognized between the abnormality ID information. FIG. 4A is a diagram illustrating a state in which the abnormality ID information storage unit 13 stores abnormality ID information. The abnormality ID information storage unit 13 stores ID information determined as abnormality ID information in association with the reception order as a reception number. In this state, as shown in FIG. 4A, each abnormality ID information includes a mixture of alphabets and numbers, and no relevance is recognized between them.
[0025]
First, as shown in FIG. 4B, the unauthorized operation analysis unit 15 rearranges the insides of the abnormality ID information in ascending order to obtain processed abnormality ID information. In this case, the alphabet is set first and the number is set after. Next, the unauthorized operation analysis unit 15 rearranges the processed abnormality ID information in ascending order as shown in FIG. Then, it can be seen that each abnormality ID information has the same alphabet part, and the numerical part has 1 consecutive 4 times and 2 consecutive 4 times. In this way, when each of the plurality of abnormality ID information is only a difference in which the character strings are rearranged, the unauthorized operation analysis unit 15 determines that the abnormality ID information is related. In this example, the case where alphabets and numbers are mixed was taken up. However, the relationship is not limited to this, even if symbols, Japanese characters, etc. are mixed. As long as they follow certain laws, they can be related to each other.
[0026]
The operation and effect of this embodiment will be described. Since the ID information input from the input unit 23 of the IC card read / write device 2 and the normal ID information stored in the normal ID information storage unit 12 of the IC card 1 are collated, the ID information input to the IC card 1 It is possible to determine whether the ID information is correct. When the input ID information is different from the normal ID information, it is stored in the abnormal ID information storage unit 13, so that the past history can be examined. When the unauthorized operation analysis unit 15 determines that the plurality of abnormality ID information stored in the abnormality ID information storage unit 13 are related to each other, the blocking operation transition unit 16 performs the interface unit 14 or authentication. Since the function of the unit 11 is stopped and the IC card 1 is shifted to the closed state, the risk of unauthorized use of the IC card 1 is reduced.
[0027]
In addition, when the plurality of abnormality ID information is composed of a plurality of characters, the IC card 1 compares the characters of the plurality of abnormality ID information, and as a result of the comparison, the characters of the plurality of abnormality ID information are compared. If at least a part of them is rearranged according to a certain rule, at least one of the functions is stopped. In this way, if the broad characters such as letters, numbers, and symbols included in the abnormality ID information are rearranged according to a certain rule, it can be easily determined that they are artificially rearranged. This reduces the risk of unauthorized use of the IC card 1.
[0028]
Further, the IC card 1 calculates the difference between each single-digit or multiple-digit number of the plurality of abnormality ID information when the plurality of abnormality ID information includes single-digit or multi-digit numbers. As a result, when the difference follows a predetermined rule, at least one of the functions is stopped. In this way, if the interval of the numbers included in the abnormality ID information follows a certain rule, it can be easily determined that the numbers are arranged artificially, and there is a risk that the IC card 1 is illegally used. Reduced.
[0029]
【The invention's effect】
According to the present invention, since the input data string is compared with the normal data string stored in advance, it is possible to determine whether the input ID number is correct. If the input data string is different from the normal data string and complies with a predetermined rule, at least one of the functions of the IC card is stopped. Is reduced. Therefore, it was possible to provide an IC card which is easy to use for the user and can reduce the risk of unauthorized use to some extent, which is an object of the present invention.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of an IC card 1 according to an embodiment of the present invention.
FIG. 2 is a flowchart showing the information processing flow of the IC card 1 shown in FIG. 1;
FIG. 3 is a diagram showing an example of abnormality ID information that is mutually related.
FIG. 4 is a diagram showing an example of abnormality ID information that is mutually related.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... IC card, 11 ... Authentication part, 12 ... Normal ID storage part, 13 ... Abnormal ID information storage part, 14 ... Interface part, 15 ... Unauthorized operation analysis part, 16 ... Blocking operation transfer part, 2 ... IC card read / write Device, 21 ... interface unit, 22 ... display unit, 23 ... input unit

Claims (3)

A function of receiving a data string from an information processing terminal;
The received data string is compared with a normal data string stored in advance, and when the data string matches the normal data string, the data string is determined to be normal, and when the data string does not match, the data string A function to determine that the data string is abnormal;
In an IC card having a function of processing predetermined information with the information processing terminal when it is determined that the data string is normal,
When it is determined that the data string is abnormal, the data string is stored as an abnormal data string,
When there are a plurality of stored abnormal data strings, the plurality of abnormal data strings are analyzed, and as a result of the analysis, when the plurality of abnormal data strings comply with a predetermined rule, An IC card characterized by stopping at least one of the functions. When the plurality of abnormal data strings are composed of a plurality of characters, the characters of the plurality of abnormal data strings are compared, and as a result of the comparison, at least one of the characters of the plurality of abnormal data strings is compared. 2. The IC card according to claim 1, wherein when the parts are rearranged according to a certain rule, at least one of the functions is stopped. When each of the plurality of abnormal data strings includes a single digit or a plurality of digits, a difference between each one digit or a plurality of digits of the plurality of abnormal data sequences is calculated, and as a result of the calculation, 2. The IC card according to claim 1, wherein at least one of the functions is stopped when the difference conforms to a predetermined rule.

Images