JP4904957B2 - Billing system, method, IC card, and IC card program using IC card - Google Patents

Description

  The present invention relates to a charging system and method for performing a charging process using an IC card, and further to an IC card used in the charging system and an IC card program mounted on the IC card.

  An IC card used in an accounting system is generally provided with an authentication command for authenticating authentication data transmitted from a higher-level device, such as a Verify command described in the ISO / IEC7816 standard.

  With this authentication command, the security status held in the IC card is manipulated, and only when the authentication command is successful, the command used in the accounting process can be executed.

  For example, Patent Document 1 describes that, in the EMV standard, it is possible to execute a GENERATE_AC command for notifying a credit offline transaction only when the Verify command succeeds in collating the PIN code.

  However, as described above, the function of the conventional authentication command only manipulates the security status, and does not directly affect the command executed after the authentication command.

  Specifically, for example, when using an IC card for electronic money as described in Patent Document 2, as a payment command for payment of electronic money or as a charging device described in Patent Document 3 When using an IC card, data used by a command that can be executed by the success of an authentication command, such as a decryption command for decrypting ciphertext, cannot be specified.

Actually, when the ciphertext of the content to be charged is decrypted using the IC card as in the billing apparatus described in Patent Document 3, if the amount of data that can be decrypted can be determined by the authentication command, There is no doubt that charging according to the amount of data can be performed, and in electronic money applications such as those described in Patent Document 2, it is possible to use an authentication command rather than separately executing an authentication command and a payment command. If payment can be made, the billing system can be sped up.
JP 2002-169966 A JP 2000-11063 A JP 2002-169912 A

  Therefore, according to the present invention, when charging processing is performed using an IC card, data used by a command executed after an authentication command can be designated by an authentication command for authenticating authentication data transmitted from a host device. An object of the present invention is to provide a billing system and billing method that can be used, and also to provide an IC card that is required when implementing the billing system and method, and an IC card program mounted on the IC card. And

  A first invention for solving the above-described problem is a billing system using an IC card, wherein the billing system includes at least the IC card and a billing terminal that performs billing processing using the IC card. The IC card includes an authentication command used for charging processing and a target command for executing processing to be charged, and the authentication command is included in a command APDU (Application Protocol Data Unit). Only when the authentication data is authenticated and the authentication data is successfully authenticated, the executable number of the target command is calculated from the parameters included in the command APDU, and the target command is calculated based on the authentication command. The charging terminal can authenticate the IC card using the authentication command. After using the target command, and executes the processing to be billed.

  In the first invention described above, the parameter included in the command APDU of the authentication command is data indicating a charge amount for execution of the target command, and the authentication command is executed from the data indicating the charge amount. It is desirable to calculate the number of possible times. Furthermore, when the authentication command succeeds in authenticating the authentication data, it is desirable that the monetary value indicated by the data indicating the charge amount is settled in addition to the calculation of the executable number.

  Further, a second invention for solving the above-mentioned problem is a charging method using an IC card, wherein the charging method includes an IC card authentication step for authenticating the IC card in order to execute a charging process, A target processing step for executing a target processing to be processed, wherein the IC card authentication step includes a parameter as a basis for calculating an executable number indicating the number of times the IC card can execute the target processing, and the IC A command APDU including authentication data to be authenticated by the card, and the IC card authenticates the authentication data included in the received command APDU, and only when the authentication data is successfully authenticated. A step of calculating the number of executable times from a parameter, wherein the target processing step is a command APD for executing the target processing; Is transmitted to the IC card, and the IC card executes the target process when the authentication data has been successfully authenticated and the number of times the target process has been executed has not reached the executable number. It is characterized by doing.

  In the second invention described above, the parameter included in the command APDU transmitted to the IC card in the IC card authentication step is data indicating a charge amount for execution of the target process, and the IC card It is desirable to calculate the executable number from data indicating the billing amount. Furthermore, in the IC card authentication step, when the IC card succeeds in authenticating the authentication data, it is desirable to settle the monetary value indicated by the data indicating the charge amount in addition to the calculation of the executable number. .

