JP6289850B2 - Information processing system and information processing method - Google Patents

Description

The present invention relates to an information processing system Contact and information processing method for transmitting and receiving information to and from the information processing apparatus such as host device and the card reader or a barcode reader.

Usually, an information processing device (electronic device device) such as a card reader is connected to a host device via a communication line, and is configured to execute processing in accordance with a command from the host device.
As described above, various communication methods such as the RS232C method, the parallel port method, and the USB (Universal Serial Bus) connection method are generally adopted to establish communication between the host device and the information processing device (lower device). Has been.

An information processing apparatus such as a card reader or a barcode reader is known that has a keyboard function (sometimes referred to as “keyboard interface”) (see, for example, Patent Document 1).
That is, there is a technique in which a scan code (Usage) is sent in accordance with the P / S2 standard or USB standard in the same manner as a keyboard, and the read data is displayed by an application on the host device side.

In general, each key of a keyboard has a unique ID called a scan code.
The key code is assigned to the position of the key switch, not the characters printed on the key top surface.
For example, even when a key top key printed with “A” is pressed, the keyboard does not issue the code “A”.
When the keyboard is pressed or released, the keyboard transmits a key code to a keyboard controller such as a CPU.
Keyboards have different keyboard layouts depending on the country and keyboard type, and there are several models of keyboards, but if the number of switches and shape are the same, the same position is used even if the printed contents of the key tops are different. The key switch has the same scan code.
The keyboard controller assembles key inputs from scan codes received from the keyboard and creates key codes.
Then, according to the set country code and keyboard type, it is determined which character (virtual key code) is converted to which scan code (where key) is received.
Therefore, it is possible to set the desired keyboard by switching the conversion table.

In the device described in Patent Document 1, a keyboard and a barcode reader are connected to a computer having a keyboard controller.
When a predetermined key on the keyboard is pressed, the keyboard controller notifies the host device side of the pressed position as a scan code signal.
On the host device side, the received scan code is notified to the operating system (OS) as a virtual key code.

  The virtual key code is defined by a code unique to the OS, and is a key code that is commonly used in the OS. The OS notifies the received virtual key code to each activated application (such as document creation software), and the application that receives this outputs a character.

  The keyboard controller outputs the data read by the barcode reader to the host device as keyboard data. In the host device, the same processing as the data input from the keyboard is performed.

The above is the basic configuration and function of the keyboard interface in the P / S2 standard on the OS. In addition to this, there is a keyboard interface in the USB standard.
This USB standard keyboard is implemented as a human interface device (HID) class.
In this case, although there is “Usage” corresponding to the scan code, it is basically the same as the keyboard interface in the P / S2 standard described above.

JP-A-7-36594 JP 2006-268423 A

However, in the keyboard interface described above, the keyboard layout is mainly 101/104 English keyboard in the United States (US), 102/105 Multi Language keyboard in Europe, and 106/109 Japanese keyboard in Japan. is there.
As described above, since the characters printed on the keys are different, the scan code (or Usage) does not necessarily match the characters as described above.

On the other hand, in recent years, when information read by a card reader is transmitted to a host device, there is a possibility that information recorded on the card may be read by an illegal act called skimming. .
For this reason, a technique has been proposed in which information is encrypted when information is exchanged between the card reader and the host device (see, for example, Patent Document 2).

However, in the keyboard function (keyboard interface) in the card reader shown in Patent Document 2, as shown in FIGS. 3 and 4 of Patent Document 2, since information is transmitted for each key, encryption processing and decryption are performed for each key. Processing is executed.
Therefore, there is a disadvantage that transmission / reception of information becomes complicated.

  SUMMARY OF THE INVENTION An object of the present invention is to provide an information processing system and an information processing method that are not easily affected by, for example, a keyboard key arrangement corresponding to the language of each country and that can maintain confidentiality of information.

  A first aspect of the present invention is an information processing system that transmits and receives information between a host device and an information processing device, and performs information transmission and reception between the information processing device and the host device. An encryption processing means for encrypting the information, and a common code that is arranged in the host device and is encrypted by the encryption processing means and transmitted in the information processing apparatus is converted into a virtual code. And converting means arranged in the host device and outputting means for outputting information based on the virtual code converted by the converting means.

  As a result, it is difficult to be affected by the keyboard layout corresponding to the language of each country, and the confidentiality of information can be maintained.

Preferably, the host device encrypts information to be transmitted to the information processing device, decrypts the encrypted information received from the information processing device, and outputs the decrypted information to the conversion unit. The information processing device includes encryption processing means, and the information processing device includes second encryption processing means for encrypting information to be transmitted to the host device and decrypting the encrypted information received from the host device.
This makes it possible to maintain high confidentiality of information.

Preferably, the host device includes the conversion unit as a first application and a general-purpose processing unit as a second application that performs a reading process on supplied data, and the first encryption process The means includes an application interface, and can set whether the application interface is for the first application or the second application according to an instruction, and the application interface is for the first application If the application interface is set for the second application, the decrypted information is output to the general-purpose processing means.
Thus, by switching the API, according to the user's convenience, it can be easily performed as a keyboard function or as a general-purpose device such as a card reader.

Preferably, the information processing apparatus is a card reader, and a head that reads data of a card-like medium, and a code that is decoded by the head and decoded demodulated data and expressed in a common language Decoding means for generating ASCII code character string data, and the second encryption processing means encrypts the ASCII code and transmits it to the host device.
As a result, the keyboard function can be realized by using the ASCII code. If the general-purpose second application and the first application for conversion are stored, the API in the encryption processing means is switched, According to the user's convenience, when using as a keyboard function, it can be easily performed as a general-purpose card reader.

