JP4417991B2 - IC card system, IC card and recording medium - Google Patents

Description

  The present invention relates to an IC card system that uses an IC card to enjoy a service provided from a service providing organization, and in particular, issuance processing to an IC card for enjoying the service autonomously regardless of the service providing organization. It relates to the technique to be performed.

  IC cards have several advantages over magnetic cards and memory cards. For example, since an IC card controls the writing and reading of information to and from the memory of the IC unit using a microprocessor provided in the IC unit, it is difficult to rewrite information from the outside. There is an advantage that measures are easy. In an IC card system in which such an IC card is applied to service provision, a service providing organization usually sets a file for each service in a dedicated IC card (IC unit) designed uniquely, and the service is included in this file. Stores information necessary for provision. In this case, the file to be set also includes a PIN (Parsonal Identification Number: hereinafter referred to as a pin) that is collated when granting file access authority (permissions such as file setting, update, and deletion, the same applies hereinafter). The setting of the file to the IC card and the setting of the information necessary for the service to the set file are called service issuance. The issue to the IC card to which nothing is set is newly issued. Issuing a service to an IC card is called additional issuance, and deletion of set information is called service issuance / deletion. The file access authority is also referred to as issue processing authority.

  Referring to FIG. 11, a conventional process from the card manufacturer to the card holder passing through the service providing organization will be described. The card manufacturer sets a temporary pin for the service providing organization on the IC card before delivering the IC card to the service providing organization. Also, file access authority to the IC card of the service providing organization is given by collating the pins. When the service providing organization receives the IC card, the service providing organization collates the temporary pin for the service providing organization set by the card manufacturer, and sets this as the actual pin of the service providing organization. As a result, responsibility for the IC card is transferred to the service provider. After that, the service provider verifies the pin set by itself and issues a new issue for the service to be provided. When the cardholder receives the IC card from the service provider, the cardholder sets the holder pin and attaches it as his own IC card.

  In the conventional IC card system, new issue, additional issue, and issue deletion of services to the IC card are all performed under the control of the service providing organization. Here, being under the control of a service providing organization means, for example, preventing additional issuance and issuance deletion by a person who does not have file access authority for the IC card, or providing necessary maintenance actions for the IC card. It is that the institution will take the initiative. Therefore, if the cardholder wishes to issue an additional service from a service provider, as shown in FIG. 12, the service provider temporarily deposits the IC card and issues an additional service. It is necessary to bring an IC card to a place designated by the provider and issue additional services. However, in such a form, not only the management of the service providing organization is burdened but also a burden for the cardholder who wants to enjoy the service. When an additional service from another service provider is issued within an IC card issued by a service provider, the burden on the card holder is further increased. This point is illustrated in FIG.

  The example shown in FIG. 13 is a case where a service provided by another service providing organization A is additionally issued to an IC card issued by the service providing organization B. In the case shown in the figure, the cardholder first deposits the IC card in the service provider B who has the authority to access the IC card or brings the IC card to a place designated by the service provider B, The access right is canceled by checking the pin of the service provider B, and the additional service file of the service provider A is set. Thereafter, the service provider B forwards the IC card in which the additional service file is set to the service provider A or asks the card holder to gather again at the designated location, and the service is managed under the control of the service provider B. Information necessary for the service provided by provider A is set.

  In this way, it is technically possible to issue additional services from a service provider that is different from the service provider that issued the IC card, but it is not carried out much because it takes a lot of work. Is the actual situation. In the end, in reality, the cardholder must possess an IC card for each service provider, and as he receives services from many service providers, he / she owns many IC cards. There was a problem that management was complicated.

  Such problems do not occur when services are issued online, but instead, verification data (such as pins) must be sent along with information necessary for service issuance on the communication line. In fact, there is a new problem that the service provider has a risk. In order to avoid this problem and ensure security, it is considered that information encrypted for the cardholder is sent over the communication line, and this is decrypted by the IC part of the IC card before issuing the service. It is done. However, the algorithms and keys used for the encryption and decryption are likely to be different for each service provider. If the algorithm and key are different for each service provider, a plurality of algorithms and keys must be mounted on one IC card, and the limited resources of the IC card are not sufficient.

  It is an object of the present invention to provide an improved IC card system capable of issuing a plurality of services to a single IC card without the cardholder's consent from the service provider. is there. Another object of the present invention is to provide an IC card that is suitable for configuring the above IC card system. Another object of the present invention is to provide a recording medium on which a program for realizing the components of the IC card system on a computer is recorded.