  Furthermore, a third invention for solving the above-described problem is an IC card used in billing processing, wherein the IC card executes an authentication command used in billing processing and processing subject to billing processing. The authentication command authenticates the authentication data included in the command APDU, and the execution number of the target command is determined from the parameters included in the command APDU only when the authentication data is successfully authenticated. A command to be calculated, wherein the target command counts the number of times the target command is executed, and disables execution of the target command when the counted number reaches the executable number. To do.

  In the third invention described above, the parameter included in the command APDU of the authentication command is data indicating a charge amount for execution of the target command, and the authentication command is executed from the data indicating the charge amount. It is desirable to calculate the number of possible times. Furthermore, when the authentication command succeeds in authenticating the authentication data, it is desirable that the monetary value indicated by the data indicating the charge amount is settled in addition to the calculation of the executable number.

  Furthermore, a fourth invention for solving the above-described problem is an IC card program mounted on an IC card used for billing processing, wherein the IC card includes an authentication command used for billing processing, and billing A target command for executing a process to be processed, authenticating the authentication data included in the command APDU, and executing the target command from the parameters included in the command APDU only when the authentication data is successfully authenticated. An authentication command for calculating the possible number of times and the number of times the target command has been executed are counted, and when the counted number of times reaches the executable number, the target command that disables execution of the target command is the IC This is an IC card program for causing the card CPU to function.

  In the fourth invention described above, the parameter included in the command APDU of the authentication command is data indicating a charge amount for execution of the target command, and the authentication command is executed from the data indicating the charge amount. It is desirable to calculate the number of possible times. Furthermore, when the authentication command succeeds in authenticating the authentication data, it is desirable that the monetary value indicated by the data indicating the charge amount is settled in addition to the calculation of the executable number.

  As described above, according to the present invention, when the charging process is performed using the IC card, the data used by the command executed after the authentication command by the authentication command for authenticating the authentication data transmitted from the host device. Since the executable number is determined, the target command cannot be executed beyond the executable number indicated by the authentication command.

  Furthermore, the charge amount is indicated by the command APDU of the authentication command, and the number of executions can be calculated from the charge amount, so that it becomes possible to charge according to the number of processing without fail.

  Furthermore, since the billing amount related to the content browsing can be settled with only the authentication command, the billing system can be speeded up rather than executing the authentication command and the settlement command individually.

  In the present invention, an IC card means a card medium on which an IC chip is mounted, and an interface for communicating with a host device does not ask for contact / non-contact. Further, the IC card according to the present invention includes a SIM or UIM obtained by cutting the periphery of the IC chip into a strip shape.

  From here, the accounting system using the IC card 1 according to the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram showing an example of a charging system using an IC card. In FIG. 1, a personal computer 2 (hereinafter referred to as a PC) serving as a charging terminal has a reader / writer 2a, and the IC card 1 is electrically connected to a PC 2. The content distribution server 3 is connected to the PC 2 via the network 4.

  In FIG. 1, when the paid content distributed by the content distribution server 3 is viewed on the PC 2, the content distribution server 3 transmits a ciphertext obtained by encrypting the stream data of the content to the PC 2. 1 is used to charge the content for browsing, and the ciphertext to be charged is decrypted.

  The IC card 1 includes an authentication command according to the present invention, and a decryption command that decrypts a ciphertext transmitted from the content distribution server 3 with a command that can be executed only when the authentication command is successful. Then, the decryption command becomes the target command to be charged.

  Before the content distribution server 3 distributes the ciphertext to the PC 2, the PC 2 authenticates the IC card 1 connected to the PC 2 using the authentication command, and if the IC card 1 is successfully authenticated, the authentication is successful. Is transmitted to the content distribution server 2.

  When the content distribution server 3 receives data indicating that the IC card 1 is authenticated, the content distribution server 3 transmits the ciphertext to the PC 2, and the PC 2 decrypts the transmitted ciphertext using the decryption command of the IC card 1. .

