JP7669771B2 - Method for updating PIN of IC card with biometric authentication function - Google Patents

Description

The present invention relates to a method for updating a personal identification number (PIN) on an IC card with a biometric authentication function.

When using IC cards such as cash cards, debit cards, and credit cards, identity verification is mainly done using a 4- to 6-digit personal identification number (PIN: Personal Identification Number).

In response to this, technology has been proposed that uses IC cards with the ability to record a user's unique biometric information, such as a fingerprint, to improve the convenience and security of identity verification when using a card (Patent Document 1).

However, the technology in Patent Document 1 requires a dedicated terminal device to communicate with a higher-level card management server when registering biometric information on an IC card and authenticating it, and requires users to go to a specific location, which reduces convenience.

On the other hand, although PINs are very convenient, they have issues with the hassle of remembering the numbers and the risk of the numbers being stolen. In particular, with the number of cards owned by each person increasing in recent years, it is becoming increasingly common for people to forget the PINs they set for each card.

Conventionally, when reconfirming or updating a PIN, the cardholder had to contact the card company, complete identity verification, and then either receive the PIN by mail at a later date, or go through the process of reissuing the card, as shown in Figure 6. As a result, users were unable to make payments using the PIN at stores, etc. until they received the new PIN or reissued card, making it very troublesome for users to update their PIN. Additionally, card companies had to allocate manpower to handle this process at counters and reissue cards, which resulted in significant costs and personnel burdens.

In other words, conventional technology requires the use of a specific device or location to authenticate an IC card, and updating a PIN or reissuing a card takes time and effort, resulting in issues with convenience.

JP 2018-151799 A

The problem that this invention aims to solve is to provide a method for improving convenience in IC cards with biometric authentication functions by utilizing existing authentication procedures to easily and quickly reissue a PIN without requiring any specific device, if the PIN is forgotten.

In order to solve the above problem, one aspect of the present invention is
A method for updating a PIN for an IC card with a biometric authentication function, comprising the steps of:
In a PIN verification procedure for performing PIN verification on an IC card on which biometric information of an owner is registered at an IC card payment terminal,
The IC card payment terminal includes:
issuing a PIN verification command to the IC card;
A PIN trial count, which is the number of times a PIN can be re-entered, and information on whether biometric authentication has been performed or not, which is recorded in the IC card, are obtained from the IC card;
If the number of PIN attempts remains and biometric authentication has not been performed, the PIN entered by the owner is transmitted to the IC card;
In the IC card,
A determination is made as to whether the input PIN is correct or not, and if it is determined that the PIN is incorrect, biometric information is acquired by a biometric information acquisition means provided in the IC card;
If the biometric information matches the biometric information registered in the IC card, the biometric information is stored as biometric authentication completion information and the process returns to the step of issuing the PIN verification command.
Next, the IC card payment terminal
Acquire the number of PIN attempts, which is the number of times the PIN can be re-entered, and the biometric authentication information recorded on the IC card;
If the number of PIN attempts remains and biometric authentication has been completed, a PIN newly input by the owner in response to a PIN verification command that is issued again is transmitted to the IC card;
In the IC card,
The PIN is updated using the transmitted PIN as a new PIN,
The PIN updating method for an IC card with a biometric authentication function includes erasing the biometric authenticated information and resetting the number of PIN attempts to an initial value.

In the above-mentioned PIN update method for an IC card with a biometric authentication function,
After resetting the number of PIN attempts to the initial value, the process may return to the step of issuing the PIN verification command.

In the above-mentioned PIN update method for an IC card with a biometric authentication function, the biometric information may be fingerprint information.

According to the present invention, the following effects can be obtained.
1) Improved convenience for cardholders: By incorporating the PIN update procedure into the processing procedure for the PIN Verify command, the PIN can be changed immediately, reducing the time and effort required to contact the card company, improving convenience for cardholders. In addition, for card companies, it is no longer necessary to allocate manpower to respond to this request at the counter or to reissue cards, reducing personnel costs.
2) Low barrier to introduction: Since fingerprint authentication is performed on the IC card, there is no need to prepare a dedicated payment terminal that supports fingerprint authentication, and it can be used as is with payment terminals that have traditionally been used in stores, etc., making the barrier to introduction low. In other words, since the processing involves incorporating a PIN rewrite function into the existing PIN Verify command, there is no need to install new payment terminals.