  An IC card system of the present invention that solves the above-described problems is an IC card having an issuance processing means for performing issuance processing for enjoying a service by a predetermined service providing organization, and an issuance registered by at least one service providing organization. Means for secretly delivering a command to the IC card, and the IC card that has received the secret delivery of the issued command autonomously issues the service. The fact that the IC card performs the issuing process autonomously means that the IC card performs the new issue and the additional issue of the service independently of the service providing organization.

  Another IC card system of the present invention includes an IC card having an issuing processing means for performing an issuing process for receiving a service provided by a predetermined service providing organization, and the IC card between the IC card and the IC card. A card operating terminal for exchanging information; a registering means for registering an issuance command registered by the service providing organization; and an issuing command registered by the registering means to the IC card through the card operating terminal. A relay terminal having a secret delivery means, and the IC card that has received the secret delivery of the issued command autonomously performs the issuing process for the service.

  In each of the above IC card systems, the IC card has a unique information storage means for storing cardholder identification information and a unique key assigned to the IC card, and authenticates the cardholder based on the identification information. Authentication processing means for performing issuance authority when the authentication result is valid, and decryption means for decrypting the secretly issued issue command using the unique key, and issuing by the authentication processing means When the processing authority is set, the issuance processing means performs the issuance process based on the decrypted issuance command.

  The issuance processing means executes additional issuance or issuance deletion for receiving a new service after the issuance processing in accordance with the set issuance processing authority.

  Another IC card system according to the present invention includes a unique information storage means for storing cardholder identification information and a unique key assigned to the card, authenticating the cardholder based on the identification information, and an authentication result. Authentication processing means for setting the issuance processing authority when it is valid, decryption means for decrypting the input information using the unique key, and issuance processing means for performing the issuance process for enjoying the service by a predetermined service provider IC card provided, registration means for renewably registering an issuance command registered by the service providing organization, and card control means for receiving the IC card and transferring information to and from the IC card Whether or not the card control means is set with an issue processing authority based on the identification information. If the issue processing authority is set, at least one issue command is transmitted and decrypted based on the unique key, and on the IC card by the service providing organization based on the decrypted issue command It is characterized by performing an issuance process for enjoying the service.

  In the other IC card system, the card control means causes the IC card to execute an additional issue or issue deletion for receiving a new service after the issuing process according to the issuing process authority.

  An IC card of the present invention that solves the above-mentioned other problems is an IC card that performs an issuance process for enjoying a service provided by a predetermined service providing organization, a means for obtaining an issuance command, and cardholder identification information And a unique information storage means for storing the unique key assigned to the card, and an authentication processing means for authenticating the cardholder based on the identification information and setting issuance processing authority when the authentication result is valid And a decrypting unit that decrypts the acquired issuance command using the unique key, and performs the issuance process based on the decrypted issuance command when the issuance processing authority is set by the authentication processing unit. It is characterized by that.

This IC card executes additional issuance or issuance deletion for receiving a new service after the issuance processing in accordance with the set issuance processing authority.
The recording medium of the present invention that solves the above-mentioned other problems includes an IC card that sets an issuance processing authority when the cardholder is valid and performs an issuance process for enjoying a service by a predetermined service provider, It is a recording medium in which a program that causes a computer interposed between service providers to execute the following processing is recorded in a form readable by the computer.
(1) Processing for obtaining the issuing processing command and data (hereinafter referred to as issuing command) from the service providing organization, and (2) determining whether or not the issuing processing authority is set for the IC card. If it is, at least one issue command is secretly distributed to the IC card and the issue process is performed autonomously. The program further causes the computer to execute the following processing.
(3) A process of executing additional issuance or issuance deletion for receiving a new service after the issuance process according to the issuance process authority.

  As is apparent from the above description, according to the present invention, the cardholder can autonomously issue a plurality of services to one IC card without obtaining the consent of the service providing organization. , Has a unique effect.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. First, the process until the IC card used in the IC card system of the present invention passes from the card manufacturer to the card holder via the mediator will be described with reference to FIG.