  The command APDU of the authentication command used when authenticating the IC card 1 includes, in addition to authentication data for authenticating the IC card 1, a charge amount related to content browsing, here, a total data amount of stream data to be decrypted The corresponding charge amount is included.

  When the IC card 1 receives the authentication command, the IC card 1 authenticates the authentication data included in the authentication command, and charges from the balance of the electronic money stored in the IC card 1 only when the authentication data is successfully authenticated. While reducing the amount of money, the executable number indicating the number of times the ciphertext can be decrypted using the decryption command is calculated from the billing amount.

  The decryption command provided in the IC card 1 counts the number of times the ciphertext is decrypted, and disables decryption of the ciphertext using the decryption command when the number of times the ciphertext is decrypted reaches the executable number.

  As described above, according to the billing system of the present invention, the number of executable times that the ciphertext can be decrypted is determined by the authentication command provided in the IC card 1, so the number of executable times indicated by the authentication command is exceeded. Thus, the ciphertext cannot be decrypted, and billing according to the data amount of the content to be browsed can be performed without fail.

  Furthermore, since the billing amount related to the content browsing can be settled with only the authentication command, the billing system can be speeded up rather than executing the authentication command and the settlement command individually.

  From here, the IC card 1 will be described in detail. FIG. 2 is an external view of the IC card 1 according to the present invention. An IC module 1a is mounted on the IC card 1, and an IC chip 10 is molded on the IC module 1a. The detailed shape of the IC card is standardized by the ISO / IEC7816 standard or the like.

  FIG. 3 is a hardware structure diagram of the IC chip 10 molded in the IC module 1a. The IC chip 10 has five external terminals 18 to which Vcc, Reset, Clock, I / O, and Gnd are input. The IC chip 10 includes a central processing unit 11 (hereinafter referred to as a CPU). Read-only memory 15 (hereinafter referred to as ROM), EEPROM 16 as an rewritable memory (abbreviation of Electrically Erasable Programmable Read-Only Memory), and random access as a volatile memory. A memory 14 (Random Access Memory, hereinafter referred to as RAM), a cryptographic operation circuit 12 that is a circuit dedicated to cryptographic operations, a communication I / F circuit 13 for communicating data with the host device 2, and the like are connected.

  FIG. 4 is a software configuration diagram of the IC card 1. As shown in FIG. 4, using the hardware of the IC chip 10 shown in FIG. 3, as a program for operating the CPU 11, a decryption command 110 for decrypting a ciphertext transmitted from the PC 2 and a program transmitted from the PC 2 An authentication command 100 for authenticating the authentication data.

  Further, the IC card 1 stores the encryption key 111 used when the decryption command 110 decrypts the ciphertext and the balance data 101 indicating the monetary value of the electronic money stored in the IC card 1 in the EEPROM 16 or the like for authentication. A security status 120 that is operated by the command 100 and indicates the authentication result, and a counter 121 that indicates the number of times the decryption command 110 has been executed are held in the RAM 14.

  The authentication command, like the Verify command defined in ISO / IEC7816, compares the reference data (not shown) stored in the EEPROM 16 of the IC card with the received authentication data to authenticate the authentication data. It is a command to do.

  FIG. 5 is a diagram showing an example of an APDU (Application Protocol Data Unit) of the authentication command. FIG. 5A shows a command APDU, and FIG. 5B shows a response APDU.

  As shown in FIG. 5A, in the present embodiment, the structure of the command APDU of the authentication command 100 conforms to the case 3 command structure of ISO / IEC7816, and is based on CLA, INS, P1, and P2. And a body composed of Lc and a data field.

  CLA and INS included in the command APDU header of the authentication command 100 are data for identifying the command APDU. In this embodiment, the CLA of the authentication command 100 is “D0h” and the INS is “00h”. .

  P1 and P2 included in the header of the command APDU of the authentication command 100 are parameters when the authentication command 100 is executed. In this embodiment, the charge amount is indicated by P1 and P2. Further, the length of data included in the data field is indicated by Lc of the command APDU of the authentication command 100, and the authentication data to be authenticated is included in the data field.

