JPH0750489B2 - PIN verification device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention] (Industrial field of application) The present invention provides, for example, a CPU, a data memory, etc., for time display, password verification for an IC card or the like used as a credit card alone. The present invention relates to a password verification device.

(Conventional technology) Conventionally, a CPU, data memory, etc. were built in, a keyboard,
A multi-function IC that has a display unit and can be used as a single card for time display or by inserting it into a terminal
Cards (personal identification verification devices) have been developed.

Such IC cards have been developed that can be traded in a transaction account recorded in a data memory, for example, an account corresponding to a credit card. When this transaction is carried out, the personal identification number of a predetermined digit input by the keyboard is collated with the personal identification number previously recorded in the data memory.

However, in the case of the above, when performing the personal identification number,
If you make a mistake in entering your PIN using the keyboard,
By inputting the correct key, the personal identification number is input again or the personal identification input is stopped until the personal identification input time is exceeded and the initial state is restored.

In this case, there is no way to return to the initial state when the personal identification number is input, and if the personal identification number is not input at all, after a predetermined time, the one that has not been input and the personal identification number of the data memory are collated. However, there is a problem that a mismatch occurs and the mismatch is recorded in the data memory. That is, there is a problem that the mismatch of the secret code is renewed and recorded in the data memory regardless of the input error of the secret code.

(Problems to be Solved by the Invention) As described above, when the personal identification information is not input while the personal identification information is being input, the personal identification information is collated, regardless of whether the personal identification information is not erroneous. This eliminates the disadvantage that the number of mismatches of the password information is updated and recorded in the data memory.If the password information is not input when the password information is input, the number of times the password mismatches and the number of password mismatches are checked. As a result, it is possible to prevent the update record.As a result, when inputting the personal identification information, by giving an instruction to end the input in the state where the personal identification information is not input, the number of times of mismatch of the personal identification information is updated and recorded. It is to provide a password verification device that can return to the initial state without the need.

[Structure of the Invention] (Means for Solving Problems) A personal identification verification device of the present invention is a first recording means for recording personal identification information, an input means for inputting personal identification information, and personal identification information by this input means. End input means for instructing the end of input of the password, a determination means for determining whether or not the password information is input by the input means when the input end of the password information is instructed by the end input means, and this determination means When it is determined that the personal identification information has been input by the input means, collation means for collating the personal identification information recorded in the first recording means with the personal identification information input by the input means, and the collation means. As a result of collation by means, the first
Secondly, the number of times of mismatch between the personal identification information recorded in the recording means and the personal identification information input by the input means is recorded.
When the judging means judges that the password information has not been input by the input means, the number of times the password information is collated by the collating means and the number of times the password information does not match by the second recording means. The update record of is not performed.

(Operation) According to the present invention, the personal identification information is recorded by the first recording means, the personal identification information is input by the input means, the end of the input of the personal identification information is instructed, and the end of the input of the personal identification information is instructed. When it is determined that the personal identification information has been input by the input means, the determining means determines, and when it is determined that the personal identification information has been input, the personal identification information recorded in the first recording means. The information and the personal identification information input by the input means are collated by the collating means, and as a result of this collation, the personal identification information recorded in the first recording means does not match the personal identification information input by the input means. The number of times is recorded by the second recording means, and when the judging means judges that the password information has not been input by the input means, the password information is collated with the password information by the collating means and the password by the second recording means. Emotion It is designed not to update and record the number of disagreements of information.

That is, when the personal identification information is input, by giving an instruction to end in the state where the personal identification information is not input,
It is possible to return to the initial state without updating and recording the number of times of mismatch of the password information.

Embodiment An embodiment of the present invention will be described below with reference to the drawings.

In FIG. 2, reference numeral 10 denotes an IC card (password collation device) as a portable medium, which is a multi-function card having various functions. For example, it has an online function to be used by using a terminal described later, an offline function in which the IC card 10 operates alone, and a waiting state in which only the clock is counted.

The offline function includes a shopping mode in which the IC card 10 is used as a credit card or a cash card.

On the surface of the IC card 10, a contact portion 11 arranged at a position conforming to the standard of the card, a keyboard portion 12, a display portion 13 formed on a top surface of the keyboard portion 12 and formed of a liquid crystal display element, and a magnetic field. A generating member 14 is provided.