  According to a second aspect of the present invention, there is provided an information processing method for transmitting / receiving information between a host device and an information processing device, wherein information is transmitted / received between the information processing device and the host device. An encryption processing step for encrypting the information; a transmission step for encrypting a common code expressed in a common language by the encryption processing step in the information processing device; A conversion step of converting the common code expressed in the common language encrypted and transmitted by the encryption processing means in the information processing apparatus into a virtual code, and information based on the virtual code converted in the conversion step. And an output step for outputting.

  As a result, it is difficult to be affected by the keyboard layout corresponding to the language of each country, and the confidentiality of information can be maintained.

Preferably, as processing of the host device, information to be transmitted to the information processing device is encrypted, encrypted information received from the information processing device is decrypted, and the decrypted information is supplied to the converting step. A second encryption processing step that includes a first encryption processing step, and encrypts information to be transmitted to the host device and decrypts encrypted information received from the host device as the processing of the information processing device including.
This makes it possible to maintain high confidentiality of information.

Preferably, the processing of the host device includes the conversion step as a first application, and a general-purpose processing step as a second application that performs a reading process on the supplied data, and the first encryption According to the instruction, the processing step can set whether the application interface is for the first application or the second application, and the application interface is set for the first application. If so, the decrypted information is supplied to the conversion step, and if the application interface is set for the second application, the decrypted information is supplied to the general-purpose processing step.
Thus, by switching the API, according to the user's convenience, it can be easily performed as a keyboard function or as a general-purpose device such as a card reader.

Preferably, the information processing apparatus is a card reader, which is a code expressed as a common language by reading data of a card-like medium with a head and decoding demodulated demodulated data as processing of the card reader. A decoding step for generating ASCII code character string data, wherein the second encryption processing step encrypts the ASCII code and transmits the encrypted ASCII code to the higher-level device. In the higher-level device, the first encryption The processing step decrypts the encrypted ASCII code and supplies the decrypted ASCII code to a predetermined application.
As a result, the keyboard function can be realized by using the ASCII code. If the general-purpose second application and the first application for conversion are stored, the API in the encryption processing means is switched, According to the user's convenience, when using as a keyboard function, it can be easily performed as a general-purpose card reader.

  According to the present invention, it is difficult to be influenced by the keyboard layout corresponding to the language of each country, and the confidentiality of information can be maintained.

It is a figure showing an outline of an information processing system concerning an embodiment of the present invention. It is a block diagram which shows the outline | summary of the information processing system which concerns on embodiment of this invention. It is a block diagram which shows the example of a structure of the encryption processing middleware part by the high-order apparatus as an encryption processing means which concerns on this embodiment, and the encryption processing part by the card reader side. It is a functional block diagram which shows the structural example of the API switching part in the encryption processing middleware part which concerns on this embodiment. In this embodiment, it is a flowchart for demonstrating the conversion resident application in the case of using as a keyboard function. It is a flowchart for demonstrating the conversion process of the conversion resident application. In this embodiment, it is a flowchart for demonstrating the process of the financial application in the case of making it function as a card reader. It is a figure for demonstrating the general operation | movement outline | summary of the information processing system which concerns on this embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
In the following embodiments, a card reader such as a magnetic card will be described as an example of the information processing apparatus. However, the present invention is not limited to a card reader but can be applied to a barcode reader as an electronic device.

FIG. 1 is a diagram showing an overview of an information processing system according to an embodiment of the present invention.
FIG. 2 is a block diagram showing an outline of the information processing system according to the embodiment of the present invention.

The information processing system 10 includes a host device (host device) 20, a card reader 30 as an information processing device, a keyboard device 40, and an information card (hereinafter simply referred to as a card) 50.
In the present embodiment, a configuration in which the keyboard device 40 is connected is shown, but a configuration in which the keyboard device 40 is not connected is also possible.

In the present embodiment, the host device 20 is configured by a personal computer (PC), an ATM (Automated Teller Machine), a POS (Point of sale system) register terminal, or the like.
A card reader 30 as an information processing device is connected to the host device 20 through a first communication unit 60, and a keyboard device 40 is connected through a second communication unit 70.

  As the first communication unit 60, a communication system using a dedicated line (wired communication line) such as RS232C or USB is applied, and in this embodiment, a USB communication system is applied. Therefore, in the present embodiment, the host device 20 and the card reader 30 are connected by the USB cable 61.

  In the present embodiment, a communication system according to the P / S2 communication standard is applied as the second communication unit 70, and the host device 20 and the keyboard device 40 are connected by a cable 71 to which a P / S2 connector (not shown) is connected. Has been.

  Hereinafter, after describing the outline of the information processing system 10, the specific configuration and function of each unit will be described.

[Outline of Information Processing System 10]
As a card used in financial institutions and the like for realizing cashless and personal authentication, for example, a magnetic card in which magnetic data is recorded in a stripe shape on a plastic substrate, an integrated circuit chip (IC chip) is embedded inside the plastic substrate, There is an IC card (contact IC card) in which an IC terminal is arranged on the surface and an IC card (non-contact IC card) in which an antenna coil is arranged inside.
Information is reproduced or recorded on the card (magnetic card or IC card) 50 by a card reader 30 as an information processing apparatus.