  As shown in FIG. 5B, the response APDU structure of the authentication command 100 conforms to ISO / IEC7816, but the response APDU does not include response data, and a status word (Status) indicating the execution result of the authentication command 100 Word) only.

  In the present invention, the authentication command 100 authenticates the authentication data by any method, and the authentication data included in the command APDU differs depending on the authentication command 100 authentication method. For example, if the authentication method of the authentication command 100 is a password verification, the authentication data 100 is a password, and if the authentication method of the authentication command 100 is a method using biometric data, the authentication data is biometric data (for example, fingerprint data). Data).

  The authentication command 100 authenticates the authentication data by a predetermined method, and stores the result of authenticating the authentication data in the security status 120.

  If the authentication data is successfully authenticated, the authentication command 100 subtracts the charge amount indicated by P1 and P2 of the command APDU from the balance data 101 to settle the charge amount related to content browsing. Further, the authentication command 100 calculates an executable number indicating the number of times the ciphertext can be decrypted from the billing amounts indicated by P1 and P2, and copies the calculated executable number to the counter 121.

  In this embodiment, in order to calculate the executable number from the charged amounts indicated by P1 and P2, the authentication command 100 holds a comparison table of the charged amount and the executable number, and uses this comparison table. The number of executions is calculated from the charge amount.

  The decryption command 110 provided in the IC card 1 refers to the received ciphertext (here, using the encryption key 111 stored in the IC card 1 by operating the encryption operation circuit 12 of the IC chip 10 and according to a predetermined encryption algorithm). Is a command for decrypting encrypted stream data) and returning the decrypted plaintext (here, stream data).

  6A and 6B are diagrams showing an example of an application protocol data unit (APDU) of a decoding command. FIG. 6A shows a command APDU, and FIG. 6B shows a response APDU.

  As shown in FIG. 6, in this embodiment, the command APDU structure of the decryption command 110 conforms to the Case 3 command structure of ISO / IEC7816, and includes a command header composed of CLA, INS, P1, and P2. And a body made up of Lc and a data field.

  CLA and INS included in the command APDU header of the decryption command 110 are data for identifying the command APDU. In this embodiment, the CLA of the decryption command 110 is “D0h” and the INS is “02h”. .

  P1 and P2 included in the header of the command APDU of the decryption command 110 are parameters when the decryption command 110 is executed. Here, P1 and P2 are not used, and the values of both P1 and P2 are “00h”. is there. Further, the data length of the data included in the data field is indicated by Lc of the command APDU of the decryption command, and the data field includes the ciphertext to be decrypted (here, encrypted stream data).

  In the decryption command 110, when the security status 120 indicates that the authentication command 100 has been successfully authenticated, and the value of the counter 121 is not “0”, the processing of the decryption command 110 is continued. Decrypt the ciphertext contained in the data field. The decryption command 110 subtracts one value from the counter 121 each time the ciphertext included in the data field is decrypted.

  From here, the charging method according to the present invention will be described while explaining the operation of the charging system described so far. Further, by explaining the accounting method according to the present invention, the operation of the command mounted on the IC card is clarified.

  FIG. 7 is a diagram for explaining the steps included in the billing method according to the present invention. As shown in FIG. 7, the charging method includes two different processes, one of which is an IC card authentication process P1 for authenticating the IC card 1, and the other is a process to be charged. This is the target processing step P2 to be executed.

  As shown in FIG. 7, the IC card authentication step P1 and the target processing step P2 are a series of steps, and the target processing step P2 can be executed only when the IC card authentication step P1 ends normally. Since the security status 120 indicating the result of the IC card authentication process P1 is held in the RAM 14 which is a volatile memory, even if the IC card 1 is deactivated after the IC card authentication process P1 is finished, The target processing step P2 is not executed.

