JPH0799555B2 - Data communication processor - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial field of application] The present invention, when data such as a transaction card or a personal identification number is input when a commodity transaction is performed using a transaction card such as a credit card, the input data The present invention relates to a data communication processing device for transmitting data to a host system of a card issuing company.

[Prior Art] In recent years, transactions such as credit cards have been frequently carried out separately at department stores, restaurants, etc., in which payment for goods is paid separately. In such stores, a portable type for inputting a personal identification number is used. There is provided a data communication processing device including a terminal and a processing device main body which is detachably connected to the terminal and is connected online by a telephone line of a host system of a card issuing company. Then, when the customer offers to pay the price using the transaction card, the clerk inputs product transaction data such as the payment amount from the keyboard of the main body of the processing device and issues the card recorded on the transaction card brought by the customer by the card reader. Make the card data such as company code and membership number of the company read.
In addition, the customer is prompted to input his / her own personal identification number from the keyboard provided on the portable terminal, and the portable terminal is connected to the processing apparatus main body. Then, the personal identification number data input to the portable terminal is taken into the processing device body, and the personal identification number data, the commodity transaction data, and the card data are transmitted to the host system of the corresponding card issuing company, and the host The system determines the legitimacy of the transaction. Then, when a permission response message indicating transaction permission is returned from the host computer to the processing apparatus main body, a slip indicating the transaction content is printed out from the printer of the processing apparatus main body.

By the way, in general, in this type of data communication processing system, in the data transmission between the processing apparatus main body and the host system, and the data transmission between the processing apparatus main body and the portable terminal, preset encryption is performed. The data is protected by encrypting the transmission data with the use key data and then transmitting the data. In this case, the encryption key data is distributed from the host system to the processing device main body of each store. However, only one piece of this encryption key data was distributed to one processing device main body in consideration of privacy protection and confidentiality preservation. Therefore, when a plurality of portable terminals can be connected to one processing device main body, data transmission between each portable terminal and the processing main body is the same for encryption. Key data was used. However, by stealing one of the plurality of portable terminals and reading out the encryption key data set in the storage unit, all the encryption key data used in the system is known. Therefore, reliability of data communication protection was low.

[Problems to be Solved by the Invention] To solve such a problem, the key data for encryption between terminals used for data transmission between the processing device main body and each portable terminal may be different. However, since it is impossible to distribute the key data for inter-terminal encryption from the host system side to the processing device main body of each store because the burden on the host system side becomes heavy, it is impossible to distribute the terminal device at each store. It was troublesome to manually set the inter-encryption key data according to the number of portable terminals.

The present invention has been made based on such circumstances, and an object of the present invention is to provide terminal-to-terminal encryption key data used for data transmission between a processing device main body and each portable terminal, It is an object of the present invention to provide a data communication processing device that can improve reliability for protection of data communication without burdening the user by automatically setting different settings for each terminal.

[Means for Solving the Problems] The present invention relates to a plurality of portable terminals having a data input unit and a terminal-side communication unit that transmits data input through the input unit, and these portable terminals. One of the terminals is detachably connected, and a processing device main body having a main body side communication unit that receives data transmitted from the terminal side communication unit of the connected portable terminal is provided. The device main body is connected to a host system via a transmission line, and when transmitting data to the host system, a data communication processing device that encrypts the transmission data using preset inter-host encryption key data and transmits the data. In the
An encryption that creates different key encryption data for each mobile terminal by encrypting key data for host encryption with a unique ID number set for each mobile terminal. Encryption key data creating means, a terminal management table for storing the inter-terminal encryption key data of each portable terminal created by this creating means for each ID number of each portable terminal, and a communication section on the main body side From a handheld device connected to
When the ID number and inter-terminal encryption key data are received, the inter-terminal encryption key data corresponding to the ID number received from the terminal management table is read and compared with the received inter-terminal encryption key data. The comparison means, the read permission command means for transmitting a read permission command of the transmission data to the portable terminal connected to the main body side communication unit when confirming the coincidence of the two key data, and the read permission means. After receiving the command, when data is received from the corresponding portable terminal, the received data is decrypted with the inter-terminal encryption key data corresponding to the ID number of the corresponding portable terminal set in the terminal management table. After that, when the terminal data transmitting means for encrypting with the host-to-host encryption key data and transmitting it to the host system via the transmission line and the comparing means for confirming the disagreement of both key data, An inter-terminal encryption key data reply means for transmitting the inter-terminal encryption key data read from the end device management table to the mobile terminal connected to the main body side communication unit, and each mobile terminal, A storage unit that stores its own ID number and inter-terminal encryption key data, and a key data updating unit that updates the key data in the storage unit to the received data when the inter-terminal encryption key data is received from the processing apparatus main body. And a cipher transmitting means for enciphering the transmission data with the inter-terminal encryption key data in the storage section and transmitting the same when the transmission data read permission command is received from the processing apparatus main body.