Basically, the card reader 30 receives a command from the host device 20 and converts the command into a format according to a communication protocol with the card 50.
The card reader 30 transmits the command to the card 50 after converting the voltage, the communication speed, and the like. Further, after receiving the response from the card 50, the card reader 30 performs reverse conversion and transmits the response to the higher-level device 20.
Communication between the card reader 30 and the card 50 is generally TTL level, USB communication, or the like.

In the configuration of the information processing system 10 including the card reader 30 shown in the present embodiment, the host device 20 uses a general-purpose application (second application) such as finance and a conversion resident application as conversion means in addition to a character input application. (First application).
That is, in this embodiment, for example, in the case where the card reader 30 provided in the ATM collates the magnetic recording data with the financial database at a financial institution or the like, the financial application is activated and the signal (information ) Process.
On the other hand, when used as a keyboard function (function called the above-described keyboard interface) such as PC login, the conversion resident application is activated to perform signal (information) processing.
The host device 20 has an encryption processing middleware unit as encryption processing and decryption processing means.

In the present embodiment, the card reader 30 demodulates the data read from the card 50, generates the demodulated data as a code expressed in a common language, in this embodiment as a character string of an ASCII code, and generates the generated ASCII code. Encryption is performed using the encryption key, and the encrypted data is transmitted to the host device 20 through the first communication unit 60.
The host device 20 decrypts and decrypts the encrypted data transmitted by the card reader 30 in the encryption processing middleware unit as the encryption processing and decryption processing means through the USB controller, the USB driver, which is a USB communication system, and the OS. Data such as ASCII code is supplied to the conversion resident application or general-purpose application according to the setting state of the application interface.
The conversion resident application as conversion means converts the ASCII code into a virtual key code and supplies it to the character input application through the OS.
The character input application outputs characters based on the converted virtual key code on the display screen.
Thereby, it is delivered as an event message to an application such as a text editor.

When a predetermined key on the keyboard of the keyboard device 40 is pressed, the keyboard controller notifies the host device 20 side of the key pressed position as a scan code signal through the second communication unit 70.
On the host device side 20, the received scan code is supplied to the character input application as a virtual key code through the keyboard controller, keyboard driver, and OS. The character input application outputs characters based on the converted virtual key code on the display screen.

  As described above, in the present embodiment, the data of the card 50 can be output as characters as in the case where characters are input from the keyboard while maintaining the confidentiality of the magnetic data.

  Next, specific configurations and functions of the host device (host device) 20 and the card reader (information processing device) 30 of the information processing system 10 having the above configuration will be described.

[Specific Configuration and Function of Host Device (Host Device) 20]
A specific configuration and function of the host device (host device) 20 according to the present embodiment will be described.
As described above, the host device 20 basically performs communication control with the card reader 30 through the USB communication system of the first communication unit 60 and receives a response corresponding to command transmission. The information from the card reader 30 is acquired by exchanging various information such as
Further, in this example, the host device 20 controls communication with the keyboard device 40 via the P / S2 communication system that is the second communication unit 70, and corresponds to command transmission. Various types of information, such as receiving a response (response), is exchanged, and a scan code from the keyboard device 40 is received.

FIG. 2 conceptually illustrates a configuration example of the host device 20 and the information processing device, ie, the card reader 30 and the keyboard device 40 according to the present embodiment.
The host device 20 in FIG. 2 includes a hardware system 210 and a software system 220.

[Configuration example of hardware system 210]
2 basically includes a CPU 211, a ROM 212, a RAM 213, a storage unit 214 such as an HDD, a USB controller 215 constituting the first communication unit 60, and a second communication unit 70, which are processing devices. A keyboard controller 216 and a display 217 for displaying input characters and the like.
The CPU 211, ROM 212, RAM 213, storage unit 214, controller 215, keyboard controller 216, and display 217 are connected by a bus (BUS) 218.

  The USB controller 215 is connected to the USB controller of the card reader 30 via the USB cable 61, performs communication control with the card reader 30 through the USB communication system of the first communication unit 60, and transmits a command. Information from the card reader 30 is acquired by exchanging various information such as receiving a corresponding response.

The USB communication system connects a host device 20 as a host and a card reader 30 as a device by serial communication. For example, a plug-and-play function (automatic connection recognition function), a hot plug function (with the power on) And the like, and a function for supplying power from the host to the device.
In general, the USB cable 61 used for USB communication includes a total of four lines composed of a 5V power line (V-BUS line), a GND (ground) line, and D + and D- signal lines for data transfer. Has wiring.
On the device side such as the card reader 30, the V-BUS signal transmitted through the V-BUS line is constantly monitored. In other words, it is possible to detect abnormality in USB communication by constantly monitoring the transition state of the V-BUS signal. For example, in a system in which the host device on the V-BUS line is not intentionally brought down, if the USB cable is disconnected for some reason during USB communication, the V-BUS signal transitions from on to off, As a result, the device recognizes that the physical connection of the USB communication is broken, and the abnormality of the USB communication can be detected.

  The keyboard controller 216 is connected to the keyboard device 40 as an input device via the P / S2 communication cable 71, and communicates with the keyboard device 40 via the P / S2 communication system that is the second communication unit 70. The communication control is performed, and various information such as reception of a response corresponding to the transmission of the command is exchanged, and the scan code from the keyboard device 40 is received.

In the host device 20, the CPU 211 performs overall control.
In the host device 20, programs such as an OS (operating system), a driver, middleware MW, and an application stored in the storage unit 214 form a part of the software system, and on the RAM 213 as software of the CPU 211 that is a so-called computer at the time of execution Expanded to
The CPU 211 starts various programs by accessing the RAM 213.