The contact portion 11 is composed of, for example, a plurality of terminals 11a to 11h. The terminal 11a is for operating power supply voltage (+ 5V, Vcc), the terminal 11b is for grounding, the terminal 11c is for clock signal, the terminal 11d is for reset signal, and the terminals 11e to 11h are for data input / output.

The keyboard section 12 is a numeric keypad 12a as an input means,
Mode keys that specify various processing modes (M1, M2, M3,
M4) 12b, a correction key 15a to be entered when correcting the number entered so far when the personal identification number is input, and as an end input means to be input when returning to the initial state where other modes can be selected when the personal identification number is input. It is constituted by the end key 15b.

By inputting the correction key 15a, the personal identification number input so far, that is, the personal identification number recorded in the data memory 31 is cleared.

The above mode key 12b is for offline, that is, IC card 1
When performing transaction processing only with 0, shopping mode without terminal (M1), shopping mode with terminal compatible with magnetic stripe (M2), time display mode (M3), electronic book mode (M
4) is to be selected.

As the shopping mode (M1) that does not use the terminal, a transaction account of a predetermined credit company is adapted.

The initial state is a state in which various modes such as a time display mode and an electronic book mode can be selected.

The display unit 13 is a 5 × 7 dot matrix with one digit
16-digit display.

The magnetism generating member 14 is embedded inside the IC card 10 in accordance with the track position of a magnetic card reader (magnetic head) on the reading side (not shown).

FIG. 3 shows the external appearance of the IC card reading / writing unit 16 used in a terminal that handles the IC card 10, such as a personal computer. That is, by connecting to the contact portion 11 of the IC card 10 inserted from the card insertion port 17, the data of the memory in the IC card 10 is read or the data is written in the memory.

The IC card reading / writing unit 16 is connected to the main body (not shown) of the personal computer by a cable.

The electric circuit of the IC card 10 is constructed as shown in FIG. That is, the contact portion 11,
Communication control circuit 21, reset control circuit 22, power supply control circuit 2
3, an internal battery (built-in power supply) 25, for example 3 volts,
A battery check circuit 24 for checking whether or not the voltage value of the internal battery 25 is higher than a specified value, a clock control circuit 26, an oscillator 27 for outputting a signal with an oscillation frequency of 1 MHz, a CPU (central processing unit) for control. ) 2
8. A program ROM as a mask ROM that is composed of a read-only memory, stores a program that operates the CPU 28, and stores a load program that loads an externally supplied self-diagnosis program into the data memory 31.
29, a program working memory 30, a personal identification number (for example, four digits), data, etc., and a data memory 31 as a first and second recording means configured by a PROM,
Timer 32 and calendar circuit 3 used for clocking during processing operations
3, a crystal oscillator for basic clock oscillation, always 32.
An oscillator 34 that outputs a signal of 768 MHz oscillation frequency (low frequency), a display control circuit 35, a display driver 36 that drives the display 13, a keyboard interface 38 as a key input circuit of the keyboard 12. And a magnetic generation member control circuit 40 that outputs magnetic information similar to that of a conventional magnetic stripe by controlling the magnetic generation member 14.

The communication control circuit 21, the CPU 28, the ROM 29, the program working memory 30, the data memory 31, the timer 32, the calendar circuit 33, the display control circuit 35, the keyboard interface 38, and the magnetism generating member control for controlling the magnetism generating member 14. The circuit 40 is adapted to be connected by the data bus 20.

The communication control circuit 21 converts the serial input / output signal supplied from the terminal 16 through the contact portion 11 into parallel data and outputs the parallel data to the data bus 20. The parallel data supplied from 20 is converted into a serial input / output signal and output to the terminal 16 via the contact unit 11.
In this case, the format content of the conversion is
16 and IC card 10.

The reset control circuit 22 is adapted to generate a reset signal and activate the CPU 28 when it comes online.

The power supply control circuit 23 switches from the drive by the internal battery 25 to the external power supply drive after a predetermined time has passed when it is online, and when it is offline, that is, when the external voltage drops, it is driven from the external power supply to the internal power supply. The drive is switched to the battery 25.

