JP5375731B2 - IC card and computer program for IC card - Google Patents

Description

  The present invention relates to a technique for preventing unauthorized use of an IC card.

  An IC card having a memory for storing data and an IC chip having an arithmetic function is also mounted, and an IC card, also referred to as a smart card, is used in systems with high security requirements such as the financial field and the public field.

  When an IC card is used in a system with high security requirements, confidential data is stored in a memory (for example, EEPROM) of an IC chip mounted on the IC card, and access to the confidential data is described in Chapter 6 of Non-Patent Document 1. As described in the above, it is protected by an authentication command using a password and, when further security is desired, an authentication command using biometric data.

  When protecting access to confidential data by an authentication command using fingerprint data as biometric data, a sensor for reading fingerprint data is a terminal device (for example, ATM of a bank) as in the invention disclosed in Patent Document 1. In some cases, the IC card may be provided with a sensor for reading the fingerprint data, as disclosed in Patent Document 2, in order to keep the fingerprint data itself secret from the terminal device.

Japanese Patent No. 4164732 Japanese Patent Laid-Open No. 2006-134086

IC Card System Usage Promotion Council "JICSAP IC Card Specification V2.0" July 2001

  However, in the conventional technology, in order to increase security, even if the access to the confidential data is protected by the authentication command using the biometric data, the authentication used for the protection of the confidential data during the transaction processing using the IC card. Once the command succeeds, the problem remains that even if the user is not a legitimate user, the subsequent transaction processing can be executed.

  Therefore, the present invention provides an IC card capable of preventing execution of subsequent transaction processing when a user is switched during transaction processing using an IC card, and a computer program mounted on the IC card. With the goal.

  According to a first aspect of the present invention for solving the above-described problem, an authentication sensor for reading user authentication data and an instruction for reading the authentication data are given to the authentication sensor at regular intervals, and the authentication data is sent from the authentication sensor at regular intervals. Authentication data acquisition means for acquiring the authentication data, an authentication means for authenticating at least the authentication data acquired by the authentication data acquisition means after receiving the command when receiving a command from the external device, and the authentication means after receiving the command The IC card is provided with command control means for executing a command only when the authentication result is successful and the authentication result is successful.

  According to the first invention described above, the authentication data acquired by the IC card authentication means is changed for each authentication by the authentication data acquisition means of the IC card acquiring the authentication data at regular intervals. Therefore, if the user is switched during the transaction processing using the IC card, the authentication means of the IC card authenticates the unauthorized authentication data, and the authentication means fails to authenticate the authentication data. Execution of transaction processing can be prevented.

  In the first invention, when the command is received, the authentication data acquisition means waits for the authentication data to be acquired, and the authentication data acquisition means authenticates the authentication data from which the authentication data has been acquired. The command control means authenticates the authentication data every time the authentication data acquisition means acquires the authentication data in order to refer to the authentication result of the authentication means after receiving the command. Thus, there is no problem even if the authentication means is used.

  Furthermore, a second invention for solving the above-described problem is a computer program mounted on an IC card including an authentication sensor for reading user authentication data, and instructs the authentication sensor to read the authentication data for a predetermined time. Authentication data acquisition means for acquiring the authentication data from the authentication sensor at regular intervals, and receiving a command from an external device, and receiving at least the authentication data acquired by the authentication data acquisition means after receiving the command. An authentication means for authenticating and an authentication result of the authentication means after receiving the command, and an IC for causing the IC card to function as a command control means for executing the command only when the authentication result is successful. It is a computer program for cards.

  The second invention relates to an IC card computer program mounted on an IC card.

  As described above, according to the present invention described above, when a user is switched during a transaction process using an IC card, the IC card can be prevented from executing a subsequent transaction process, and mounted on the IC card. A computer program can be provided.

The figure explaining an IC card system. The figure explaining an IC card. The flowchart explaining operation | movement of IC for authentication sensors with which the IC card was equipped. The flowchart explaining operation | movement of IC for IC cards with which the IC card was equipped. The figure explaining the content by which transaction processing is performed between an IC card and a terminal device.

  From this, the embodiments of the present invention will be described to the extent that those skilled in the art of the present invention can understand the contents of the present invention and implement the present invention.

  FIG. 1 is a diagram illustrating an IC card system 1 that uses an IC card 2 in the present embodiment. The IC card system 1 illustrated in FIG. 1 includes an IC card 2 having an authentication sensor 22 (for example, a fingerprint sensor) that reads authentication data (for example, fingerprint data), and a terminal device 3 that cooperates with the IC card 2. It is configured.