[Configuration and Function of Software System 220]
The software system 220 includes a driver unit (kernel mode unit) 230, an OS unit 240, and a middleware and application unit (user mode unit) 250.

  The driver unit 230 includes, for example, a USB driver 231 and a keyboard driver 232 that operate in the kernel mode, and has a function corresponding to the OS unit 240.

The USB driver 231 controls the USB controller 215, which is hardware related to the USB communication system, and provides an abstract interface for application software.
The USB driver 231 has a function of communicating with the card reader 30 via the USB communication system. When a routine in the driver is called from a program, the USB driver 231 issues a command and data is returned from the card reader 30. When it comes, the routine in the original read program is read out.

The keyboard driver 232 controls the keyboard controller 216, which is hardware related to the P / S2 communication system, and provides an abstract interface for application software.
The keyboard driver 232 has a function of communicating with the keyboard device 40 via the P / S2 communication system. When a routine in the driver is called from a program, the keyboard driver 232 issues a command, and data is transmitted from the keyboard device 40. When the data is sent back, the routine in the original read program is read.

The OS unit 240 provides the application software with an interface abstracted by the USB driver 231 and the keyboard driver 232.
In the OS 241, a part of the most central function such as direct management and operation of hardware is sometimes called a kernel. In this case, the part other than the kernel is called user land.
In this embodiment, the driver unit 230 is a kernel region, and the middleware and application unit (user mode unit) 250 is formed as a user land region.

The middleware and application unit (user mode unit) 250 includes an encryption processing middleware unit 251 as a first encryption processing unit, a conversion resident application 252 as a first application, and a general-purpose application such as finance as a second application. 253 and a character input application 254.
The general-purpose application 253 functions as a general-purpose processing unit.

  The encryption processing middleware unit 251 functions as a first encryption processing unit, transmits / receives data for transmitting / receiving data to / from the card reader 30 through the USB communication system constituting the first communication unit 60, and encryption. And has a decryption processing function.

In the present embodiment, the card reader 30 as the information processing device or the host device 20 as the host computer causes a problem even when secret information leaks during the process of exchanging data with the host device 20 or the card reader 30. Therefore, encrypted data is used as the exchanged data.
As the encryption method, DES (Data Encryption Standard) is most frequently used at present. In DES, the card reader 30 side and the host device 20 side use the same key for data encryption, and the card reader 30 or host device 20 on the data transmission side encrypts the data with the key and transmits the data. The host device 20 or the card reader 30 on the receiving side decrypts with the same key and extracts the data.

In this embodiment, the encryption key KY used for encryption is encrypted by the encryption processing middleware unit 251 and transmitted to the card reader 30 through the USB communication system.
On the card reader 30 side, the received encrypted encryption key KY is decrypted, the data read from the card 50 is encrypted using the decrypted encryption key, and transmitted to the host device 20 through the USB communication system.

  In addition, the cryptographic processing middleware unit 251 transmits a status notification command in order to confirm whether or not the card 50 has been swiped on the card reader 30 side.

FIG. 3 is a block diagram showing a configuration example of an encryption processing middleware unit on the host device side and an encryption processing unit on the card reader side as encryption processing means according to the present embodiment.
The encryption processing middleware unit 251 in FIG. 3 includes an encryption unit 2511 and a decryption unit 2512 as the encryption and decryption function units.
The encryption unit 2511 encrypts the encryption key KY used for encryption and transmits it to the card reader 30 via the USB driver 231 and the USB controller 215.
The decryption unit 2512 decrypts the magnetic data generated as ASCII character string data encrypted on the card reader 30 side.

In the present embodiment, the encryption processing middleware unit 251 sends an encryption key for encryption to the card reader 30, and the card reader 30 uses this encryption key to encrypt magnetic data generated as a character string of the ASCII code. Turn into.
The cryptographic processing middleware unit 251 receives the encrypted data and decrypts it into an ASCII character string.

In the configuration of the card reader system in the middleware and application unit 250 shown in this embodiment, as shown in FIG. 2, a general-purpose application (financial application as an example) 253 as a second application and a conversion resident as a first application An application 252 is provided.
The cryptographic processing middleware unit 251 activates the financial application 253 to check the signal (information) when, for example, a financial institution or the like collates the magnetic recording data with the financial database in a card reader provided in the ATM. Let the process do.
On the other hand, the cryptographic processing middleware unit 251 activates the conversion resident application 252 to perform signal (information) processing when used as a keyboard function (a function called the keyboard interface described above) such as PC login.

A more specific use example will be described.
The financial application 253 is activated by a Windows (registered trademark) OS installed in the ATM terminal.
When the ATM power switch is turned on, BIOS and OS are started in this order. It is common to register as a “start-up” program in Windows (registered trademark) so that the financial application 253 is automatically started after the OS is started.
By doing this, the bank clerk does not have to go to start up the financial application 253, and it is activated up to the standby screen (customer standby screen) of the financial application 253 just by turning on the ATM.

On the other hand, the keyboard function or the like is not used in ATM.
Used for POS terminal and PC login.
In this case, the conversion resident application 252 is activated as a “service” program in Windows (registered trademark).
Specifically, the OS 241 is set in advance so that the “service” is valid, and the conversion resident application 252 is started simultaneously with the OS startup.
As a result, as with other keyboards, data can be notified to the OS 241 without any operation by the user.

In order to realize the above-described operation, in this embodiment, the cryptographic processing middleware unit 251 has a function of switching an API (Application Programming Interface) as an API for keyboard function or an API using a general-purpose card reader.
In this embodiment, it respond | corresponds by switching beforehand by a user's request | requirement.