The clock control circuit 26 stops the oscillator circuit 67 that outputs a signal of the oscillation frequency (high frequency) of 1 MHZ in the standby mode, that is, in the key input standby state in the offline mode in which the card operation is performed by the internal battery 25, and also to the CPU 28. The supply of the clock is also stopped, and it stands by in a completely stopped state. Further, the clock control circuit 26, until the stable oscillation is performed when the oscillation circuit 67 is restarted from the stopped state.
During the period of 500 to 600 msec, the clock clock is output as the clock for the CPU 28 to process the first input key.

Furthermore, when the clock control circuit 26 becomes online, that is, when a reset signal is supplied, the clock control circuit 26 keeps the clock clock CP for 500 to 600 msec until stable oscillation is performed.
It outputs as a clock for U28, and then outputs a 1MHz clock.

In the data memory 31, the transaction account and the transaction limit of the credit company (bank or the like) with which the contract is used in the shopping mode (M1) are recorded. This transaction limit is updated every time a transaction is made.

The expiration date of the card itself is recorded in the data memory 31. This expiration date corresponds to the capacity of the internal battery 25. Further, the expiration date may be set to various transaction account children instead of the expiration date of the card itself.

The calendar circuit 33 has a display clock whose setting can be freely changed by the card holder, and a transaction clock which is set to the world standard time when the card is issued and cannot be changed thereafter. ing.

The display control circuit 35 converts the display data supplied from the CPU 28 into a character pattern by using a character generator (not shown) including an internal ROM (read-only memory), and uses the display driver 36. Display unit 13
Is to be displayed.

The keyboard interface 38 is the keyboard unit 12
Convert to a key input signal corresponding to the key input in
It is output to U28.

When the shopping mode and the card type are designated, the magnetic generation control circuit 40 is configured so that the data supplied from the data memory 31 via the data bus 20 and the reading device are manually operated according to the card type. Depending on the drive rate corresponding to automatic reading or automatic reading, the above-mentioned magnetic generation member
By controlling the drive of 14 and outputting the magnetic information, the same state as the existing magnetic stripe exists.

Next, the operation in such a configuration will be described. First, a shopping mode in which the terminal is not used in the offline function used by the card alone will be described with reference to the flowcharts shown in FIGS. That is,
In the initial state where any mode can be specified (ST
1), when the shopping mode without using the terminal is designated by the mode key 12b, that is, the M1 key (ST2), the CPU 28 determines the transaction with the transaction account of the contract credit company, and the credit company name and account number of the transaction account. , And the transaction limit amount are read from the data memory 31 (ST3). Then, the CPU 28 displays the credit company name and account number of the transaction account on the display unit 13 and guides the input of the personal identification number (ST4).

According to this guide, if the user determines that the transaction account is to be processed, enter the personal identification number using the ten-key 12a (ST
Five). Then, the CPU 28 collates the personal identification number recorded in the data memory 31 with the personal identification number entered above (ST
6).

That is, every time the personal identification number is input by the ten keys 12a (ST11), the CPU 28 records the number in the data memory 31 (ST12). Next, the CPU 28 checks whether or not the correction key 15a has been pressed (ST13), and when the correction key 15a is pressed, clears the personal identification number recorded in the data memory 31 (ST14) and returns to step 11. If the correction key 15a has not been pressed, the CPU 28 checks whether or not the end key 15b for instructing the identification of the secret code has been pressed (ST15). As a result of this check, if the end key 15b has been pressed, CPU28
Checks whether the personal identification number entered in the data memory 31 is recorded even in one digit (ST16). If the personal identification information is not recorded, the personal identification collation processing is terminated and step 1
Returns to the initial state where the mode can be selected (ST17). In this case, the number of times of password disagreement in the data memory 31 as the password collation error is not updated and recorded.

Further, when the personal identification information is recorded in the above step 16, the input personal identification number and the personal identification number previously recorded in the data memory 31 are collated (number of digits, contents) (ST18).

If the result of collating the above-mentioned passwords does not match (ST21), CPU28
Determines that the transaction is not possible, and the number of times of disagreement is recorded in the data memory 31
And is displayed on the display unit 13 (ST22).

