JPH0756669B2 - Information card - Google Patents

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information card containing a storage element, and more particularly to such an information card capable of processing a plurality of different card services with a single card.

[Conventional technology]

Services that use cards that store personal information, such as bank card services, have been widely used. In a service using such a card, a personal identification code is often set for each card in order to determine whether or not the user of the card is a card holder with a legal qualification. This code is compared with the code input by the card user from the card using terminal, and if they match, it is determined that the holder has a valid qualification.

Conventionally, a magnetic card using a magnetic stripe as a storage medium has been used for this type of card service. However, since the magnetic card has a small storage capacity of the magnetic stripe, it is possible to store only a very limited amount of information such as the holder name, account number, and personal identification code.

For this reason, each card service requires a dedicated card, and the card user must possess a plurality of cards and use them properly, which is inconvenient in this sense.

In order to eliminate this inconvenience, an IC card incorporating a semiconductor memory element has been developed in recent years. This IC card has an extremely large information storage capacity compared to a magnetic card,
One card can store personal information corresponding to a plurality of card services.

This personal information includes information that is necessary only when you receive a specific card service and you want to keep it secret when you receive other card services, and it will not be kept secret and will be leaked. There is a problem that it is troublesome.

However, in the conventional magnetic card system, since different cards are used for each card service, such a problem does not occur, and therefore no consideration is given.

In addition, a system that sets different personal identification numbers for each of the multiple information in the card and uses the extra salary with the personal identification number that matches the personal identification number entered by the card user as service personal information , JP-A-60-150177.

Furthermore, a plurality of personal identification numbers are stored corresponding to the degrees of importance of a plurality of pieces of information on the card, and the comparison result between the personal identification number and the entered personal identification number is subjected to a predetermined logical operation, and the result of the information An information protection technique for determining whether or not the read operation is possible is disclosed in JP-A-60-205690.

These techniques are intended to protect information by limiting the information read out by a personal identification number input by a card user. In these technologies, the problem that personal information that should be used in one card service leaks when it is not necessary when using another card service, that is, unnecessary personal information leakage between different card services is prevented. However, no consideration was given to the confidentiality of personal information.

[Problems to be solved by the invention]

The above-mentioned conventional technology does not consider the confidentiality of personal information when receiving a plurality of different card services with one card, and when receiving a card service using an IC card, the service is Even personal information that is not needed can be read from the IC card, and there is a problem that confidentiality is not maintained.

An object of the present invention is to eliminate the above-mentioned drawbacks of the prior art, and even when selectively receiving a plurality of different card services with one information card, personal information unnecessary for the received service cannot be read out. An object of the present invention is to provide an information card capable of maintaining the confidentiality of personal information between different card services.

[Means for solving problems]

In order to achieve the above-mentioned object, in the present invention, a plurality of different services provided are selectively made available by using a single information card. The identification information and service information related to the individual card user are sorted and stored for each item, and the user identification code (hereinafter referred to as the user) associated with the item in which the identification information of the card user is written. (Identification personal identification code) corresponds to an item in which service information related to an individual card user is written, and is a pair of a service personal identification code of the user side and a service personal identification code of the providing side presented by the service providing side. And (b) first input means for inputting a personal identification code for user identification and a user-side service personal identification code presented by the card user. Second input means for inputting a service-side service personal identification code presented by the service-providing side, and (c) a user identification personal identification code or a user-side service personal identification code input from the first input means for each item. A code, a service-side service personal identification code input from the second input means, and a user-identifying personal identification code read from the storage means for each item, or a user-side service personal identification code and a provider-side service personal identification code. Comparing means for comparing pairs and outputting the presence or absence of coincidence for each item; (d) arithmetic means for performing a predetermined logical operation on the coincidence presence / absence output from the comparing means for each item; and (e) the arithmetic means Determining means for permitting or disallowing the output of the service information related to the individual card user from the storage means for each item depending on the result of the logical operation of Output means for outputting service information related to an individual card user read from the storage means for each item according to the permission to enable the use of the service corresponding to the item. Characterize.

[Action]

According to the present invention, a plurality of personal identification codes can be stored in the storage means in the information card, and they can be assigned to the personal identification code used by the card user and the service personal identification code for recognizing the service providing company.

Further, the personal identification code input by the card user and the service personal identification code sent from the service company are input into the information card through the input means. The comparison means compares the input personal identification code with the personal identification code stored in the storage means, and outputs the result to the arithmetic means. The calculation means uses the comparison result to execute a calculation according to a predetermined calculation rule stored in the storage means. Since the calculation rule is set for each item of personal information, the judging unit can judge whether or not to output the information through the output unit for each item by looking at the result of the calculation.