  The card manufacturer sets a temporary pin for an intermediary when the IC card is delivered. Further, a setting such as “necessary to check the temporary pin by the mediator” as the delivery destination is made, and the file access authority is set for the mediator. When the intermediary receives the IC card, the intermediary collates the temporary pin set by the card manufacturer with respect to the IC card, and then changes the temporary pin to the actual pin. Thereby, the management right for the IC card is entrusted to the intermediary. The intermediary sets an encryption / decryption key for encrypting or decrypting information with respect to the IC card, and the file access authority is “card holder is required to verify the temporary pin by the intermediary”. The setting is revised so that the pin must be verified by itself. When the setting for the IC card is completed, the mediator delivers the IC card to the cardholder. When the cardholder receives the IC card that has been set from the mediator, the cardholder sets the holder pin and attaches the IC card to itself. As a result, the IC card is not under the control of the service providing organization but under the control of the card holder, and can be issued to the card only by the holder pin.

  Next, an embodiment of the IC card system of the present invention using the IC card will be described. As shown in FIG. 2, the IC card system of this embodiment includes a plurality of service provider terminals 1a to 1m serving as service providing organizations, a plurality of card operation terminals 3a to 3n operated by the card holder, and each service. The relay terminal 2 interposed between the provider terminals 1a to 1m and the IC cards 4a to 4n are configured. The service provider terminals 1a to 1m and the relay terminal 2, and the relay terminal 2 and the card operation terminals 3a to 3n are connected via public lines L1 and L2, respectively. Each of the service provider terminals 1a to 1m registers an issuance command necessary for issuing a service handled by its own terminal, such as provision of a credit service, in the relay terminal 2 in advance. In the example of FIG. 1, the relay terminal 2 is a terminal in the position of an intermediary. The relay terminal 2 holds the issued commands registered by the service provider terminals 1a to 1m together with the menu data, and requests them. In response, the data is transmitted to the card operation terminals 3a to 3n. The card operation terminals 3a to 3n exchange information with the IC units of the IC cards 4a to 4n.

  The configuration of the relay terminal 2 is as shown in FIG. 3, and is a database (DB) that stores issuance commands sent from the service provider terminals 1a to 1m, encryption / decryption keys used for encryption and decryption, etc. 21) DB control unit 22 having an issuance command management table for managing the menu data generated based on the issuance command and the storage address of the issuance command in the DB 21, communication for controlling the input / output of information to the public line L2 (not shown) A control unit 23 and a main control unit 24 that controls the own terminal are provided. In addition, the relay terminal 2 implement | achieves each function of said DB21, DB control part 22, the communication control part 23, and the main control part 24 by installing a predetermined program in a general purpose computer. Such a program is statically recorded on a computer-readable recording medium such as a CD-ROM (compact disk ROM) or a flexible disk, or is dynamically recorded on a line such as a local network, and the computer And can be distributed in an independent form.

  FIG. 4 shows the relationship between the issued commands for each service stored in the DB 21 and the issued command management table in the DB control unit 22. FIG. 4A is a diagram showing the storage state of issuing commands in the DB 21, where “01”, “02”, “03”,... Are service identifiers (codes for identifying services, the same applies hereinafter). ) Is the storage address of the issued command corresponding to. Each issue command is variable length information, and “D” indicates a delimiter of the issue command for each unit size. On the other hand, FIG. 4B is a diagram showing an example of the contents of the issued command management table. This issuance command management table stores the storage address of the corresponding issuance command for each service identifier. Each storage address “01”, “02”, “03”,... Is fixed length information.

  FIG. 5 is a configuration diagram of the card operation terminal 3a. The other card operation terminals 3b to 3n have the same configuration. The card operation terminal 3a includes a card operation terminal main body 30, a display device 36 for displaying input information, messages, and the like, a keyboard 37 as an example of data input means, and information reading or information from the IC card 4a. And an R / W (read / write) device 38 that performs writing.

  The card operation terminal main body 30 is a general-purpose computer. When this computer reads and executes a predetermined program, communication for performing input / output control of information with the relay terminal 2 connected via the public line L2 is performed. R / W that controls the operation of the control unit 31, the main control unit 32 that controls the terminal itself, the input / output control unit 33 that performs input / output control between the display device 36 and the keyboard 37, and the R / W device 38. Each function of the control part 34 and the IC card control part 35 that controls the operation of the IC card 41 is realized. Similar to the relay terminal 2, such a program is recorded statically on a computer-readable recording medium such as a CD-ROM or a flexible disk, or dynamically recorded on a line such as a local network. It can be distributed in a form independent of the computer. This program is installed in the computer at the time of system construction, thereby causing the computer to function as the card operation terminal main body 30.