If the result of the above matching is a match (ST21), the CPU 28 displays the transaction limit amount on the display unit 13 and provides a guidance saying "Please enter the date and purchase amount" (ST2).
3). In response to this guidance, the user inputs the date and the purchase amount using the ten key 12a (ST24). Then, the CPU 28 compares the purchase amount with the transaction limit amount (ST25) and determines whether or not the transaction can be performed (ST26). As a result of this determination, if the transaction cannot be performed, the CPU 28 determines that the transaction is impossible and displays it on the display unit 13 (ST27). In addition, as a result of the above judgment, when the transaction can be performed, the CPU 28 updates the transaction limit amount corresponding to the transaction account in the data memory 31 with a new transaction limit amount obtained by subtracting the purchase amount from the transaction limit amount ( ST2
8). The CPU 28 also performs encryption using the account number, the date and the amount of money corresponding to the clock 102 as keys, and records this encrypted data as a transaction number in the transaction status recording area in the data memory 31 (ST29). Further, the CPU 28 displays the transaction number and transaction permission on the display unit 31 (ST30). As a result, the person in charge of the transaction (purchase) writes the transaction number in the purchase table indicating that the transaction has been performed, and hands it to the holder of the card (ST31).

As a result, when confirming whether or not the above-mentioned purchase (shopping) has been performed, the transaction number becomes the transaction number from the account number, date, and amount, so it can be known that the transaction has been performed.

As described above, it is possible to return from the input state of the password verification to the initial state without performing the password verification, and even if the user mistakenly enters the password input mode, the update record of the number of mismatches of the password information is not performed. In addition, it is possible to easily shift to the processing mode desired by the user.

In addition, since there is no time limit when inputting the secret code, it is possible to input the secret code accurately without worrying about exceeding the time limit, and reduce the abnormalities caused by exceeding the time limit when inputting the secret code. be able to.

Furthermore, when entering the password, even if the end key is entered by mistake before entering the password, password verification is not performed, so it is possible to prevent errors due to password mismatch from being recorded in the IC card. You can

In addition, although the IC card is used in the above-mentioned embodiment, the invention is not limited to this, as long as it has a data memory and a control element and selectively inputs and outputs from the outside, the shape is not a card shape. Other shapes such as a rod shape may be used.

[Effects of the Invention] As described in detail above, according to the present invention, when the personal identification information is not input while the personal identification information is being input, the personal identification information is not collated and the number of times the personal identification information does not match is not updated and recorded. As a result, when the personal identification information is input, by giving an instruction to end the input in the state where the personal identification information has not been input, the initial state is restored without updating and recording the number of times the personal identification information does not match. A password collation device that can be returned can be provided.

[Brief description of drawings]

The drawings are for explaining one embodiment of the present invention, FIG. 1 is a flow chart for explaining the operation, and FIG.
FIG. 4 is a plan view showing the configuration of the IC card, FIG. 3 is a diagram showing a terminal handling the IC card, and FIG. 4 is a diagram showing a schematic configuration of an electric circuit of the IC card. 10 …… IC card (password collation device), 11 …… contact section, 12 …… keyboard section, 12a …… numeric keypad (input means), 12b …… mode key, 13 …… display section, 14 …… magnetism generating member , 15a …… correction key, 15b …… end key (end input means), 16 …… terminal, 20 …… communication control circuit, 23 ……
Power supply control circuit, 25 ... internal battery, 26 ... clock control circuit, 27 ... oscillator, 28 ... CPU (judging means, collating means), 31 ... data memory (first and second recording means),
33 ... Calendar circuit, 34 ... Oscillator, 38 ... Keyboard interface, 40 ... Magnetic generating member control circuit, 67 ...
… Oscillation circuit.

 ─────────────────────────────────────────────────── --Continued from the front page (56) References JP-A-61-94187 (JP, A) JP-A-61-75997 (JP, A) JP-A-54-547 (JP, A)

Claims (1)

[Claims] 1. A first recording means for recording personal identification information, an input means for inputting personal identification information, an end inputting means for instructing completion of inputting personal identification information by the inputting means, and an end inputting means. A judgment means for judging whether or not the password information has been inputted by the input means when the input end of the password information is instructed, and this judgment means judges that the password information has been inputted by the input means. In this case, the collating means for collating the personal identification information recorded in the first recording means with the personal identification information input by the input means, and the result of the collation by the collating means is recorded in the first recording means. A second recording means for recording the number of times of disagreement between the personal identification information stored and the personal identification information input by the input means, and the personal identification information is input by the input means by the determining means. If it is determined that no, password collation apparatus characterized in that so as not updated record mismatch count personal identification information by the matching and the second recording means security information by the collating means.