By these operations, even if the personal identification code entered by the user is valid, whether the service personal identification code entered separately corresponds to the currently required card service, Since it can be determined from the result of the operation according to the operation rule, it is possible to determine whether or not to output the information.

Therefore, it is possible to prevent the output of information other than the minimum information required for the card service currently required from the information card to prevent unnecessary leakage of personal information.

〔Example〕

 Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an IC card as an embodiment of the present invention. In FIG. 1, 12 is an IC card,
Reference numeral 3 is a memory for storing the personal information 2 divided for each service item and the personal identification code table 1 in which the personal identification code corresponding to each item of the personal information 2 is registered. Reference numeral 4 is an input circuit for inputting a personal identification code presented by a card user, 5 is an input circuit for inputting a service personal identification code predetermined by a service providing company that provides a service, and 6 is a personal identification code registered in the personal identification code table 1. A comparison circuit for comparing the code with the secret code input from the input circuit 4 or the input circuit 5, and 7 is an operation circuit for inputting the output of the comparison circuit 6 and performing a required logical operation on the output to output the result. Specifically, when the output of the comparison circuit 6 is received and all the secret codes registered in the table 1 corresponding to the items of the personal information match the secret codes input from the input circuit (that is, the logic). When the product is satisfied) "1" is output, and when it is not, an arithmetic circuit that outputs "0", 9 is an output circuit that reads and outputs personal information 2, 8 is an output of the arithmetic circuit is "1" Output circuit A decision circuit to start.

11 An item number generation circuit that generates the number of the service information item that is the target of the comparison operation or the output operation, 10 inputs the item number from the item number generation circuit 11, and the output operation signal 101 indicated by the output circuit 9 executes the output. If you do not show the inside,
The memory 3 stores the address information designating the secret code table 1.
When the output operation signal 101 indicates that the output is being executed, the address generating circuit supplies the address information indicating the personal information 2.

FIG. 2 is an explanatory diagram showing an example of the contents of the personal identification code table 1 and personal information 2 stored in the memory 3 in FIG.

In FIG. 2, reference numeral 2 denotes personal information classified by item as described above. In the present embodiment, the personal information 2 is obtained from five pieces of information, that is, the cardholder's name, the card number assigned when the card is issued, the service information A for service A, the service information B for service B, and the service information C for service C. Are configured.
Reference numeral 1 is a personal identification code table corresponding to each item of the personal information 2 as described above.

In this embodiment, as the personal identification code, four types of personal identification code are registered: the owner's personal identification code input by the user and the service personal identification codes a, b, c sent from the service providing company.

Here, as shown in FIG. 2, a holder personal identification code is set as the personal identification code corresponding to the items of the holder name and the card number of the personal information 2.

Further, as the personal identification code corresponding to the item of the service information A of the personal information 2, two of the personal identification code and the service personal identification code a are set. Similarly, for the item of service information B, two of the owner code and the service code b are set, and for the item of service information C, two of the owner code and the service code c are set. There is.

Further, the calculation rule of the present embodiment is that the input personal identification code matches all the personal identification codes set in each item, that is, the logical product is established.

As is apparent from the above, in the embodiment shown in FIG. 1 and FIG. 2, the service A, the service B, and the service C are transferred from the service providing companies A ′, B ′, and C ′, respectively, using one IC card 12. It is supposed to be selectively received.

Hereinafter, an operation example of this embodiment will be described in detail with reference to FIG. 1 and FIG.

When the IC card 12 is set in an external device (not shown) for exchanging information with the IC card, the service secret code is sent from the service providing company. This service secret code is input from the input circuit 5. Around this time, the card user inputs the personal identification code input via the external device (not shown) from the input circuit 4.

Here, it is assumed that the card user receives the service A and inputs the service password a through the input circuit 5. Further, it is assumed that a valid holder personal identification code is input from the input circuit 4. After inputting the above-mentioned two personal identification codes, the comparison circuit 6 inputs the personal identification code table 1 shown in FIG.
The personal identification code set for each item is read out, and the personal identification code input as described above is read out from the personal identification number generation circuit 11
By changing the value of, the items are compared sequentially.

As an example of the comparison operation, the name information of the first item is compared with the holder's personal identification code, and the service information A of the third item is compared with the input personal identification code and the service personal identification code a. To do. Based on the output of the comparison circuit 6, the arithmetic circuit 7 tests whether or not all the secret codes set in the predetermined items of the secret code table 1 match, and outputs the result to the judgment circuit 8. The judgment circuit 8 is an arithmetic circuit 7
If the output of 1 is "1", then the output circuits 9 are activated because they all match, but if it is "0", they are not activated.