FIG. 1 is a diagram showing a typical transaction flow using an IC card. FIG. 1 is a diagram showing a typical conventional PIN verification flow. FIG. 2 is a diagram of a PIN verification flow including the PIN update method of the present invention. FIG. 11 is a diagram showing another example of a PIN verification flow including a PIN update method of the present invention. FIG. 2 is a schematic diagram of an IC card and a payment terminal. FIG. 1 is a schematic diagram of a conventional PIN reissue or card reissue method.

The following describes in detail the embodiments of the present invention with reference to the drawings. Note that the present invention is not limited to the embodiments described below. In addition, the embodiments described below have technically preferable limitations for implementing the invention, but these limitations are not essential requirements for the present invention.

Figure 1 is a diagram of a typical transaction flow using an IC card. In general, when an IC card payment terminal (hereafter simply referred to as the payment terminal) detects that an IC card has been set, it starts supplying power to the IC card, sends a reset command to activate the IC card, and starts a processing procedure based on the normal PIN authentication procedure. A detailed description of the typical processing flow is omitted, but in step (7) card holder verification, the card holder is authenticated using the PIN. If the PIN is authenticated as correct, necessary management processing is carried out, and if the card action in (10) is an online inquiry, online processing is carried out, and the flow is completed.

Figure 5 shows an example of the situation when an IC card 100 is set in a payment terminal 200, depicting a scene in which a contact-type IC card 100 equipped with a fingerprint sensor 120 as a biometric authentication function and a contact terminal 102 is inserted in the direction of the arrow into a card slot of the payment terminal 200 to proceed with the payment process. The payment terminal 200 is equipped with a keyboard 201 for receiving input of necessary information such as a PIN, and a display unit 202. The IC card 100 does not necessarily have to be of the contact type as shown in this figure, and a contactless IC card and IC card payment terminal may also be used.

In step (7) cardholder verification in FIG. 1, an overview of the processing in each step in the PIN verification flow that is generally performed in the past will be described with reference to FIGS.
As a first step in the flow of FIG. 2, the payment terminal 200 requests data on the number of remaining PIN attempts from the IC card 100 in order to start authentication, and the IC card 100 transmits the data on the number of remaining PIN attempts to the payment terminal 200.

Step X001: The user is requested to input a PIN, and the user inputs the PIN into the keyboard 201 provided in the payment terminal 200. The payment terminal 200 performs a PIN verification (PIN verification) on the IC card 100 to confirm whether the PIN belongs to the user.
The payment terminal 200 transmits a Verify command and the PIN input from the payment terminal 200.

Step X002: The IC card 100 determines whether or not there are any remaining attempts based on the data on the remaining number of PIN attempts. If there are any remaining attempts, the IC card 100 proceeds to step X003 for PIN verification, and if there are no remaining attempts, the IC card 100 proceeds to step X006 for an error response.
Step X003: The IC card 100 compares the PIN received from the settlement terminal 200 with the registered PIN to perform PIN verification.

Step X004: If they match, it is determined that the PIN verification is successful, and the process proceeds to step X005. If they do not match, the process proceeds to step X007.
Step X005: A normal end response is returned to the payment terminal 200, and the flow is completed.

Step X006: Return the error code "6983" to the payment terminal 200 and complete the process.
Step X007: The number of PIN attempts is decremented by one and updated.
Step X008: Return the error code "63CX" to the payment terminal 200, and return to step X001. Note that "X" in the error code is a variable value according to the number of attempts, for example, a numerical value indicating the number of remaining attempts (the same applies to the examples of the present invention described below).

As in the above example, if the PIN cannot be authenticated in the conventional PIN authentication, an error occurs and the process ends, and the PIN cannot be updated in the series of flows. To update the PIN, as mentioned above, it is necessary to have the PIN sent by mail from the card company or to go through the process of reissuing the card.

In contrast, in the PIN verification flow in the PIN update method of the present invention,
When the card owner enters his/her PIN in response to a Verify command and a PIN matching error occurs, instead of immediately sending an error from the IC card to the payment terminal, the biometric authentication function is accessed and biometric authentication is performed (if there is no response within a certain period of time, an error result is sent to the payment terminal as usual).