  FIG. 6A is a configuration diagram of functional blocks formed in the IC portion of the IC card 4a. The IC card 4a (the IC unit) includes a control processing unit 41, a RAM 42, a ROM 43, an EEPROM 44, and an input / output control unit 45 that controls transmission / reception of information between the control processing unit 41 and the R / W device 38 described above. Is built. The control processing unit 41 implements the functions of the decryption processing unit 411, the issue processing unit 412, and the verification processing unit 413 in the IC unit according to the program stored in the ROM 43. The decryption processing unit 411 decrypts a secret delivery, that is, an issuance command that is encrypted and delivered from the relay terminal 2, and the issuance processing unit 412 executes the issuance command decrypted by the decryption processing unit 411. Service issuance, that is, a file necessary for the service is set in the EEPROM 44, and information necessary for receiving the service is stored in the set file. The verification processing unit 413 authenticates the cardholder and sets file access authority in the RAM 42 when the authentication result is valid.

  As shown in FIG. 6B, the EEPROM 44 stores a unique key storage area 441 used for decrypting the issued command, a holder pin storage area 442 used for matching with the input pin in the matching processing unit 413, and a service. A file creation authority storage area 443 used for determining whether or not the file access authority for issuing can be set is formed. The other IC cards 4b to 4n have the same configuration.

  Next, a process in which a new service is additionally issued to the IC card in the IC card system configured as described above will be specifically described with reference to FIGS. In addition, although the following description is an example about the card operation terminal 3a and the IC card 4a, the same applies to the other card operation terminals 3b to 3n and the IC cards 4b to 4n.

  First, the operation of the card operation terminal 3a will be described. FIG. 7 is a procedure explanatory diagram showing exchange of information between the card operation terminal 3 a and the relay terminal 2. The card operation terminal 3a (main control unit 32) displays a message requesting insertion of the IC card 4a on the display device 36 at the start of processing (step S601), and also displays an input instruction of the holder pin by the card holder. (Step S602). Waiting for the input of the owner pin from the keyboard 37 (step S603), and when the input completion is detected (step S604), a collation command is transmitted to the IC card 4a (step S605).

  When a normal response indicating that the owner pin input here matches that set in the IC card 4a is received (step S606: Yes), a signal requesting transmission of menu data is sent to the relay terminal 2. The data is transmitted (step S607). When menu data sent from the relay terminal 2 in response to this request is received (step S608), a service menu for prompting selection of a service is displayed on the display device 36 (step S609). When a specific service is selected from the service menu by the cardholder, the selected service identifier is transmitted to the relay terminal 2 (step S610), the response is received, and the process is temporarily terminated (S611). On the other hand, if a normal response cannot be received in step S606 (step S606: No), if a retry is possible (step S611: Yes), the processing from step S603 is repeated. If retry is not possible (step S611: No), a message indicating abnormal termination is displayed on the display device 36, and the process is terminated.

  The processing procedure in the relay terminal 2 is as shown in FIG. That is, when the relay terminal 2 (main control unit 24) detects that a signal requesting transmission of the service menu is sent from the card operation terminal 3a (step S701), it controls the DB control unit 22 and the communication control unit 23. Then, the service menu is downloaded to the card operation terminal 3a (step S702), and a response from the card operation terminal 3a, that is, a response of the service identifier is waited (step S703). When a service identifier is received from the card operation terminal 3a (step S704), an issue command corresponding to the service identifier is searched (step S705). If there are corresponding issue commands (issue command group) (step S706: Yes), they are encrypted using the encryption key in the DB 21 and then sent to the card operation terminal 3a (step S707) for processing. Exit. If there is no corresponding issue command (step S706: No), a message to that effect is transmitted to the card operation terminal 3a (step S708), and the process is terminated. In this case, the card operation terminal 3a displays a message indicating that the service cannot be issued because there is no issue command on the display device 36.

  FIG. 9 is a procedure explanatory diagram showing exchange of information between the card operation terminal 3a and the IC card 4a, and shows an example in the case of receiving an issued command group from the relay terminal 2. As a response from the relay terminal 2, the card operation terminal 3a is in a reception waiting state for the issued command group (step S801). When the issuance command group is issued as a normal response from the relay terminal 2 (step S802: Yes), the received issuance command is transmitted to the IC card 4a (step S803), and a response from the IC card 4a is waited (step S804). If the response from the IC card 4a is abnormal (step S802: No), a message indicating that the corresponding service does not exist is displayed on the display device 36 (step S807), and the process is terminated.

  If the response from the IC card 4a is normal (step S805: Yes), it is checked whether all issued commands in the issued command group have been received (step S806). If all issuance commands have not been received (step S806: No), the processing after step S803 is repeated. When all the commands for issuing are received (step S806: Yes), the message which tells that the issuing process was complete | finished is displayed on the display apparatus 36 (step S807), and a process is complete | finished.

