JP4187235B2 - Contactless media usage system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a station service device such as an automatic ticket gate and related devices used for a station exit ticket service and a use system thereof.
[0002]
[Prior art]
In recent years, IC cards that can be automatically turned on by simply holding the ticket on the surface of the automatic ticket checker without being inserted into the automatic ticket checker have become widespread. Such automatic ticket gates and related devices and systems that use non-contact media have key data for accessing the non-contact media fixedly and manage it as secret key data, thereby improving system security. I try to secure it.
[0003]
[Problems to be solved by the invention]
However, in such a conventional processing method, the key data is leaked to a third party or altered so that valid information in the contactless media, such as amount data, period data, section data, card ID, etc. It is very difficult to restore the security, which is the reliability of this system, when it is misused for changing data or forged copy of contactless media.
[0004]
In addition, when recovering security, it is possible to change the entire system to secure new key data. In this case, for example, in the event of a counterfeit case of a 500 yen coin, from the old 500 yen to the new 500 yen Recovery / exchange to all contactless media with new key data, recovery / recovery to all system-related devices compatible with new key data, as seen in system support for changes in the material (change from old material to new material) Changes etc. are necessary, and enormous time and cost are required.
[0005]
[Means for Solving the Problems]
The present invention is intended to solve the above-described problem. By automatically rewriting old key data necessary for accessing a contactless medium into new key data by an automatic ticket gate, the old key data is changed to the new key data. The purpose of this is to make it easy to rewrite the data without requiring much time and cost.
The present invention provides an old key data and a new key data for each station equipment that holds key data in a non-contact medium that can be contactlessly communicated and accesses the non-contact medium using the key data. A non-contact media utilization system that sets the rewrite processing from the old key data to the new key data in the valid state after setting both the key data usage in the valid state,
Each station equipment acquires the version of the key data stored in the contactless media when contactless media enters the communication range, and determines whether it is the old version or the new version. Key data rewriting means for rewriting data to new key data, and display means for updating and displaying the number of rewrites to new key data,
Based on the number of rewrites on the display means of each station service device, it is determined whether or not all non-contact media in the market has been rewritten to new key data, and when it is determined that all non-contact media in the market has been rewritten, only new key data Each station service device is set to be accessible to contactless media.
[0006]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram for explaining a contactless automatic ticket gate, and FIG. 2 is a diagram for explaining a contactless media using device.
When the non-contact medium 1 incorporating the IC chip and incorporating the communication antenna is placed within a predetermined distance with respect to the antenna 2 of the automatic ticket gate 3, the automatic ticket gate 3 can detect (1) the media in a short time, (2) Media authentication, (3) Data reading, and (4) Data writing are performed. When these processes are completed, the door 4 can be opened to pass through, and the detection sensor 5 detects that this passer has passed. is doing.
[0007]
The contactless media using device 6 shown in FIG. 2 (a) is, for example, a media issuing machine, a media charging machine for charging commuter pass data or money amount data to the media, a media payment machine for adjusting the shortage amount, etc. And a non-contact media processing mechanism 7 that communicates with the non-contact media and executes predetermined processing.
[0008]
The non-contact media using device in FIG. 2 (b) is a processing machine at a window, a processing machine held by a staff member, etc., and a personal computer 8 in which a program is incorporated for performing predetermined processing and non-contact media connected thereto. It consists of a processing mechanism 9.
[0009]
FIG. 3 is a block diagram showing the configuration of the non-contact medium.
An IC chip of a non-contact medium is an automatic ticket gate through a CPU 10 that executes communication processing, data read / write processing, a RAM 11 that provides a memory area for executing processing, a ROM 12 that incorporates a control program and application programs, and an antenna 14. It consists of a wireless communication circuit 13 that communicates with various devices such as a machine and a user device.
[0010]
FIG. 4 is a block diagram showing a configuration of a non-contact media automatic ticket gate.
The CPU 20 that performs key rewriting processing, normal ticket gate processing, and the like includes a RAM 21 that provides a temporary storage area for data, a ROM 22 that incorporates various control programs and application programs, an interface mechanism 23 that communicates with a host model, and an antenna card reader. / The writer 25 communicates with a non-contact medium and controls the non-contact medium processing mechanism 24 that performs the processing, the magnetic ticket processing mechanism 26 that controls the mechanism 27 that transports the inserted magnetic ticket, and the door opening / closing mechanism 29. The door control mechanism 28, the passenger detection mechanism 30 for executing the detection process of the passenger detection sensor 31, and the display mechanism 32 for displaying the data of the automatic ticket gate processing result.
[0011]
FIG. 5 is a block diagram showing a configuration of a non-contact media using device.
A CPU 42 that executes media issue processing, payment processing, data charging processing, and the like includes a RAM 41 that provides a temporary storage area for data, a ROM 42 that incorporates a control program and an application program, an interface mechanism 43 that communicates with a higher-level model, an antenna A non-contact media processing mechanism 44 for communicating with a non-contact medium by a card reader / writer 45, a magnetic ticket processing mechanism 46 for controlling a mechanism 47 for transporting an inserted magnetic ticket, and a control mechanism 48 for controlling each part of the used device. It is made up of.