If the biometric authentication is successful, the card sets the biometric authentication OK flag and then sends an error result from the IC card to the payment terminal. Next, the terminal's normal routine will cause a PIN verification retry, which can be used to update the PIN. During this retry, the card owner inputs the new PIN they wish to set. The card checks whether the biometric authentication OK flag is set, and if so, performs the "PIN update" process, and if not, performs the normal "PIN verification" process.

An example of a PIN matching flow in the PIN update method of the present invention will be described in more detail with reference to FIG. 3. Note that the present invention is realized by incorporating biometric authentication and PIN update processing into the cardholder verification processing of (7) in FIG. 1, so FIG. 3, like FIG. 2, describes in more detail the contents of the steps of the cardholder verification processing of (7) in FIG. 1. Furthermore, for other processing parts, processing similar to that of the general IC card processing flow shown in FIG. 1 can be applied.

<Example of command flow until PIN update>
(An example of a process from when the biometric authentication OK flag, which indicates that biometric authentication has been completed, is not set to when the PIN update is completed)
S001: Execute PIN verification (Verify) command [1st time]
[Send 00200080 08 24 XXXX FFFFFFFFFF]
S002: Check the number of PIN attempts (⇒ PIN attempts remaining)
S003: Check if the biometric authentication OK flag is set (⇒ Biometric authentication OK flag is not set)
S004: Normal PIN verification is performed (⇒ S005: PIN verification failed)
S301: Biometric authentication is performed (⇒ S302: Biometric authentication successful)
S303: Set biometric authentication OK flag. S304: Return error response "63CX" [Receive 63CX]
(The terminal will retry the PIN verification as per its normal routine.)
S001: Execute Verify command [2nd time]
[Send 00200080 08 24 XXXX FFFFFFFFFF]
S002: Check the number of PIN attempts (⇒ PIN attempts remaining)
S003: Check if the biometric authentication OK flag is set (⇒ Biometric authentication OK flag is set)
(Enter the new PIN you want to set)
S101: Update the PIN value to the input value. S102: Clear the biometric authentication OK flag. S103: Reset the number of PIN attempts to the initial value. S104: Return a normal response of “9000”. [Receive 9000]

The above is an example of the flow when a PIN is updated according to the PIN update method of the present invention. Depending on the situation, the PIN may not be updated. For example, if there are no attempts remaining in S002: Check the number of PIN attempts, proceed to S201, return an error of "6983", and end the process. Also, if S302: Biometric authentication fails, the remaining number of attempts is decremented by one, S402: return an error response of "63CX", return to S001, and perform the update process again.

As another example of the flow, for example, as shown in FIG. 4, S103: After resetting the number of PIN attempts to the initial value,
S105: Return an error response of "63CX" (PIN verification is retried according to the terminal's normal routine)
S001: Execute Verify command [3rd time]
The process may be further executed as described below to perform PIN verification using the updated PIN, thereby making it possible to confirm the validity of the updated PIN.

An example of a specific usage image at a payment terminal is shown below. Note that this is an example of using fingerprint authentication as the biometric authentication method (note that the signal method described below is just an example and is not specified).
(1) When making a payment, if the payment terminal requests you to enter your PIN, enter your PIN.
(2) If the PIN verification is unsuccessful, some kind of signal is given to prompt the user to perform fingerprint authentication, and (3) the user performs authentication by touching a finger to the fingerprint authentication sensor.
(4) Once fingerprint authentication is complete, some kind of signal will let you know that it is okay to release your finger.
(For example, a light will flash.)
(5) In addition, some kind of signal can be used to indicate whether the fingerprint authentication has been successful or not.
(For example, changing the color for success and failure)
(6) After the finger is released, the flow shifts to PIN verification (input of a new PIN) again.
(7) When verifying the PIN, if the biometric authentication OK flag is set, some kind of signal will be displayed to prompt the user to enter a new PIN (e.g., a light will flash quickly, etc.).
(8) Enter a new PIN value. (9) Some kind of signal will let you know if the PIN update has been completed successfully.
(e.g. change color, etc.)
(10) The PIN verification flow is resumed. After this, the process is the same as for a regular card.