  When a financial transaction is assumed as a system using the IC card 2, transaction processing (for example, withdrawal of a deposit, etc.) is performed by a sequence using several commands in the transaction processing related to finance, and the transaction is usually performed. Since all transaction processing can be performed by performing user authentication once in the process, even if the person who operates the terminal device 3 (for example, ATM) is changed during the transaction processing after successful user authentication, the transaction is performed. There was a problem that processing could continue.

  Therefore, in the IC card system 1 illustrated in FIG. 1, the operation of authenticating the authentication data read by the authentication sensor 22 while the IC card 2 and the terminal device 3 cooperate to execute transaction processing is performed. As a condition for executing the command transmitted from the terminal device 3 continuously, the authentication data read by the authentication sensor 22 after the command is received is successfully authenticated. If is replaced, the subsequent transaction processing cannot be continued.

  From here, the IC card 2 of this embodiment will be described in detail. 2A and 2B are diagrams for explaining the IC card 2. FIG. 2A is an external view of the IC card 2, and FIG. 2B is a block diagram of the IC card 2. FIG.

  As shown in FIG. 2A, the IC card 2 used in this embodiment is a one-chip in which an IC module 2a on which an IC card IC 20 is mounted and an authentication sensor 22 that functions as an authentication sensor are mounted. A type of authentication sensor IC 21 (for example, a one-chip IC on which a fingerprint sensor is mounted) is incorporated, and the contact surface of the IC module 2 a and the sensor surface of the authentication sensor 22 are exposed on the surface of the IC card 2. The power of the IC card IC 20 and the authentication sensor IC 21 is supplied from the terminal device 3 to these ICs via the contact surface of the IC module 2a.

  In the present invention, while the terminal device 3 and the IC card 2 cooperate to execute the transaction process, the authentication sensor 22 is used to read the authentication data at regular intervals. A sensor that can read the authentication data without any special operation by the user is suitable. For example, when the authentication data is fingerprint data, an area sensor type that can read the fingerprint data simply by pressing the user The fingerprint sensor is suitable for the authentication sensor 22.

  Furthermore, data other than fingerprint data can be used as authentication data. For example, an electronic seal of an electronic stamp can be used as authentication data. When the electronic seal stamp of the electronic stamp is used as authentication data, a sensor that reads the electronic seal stamp of the electronic stamp may be provided in the IC card as an authentication sensor.

  As shown in FIG. 2B, the IC card IC 20 includes a CPU 20a as a central processing circuit, a RAM 20b as a volatile memory, a ROM 20c as a nonvolatile memory, and an electrically rewritable nonvolatile memory. Equipped with a certain EEPROM 20d, I / O 20e that is an interface with URAT that conforms to the IC card standard, GPIO (General Purpose Input / Output) 20f that is a general-purpose interface, and the I / O 20e communicates with the terminal device 3. The GPIO 20f is used for communication with the authentication sensor IC 21.

  A computer program for causing the CPU 20a of the IC card IC 20 to execute a specific process is mounted on the ROM 20c and the EEPROM 20d of the IC card IC 20, and in this embodiment, the OS (OS: OS: When an operating system is implemented and a command is received from the terminal device 3 by a computer program included in the OS, the authentication unit 200 that authenticates at least the authentication data read by the authentication sensor 22 after receiving the command and the command are received. The IC card IC 20 is provided with command control means 201 that executes a command only when the authentication result of the subsequent authentication data is referred to and the authentication result is successful.

  Note that a plurality of commands used in transaction processing with the terminal device 3 are mounted in the EEPROM 20d of the IC card IC 20, and data necessary for authentication data authentication is also stored in the EEPROM 20d.

  As shown in FIG. 2B, the authentication sensor IC 21 to which the authentication sensor 22 is connected includes a CPU 21a as a central processing circuit, a RAM 21b as a volatile memory, a ROM 21c as a nonvolatile memory, and a timer circuit 21e. The GPIO 21 s is used for communication with the IC card IC 20.

  A computer program for causing the CPU 21a of the authentication sensor IC 21 to execute a specific process is installed in the ROM 21c of the authentication sensor IC 21. In this embodiment, the computer program instructs the authentication sensor 22 to read authentication data. The authentication data acquisition means 210 is provided in the authentication sensor IC 21 to be output at regular intervals and to acquire authentication data from the authentication sensor 22 at regular intervals. In this embodiment, the authentication data read by the authentication sensor IC 21 is an IC card. To the IC 20 for use.

  FIG. 3 is a flowchart for explaining the operation of the authentication sensor IC 21 provided in the IC card 2.