[Operation] According to the present invention which takes such a means, the data of the terminal device management table of the processing apparatus main body is stored in the terminal device management table by the unique ID number set for each portable terminal device. The key data for encryption between terminals used for transmission is stored. Here, since the inter-terminal encryption key data is the data created by encrypting the inter-host encryption key data with the ID number of the terminal, it is not different from the inter-host encryption key data. Of course, the data will be different for each mobile terminal.

In this state, when the ID number and the inter-terminal encryption key data are sent to the processing device body from one portable terminal device connected to the processing device body, the terminal device management table is set in the processing device body. The inter-terminal encryption key data corresponding to the ID number received from is read out and compared with the received inter-terminal encryption key data. Then, when it is confirmed that the two pieces of key data match each other, a transmission data read permission command is transmitted to the portable terminal. Therefore, in the mobile terminal,
The transmission data is encrypted with the inter-terminal encryption key data set in the storage unit and then transmitted. Then, in the processing device itself, the ID of the portable terminal device of the data transmission source
After the received data is decrypted with the inter-terminal encryption key data corresponding to the number and the raw data is obtained, the inter-host encryption key data encrypts this raw data and sends it to the host system.

On the other hand, when it is confirmed that the inter-terminal encryption key data corresponding to the reception ID number read from the terminal management table does not match the received inter-terminal encryption key data, the above-mentioned terminal management table is used. The inter-terminal encryption key data corresponding to the read reception ID number is transmitted to the portable terminal. As a result, in the portable terminal, the inter-terminal encryption key data in the storage unit is rewritten and updated with the received inter-terminal encryption key data.

Therefore, the data transmission between each portable terminal and the processing device main body is performed by the inter-host encryption key data for encrypting the transmission data during the data transmission between the host system and the processing device main body. The data is encrypted with the different key data for encryption between terminals, which is created based on the above. When the inter-host encryption key data is updated, the inter-terminal encryption key data is also updated.

[Embodiment] An embodiment of the present invention will be described below with reference to the drawings. In this embodiment, the case where the present invention is applied to a data communication processing device used when separately paying for the price of a product using a transaction card such as a credit card in a store such as a department store or a restaurant will be described.

FIG. 1 is a block diagram showing the configuration of this embodiment. In the figure, 10 is a processing apparatus main body, and a CPU (central processing unit) 11 of the processing apparatus main body 10 controls a ROM 14 and a RAM 15 via a bus line 12 and a signal line 13. Also,
A keyboard input circuit 1 for inputting key signals from the keyboard 16 for inputting commodity transaction data such as payment amount.
7. Start the business mode such as "Registration" and "Setting" with the CPU11
I / O port 19 for inputting the command signal of the control switch 18 for commanding to, the display control circuit 22 for driving and controlling the indicator 21 for displaying the payment amount etc. keyed in, the data is printed on the slip paper etc. Printer drive circuit 24 for driving and controlling the dot printer 23, a card reader control circuit 26 for taking in card data recorded in a transaction card such as a credit card read by the card reader 25, a host of a card issuing company, etc. A transmission control circuit 29 for controlling data transmission performed with a computer 27 via a transmission line 28 such as a telephone line is connected to the CPU 11 via the bus line 12 and the signal line 13. Further, a portable terminal interface 20 is connected to the CPU 11 as a main body side communication unit, and is detachably connected optically using a projector / receiver or mechanically using a connector. Data can be transmitted to and from a plurality of portable terminals 30.

