JPS60205690A - portable media - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a portable medium, for example, a so-called IC card, which has a built-in integrated circuit.

[Technical background of the invention and its problems] Generally, a so-called IC card is used as a transaction medium in, for example, a currency transaction device. Verification of a personal identification number is generally widely used as an identification means for this type of ID card. However, generally I.D.
It is known that a personal identification number can be easily read from magnetic cards, which are widely used as cards. On the other hand, recently, as this type of ID card, a so-called IC card has been developed and is being put into practical use. This IC card includes a microcomputer (hereinafter simply referred to as microcomputer) that performs calculations, a data memory (PROM) that stores personal identification numbers and transaction information, and an interface circuit that exchanges information with other parts of the card. The card has an integrated circuit built-in, and is configured to exchange information with external equipment outside the card via the interface circuit and terminal section. Each function such as inputting, outputting, storing, and calculating information provided by the integrated circuit can be selectively executed by applying a command signal from outside the card via the terminal section.

By the way, with such IC cards, it is possible to completely prohibit the reading of the PIN number, but since cases may actually occur where the card user forgets the PIN number, it is necessary to ensure that the card is properly managed. It is necessary to make it possible to read out the PIN number only in the state. Furthermore, the same applies not only to reading out a password, but also to writing a password, writing or reading stored transaction information, and specific calculations.

[Object of the Invention] The present invention has been made in view of the above circumstances, and its purpose is to set permission conditions for execution of functions such as input, output, storage, and calculation, depending on the importance of the information. The purpose of the present invention is to provide a portable medium in which the severity of information can be set, thereby safely protecting information.

[Summary of the Invention] In order to achieve the above object, the present invention provides a storage means for storing a plurality of pieces of password information, and a verification means for comparing the password information inputted from the outside with the password information stored in the storage means. and a control means for controlling whether or not information can be written into or read from a specific area or a specific function can be executed based on the verification result of the verification device.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In FIG. 1, reference numeral 1 denotes an IC card, which has an integrated circuit 2 built therein. Further, a terminal section 3 is provided at a predetermined portion on the surface of the IC card 1, and this terminal section 3 is electrically connected to the internal integrated circuit 2, and is connected to an external device outside the card via this terminal section 3. Information is exchanged with devices.

Each function such as input, output, storage, and calculation of information provided by the integrated circuit 2 is performed by giving a command signal in the form of a message from outside the card via the terminal section 3, or by giving a command signal to a specific terminal. This makes it possible to execute it selectively.

FIG. 2 shows the configuration of the integrated circuit 2, which includes a control circuit 4 mainly composed of a microcomputer that performs calculations, etc., and a first memory (for example, PROM) as an information storage means connected to the control circuit 4. ) 5, a second memory (for example, FROM) 6, and an interface circuit 7, and when exchanging information with the outside of the card, either the first or second memory 5.6 is selected by the control circuit 4. Information is written or read via the interface circuit 7 and control circuit 4.

The first memory 5 stores, for example, the manufacturer's PIN number of the card manufacturer, the issuer PIN number of the card issuer, and the user PIN number of the card user. It is assumed that information etc. are stored.

As mentioned above, for example, if the user forgets the user PIN number, it is necessary to read the user PIN number stored in the first memory 5, but the conditions for allowing this reading must be strict. Must be. In this embodiment, for example, as a permission condition, it is required that both the issuer PIN number and the manufacturer PIN number have been verified (matched). Further, reading the transaction information stored in the second memory 6 requires that either the user's PIN or the issuer's PIN has been verified (matched).

Figure 3 shows the first memory 5 or the second memory 6 under the above conditions.
A circuit for controlling access to is shown, and this circuit is provided within the control circuit 4, for example. In the figure, the temporary memory 11 stores the matching results of a plurality of (three in this embodiment as described above) PIN numbers in the form of bit patterns (for example, the bit position corresponding to the matched PIN number is ``1''). signal, others as “0” signal)
−＼ Time is remembered. In other words, 1, for example, when reading a user's PIN number or transaction information, a verification command signal is inputted from outside the card via the terminal section 3, and the PIN number to be verified is input, and the control circuit 4 accepts the verification command signal. , the WA identification number in the first memory 5 is compared and verified, and the verification result is temporarily stored in the temporary memory 1. Note that the verification command signal and the password are input using, for example, a card manufacturing machine, a card issuing machine, a card handling machine, or the like. In addition, the permanent memory 2 includes a first memory 5.
The PIN number required for reading out is in the form of a bit pattern (the required PIN number, in this example, the bit position corresponding to the manufacturer PIN number and the issuer PIN number is the #1'' signal, other PIN numbers, this In the embodiment, the bit position corresponding to the user's PIN number is stored in advance (as a "0" signal).
The PIN number required for reading is in the form of a bit pattern. In this case, the bit position corresponding to the manufacturer's PIN number is stored in advance (as a 0'' signal). Further, the logic circuit 14 performs an exclusive OR operation on the bit patterns from the temporary memory 11 and the permanent memory 12, and when the result is a "0" signal, "
This is a circuit that outputs a 1'° signal. In addition, the logic circuit 15
is a circuit that takes the logical sum of the bit patterns from the temporary memory 11 and the permanent memory 13, and outputs a diphthong of ``1'' when the result includes a ``1'' signal.And,
The AND circuit 16 combines the output of the logic circuit 14 and the read command signal R for the first memories 3 and 5 output from the control circuit 4.
51 and read M to the first memory 5.
A tit signal R52 is output. Furthermore, the AND circuit 17 connects the output of the logic circuit 15 and the second output from the control circuit 4.
A logical AND operation is performed with the successive command signal R61 for the memory 6, and a read control signal R62 for the second memory 6 is output.