  FIG. 4 is a functional block diagram illustrating a configuration example of the API switching unit in the cryptographic processing middleware unit according to the present embodiment.

The cryptographic processing middleware unit 251 of FIG. 4 includes a switching control unit 2513 and an API 2514.
The switching control unit 2513 receives the instruction signal SI according to the user's request, and controls the API 2514 to be switched as a keyboard function API or a general-purpose card reader API by a signal S2513.

That is, the cryptographic processing middleware unit 251 can set whether the API is used for the conversion resident application that is the first application or the general application that is the second application.
When the API is set for the first application, the cryptographic processing middleware unit 251 outputs the decrypted information to the conversion resident application 252 and when the API is set for the second application. Outputs the decrypted information to the general-purpose application 253.

The conversion resident application 252 as conversion means converts the ASCII code by the cryptographic processing middleware unit 251 into a virtual key code and supplies it to the character input application 254 through the OS 241.
The character input application 254 outputs a character based on the converted virtual key code on the screen of the display 217.

Here, the operation when used as a keyboard function will be described with reference to FIGS. 5 and 6, focusing on the execution process of the conversion resident application 252.
FIG. 5 is a flowchart for explaining the process of the conversion resident application when used as a keyboard function in the present embodiment.
Figure 6 is a flowchart for explaining a conversion process of converting resident applications.

(When used as a keyboard function)
The conversion resident application 252 starts immediately after the OS is started.
As shown in FIG. 5, the process of the conversion resident application 252 is first linked to the cryptographic processing middleware unit 251 (step ST1).
Thereafter, Read (magnetic data reading API) implemented in the middleware is executed, and the process waits until a return value is returned (step ST2).
This return value is the timing at which the card 50 is swiped and the magnetic data is acquired, and the magnetic data is returned as a character string of ASCII code.
The conversion resident application 252 confirms the read result (step ST3), and if successful, stores it in the buffer as an ASCII code indicating the read track information (JISII rack data, ISO1 track data, ISO2 track data). Next, the magnetic data received is stored as an ASCII code (step ST5). If unsuccessful, the error information is created as a character string of ASCII code (step ST4) and stored in the buffer (step ST5).
Thereafter, the conversion resident application 252 extracts the ASCII code for each character from the stored buffer, converts it into a virtual key code, and notifies (transmits) each application as an event (step ST6).

A conversion process for converting the ASCII code into a virtual key code will be described with reference to FIG.
The conversion resident application 252 first extracts the first character from the ASCII data storage buffer and deletes the character extracted from the buffer (step ST61).
Here, it is determined whether or not there is an ASCII character (step ST62), and if there is, a virtual key code and a shift state are obtained from this ASCII code (step ST63).
For example, the capital letter “A” is output to the screen by pressing the virtual key code “A” while pressing the shift key.
Also, for example, to output the “&” character, there is a difference that the shift key and virtual key code “7” are pressed on the 101/104 English keyboard, and the shift key and virtual key code “6” are pressed on the 106/109 Japanese keyboard. .
The specific method of conversion inquires of the OS 241 about which virtual key code needs to be pressed and what shift needs to be pressed from the designated ASCII code as described above (step ST64).
By making an inquiry to the OS 241, the optimal virtual key code and the shift state can be acquired by the keyboard language set in the OS 241 now.

If the shift state can be acquired, first, if necessary, “Shift” of the virtual key code is transmitted as a Key Down event (step ST65).
Thereafter, the acquired virtual key code is transmitted as a Key Down event (step ST66).
As the next step, “Shift” is transmitted as the Key Up event, and the virtual key code is transmitted as the Key Up event (Step ST67).
If the shift is unnecessary (step ST68), the “Shift” Key Down or Key UP event is not transmitted.
If a shift is necessary (step ST68), "Shift" is transmitted as a Key Up event (step ST69), the process returns to step ST61, and this ASCII character conversion and event transmission process is repeated until the buffer becomes empty. finish.

  The event transmission mentioned here actually requests the OS 241 to transmit the event, and the requested OS notifies each application of this event.

Next, the operation in the case of functioning as a card reader will be described with reference to FIG. 7, focusing on the execution processing of the financial (general purpose) application 253.
FIG. 7 is a flowchart for explaining the processing of a financial application when functioning as a card reader in the present embodiment.

(When functioning as a card reader)
In this embodiment, an example of use in the financial application 253 when used in a financial institution (installed in an ATM) is shown in FIG.
As in FIG. 5, first, the encryption processing middleware unit 251 is linked (step ST21).
Thereafter, Read (magnetic data reading API) implemented in the cryptographic processing middleware unit 251 is executed, and the process waits until a return value is returned (step ST22).
Thereafter, the received ASCII data character string is collated with the financial database (step ST23), and the magnetic data reading process is terminated.

When a predetermined key on the keyboard of the keyboard device 40 is pressed, the keyboard controller notifies the host device 20 side of the key pressed position through the second communication unit 70 as a scan code signal.
On the host device side 20, the received scan code is supplied to the character input application 254 as a virtual key code through the keyboard controller 216, the keyboard driver 232, and further the OS 241.
The character input application 254 outputs a character based on the converted virtual key code on the screen of the display 217.

Heretofore, the configuration and function of the host device 20 have been specifically described.
Next, the configuration and function of the card reader 30 will be described.