The CPU 31 of the portable terminal 30 includes a bus line 32, a signal line
ROM 34 and RAM 35 are connected via 33, a keyboard input circuit 37 for inputting a key signal from a keyboard 36 for inputting a personal identification number, a display control circuit 39 for driving and controlling a display 38, a card reader 40 The card reader control circuit 41 and the like for inputting the read data of is connected.
Further, a processing device main body interface 42 is connected to the CPU 31 via a bus line 32 and a signal line 33 as a terminal side communication unit that controls data transmission with the processing device main body 10.

As shown in FIG. 2, the RAM 15 of the processing apparatus main body 10 temporarily stores the data table 51 for temporarily storing the commodity transaction data input from the keyboard 16, the transmission / reception data with the portable terminals 30 and the host computer 27. Transmission / reception buffer 52, key buffer 53 that temporarily stores key data for encryption or decryption, input data buffer 54 that temporarily stores data that is encrypted or decrypted by the key data stored in key buffer 53, key An output data buffer 55 for temporarily storing data encrypted or decrypted by the key data stored in the buffer 53, a PEK for storing inter-host encryption key data PEK for encrypting data to be transmitted to the host computer 27. Memory 56, host computer 27
MEK memory 57 for storing decryption key data MEK for decrypting the received data, and each portable terminal 30
A terminal management table 58 storing inter-terminal encryption key data PEKi and check data Enc, which will be described later, corresponding to the unique ID numbers i (1 ≦ i ≦ n) respectively set in
Etc. are formed.

On the other hand, in the RAM 35 of each portable terminal device 30, as shown in FIG. 3, a transmission / reception buffer 61 for temporarily storing transmission / reception data to / from the processing apparatus main body 10 and a temporary storage of key data for encryption or decryption. Key buffer 62, an input data buffer 63 for temporarily storing data to be encrypted or decrypted by the key data stored in the key buffer 62, and a key buffer 62
An output data buffer 64 for temporarily storing the data encrypted or decrypted by the key data stored in, an ID memory 65 for storing its own ID number, and a terminal for encrypting the data to be transmitted to the processing device body 10. A PEKi memory 56 for storing the encryption key data PEKi, a MEK memory 57 for storing the decryption key data MEK for decrypting the data received from the processing apparatus main body 10, and the personal identification number data input from the keyboard 36. A customer data buffer 68 for temporarily storing customer data such as transaction card data input from the card reader 40 is formed.

Then, the CPU 11 of the processing apparatus main body 10 creates the terminal management table 58 of the RAM 15 according to the flowchart shown in FIG. That is, first, the ID number = 1 is initially set as P1 and this ID number is set as PEK as encryption key data as P2.
Key data PE for host-to-host encryption stored in the memory 56
Encrypt K to create data PEKi, that is, key data for encryption between terminals (encryption key data creation means).

Next, the decryption key data MEK stored in the MEK memory 57 as P3 is used as the encryption key data to encrypt the data PEKi in P2 to create the check data Enc. Then, the data PEKi created in P2 and the data Enc created in P3 are applied to the corresponding I of the terminal management table 58.
Store in the area corresponding to the D number. After that, if the ID number is incremented by +1, the encryption processing of P2 and P3 is performed, and the data PEKi and the data Enc are stored in the area corresponding to the progressive ID number of the table 58. Thus, the above process is repeated until the ID number exceeds the number n of portable terminals, and if the number exceeds the number n, this process is terminated.

By the way, the inter-host encryption key data PEK is updated by the host computer 27 in a timely manner. Therefore, when the CPU 11 of the processing device main body 10 receives new inter-host encryption key data PEK data from the host computer 27,
By decrypting this received data with the decryption key data MEK in the MEK memory 57, the host-to-host encryption key data PEK is obtained, and this inter-host encryption key data PEK is stored in the PEK memory.
After storing in 56, the processing of FIG. 4 is executed to create the inter-terminal encryption key data PEKi and the check data Enc, and the terminal management table 58 is updated.

Further, when the connection of any mobile terminal 30 is confirmed via the terminal interface 20, the CPU 11 of the processing apparatus main body 10 follows the flow chart shown in FIG.
It is supposed to be encrypted communication with. That is, after confirming the connection with the portable terminal device 30, an ID number read command is transmitted to the corresponding terminal device 30 as P11.