When the output circuit 9 is activated, the output circuit 9 outputs the output operation signal 10
1 is output, the output of the address generation circuit 10 is switched to the address of the personal information data, and the personal information corresponding to the item number output by the item number generation circuit 11 is read from the memory 3 and output.

Specifically, assuming that the input personal identification code is the valid holder personal identification code and service personal identification code a as described above, as shown in Table 1 below, the name, card number, service Since all of the secret codes set for each item of the information A match any of the inputted secret codes, the output circuit 9 is activated for these pieces of information and the IC card 12
Output is enabled and output.

However, in the service information B and C, the service personal identification code B or C out of the personal identification codes set for each does not match the input personal identification code, so the output circuit 9
Is not started, the IC card 12 does not output, and is not output.

Therefore, the service information B and C cannot be read from the service providing company A'and the confidentiality of the information can be maintained.

If the service B is received by the IC card, the service secret code b is sent from the service providing company B '.

Therefore, in this case, the service information A and C whose passwords do not match cannot be read. Similarly, when the service C is received, the service information A and B are not output.

As described above, according to this embodiment, a service is
When receiving with a card, information of items for which the service secret code sent from the service provider does not match the set secret code is not output, so service information for different services (for example, service type, service range, usage The confidentiality of the number of times, fee information, etc.) can be maintained.

In the embodiments described so far, whether or not to output the information is determined by simply comparing the secret codes and determining whether or not all of them match, but this processing is performed by the central processing unit (hereinafter abbreviated as CPU). By making use of the calculation function of), it is possible to make a judgment according to a complicated calculation rule.

A second embodiment of the present invention using a CPU will be described below with reference to the drawings.

FIG. 3 is a block diagram showing such a second embodiment of the present invention. In FIG. 3, 20 is an IC card, 21 is a CPU, and 2
2 is a memory for storing a personal identification code table 31 and personal information 32, which will be described later, 23 is an input circuit, 24 is an output circuit, and 25 is a read-only memory (hereinafter abbreviated as ROM) for storing the program of the CPU 21.

In this embodiment, the comparison circuit, the arithmetic circuit and the judgment circuit are CPU2.
It is realized by the process of 1 program.

FIG. 4 is an explanatory diagram showing a configuration example of the personal identification code table 31 and the personal information 32 in the memory 22 in FIG. The personal information 32 is divided into items as in the case of the personal information 2 described above with reference to FIG. Personal information 32 includes
Holder name, card number, service information A, service information
In addition to B and service information C, common service information AB (for example, a bank account number used to settle service charges) that is common to services A and B, and the cardholder's family, etc. It is composed of service limit information (service use limit amount, etc.) when used by others.

In the personal identification code table 31, registered personal identification codes that can be used in this IC card and a judgment formula for judging whether or not to output information for each item are set.

A unique internal code is assigned to each PIN,
In the present embodiment, the holder card is code l, the service personal identification codes a, b and c are the codes m, n and q, respectively, and the family personal identification code used when the owner's family uses the card. The code r is assigned.

The judgment formula is calculated by Boolean algebra, and "+" indicates OR.
“×” indicates AND. In addition, the variables L, M, N, and
For Q and R, the registered personal identification code is compared with the personal identification code input from an external device (not shown), and if any of the input personal identification codes matches, "1" is substituted, and if they do not match, "0" is substituted. It is a thing.

For example, the registered personal identification code code 1 (in this embodiment, the holder personal identification code is shown) is input, and the personal identification codes are compared. If they match, L = 1, and if they do not match, L = 0. Thus, the variables L, M, N, Q, and R are registered PIN codes l, m, n, and
Set so that the result of comparing q and r with the input secret code is substituted.

FIG. 5 is a flow chart showing the operation of the CPU 21 in FIG.

The operation of this embodiment will be described below with reference to FIGS.

In FIG. 5, processes 41 and 42 are input processes for receiving a personal identification code input from an external device, and the personal identification code input from a cardholder, a service providing company or the like is input in a time division manner. Process 43 is a comparison process for comparing the registered personal identification code with the input personal identification code and substituting the result into variables L, M, N, Q, R, which corresponds to the operation of the comparison circuit 6 in FIG. To do. The process 44 is a calculation process for calculating the judgment formula of the personal identification code table 31 for each item, and corresponds to the operation of the calculation circuit 7 in FIG.