[Configuration and Function of Card Reader 30]
The card reader 30 has a communication function with the host device 20 and a communication function with the card 50. As described above, the card reader 30 performs main (normal) communication with the host device 20 in accordance with the USB communication standard.

  FIG. 2 conceptually shows a configuration example of the card reader 30, the keyboard device 40, and the host device that are information processing devices according to the present embodiment.

As a basic hardware configuration, the card reader 30 functions as a CPU 31 that integrally controls the entire card reader 30, a ROM 32 that stores an operation program, initial values, parameters, and the like of the card reader 30, and a working area of the CPU 31. The RAM 33 is provided.
The card reader 30 includes a magnetic head 310, a decoding unit 320, an encryption processing unit 330 as a second encryption processing unit, and a USB controller 340 constituting a USB communication system as main components.

The magnetic head 310 reads, for example, magnetic data recorded on the magnetic stripe mp of the swipe card 50 by an F2F modulation method or the like as an analog signal.
The magnetic data read by the magnetic head 310 is amplified by an amplifier (not shown), digitized through an analog / digital converter or the like, demodulated, and supplied to the decoding unit 320.

  The decoding unit 320 is configured as a part of the firmware FW, decodes the digitized demodulated data into various formats, and generates each track as character string data of an ASCII code that is an example of a code expressed in a common language. And output to the cryptographic processing unit 330.

  The cryptographic processing unit 330 functions as a second cryptographic processing unit that is a part of the cryptographic processing unit, similarly to the cryptographic processing middleware unit 251 of the host device 20, and constitutes the first communication unit 60. And a data transmission / reception function for transmitting / receiving data to / from the card reader 30 and an encryption / decryption processing function.

  As described above, in this embodiment, when the card reader 30 as the information processing device or the host device 20 as the host computer exchanges data with the host device 20 or the card reader 30, secret information leaks in the process. However, in order not to cause a problem, encrypted data is used as exchanged data.

  In the present embodiment, the encryption processing unit 330 decrypts the encryption key KY used for encryption by decrypting the encryption key KY used for encryption encrypted by the encryption processing middleware unit 251 on the host device 20 side. Data read from the card 50 is encrypted using the key and transmitted to the host device 20 through the USB communication system.

  In addition, the firmware unit FW including the cryptographic processing unit 330 returns, as response data, information indicating that the magnetic data is held in response to the state notification command transmitted from the cryptographic processing middleware unit 251 of the higher-level device 20. Have

FIG. 3 shows a configuration example of an encryption processing middleware unit on the host device side and an encryption processing unit on the card reader side as encryption processing means according to the present embodiment.
The encryption processing unit 330 in FIG. 3 includes a decryption unit 331 and an encryption unit 332 as the encryption and decryption function units.
The decryption unit 331 decrypts the encryption key KY encrypted by the encryption processing middleware unit 251 received through the USB controller 340.
The encryption unit 332 encrypts the magnetic data generated with the ASCII character string using the decrypted encryption key KY, and transmits the encrypted data to the host device 20 via the USB controller 340.

  As described above, in this embodiment, the card reader 30 demodulates the data read from the card 50, converts the demodulated data into a code expressed in a common language, in this embodiment, an ASCII code, and converts the converted ASCII code. The encrypted magnetic data is encrypted using the encryption key KY, and the encrypted magnetic data is transmitted to the host device 20 through the first communication unit 60.

[Configuration of Keyboard Device 40]
The keyboard device 40 includes a keyboard 410 and a keyboard controller 420.
The keyboard device 40 has different key arrangements depending on the country and the type of the keyboard 410, and there are several models of the keyboard. However, if the number of switches and the shape are the same, the printed contents of the key tops are different. Even key switches in the same position have the same scan code.
Examples of the keyboard 410 include the 101/104 English keyboard and the 106/109 Japanese keyboard as described above.
The keyboard controller 420 assembles key inputs from the scan code received from the keyboard 410 and creates a key code.
Then, according to the set country code and keyboard type, it is determined which character (virtual key code) is converted to which scan code (where key) is received.
Therefore, it is possible to set the desired keyboard by switching the conversion table.

When a predetermined key on the keyboard 410 is pressed, the keyboard device 40 notifies the host device 20 side of the key pressed position by the keyboard controller 420 through the second communication unit 70 as a scan code signal.
In the keyboard device 40, when the host device 20 is activated, the keyboard controller 420 performs initial setting by exchanging commands and responses with the OS of the host device 20. With this process, in the keyboard device 40, when the user presses a key on the keyboard 410, the scan code is transmitted to the host device 20.

[Overall behavior]
Next, an overview of the overall operation of the information processing system configured as described above will be described.
FIG. 8 is a diagram for explaining an overall operation overview of the information processing system according to the present embodiment.
Here, processing between the host device 20 and the card reader as the information processing device will be described with reference to FIG. 8, and then the basic operation of the keyboard device 40 in the P / S2 standard on the OS will be described.

First, when the host device 20 is in an activated state, the user instructs whether to use the keyboard function or the card reader function.
Accordingly, an instruction signal SI corresponding to a user request is input to the switching control unit 2513 in the cryptographic processing middleware unit 251 of the higher-level device 20, and the switching control unit 2513 uses an API 2514 such as Read in response to the signal S 2513. Control is performed so as to switch to an API for keyboard function or an API using a general-purpose card reader. Thereby, the host device 20 is set to the keyboard function or the card reader function (step ST101).