[0012]
FIG. 6 is a diagram for explaining a communication process between a non-contact medium and an automatic ticket gate or a use device.
When the non-contact medium enters the communicable range, the data is read by the antenna card reader / writer, and the non-contact medium is detected and the key version is read on the ticket checker or using device side. Next, the ticket gate / use device authenticates the contactless media using the stored key data. The authentication process sends data encrypted with the key of the ticket gate / use device, decrypts it with the key of the contactless media, receives the data, and the key of the ticket gate / use device and the key of the contactless media Is to check the consistency of.
[0013]
When the authentication process ends normally, a data read command is sent to read data from the non-contact medium, and whether the period is valid or not is determined, a data write command is sent, and the non-contact medium is sent. When the write end data is received, the process ends.
[0014]
FIG. 7 is a diagram for explaining a key rewriting process flow in the contactless automatic ticket gate.
When contactless media is detected (step S1), the key version of the contactless media is acquired (step S2), whether the old key version or the new key version is determined, and authentication with the access key for the corresponding contactless media is performed. (Step S3), and the data of the non-contact medium is read (step S4). It is determined from the read data whether the non-contact medium is a normal medium for passengers or a mode setting medium held by maintenance personnel (step S5). If the medium is a mode setting medium, an operation mode setting process of the device is performed (step S6). Return to step S1.
[0015]
If it is a normal non-contact medium for passengers, the non-contact medium is determined and the validity of the data is determined (step S7). Non-contact media is judged, for example, whether the media itself has been forged or is on the list that should not be used on the automatic ticket gate, and the validity of the data depends on the period or section This is a determination for adults / children.
[0016]
Next, the determination result is determined (step S8). If the determination result is acceptable, write data to the non-contact medium is generated (step S9), and then it is determined whether or not the old key version (step S10). If it is the key version, the rewrite data of the new key version is set in the write data (step S11), the number of rewrites to the new key data is updated and displayed on the display (step S12), and all the write data to the non-contact medium Is notified (step S13). If it is determined in step S10 that the new key version has already been rewritten instead of the old key version, the process proceeds to step S13.
[0017]
Next, it is determined whether or not there is a response for completion of writing (step S14). If writing has been completed, the gate of the ticket gate is opened to allow one person to pass (step S15). S16), returning to step S1, the same processing is performed.
[0018]
If the determination of the non-contact medium and the determination of the validity of the data are not accepted in step S8, or if there is no response of the normal completion of writing in step S14, the door of the ticket gate is closed (step S17), When it is detected that the passenger has left the passage from the ticket gate (step S18), the process returns to step S1 and the same processing is performed.
[0019]
FIG. 8 is a diagram for explaining a normal processing flow in the non-contact media automatic ticket gate / use device.
When a non-contact medium is detected (step S21), a key version of the non-contact medium is acquired (step S22). Next, it is determined whether or not it is a new key version (step S23), and if it is a new key version, authentication with a new access key is performed on the contactless media (step S24). If it is not a new key version, it is determined whether it is an old key version (step S25). If it is an old key version, it is determined whether an old key version can be accepted (step S26). Authentication with the old access key is performed (step S27). Next, the data of the non-contact medium is read (step S28), and it is determined whether the medium is a normal non-contact medium for passengers or a mode setting medium held by maintenance personnel (step S29). A mode setting process is performed (step S30), and the process returns to step S21.
[0020]
If it is a normal medium for passengers, the non-contact medium is determined, the validity of the data is determined (step S31), whether the determination is permitted (step S32), and if the determination is permitted, the non-contact is determined. Write data to the medium is generated (step S33), and the write data is notified to the non-contact medium (step S34). Next, it is determined whether or not there is a write-enabled response (step S35), and if there is a response, normal processing of the non-contact media using device when the determination is permitted is performed (step S36).
[0021]
If it is neither the new key version nor the old key version in step S25, the old key version cannot be accepted in step S26, the determination is not allowed in step S32, or the write ready response is not received in step S35. Is processed (step S37), the process returns to step S21 and the same process is repeated.
[0022]
FIG. 9 is a diagram for explaining a processing flow for setting the operation mode of the device using the mode setting medium.
The clerk holds the mode setting medium over the automatic ticket gate and accepts the old key and sets the new key to NG (not acceptable) (step S41). Next, it is determined whether or not a new key is validly set (step S42). If the new key is validly set, a new key version and an access key are set to accept the new key (step S43). If the new key is not valid, it is determined whether the old key is valid (step S44). If the new key is valid, the old key version and access key are set, and the old key can be accepted. (Step S45). Next, it is determined whether or not the rewriting mode setting in the automatic ticket checker is permitted (step S46), and when permitted, the key rewriting mode is set (step S47). If not permitted, the normal mode is set (step S48).