Then, the CPU 31 of the portable terminal device 30, as shown in FIG. 6, together with the ID number i stored in the ID memory 65,
The inter-terminal encryption key data PEKi stored in the PEKi memory 65 is encrypted with the decryption key data MEK stored in the MEK memory 67 to send check data Enc ′. Therefore, the CPU 11 temporarily stores the data (i, Enc ') received from the portable terminal 30 in the transmission / reception buffer 52.

Next, the ID number i stored in the transmission / reception buffer 52 as P12
The terminal management table 58 is searched based on the above, the check data Enc corresponding to the corresponding ID number i is read and compared with the check data Enc ′ stored in the transmission / reception buffer 52 (comparing means). And both check data Enc and En
If the coincidence of c'is confirmed, a read permission command of transmission data is transmitted to the corresponding portable terminal 30 as P13 (read permission command means).

Then, the CPU 31 of the portable terminal 30 encrypts the customer data stored in the customer data buffer 68 with the inter-terminal encryption key data PEKi stored in the PEKi memory 66, as shown in FIG. Since the CPU 11 temporarily stores the data received from the portable terminal 30 in the transmission / reception buffer 52, the P1
This received data is set as 4 and the corresponding I in the terminal management table 58
The key data PEKi for encryption between terminals corresponding to the D number is decrypted to obtain raw customer data. Then, as P15, this raw customer data is encrypted with the inter-host encryption key data PEK in the PEK memory 56, and then transmitted to the host computer 27 via the transmission line 28 (terminal data transmission means). .

On the other hand, if the check data Enc and Enc ′ do not match in P12, the corresponding ID number in the terminal management table 58 is associated with the portable terminal 30 connected to the terminal interface 20. The check data Enc and a decryption command for this data Enc are transmitted (inter-terminal encryption key data return means).

Then, the CPU 31 of the portable terminal 30 decrypts the received data Enc with the decryption key data MEK stored in the MEK memory 67 to generate the inter-terminal encryption key data PEKi as shown in FIG. Since it is configured to acquire and update the contents of the PEKi memory 66 to this latest inter-terminal encryption key data PEKi (key data updating means), the portable terminal 30
The encryption key data PEKi between the terminals and the processing device main body 10 are matched.

As described above, in this embodiment, the processing device main body 10 is used to encrypt the transmission data between the host computer 27 and the processing device main body 10 for encrypting the transmission data between the hosts, and the key data PEK for each portable type. Based on the unique ID number i set for each terminal 30, each portable terminal 30 and the processing device main body 10
The inter-terminal encryption key data PEKi for encrypting the transmission data at the time of data transmission between and is automatically created and stored and managed by the terminal management table 58 for each ID number. Then, the inter-terminal encryption key data PEKi set in the portable terminal 30 connected to the processing device body 10 corresponds to the corresponding ID number stored and managed by the terminal management table 58. If it is different from the inter-terminal encryption key data PEKi, the inter-terminal encryption key data PEKi on the portable terminal 30 side is stored and managed by the processing device body 10. Is updated to match.

In addition, the terminal device encryption key data PEKi set in the portable terminal device 30 connected to the processing device main body 10 corresponds to the corresponding ID number stored and managed by the terminal device management table 58. If it matches the inter-encryption key data PEKi, the processing device body 10 sends a transmission data read command to the corresponding portable terminal device 30. This allows
The customer data such as the personal identification number input from the keyboard 36 of the portable terminal 30 is the key data PE for encryption between the terminals.
It is encrypted by Ki and transmitted to the processing device body 10. on the other hand,
In the processing device main body 10, the data received from the portable terminal 30 is decrypted by the inter-terminal encryption key data PEKi to obtain raw customer data. Then, this customer data is encrypted with the inter-host encryption key data PEK and transmitted to the host computer 27.

As described above, according to the present embodiment, the inter-terminal encryption key data used in the data transmission between each portable terminal 30 and the processing device body 10 is automatically set for each terminal. So, if you steal a portable terminal 30 and
Key data for encryption between terminals set in PEKi memory 66 Even if the PEKi is illegally read, key data for encryption between hosts
It is not possible to know the PEKi or the inter-terminal encryption key data PEKi in the other portable terminal 30. Therefore, the reliability of data communication protection can be significantly improved without burdening the user, and the portable terminal that can be detachably connected.
Increasing the number of 30 will not cause any problems.