  FIG. 8 is a flowchart showing a detailed procedure of the IC card authentication process P1. The first step S1 of the IC card authentication process P1 is a step of activating the IC card 1. In this step, the PC 2 activates the IC card 1 according to the procedure described in ISO / IEC7816.

  The next step S2 is a step of transmitting the command APDU of the authentication command 100 to the IC card 1. In this step, the PC 2 transmits a command APDU of the authentication command 100 including the authentication data and the billing amount to the IC card 1.

  The next step S3 is a step in which the IC card 1 authenticates the authentication data. In this step, the authentication command 100 provided in the IC card 1 authenticates the authentication data transmitted from the PC 2 by a predetermined method.

  The next step S4 is a step in which the process branches depending on the authentication result of step S3. If the authentication data has been successfully authenticated in step S3, the process proceeds to step S5. If the authentication has failed, this procedure is terminated.

  Step S <b> 5 executed when the authentication data is successfully authenticated is a step of updating the security status 120. In this step, the authentication command 100 updates the value of the security status 120 to data indicating that the authentication data is successful.

  The next step S6 is a step for initializing the counter 121. In this step, the authentication command 100 initializes the counter 121 by calculating the executable number from the charge amount included in the command APDU of the authentication command 100 and copying the calculated executable number to the counter.

  The next step S7 is a step of paying the charge amount. In this step, the authentication command 100 settles the charge amount by subtracting the charge amount included in the command APDU of the authentication command 100 from the balance data 101. With this step, the IC card authentication process P2 ends.

  FIG. 9 is a flowchart showing the detailed procedure of the target processing step P2. The first step S10 of the target processing step P2 is a step in which the IC card 1 receives the command APDU of the decryption command 110 including the ciphertext that is the encrypted stream data. In this step, the PC 2 transmits the command APDU of the decryption command 110 including the ciphertext that is the encrypted stream data to the IC card 1, and the IC card 1 receives the command APDU transmitted from the PC 2, and the IC card 1 The decryption command 110 provided in is activated.

  The next step S11 is a step in which the IC card 1 confirms the authentication result of the authentication data. In this step, the decryption command 110 of the IC card 1 refers to the security status 120 and confirms whether the value of the security status 120 is updated to data indicating that the authentication data is successful. If the value of the security status 120 indicates that the authentication data is successful, the process proceeds to step S12. If the value of the security status 120 does not indicate that the authentication data is successful, this procedure ends.

  The next step S12 is a step in which the IC card 1 confirms the value of the counter 121. In this step, the decryption command 110 of the IC card 1 refers to the counter 121. If the value of the counter 121 is larger than “0”, the process proceeds to step S13, and if it is “0”, this procedure is terminated.

  Step S13 executed when the value of the counter 121 is larger than “0” is a step of decrypting the ciphertext included in the command APDU of the decryption command 110. In this step, the decryption command 110 decrypts the ciphertext with a predetermined encryption algorithm using the encryption key 111 to obtain stream data that is a plaintext of the ciphertext.

  The next step S14 is a step of subtracting the value of the counter 121. In this step, the decryption command 110 provided in the IC card 1 subtracts one value from the counter 121. In this step, after the value of the counter 121 becomes “0”, the process branches in step S12, so that the ciphertext is not decrypted.

  The next step S15 is a step of transmitting response data of the decryption command 110. In this step, the decryption command 110 generates a response APDU composed of response data including stream data that is plaintext obtained by decrypting the ciphertext and a status word, and the IC card 1 transmits the generated response APDU to the PC 2. When step S15 is executed, the process returns to step S10.

The figure which showed an example of the accounting system using an IC card. 1 is an external view of an IC card. 1 is a hardware structure diagram of an IC chip. The software block diagram of an IC card. The figure which showed an example of APDU of an authentication command. The figure which showed an example of APDU of a decoding command. The figure explaining the process included in the accounting method. The flowchart which showed the detailed procedure of the IC card authentication process. The flowchart which showed the detailed procedure of the object process process.