  When the IC card 2 is attached to the terminal device 3, power is supplied from the terminal device 3 to the IC card 2, and the authentication sensor IC 21 built in the IC card 2 is activated (S1). When the authentication sensor IC 21 built in the IC card 2 is activated, the authentication data acquisition means 210 of the authentication sensor IC 21 sets a predetermined time for reading the authentication data in the timer circuit 21e, and then activates the timer circuit 21e (S2). ) When the timer circuit 21e measures a certain time, the authentication sensor 22 is instructed to read the authentication data, the authentication data is acquired from the authentication sensor 22 (S3), and the authentication data acquired from the authentication sensor 22 is IC The operation of transmitting to the card IC 20 (S4) is repeated until the power to the IC card 2 is cut off (S5).

  As described above, the authentication sensor IC 21 provided in the IC card 2 is not linked to transaction processing executed between the terminal device 3 and the IC card 2, and when the IC card 2 is attached to the terminal device 3, Until the power to the card 2 is cut off, the authentication data read by the authentication sensor 22 is transmitted to the IC card IC 20 at regular intervals. Therefore, the authentication data to be authenticated by the authentication means 200 of the IC card 2 is It will change for every authentication.

  FIG. 4 is a flowchart for explaining the operation of the IC card IC 20 provided in the IC card 2. When the IC card 2 is attached to the terminal device 3, power is supplied from the terminal device 3 to the IC card 2, and the IC card IC 20 built in the IC card 2 together with the authentication sensor IC 2 built in the IC card 2. Is activated (S10).

  When the IC card IC 20 incorporated in the IC card 2 is activated, after executing an initial process of transmitting ATR (Answer to Reset) (S11), the IC card IC 20 enters a command reception waiting state (S12).

  When a command is received from the terminal device 3 in the command reception waiting state, the authentication means 200 provided in the IC card IC 20 is activated, and the authentication means 200 enters a state of waiting for reception of authentication data from the authentication sensor IC 21 ( S13) When the authentication data is transmitted from the authentication sensor IC 21, the authentication data transmitted from the authentication sensor IC 21 is authenticated (S14).

  When the authentication means 200 provided in the IC card IC 20 authenticates the authentication data, the command control means 201 of the IC card IC 20 operates to branch the process according to the authentication data authentication result (S15). If the authentication data is successfully authenticated, the command received from the terminal device 3 is executed, and after the response indicating the command execution result is transmitted to the terminal device 3 (S16), the IC card IC 20 receives the command. Return to the waiting state.

  If the authentication unit 200 fails to authenticate the authentication data, the command control unit 201 of the IC card IC 20 does not execute the command received from the terminal device 3, and indicates that authentication data authentication has failed. A failure response is transmitted to the terminal device 3 (S17), and the IC card IC 20 returns to a command reception waiting state.

  When the authentication data acquisition unit 210 of the authentication sensor IC 21 acquires the authentication data at regular time intervals, the authentication data authenticated by the authentication unit 200 of the IC card IC 20 changes for each authentication. Therefore, if the user is switched during the transaction processing using the IC card 2, the authentication means 200 authenticates the unauthorized authentication data, and the authentication means 200 fails to authenticate the authentication data. Execution of transaction processing can be prevented.

  4 is repeatedly executed until the power to the IC card 2 is cut off, and the power to the IC card 2 is cut off (S18) as shown in FIG. The flow ends.

  In the present embodiment, the authentication means 200 of the IC card IC 20 authenticates the authentication data received first after receiving the command from the terminal device 3, for example, from the authentication sensor IC 21 in a command reception waiting state. The received authentication data is not authenticated.

  Next, the terminal device 3 that cooperates with the IC card 2 will be described. The terminal device 3 that cooperates with the IC card 2 can use an existing device that cooperates with the IC card 2, and the terminal device 3 (for example, ATM of a bank) that requires higher security is suitable.

  FIG. 5 is a diagram for explaining the contents of transaction processing executed between the IC card 2 and the terminal device 3. When the IC card 2 is mounted on the terminal device 3 and the IC card 2 operates, the authentication data acquisition means 210 of the IC 21 for the authentication sensor of the IC card 2 operates as described above, and the authentication sensor 22 outputs the authentication data. The operation of transmitting the read authentication data to the IC card IC 20 is performed at regular intervals (S20a to S20e).

  When the IC card 2 is inserted into the terminal device 3 and the IC card 2 is activated, the IC card IC 20 of the IC card 2 enters a state of waiting for a command from the terminal device 3 (S30). Then, when the command 1 is transmitted from the terminal device 3 (S31), the authentication means 200 provided in the IC card IC 20 is activated, and the authentication data reception waiting state is obtained (S32). When the data is transmitted (S0b), the authentication means 200 provided in the IC card IC 20 authenticates the received authentication data (S33).