In addition, when distributing the inter-terminal encryption key data PEKi from the processing device body 10 to each portable terminal 30, when distributing the inter-host encryption key data PEK from the host computer 27 to the processing device body 10. Similarly, the key data PEKi is encrypted with the decryption key data MEK and distributed. Therefore, also from this point, the reliability of data protection is improved.

In addition, in the above-mentioned embodiment, the case where the customer data such as the personal identification number is encrypted and transmitted to the processing apparatus main body 10 from each portable terminal 30 is shown, but the present invention is not limited to this, and other The present invention can also be applied to the case where the important data of the above is encrypted from the portable terminal to the processing apparatus main body.

In addition, in the above-described embodiment, each component of the present invention is realized by software, but it may be configured by hardware. Of course, various modifications can be made without departing from the scope of the present invention.

[Effect of the Invention] As described in detail above, according to the present invention, the key data for inter-terminal encryption used for data transmission between the processing device main body and each portable terminal is automatically transferred to the terminal. It is possible to provide a data communication processing device that can be set differently for each and that can improve reliability for protection of data communication without burdening the user.

[Brief description of drawings]

FIG. 1 is an overall block diagram of an embodiment of the present invention, FIG.
FIG. 3 is a RAM configuration diagram of the processing device main body in the same embodiment, FIG.
FIG. 4 is a RAM configuration diagram of the portable terminal according to the embodiment, FIG.
Fig. 5 is a flow chart showing the terminal management table creation process executed by the CPU of the processing unit, and Fig. 5 is the CP of the processing unit.
FIG. 6 is a flow chart showing a cryptographic communication process with the mobile terminal executed by U, and FIG. 6 is a flow chart showing a cryptographic communication process with the processing device main body executed by the CPU of the mobile terminal. 10 ... Processor main unit, 27 ... Host computer, 30 ...
… Portable terminal, 56 …… PEK memory, 57,67 …… MEK memory, 58 …… Terminal management table, 65 …… ID memory, 66…
… PEKi memory.

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI Technical indication H04L 9/14

Claims (1)

[Claims] 1. A plurality of portable terminals having a data input section and a terminal side communication section for transmitting data input through the input section, and one of these portable terminals. And a processing unit main body having a main body side communication unit that receives data transmitted from the terminal side communication unit of the connected portable terminal, and the processing unit main body is connected via a transmission line. In the data communication processing device, which is connected to a host system and encrypts transmission data by using preset key data for host-to-host encryption when transmitting data to the host system, the processing device body is , The inter-terminal encryption key data that is different for each mobile terminal by encrypting the inter-host encryption key data with a unique ID number set for each of the mobile terminals A key data generation means for encryption to create, ID key data for the terminal between the Encryption of each portable terminal created by the creating means of each portable terminal
When receiving the ID number and the inter-terminal encryption key data from the portable terminal connected to the main body side communication unit and the terminal management table stored by number, the ID received from the terminal management table A comparison means for reading out the terminal-to-terminal encryption key data corresponding to the number and comparing it with the received terminal-to-terminal encryption key data, and when the comparison means confirms the matching of both key data, the main body side communication unit Read permission command means for transmitting a read permission command of transmission data to the connected portable terminal, and when data is received from the corresponding portable terminal after the instruction by the read permitting means, the received data is received. After decrypting with the inter-terminal encryption key data corresponding to the ID number of the corresponding portable terminal set in the management table, it is encrypted with the inter-host encryption key data. When the terminal data transmitting means for transmitting to the host system via the transmission line and the comparing means confirm the disagreement between the two key data, the inter-terminal encrypted key data read from the terminal management table is transferred to the main body. And an inter-terminal encryption key data reply means for transmitting to the mobile terminal connected to the side communication unit, wherein each mobile terminal has its own ID number and inter-terminal encryption key data. And a key data updating unit that updates the key data in the storage unit to the received data when the inter-terminal encrypted key data is received from the processing device main body, and the transmission data is read from the processing device main body. A data communication processing device comprising: an encryption transmission means for encrypting the transmission data with the inter-terminal encryption key data of the storage unit when the permission command is received.