The cryptographic processing middleware unit 251 always sends a status notification command to confirm whether or not the card 50 has been swiped on the card reader 30 side (step ST102).
When the card is swiped (step ST103), the magnetic data is read by the magnetic head 310 (step ST104).
The card reader 30 digitizes and demodulates the read magnetic data. The firmware FW of the card reader 30 decodes the digitized demodulated data into various formats, and generates each track as ASCII character string data (ST105).
In response to the status notification command transmitted from the cryptographic processing middleware unit 251, the card reader 30 returns information indicating that the magnetic data is held as response data to the host device 20 (step ST106).

The host device 20 encrypts the encryption key KY for encryption and transmits it to the card reader 30 assuming that the card reader holds the magnetic data (step ST107).
The card reader 30 decrypts the encrypted encryption key, encrypts it using the decrypted encryption key, and transmits this encrypted data to the host device 20 through the first communication unit 60 (step ST108).

The host device 20 decrypts the encrypted data transmitted from the card reader 30 by the encryption processing middleware unit 251 using the encryption key (step ST109).
Here, when the function set in step ST101 is a keyboard function (step ST110), the conversion resident application as the conversion means converts the ASCII code into a virtual key code (step ST111), and the character through the OS. Supply to the input application 254.
Character input application 254 outputs a character based on the converted virtual key code on the screen of display 217 (step ST112).

  If the function set in step ST101 is the card reader function (step ST110), the ASCII data character string received by the general-purpose application 253 is checked against the financial database, and the magnetic data reading process is terminated (step ST10). ST113).

Finally, the basic operation of the keyboard device 40 in the P / S2 standard on the OS will be described.
When a predetermined key on the keyboard 410 is pressed, the keyboard device 40 notifies the host device 20 side of the key pressed position by the keyboard controller 420 through the second communication unit 70 as a scan code signal.
On the host device side 20, the received scan code is supplied to the character input application 254 as a virtual key code through the keyboard controller 216, the keyboard driver 232, and further the OS 241. The character input application 254 outputs a character based on the converted virtual key code on the screen of the display 217.
As a result, it can be distributed as an event message to an application such as a text editor.

More specifically, first, when the host device 20 is activated, initialization is performed by exchanging commands and responses with respect to the connected keyboard device 40. This process is mainly performed by the OS of the host device and the keyboard controller 420 built in the keyboard device 40.
Thus, when the user presses a key on the keyboard 410, the scan code is transmitted to the host device 20.
When a key on the keyboard 410 is pressed by the user, it is transmitted to the keyboard controller 420 as an electrical signal.
The keyboard controller 420 notifies the CPU 211 via the keyboard controller 216 of the higher-level device 20 of the location where the key is pressed as a signal as a scan code.
The keyboard driver 232 of the host device 20 notifies the OS 241 of the scan code received by the CPU 211 as a virtual key code.
The virtual key code is defined by a code unique to the OS, and is a key code that is commonly used in the OS. The OS 241 notifies the received virtual key code to each activated application (such as document creation software), and the character input application 254 that receives the virtual key code outputs the character to the display 217 or the like.

[Effect of the embodiment]
In the present embodiment, the information processing system 10 is an information processing system 10 that transmits and receives information between the host device 20 and the information processing device 30, and information processing is performed between the information processing device 30 and the host device 20. Encryption processing units 251 and 330 that encrypt this information when performing transmission / reception, and the higher-level device 20, and are expressed in a common language that is encrypted and transmitted by the encryption processing unit 330 in the information processing device 30. Resident application 252 for conversion that converts the common code (ASCII code) into a virtual key code, and a character as an output unit that is arranged in the host device 20 and outputs information based on the virtual code converted by the resident application 252 for conversion Input application 254.
In the information processing system 10, the higher-level device 20 encrypts information to be transmitted to the card reader 30 that is an information processing device, and first encryption processing means for decrypting the encrypted information received from the card reader 30. The encryption processing middleware unit 251 is included.
The card reader 30 as an information processing device encrypts information to be transmitted to the higher-level device 20 and decrypts encrypted information received from the higher-level device 20 as a second encryption processing unit 330 as a second encryption processing unit. including.
In the host device 20, the cryptographic processing middleware unit 251 can set whether the API (application interface) is for the conversion resident application as the first application or the general application as the second application. It is. When the API is set for the first application, the decrypted information is output to the conversion resident application 252. When the API is set for the second application, the decrypted information is output to the general-purpose application. Output to the application 253.
The card reader 30 serving as an information processing device is a code that expresses each track in a common language by decoding the demodulated data read and demodulated by the head 310 that reads data from the card 50 into various formats. The encryption processing unit 330 encrypts the ASCII code and transmits it to the host device 20.
Correspondingly, in the higher-level device 20, the cryptographic processing middleware unit 251 decrypts the encrypted ASCII code and supplies the decrypted ASCII code to the set application.

Therefore, according to the present embodiment, the following effects can be obtained.
It is possible to provide a card reader that is hardly affected by the keyboard layout corresponding to the language of each country and that can maintain the confidentiality of information.
Further, by switching the API, according to the user's convenience, it can be easily performed as a keyboard function or as a general-purpose device such as a card reader.

In the present embodiment, even a card reader used as a keyboard function can be used as a general-purpose card reader.
In other words, when a general-purpose card reader, which is not conventionally implemented as a keyboard interface, is connected, the code used is different from the scan code and the ASCII code, so the application for processing it is different. So can not be used. Therefore, it is necessary to significantly change the application of the card reader, and in this technology, only be possible when using applications as a keyboard, a data card reader has read, (used as a general-purpose card reader) Financial Database It cannot be used in applications that collate information.
On the other hand, in this embodiment, since the keyboard function is realized using the ASCII code, as shown in FIG. 2, if the general-purpose application 253 and the conversion resident application 252 are stored, the cryptographic processing middleware unit 251 is stored. By switching the API, the user can easily use the keyboard function or the general-purpose card reader according to the user's convenience.