  In FIG. 5, in section A, the authentication sensor 22 of the authentication sensor IC 21 reads the normal authentication data, so that the authentication means 200 provided in the IC card IC 20 authenticates the authentication data received from the authentication sensor IC 21. If the authentication data received from the authentication sensor IC 21 is successfully authenticated, the authentication result is transferred to the command control unit 201, and the command control unit 201 executes the command 1 received from the terminal device 3 (S34). 1 is transmitted to the terminal device 3 (S35).

  After the response indicating the execution result of the command 1 is transmitted to the terminal device 3, the IC card IC 20 enters a command reception waiting state (S36). Then, when the command 2 is transmitted from the terminal device 3 (S37), the authentication means 200 provided in the IC card IC 20 is activated and enters a state of waiting for reception of authentication data (S38), and the authentication sensor IC 21 authenticates. When the data is transmitted (S20e), the authentication means 200 provided in the IC card IC 20 authenticates the received authentication data (S39).

  In FIG. 5, in section B, the authentication sensor of the authentication sensor IC 21 reads unauthorized authentication data, so the authentication means 200 provided in the IC card IC 20 fails to authenticate the authentication data received from the authentication sensor IC 21. If authentication of the authentication data received from the authentication sensor IC 21 fails, the authentication result is transferred to the command control means 201, and the command control means 201 executes the command 2 received from the terminal device 3 without executing the command 2 An authentication error response indicating that the authentication has failed is transmitted to the terminal device 3 (S40).

  As described with reference to FIG. 5, according to the present embodiment, when a person who operates the terminal device 3 is changed in the middle, the authentication sensor 22 reads unauthorized authentication data. After the person who operates 3 is changed in the middle, the command transmitted from the terminal device 3 cannot be executed, and even if the person is changed in the middle of the transaction process, the unauthorized use of the IC card 2 can be prevented.

  The present invention is not limited to the embodiments described so far, and various modifications and changes can be made.

  For example, in the above-described embodiment, the IC card 2 is illustrated as a contact IC type card that performs data communication with a terminal device in a contact type. A contact IC card or a dual interface IC card having two communication functions of contact data communication and non-contact data communication can also be used.

  In the above-described embodiment, the IC card IC 20 has an authentication means for authenticating the authentication data. However, the authentication sensor IC 21 is provided with an authentication means for authenticating the authentication data, and the authentication data acquisition means is the authentication data. It is also possible to perform an authentication unit so as to authenticate the authentication data every time.

  In this case, the authentication means provided in the authentication sensor IC 21 authenticates the authentication data every time the authentication sensor 22 provided in the authentication sensor IC 21 acquires the authentication data, and the authentication result of the authentication data is displayed as the IC card IC 20. Send to.

  Then, the command control means of the IC card IC 20 controls the execution of the command received from the terminal device according to the authentication result of the authentication data first transmitted from the authentication sensor IC 21 after receiving the command from the terminal device 3. .

1 IC card system 2 IC card 20 IC card IC
200 Authentication Unit 201 Command Control Unit 21 Authentication Sensor IC
210 Authentication data acquisition means 22 Authentication sensor 3 Terminal device

Claims (4)

  An authentication sensor that reads user authentication data, an authentication data acquisition unit that issues an instruction to read the authentication data to the authentication sensor at regular intervals, and acquires the authentication data from the authentication sensor at regular intervals, and an external device When receiving the command, the authentication means obtains at least the authentication data obtained by the authentication data obtaining means after receiving the command, and refers to the authentication result of the authentication means after receiving the command. An IC card comprising command control means for executing a command only when it is successful.   When the authentication means receives a command from an external device, the authentication means waits for the authentication data acquisition means to acquire the authentication data, and thereafter authenticates the authentication data acquired by the authentication data acquisition means. The IC card according to claim 1, wherein:   2. The IC according to claim 1, wherein the authentication unit is a unit that authenticates the authentication data acquired by the authentication data acquisition unit each time the authentication data acquisition unit acquires the authentication data. card. A computer program mounted on an IC card provided with an authentication sensor for reading user authentication data, which issues an instruction for reading the authentication data to the authentication sensor at regular intervals, and sends the authentication data from the authentication sensor for a certain period of time. Authentication data acquisition means to be acquired every time, and when receiving a command from an external device, an authentication means for authenticating at least the authentication data acquired by the authentication data acquisition means after receiving the command, and the authentication after receiving the command An IC card computer program for causing an IC card to function as command control means for executing a command only when the authentication result of the means is referred to and the authentication result is successful.

Images