Explanation of symbols

1 IC card 100 authentication command 110 decryption command 120 security status 121 counter 2 personal computer (PC)

Claims (12)

  A billing system using an IC card, wherein the billing system includes at least the IC card and a billing terminal that performs billing processing using the IC card, and the IC card is used for billing processing. An authentication command and a target command for executing a process to be charged. The authentication command authenticates authentication data included in a command APDU (Application Protocol Data Unit), and authenticates the authentication data. Only when it succeeds, the number of executions of the target command is calculated from the parameters included in the command APDU, and the target command can be executed the number of times executable by the authentication command, and the charging terminal After authenticating the IC card using the authentication command, using the target command, Charging system and executes the process of interest.   2. The charging system according to claim 1, wherein the parameter included in the command APDU of the authentication command is data indicating a charge amount for execution of the target command, and the authentication command is obtained from data indicating the charge amount. A billing system for calculating the executable number.   3. The accounting system according to claim 2, wherein, when the authentication command succeeds in authenticating the authentication data, in addition to calculating the executable number of times, the authentication command settles a monetary value indicated by data indicating the accounting amount. Characteristic billing system.   A billing method using an IC card, wherein the billing method includes an IC card authentication step for authenticating the IC card to execute billing processing, and a target processing step for executing target processing for billing processing. The IC card authentication step includes a command APDU including a parameter that is a basis for calculating an executable number indicating the number of times that the IC card can execute the target process, and authentication data that the IC card authenticates. Transmitting to the card, and the IC card authenticates the authentication data included in the received command APDU, and calculates the executable number from the parameter only when the authentication data is successfully authenticated, The target processing step transmits a command APDU for executing the target processing to the IC card, and the IC card It has authenticated the success of the authentication data, and, when the number of times of executing the target process has not reached the executable count, charging method, characterized by executing the target process.   5. The charging method according to claim 4, wherein the parameter included in the command APDU transmitted to the IC card in the IC card authentication step is data indicating a charging amount for the execution of the target process, In the authentication step, the IC card calculates the number of executable times from data indicating the charge amount.   6. The charging method according to claim 5, wherein, in the IC card authentication step, when the authentication data is successfully authenticated, the IC card is indicated by data indicating the charge amount in addition to the calculation of the executable number. A billing method characterized in that a monetary value is settled.   In an IC card used for billing processing, the IC card includes an authentication command used for billing processing and a target command for executing processing to be billed, and the authentication command includes a command APDU. Only when the authentication data included in the command APDU is authenticated and the authentication data is successfully authenticated, the command calculates the number of times the target command can be executed from the parameter included in the command APDU. An IC card that counts the number of times of execution, and disables execution of the target command when the counted number of times reaches the executable number.   8. The IC card according to claim 7, wherein the parameter included in the command APDU of the authentication command is data indicating a charge amount for execution of the target command, and the authentication command is obtained from data indicating the charge amount. An IC card characterized in that the executable number is calculated.   9. The IC card according to claim 8, wherein when the authentication command succeeds in authenticating the authentication data, in addition to calculating the executable number of times, the authentication command settles a monetary value indicated by data indicating the charge amount. Characteristic IC card.   An IC card program mounted on an IC card used for billing processing, wherein the IC card includes an authentication command used for billing processing and a target command for executing processing to be billed The authentication command included in the command APDU is authenticated, and the authentication command for calculating the executable number of the target command from the parameter included in the command APDU only when the authentication data is successfully authenticated, and the target command is executed. An IC card program for causing the CPU of the IC card to function as the target command that disables execution of the target command when the counted number reaches the executable number.   11. The IC card program according to claim 10, wherein the parameter included in the command APDU of the authentication command is data indicating a charge amount for the execution of the target command, and the number of executable times from the data indicating the charge amount. An IC card program for causing the CPU of the IC card to function as the authentication command for calculating The IC card program according to claim 11, wherein when the authentication data is successfully authenticated, the authentication command that settles the monetary value indicated by the data indicating the billing amount in addition to the calculation of the executable number, An IC card program for causing the IC card CPU to function.

Images