If a user wishes to change their PIN, they will be asked to verify their PIN once, then undergo fingerprint authentication, and then the second PIN verification will be completed with the new PIN entered. This means that the PIN can be updated instantly, without the need for time-consuming and tedious communication with the card company as in the past.

As described above, according to the present invention, by incorporating a PIN update process into the identity verification process (PIN Verify) performed with a typical IC card, users can safely and quickly change their own PIN.

The IC card 100 used in the present invention may have the same configuration as a conventionally known IC card. For example, as shown in FIG. 6, in addition to a fingerprint sensor 120 and contact terminal 102 as biometric authentication functions, the IC card 100 may also include, although not shown in the figure, a display unit that shows the status of the card or the authentication process, a storage unit that stores information necessary for authentication, a processing unit that processes the authentication process and data, a communication unit that communicates data with a higher-level host such as a payment terminal, and a power supply unit that supplies the power necessary to carry out these processes.

The display unit provides visual information to the user by, for example, a single-color or multi-color light-emitting device, such as an LED. It has a function of notifying the user of the state of the IC card and its changes by transitions of combinations of display color, display time, display fluctuation, and other visually identifiable information. Different states can be identified by changing the color, brightness, or timing of lighting.

The power supply unit has a self-supplied power source such as a battery or solar cell, or has a near field communication (NFC) function and has a mechanism for receiving power, for example, by electromagnetic induction from a general-purpose mobile terminal device or its charging device.

The fingerprint sensor 120 can have the function of extracting the pattern features of the user's fingerprint by contact scanning the user's finger in the case of a one-dimensional sensor, or by holding the finger in contact in the case of a two-dimensional sensor. The biometric information is not limited to this, and can be anything that is unique to the user, such as a vein pattern or iris pattern, and can be obtained by a sensor provided on the card.

Although not shown in the figure, the processing unit may be a central processing unit (CPU) that has an OS on the hardware layer of the IC chip and has the function of executing various applets stored in the memory unit by integrating and controlling the memory unit, communication unit, and acquisition unit.

The memory unit has the function of storing the code of various applets and the data or results required for calculation processing, and mainly consists of storage devices such as Random Access Memory (RAM) that supports high-speed and frequent rewriting, Electrically Erasable Programmable Read-Only Memory (EEPROM) such as flash memory that can store and rewrite data even when power is not supplied, and Read Only Memory (ROM) that stores data that does not need to be permanently rewritten.

100: IC card 102: contact terminal 120: fingerprint sensor 200: payment terminal 201: keyboard 202: display unit

Claims (3)

A method for updating a PIN for an IC card with a biometric authentication function, comprising the steps of:
In a PIN verification procedure for performing PIN verification on an IC card on which biometric information of an owner is registered at an IC card payment terminal,
The IC card payment terminal includes:
issuing a PIN verification command to the IC card;
A PIN trial count, which is the number of times a PIN can be re-entered, and information on whether biometric authentication has been performed or not, which is recorded in the IC card, are obtained from the IC card;
If the number of PIN attempts remains and biometric authentication has not been performed, the PIN entered by the owner is transmitted to the IC card;
In the IC card,
A determination is made as to whether the input PIN is correct or not, and if it is determined that the PIN is incorrect, biometric information is acquired by a biometric information acquisition means provided in the IC card;
If the biometric information matches the biometric information registered in the IC card, the biometric information is stored as biometric authentication completion information and the process returns to the step of issuing the PIN verification command.
Next, the IC card payment terminal
Acquire the number of PIN attempts, which is the number of times the PIN can be re-entered, and the biometric authentication information recorded on the IC card;
If the number of PIN attempts remains and biometric authentication has been completed, a PIN newly input by the owner in response to a PIN verification command that is issued again is transmitted to the IC card;
In the IC card,
The PIN is updated using the transmitted PIN as a new PIN,
A PIN updating method for an IC card with a biometric authentication function, comprising: erasing the biometric authenticated information; and resetting the number of PIN attempts to an initial value. The PIN update method for an IC card with biometric authentication function described in claim 1, characterized in that after resetting the number of PIN attempts to an initial value, the method returns to the step of issuing the PIN verification command again. The PIN update method for an IC card with biometric authentication function according to claim 1 or 2, characterized in that the biometric information is fingerprint information.