[Other Embodiments]
In the present embodiment, the first communication unit that connects the host device and the information processing device is a USB connection, but the communication form is not limited, such as an RS-232C connection or a LAN.
In addition, although a text editor is shown as an example of an application to be displayed, it can be used even for login screen ID and password input.
In the present embodiment, the swipe type card reader has been described as an example. However, the present invention is not limited to a card transport method such as a dip type or a motor type.
In the present embodiment, the information processing apparatus has been described as a card reader. However, the present invention can also be applied to a barcode scanner or other input devices.

Note that the method described above in detail can be formed as a program according to the above-described procedure and executed by a computer such as a CPU.
Further, such a program can be configured to be accessed by a recording medium such as a semiconductor memory, a magnetic disk, an optical disk, a floppy (registered trademark) disk, or the like, and to execute the program by a computer in which the recording medium is set.

10 ... Information processing system includes 20 ... host device (host device), 210 ... hardware system, 211 ... CPU, 212 ... ROM, 213 ... RAM, 214 ... Storage unit, 215 ... USB controller, 216 ... Keyboard controller, 217 ... Display, 218 ... Bus (BUS),
220 ... Software system, 230 ... Driver part (kernel mode part), 231 ... USB driver, 232 ... Keyboard driver, 240 ... OS part, 241 ... OS, 250 ... Middleware and application section (user mode section), 251... Cryptographic processing middleware section (first encryption processing means), 252... Resident application for conversion (first application), 253. 2nd application), 254 ... character input application, 30 ... card reader, 31 ... CPU, 32 ... ROM, 33 ... RAM, 310 ... magnetic head, 320 ... Decoding unit, 330 ... Encryption processing unit (second encryption processing means), 340 ... USB controller Roller, 40 ... keyboard device, 410 ... keyboard, 420 ... keyboard controller, 50 ... card, 60 ... first communication unit, 70 ... second communication unit.

Claims (4)

An information processing system that transmits and receives information between a host device and an information processing device,
An encryption processing means for encrypting the information when transmitting and receiving information between the information processing apparatus and the host apparatus;
A conversion unit that is arranged in the host device and converts the common code expressed in the common language that is encrypted and transmitted by the encryption processing unit in the information processing device into a virtual code;
Wherein arranged in the upper apparatus, possess and output means for outputting information based on the converted virtual code by said converting means,
The host device is
Including first encryption processing means for encrypting information to be transmitted to the information processing apparatus, decrypting encrypted information received from the information processing apparatus, and outputting the decrypted information to the conversion means,
The information processing apparatus includes:
Second encryption processing means for encrypting information to be transmitted to the host device and decrypting encrypted information received from the host device;
The information processing apparatus is a card reader,
A head for reading data on a card-like medium;
Decoding means that decodes demodulated data that is read and demodulated by the head, and generates character string data of an ASCII code that is a code expressed in a common language,
The second encryption processing means includes:
Encrypt the ASCII code and send it to the host device;
The conversion means of the host device is
An information processing system for converting the encrypted ASCII code output from the card reader into a virtual code . The host device is
The converting means as a first application;
General-purpose processing means as a second application that performs a reading process on the supplied data,
The first encryption processing means includes:
Including an application interface, and according to the instruction, it is possible to set whether the application interface is for the first application or the second application,
If the application interface is set for the first application, the decrypted information is output to the conversion means,
The information processing system according to claim 1, wherein when the application interface is set for a second application, the decrypted information is output to the general-purpose processing unit. An information processing method for transmitting and receiving information between a host device and an information processing device,
An encryption processing step for encrypting the information when transmitting / receiving the information between the information processing device and the host device;
A transmission step of encrypting a common code expressed in a common language by the encryption processing step in the information processing device and transmitting the encrypted code to the host device;
On the host device side, a conversion step of converting a common code expressed in a common language encrypted and transmitted by the encryption processing step in the information processing device into a virtual code;
An output step of outputting information based on the virtual code converted in the conversion step,
As the processing of the host device,
A first encryption processing step that encrypts information to be transmitted to the information processing device, decrypts encrypted information received from the information processing device, and supplies the decrypted information to the conversion step;
As the processing of the information processing apparatus,
Including a second encryption processing step of encrypting information to be transmitted to the host device and decrypting encrypted information received from the host device;
The information processing apparatus is a card reader, and as processing of the card reader,
A decoding step of reading data of the card-like medium with a head, decoding the demodulated demodulated data, and generating as character string data of an ASCII code that is a code expressed in a common language;
The second encryption processing step includes:
Encrypt the ASCII code and send it to the host device;
In the host device,
The first encryption processing step includes:
Decrypting the encrypted ASCII code output from the card reader, and supplying the decrypted ASCII code to the conversion step as a predetermined application;
The converting step includes
An information processing method for converting the ASCII code into a virtual code . As the processing of the host device,
The conversion step as a first application;
A general-purpose processing step as a second application for performing a reading process on the supplied data,
The first encryption processing step includes:
According to the instruction, it is possible to set whether the application interface is for the first application or the second application,
If the application interface is configured for the first application, the decrypted information is supplied to the conversion step;
The information processing method according to claim 3, wherein when the application interface is set for a second application, the decrypted information is supplied to the general-purpose processing step.

Images