The process 45 is a determination process that branches to the output process 46 that outputs information corresponding to the arithmetic expression when the arithmetic result of the arithmetic process 44 is “1”.

This judgment processing corresponds to the operation of the judgment circuit 8 in FIG. The processes 47, 48 and 49 are processes corresponding to the operation of the item number generation circuit 11 in FIG. 1, and the arithmetic process 44, the judgment process 45 and the output process 46 are executed for the item designated by the variable i.

In this embodiment, since the number of information items is 7, the variable i
Has a value from 1 to 7.

Next, specific examples of the operation of this embodiment are shown in Tables 2 and 3 on the following pages.

Table 2 shows an example in which the input personal identification code is the holder personal identification code and the service personal identification code a. In the example shown in Table 2, the values of the variables are L = 1, M = 1, N = 0, Q = by comparison processing 44.
1, R = 0.

When the judgment formula is calculated in the arithmetic processing 44 using this variable value, the value of the judgment formula in the terms of name, card number, service information A, and common service information AB becomes "1". Therefore, the IC card 20 outputs only such information and does not output other information.

Further, as in the example shown in Table 3, when the family personal identification code and the service personal identification code b are input from the external device, the comparison processing is performed.
Due to 43, L = 0, M = 0, N = 1, Q = 0, R = 1.

When a judgment formula is calculated in the arithmetic processing 44 using this variable value, the judgment formulas in the terms of name, card number, service information B, common service information AB and service limit information all have a value of "1". Therefore, only this information is output from the IC card 20, and other information is not read.

In this way, in addition to the same effect as the previous embodiment, in this embodiment, it is possible to use the family personal identification code in addition to the holder personal identification code. Furthermore, like the operation example in Table 3,
When the family personal identification code is used, there is an effect that the card use range can be limited by the card user so that the service limit information is output.

Further, there is an effect that common information used for a certain plurality of services, such as common service information AB, can be set.

In the embodiment described above, the result of the arithmetic processing 44 is used directly in the judgment processing 45.However, the result of the arithmetic processing 44 is once assigned to a variable, and then the value of the variable is evaluated in the judgment processing 45. However, the present invention can be applied. The present invention can also be applied to an IC card to which a process of rewriting personal information in addition to a process of outputting personal information is added.

Assuming that the embodiment having the above function is the third embodiment, its flow chart is shown in FIG. The configuration, personal identification code table, and personal information of this embodiment are the same as those of the second embodiment, and FIG.
It is the same as shown in FIG.

In FIG. 6, processes that execute the same processes as in FIG. 5 are given the same numbers.

A process 50 is a substituting process for substituting the result of the arithmetic process 44 into the variable X (i), a process 51 is a command input process for inputting a command for setting the operation of the IC card, and a process 52 is a command input for continuously inputting information. Command determination processing, processing 53 to determine whether the output command is a command that outputs only a single item
Is a command determination process for determining whether the input command is a rewriting command for personal information, process 54 is an item number input process for inputting an item number that specifies information to be output or rewritten, and 55 is an item number assigned to a variable i. Substitution process, 4
5'is a judgment process for judging whether the value of the variable X (i) is "1", a process 56 is a personal information input process for inputting new personal information, and a process 57 is personal information of an item designated by the variable i. Is a writing process for rewriting according to the information input in the personal information input process 56.

The operation of this embodiment will be described below with reference to the flowchart of FIG.

A comparison process 43 compares the two personal identification codes input in the input processes 41 and 42 with the registered personal identification code in the personal identification code table 31. A calculation formula 44 is calculated using the result of the comparison process 43. The calculation result is substituted into the variable X (i) by the substitution process 50. The calculation process 44 and the substitution process 50 are processes 47, 48, 49.
Is performed repeatedly for all personal information items from the item.

Then, in command input processing 51, a command designating the operation of the IC card is input. In the example of FIG. 6, as the operation designated by the command, the continuous output operation of continuously outputting the information that can be output, the unary output operation of outputting only the personal information of one item, and the personal information of only one item are output. The rewriting operation of rewriting is shown.

The input command is judged by command judgment processing 52, 53 and branched to a predetermined operation processing.

In the continuous output operation, the value of the variable X (i) is checked in the judgment processing 45 'for all the items, and the information of the item whose value is "1" is output in the output processing 46. In the unary output operation, the determination process 45 'determines whether or not the information indicated by the item number input in the item number input process 54 can be output. If the value of the variable X (i) corresponding to the item number is "1", the output process 46 outputs only the personal information of the item.