  If the response from the IC card 4a is not normal in step S805 (step S805: No), a message indicating abnormal termination is displayed on the display device 36 (step S809), and the process is terminated.

  FIG. 10 is an explanatory diagram of the procedure of the issuing process by the IC card 4a. When the IC card 4a receives the holder pin (input pin) and the collation command input from the card operation terminal 3a in the procedure shown in FIG. 7 (step S901), the IC card 4a and the owner pin set in the EEPROM 44 Are collated (step S902). As a result of the collation, when both match, it is determined that the authentication is valid, the file access authority is set in the RAM 42, and a normal response is transmitted to the card operation terminal 3a. On the other hand, if the input pin does not match the set holder pin, an abnormal response is transmitted to the card operation terminal 3a (step S903).

  When the response from the card operation terminal 3a is received (step S904), the issued command is decrypted using the unique key stored in the EEPROM 44 (step S905). Thereafter, the decrypted issue command is executed to issue a service (step S906). If there are a plurality of issuing commands, the issuing process is repeated (step S907). If the issuing process is completed (step S907: Yes), a signal to that effect is transmitted to the card operation terminal 3a (step S908). By this issuance process, a service file is set in the EEPROM 44 of the IC card 4a, and information necessary for receiving provision of the service is stored in the file.

  As described above, in the IC card system of this embodiment, the cardholder himself obtains the file access authority for the IC card based on his own holder pin, and issuance of necessary services regardless of the service provider. It can be done autonomously. In addition, when a certain service ends while the card is being used, or when the service becomes unnecessary, it is easy to issue and delete the service.

  In the above-described embodiment, the encryption technique is used for distributing the issued command. However, when the confidential distribution is possible without using encryption, the issued command does not necessarily have to be encrypted. In this case, it is not necessary to set an encryption / decryption key or a unique key in the relay terminal 2 or the IC cards 3a to 3n.

  In the above embodiment, the issue processing means is provided in the IC card. However, on the assumption that the file access authority belongs to the holder pin set in the IC card, the relay terminal 2 and the card are used. Issue processing means may be provided on the operation terminals 3a to 3n so that these function as the issue processing terminals. In this case, a card control processing unit having an issue processing function is added to the relay terminal 2 or the card operation terminals 3a to 3n. The card control unit determines whether or not file access authority is set for the IC card. If the file access authority is set, at least one issuance command is transmitted to the IC card and the unique key is transmitted. And issuing a service to the EEPROM of the IC card based on the decrypted issue command. Further, additional issuance and issuance deletion are executed in accordance with the file access authority set on the IC card.

  Further, the above is an example in which a file for issuing a service remains in the EEPROM even if the IC card is removed from the card operation terminal. However, the service can be enjoyed only while the IC card is attached to the card operation terminal. You may do it. The service in this case is issued to the RAM of the IC card, and is erased when the IC card is removed.

Explanatory drawing which shows the process until the IC card used by this invention passes a card holder via a mediator from a card manufacturer. The block block diagram of the IC card system by one Embodiment of this invention. The block block diagram of the relay terminal by this embodiment. (A) is explanatory drawing of the storage state of the issue command in the database by this embodiment, (b) is explanatory drawing which shows an example of the content of the issue command management table. The block block diagram of the card operation terminal by this embodiment. (A) is a block diagram of the IC card according to the present embodiment, (b) is an explanatory diagram showing an example of the contents in the EEPROM. Processing procedure explanatory drawing of the card operation terminal by this embodiment. Explanatory drawing which shows the transmission procedure of the issue command from the relay terminal by this embodiment to a card operation terminal. Explanatory drawing which shows the transmission procedure of the issue command to the IC card from the card operation terminal by this embodiment. Explanatory drawing which shows the procedure of the issuing process of the IC card by this embodiment. Explanatory drawing which shows the process in which an IC card passes from a card manufacturer to a cardholder via a broker in the prior art. Explanatory drawing which shows the procedure of the additional issue of the new service provided from the service provision organization which issued IC card in a prior art. Explanatory drawing which shows the procedure of the additional issue of the new service provided from the service provision organization different from the service provision organization which issued IC card in a prior art.