In such a configuration, the first memory 5 is connected to the control circuit 4.
When the read command signal R111 for the first memory 5 is output, the read control signal R52 for the first memory 5 can be generated only when the bit patterns of the temporary memory 11 and the permanent memory 12 completely match. Also,
When the read command signal Rss to the second memory 6 is output, 1 bit i in the bit pattern of the temporary memory 11 corresponding to the bit pattern of the permanent memory 13 is 1.
The read control signal R62 for the second memory can be generated only when the signals match. Note that the above-mentioned read command signals Rs s and Rs l are transmitted to the terminal section 3 when reading the user's PIN number or transaction information, for example.
By inputting a continuous command signal from outside the card via the control circuit 4, the control circuit 4 receives and outputs the signal. In this way, the stored contents of the first memory 5 can be read only when multiple passwords specified in the permanent memory 12 have been verified and match, and the stored contents of the second memory 6 can be read permanently. If one of the plurality of passwords specified in the memory 13 has been verified and matches, reading can be made possible.

With the configuration described above, it is possible to set the severity of permission conditions for execution of functions such as input, output, storage, and calculation, depending on the importance of the information. For example, according to the embodiment described above, the issuer cannot read out the user's personal identification number by himself or herself, but only in collaboration with the card manufacturer. Further, the transaction information can be read out by the user or the card issuer. As a result, it is possible to realize an IC card whose protection level is changed depending on the importance of information, and it is possible to flexibly and safely construct an application system.

In the above embodiment, a case has been described in which control is performed on whether or not information can be read from the first and second memories. It is also possible to similarly control whether or not a calculation can be executed.

Further, in the above embodiment, the case where the application is applied to an IC card used as an ID card of a currency transaction device has been described, but the invention is not limited to this, and the application can be applied to other memory cards such as a shopping card, cash card, telephone bill card, etc. It can also be applied to IC cards, etc.

[Effects of the Invention] As detailed above, according to the present invention, the severity of permission conditions for execution of functions such as input, output, storage, and calculation can be set depending on the importance of information. This provides a portable medium in which information can be safely protected.

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention; FIG. 1 is an external perspective view of an IC card, FIG. 2 is a configuration diagram of an integrated circuit, and FIG. 3 is a configuration diagram of an access control circuit. DESCRIPTION OF SYMBOLS 1... IC card, 2... Integrated circuit, 3... Terminal section, 4... Control circuit, 5.6... Memory, 7...
Interface circuit, 11...temporary memory, 12.1
3... Permanent memory, 14.15... Logic circuit, 16
．． 17...AND circuit. Applicant's agent Patent attorney Takehiko Suzue Figure 1 Figure 2 Figure 3 Figure 1

Claims (4)

[Claims] (1) In a portable medium comprising an integrated circuit having at least an information storage means and an information exchange means with the outside,
A storage means for storing a plurality of pieces of password information, a collation means for collating the password information input from the outside with the password information stored in the storage means, and whether each of the means is executable based on the collation result of the collation means. A portable medium characterized by comprising: control means for controlling. (2) The control means controls whether or not each of the means can be executed by determining whether or not a plurality of specific pieces of password information have been verified in accordance with the verification results of the verification means. A portable medium according to claim 1. (3) The control means controls whether each of the means can be executed by determining whether one or more of the plurality of specific password information has been verified based on the verification result of the verification means. A portable medium according to claim 1, characterized in that: (4) A patent characterized in that the control means controls whether or not each of the means can be executed by determining whether or not a plurality of specific pieces of password information have all been verified based on the verification results of the verification means. A portable medium according to claim 1.