[0023]
With this process, in the normal mode / key rewriting mode, four types of settings are possible: neither the old key nor the new key can be accepted, either the old key or the new key can be accepted, or both the old key or the new key can be accepted. . Therefore, after enabling the use of both the old key data and the new key data, enable the rewriting process from the old key data to the new key data in the automatic ticket checker, and after a certain period of time, automatically It is possible to prohibit access to contactless media with old key data at the ticket gate and allow only access with new key data.
[0024]
FIG. 10 is a diagram for explaining security system operation processing.
All devices are set in the access setting to the contactless medium with the old key data and the new key data (step S51), and the entrance ticket gate is set to the key rewriting mode from the old key data to the new key data (step S52). ), It is determined whether or not the market media has been rewritten to the new key data (step S53). This determination is made, for example, by confirming that the number of times of key rewriting is zero in one day on the display of the key rewriting ticket gate. When all the media have been rewritten, the access setting to the non-contact medium with only the new key data is performed for each device by the mode setting process described with reference to FIG. 9 (step S54).
[0025]
【The invention's effect】
As described above, according to the present invention, the following effects can be obtained.
(1) By simply operating the contactless media with the automatic ticket gate, the passer-by can change the old key data to the new key data for the contactless media having the old key data. For this reason, since the passer-by usually performs the operation using an automatic ticket gate, the passer-by does not need to exchange the contactless media without knowing it, and the contactless user who has the new key data with new security secured. Can move to media.
(2) When a process for rewriting a non-contact medium having old key data to new key data is performed by an automatic ticket checker, there are two non-contact media temporarily and old key data and new key data in the market. Become. At this time, it is determined whether or not all the media in the market has been rewritten to the new key data based on whether or not the number of rewrites of the key rewrite ticket gate is 0. However, it is possible to shift to a newly secured system in which only new key data can be used without causing any market disruption, and the security reliability of the system can be recovered in a short period of time.
(3) The mode setting of each device can be changed by maintenance personnel using non-contact media dedicated to setting various modes without changing or collecting the automatic ticket gate and non-contact media utilization program. Therefore, it is possible to cope with a lot of devices using non-contact media at a very low cost, and the reliability of the security of the entire system can be recovered at a minimum cost.
[Brief description of the drawings]
FIG. 1 is a diagram for explaining a non-contact media automatic ticket gate.
FIG. 2 is a diagram illustrating a non-contact media using device.
FIG. 3 is a block diagram illustrating a configuration of a non-contact medium.
FIG. 4 is a block diagram showing a configuration of a non-contact media automatic ticket gate.
FIG. 5 is a block diagram illustrating a configuration of a contactless media using device.
FIG. 6 is a diagram for explaining a communication process between a non-contact medium and an automatic ticket gate or a use device.
FIG. 7 is a diagram illustrating a key rewriting process in a contactless automatic ticket gate.
FIG. 8 is a diagram for explaining a normal processing flow in a contactless automatic ticket gate / usage device.
FIG. 9 is a diagram illustrating a processing flow for setting an operation mode of a device using a mode setting medium.
FIG. 10 is a diagram illustrating security system operation processing;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Non-contact media, 2 ... Antenna, 3 ... Automatic ticket gate, 4 ... Door, 5 ... Detection sensor, 6 ... Non-contact media utilization apparatus, 7 ... Non-contact media processing mechanism, 8 ... Computer, 9 ... Non-contact media Processing mechanism, 10 ... CPU, 11 ... RAM, 12 ... ROM, 13 ... Wireless communication circuit, 20 ... CPU, 21 ... RAM, 22 ... ROM, 23 ... Interface mechanism, 24 ... Non-contact media processing mechanism, 25 ... Antenna card Reader / writer, 26 ... Magnetic ticket processing mechanism, 27 ... Magnetic ticket transport mechanism, 28 ... Door control mechanism, 29 ... Door opening / closing mechanism, 30 ... Passenger detection mechanism, 31 ... Passenger detection sensor, 32 ... Display mechanism, 40 ... CPU, 41 ... RAM, 42 ... ROM, 43 ... Interface mechanism, 44 ... Non-contact media processing mechanism, 45 ... Antenna card reader / writer, 46 ... Magnetic ticket processing machine , 47 ... magnetic ticket transport mechanism, 48 ... control mechanism.

Claims (1)

Key data is stored in contactless media that can be contactlessly communicated, and both old key data and new key data are used for each station equipment that accesses the contactless media using the key data. A non-contact media utilization system that sets rewriting processing from old key data to new key data to valid state after setting data usage to valid state,
Each station equipment acquires the version of the key data stored in the contactless media when contactless media enters the communication range, and determines whether it is the old version or the new version. Key data rewriting means for rewriting data to new key data, and display means for updating and displaying the number of rewrites to new key data,
Based on the number of rewrites on the display means of each station service device, it is determined whether or not all non-contact media in the market has been rewritten to new key data, and when it is determined that all non-contact media in the market has been rewritten, only new key data A contactless media utilization system characterized in that each station service device is set to be accessible to contactless media.

Images