Explanation of symbols

1a to 1m Service providing organization terminal 2 Relay terminal 3a to 3n Card operation terminal 4a to 4n IC card 21 Database (DB) provided in the relay terminal
22 DB control unit provided in relay terminal 23 Communication control unit provided in relay terminal 24 Main control unit of relay terminal 30 Card operation terminal main body 31 Communication control unit provided in card operation terminal 32 Main control unit of card operation terminal 33 Card Input / output control unit provided in operation terminal 34 R / W control unit provided in card operation terminal 35 IC card control unit provided in card operation terminal 36 Display device provided in card operation terminal 37 Keyboard provided in card operation terminal 38 R / W device provided in card operation terminal 41 Control processing part provided in IC part of IC card 42 RAM
43 ROM
44 EEPROM
45 I / O controller

Claims (7)

An issuance processing means for setting a file necessary for the service in order to enjoy services by a plurality of service providing organizations and storing information necessary for receiving the service provision in the set file;
Unique information storage means for storing in advance identification information of the cardholder who enjoys the service;
Authentication processing means for setting the issuance processing authority of the service (file access right) with respect to the cardholder if the authentication result is justified performs authentication of the cardholder based on the identification information in the IC card When,
Each having an IC card,
A card operation terminal that receives the IC card and exchanges information with the IC card;
Registration means for pre-registering issuing commands necessary for issuing each service by the plurality of service providing organizations;
A relay terminal comprising: a means for delivering an issuance command registered by the registration means to the IC card through the card operation terminal based on a request from the IC card ;
The issue processing means includes:
An IC card which performs the issuance process based on the issuance command received from the distributing means when issuance process authority (file access authority) is set for the cardholder by the authentication processing means system.   The issuance command distributed to the IC card is encrypted, and the IC card further authenticates a unique information storage means in the IC card that prestores a unique key assigned to the IC card. And a processing unit, and when the issue processing authority is set by the authentication processing unit, the IC card decrypts the encrypted issuance command using the unique key, and the issuance processing unit 2. The IC card system according to claim 1, wherein the issuing process is performed based on the issued command.   If the issuance processing means has a plurality of the issuance commands, additional issuance for receiving a new service after the issuance processing is performed by repeating execution and issuance processing of the remaining issuance commands after the issuance processing, or 3. The IC card system according to claim 2, wherein issue deletion by deleting the set file and information is executed in accordance with the set issue processing authority. Issuance processing means for performing issuance processing for receiving services from a plurality of service providing organizations;
Unique information storage means for storing in advance identification information of the cardholder who enjoys the service;
Means for requesting an issuance command to a relay means in which instructions and data (hereinafter referred to as an issuance command) necessary for the issuance processing of each service by the plurality of service providing organizations are registered in advance;
An IC card having authentication processing means for authenticating a cardholder based on the identification information and setting an issuance processing authority in the IC card when an authentication result is valid,
The issuance processing means is necessary for the service based on the issuance command acquired from the relay means when the issuance command is set for the cardholder by the authentication processing means and receives the issuance command. An IC card characterized in that information necessary for receiving a service provision is stored in the set file while setting a simple file in the IC card. If there are a plurality of the issue commands, additional issue for enjoying a new service is performed after the issue processing by repeating execution and issue processing of the remaining issue commands after the issue processing, or the set file 5. The IC card according to claim 4 , wherein issue deletion by deleting the information is executed in accordance with the set issue processing authority. A recording medium in which a computer intervening between an IC card and a plurality of service providing organizations records a program that causes the computer to execute the following processes (1) and (2) in a form readable by the computer. ,
The IC card is an issuance processing means for enjoying services by the plurality of service providing organizations, and a means for setting the issuance processing authority of the service for the card holder when the IC card holder is valid. The issuance processing means is set when the IC card receives an issuance command through the computer, and the IC card sets a file required for the service in the IC card based on the issuance command. A recording medium that stores information necessary for receiving services in a file.
(1) Processing for receiving registration of instructions and data for issuing processing (hereinafter referred to as issuing commands) from the plurality of service providing organizations;
(2) Whether or not the issue processing authority is set by transmitting the issue command to the IC card and determining whether the response from the IC card is normal or abnormal based on a request from the IC card Is issued, and at least one issuance command is distributed to the IC card when set, so that the IC card receives the issuance command through the computer, and issuance processing means provided in the IC card Processing for performing the issuing process based on the issuing command. Additional issuance for receiving a new service after the issuance process by repeating the execution and issuance process of the remaining issuance command after the issuance process when the program further has a plurality of the issuance commands in the computer. 7. The recording medium according to claim 6 , wherein the recording medium executes a process for executing issue deletion according to the issue processing authority by deleting the set file and information.

Images