Next, in the rewriting operation. It is checked in step 54, 55, 45 'whether the value of the variable X (i) corresponding to the input item number is "1". If the value of the variable X (i) is "1", the process branches to the personal information input process 56 to input the personal information. Then, in the rewriting process 57 according to the inputted personal information, only the information of the item designated by the item number inputted previously is rewritten.

As described above, according to the present embodiment as well, it is possible to determine whether or not the output is possible in accordance with the result of the calculation of the judgment formula, so that the same effect as the second embodiment can be obtained. Further, in this embodiment, since the item of information to be output can be designated, the effect that the information can be read regardless of the order of the items and even when rewriting the information, the rewriting is prohibited by the calculation result of the judgment formula. Therefore, there is an effect that it is possible to prevent rewriting of information unrelated to the service received by the user.

In the second and third embodiments described above, the method of deciding the output is used as the method of determining the availability of the output.
Not limited to this method, the present invention can be applied if the result of comparing the personal identification codes is performed according to a rule preset by the calculating means, and whether or not to output the information is determined based on the result. It's obvious.

Although the contents of the card service using the IC card are not limited in the two embodiments described above, the cash service, the credit service, each fee settlement service, the private information recording service, the ID card, the public service A wide variety of services such as certificates (passports, driver's licenses, etc.) can be considered.

Further, if a family personal identification code or the like is set inside as in the second embodiment, it is possible to register a large number of IC card users with their respective use ranges limited. It is also conceivable to apply the present invention to a program reservation system for pay broadcasting, a fee settlement system, etc. and share one IC card with a family. In this case, when a child or the like uses it alone, it is possible to limit the devices that can be used, or to prevent reservations for programs that are inappropriate for the child.

Furthermore, in the embodiments described so far, the password is input from the external terminal device to which the IC card is connected.
It goes without saying that the present invention can also be applied to an IC card provided with a keypad on the card and an input means for inputting the card user's personal identification card from the keypad.

〔The invention's effect〕

As described above, according to the present invention, it is possible to output or rewrite information by limiting it to the minimum necessary personal information by using the service personal identification code sent from the service providing company. Therefore, there is an effect that the confidentiality of information can be maintained.

[Brief description of drawings]

FIG. 1 is a block diagram showing the configuration of an IC card as one embodiment of the present invention, and FIG. 2 is an explanatory diagram showing an example of the contents of a personal identification code table 1 and personal information 2 in a memory 3 in FIG. FIG. 3 is a block diagram showing another embodiment of the present invention, and FIG. 4 is a code table 31 in the memory 22 in FIG.
5 is an explanatory view showing an example of the contents of the personal information 32, FIG. 5 is a flow chart showing the operation of the CPU 21 in FIG. 3, and FIG. 6 is a flow chart showing the operation of yet another embodiment of the present invention. Explanation of codes 1,31 …… PIN code table, 2,32 …… Personal information, 3,22…
... Memory, 4,5,23 ... Input circuit, 6 ... Comparison circuit, 7 ...
… Operation circuit, 8 …… Judgment circuit, 9,24 …… Output circuit, 12,2
0 …… IC card, 21 …… CPU, 25 …… ROM, 41,42,51,54,5
6 …… Input processing, 43 …… Comparison processing, 44 …… Computation processing, 45,
45 '…… Judgment processing, 46 …… Output processing, 57 …… Rewriting processing

Claims (1)

[Claims] 1. A single information card which selectively enables a plurality of different services to be provided by using a single information card, wherein (a) card user identification information and card user The service information related to an individual is organized and stored for each item, and, corresponding to the item in which the identification information of the card user is written, the user identification code (hereinafter referred to as a user identification identification code) related thereto In correspondence with the item in which the service information related to the individual card user is written, a memory for storing a pair of the user-side service PIN code and the provider-side service PIN code presented by the service provider, which are related to the item. Means, (b) first input means for inputting a user identification password code and a user side service password code presented by the card user, and a service provider side A second input means for inputting a service-side service personal identification code; (c) a user identification personal identification code or a user-side service personal identification code which is input from the first input means for each item; The provider service personal identification code input from the second input means and the user identification personal identification code or the pair of the user side service personal identification code and the provider side service personal identification code read out from the storage means for each item are compared. Comparing means for outputting the presence / absence of coincidence for each item, (d) arithmetic means for performing a predetermined logical operation on the coincidence presence / absence output from the comparing means for each item, and (e) the logical operation result of the arithmetic means. Determining means for permitting or disallowing the output of the service information related to the individual card user from the storage means depending on the item; Serial and outputs the service information associated with the card user personal read from the storage unit, information cards, characterized by comprising comprises an output means for enabling use of a service corresponding to the item, a.