DE2738113C2 - Device for performing machining operations with an identifier - Google Patents

Description

The invention relates to a device for performing Processing operations with an identifier that is in the form of a Card with an integrated circuit accommodated therein is det, the device being a reading part for receiving and contacting tion of the identifier.

In such devices, the identifier against abuse and Counterfeits are protected.

A punch card reader is already known from DD-PS 113 120 Has locking flaps in the entrance and exit of the card slot. With The locking flaps are to prevent real punch cards with any circuits are simulated.

DE-OS 19 45 777 describes a device (identification switch) to carry out processing operations with an identifier known that in the form of a card with an inte ized circuit (monolithic semiconductor circuit) is formed wherein the device is a reading part for receiving and contacting the Identifiers. The device also has a device for Check for whether the identifier included in the reading section which is a forged or simulated identifier. The facility does not rule out that by separate scarf a real identifier is simulated.

Proceeding from this, the invention is based on the object device of the generic type secured against misuse and forgery to indicate appropriate type.

The task is solved by a locking device that the reading part closes after the introduction of the identifier, the function the device only when the locking device is fully closed can run and is interrupted when opening.

The basic idea of the invention is to be seen in the fact that Closing the locking device can be prevented that in Identifier located on the reading part via electrically conductive connections with a simulation circuit, which is located outside the reading section, connected is. Blocking of the locking device is hereby out closed, since the device only works after the complete Closing the locking device takes.

Further features and advantages of the invention result from the Claims. In the description below, an off exemplary embodiment of the invention, in which an automatic card is used as the identifier, explained in more detail.

Show it:  

Fig. 1 is a identifiers;

FIG. 2 shows an IC of the identifier according to FIG. 1;

FIG. 3 shows an IC that has been expanded compared to FIG. 2;

Figures 4 and 5 embodiments of simple test equipment.

Fig. 6 is a functional diagram of the testing of identifiers;

Fig. 7 is a block diagram of a machine and

Fig. 8 shows the operating sequence of the machine according to Fig. 7.

Fig. 1 shows an identifier 1 , which is designed as a credit card or Eurocheque card. It contains a name field 2 of the cardholder, a field 3 for the identification or account number in plain text, a photo field 4 and a signature field 5 . Field 3 is provided parallel to a narrow side so that the account number remains legible from the outside when the card is inserted into the tester.

The card also contains an integrated circuit (IC) 6 with a terminal block 7 for the supply voltage and data input and output. The IC is implanted invisibly in the card.

A certain area 8 surrounding the IC is kept free of conductive materials, so that when using the card in a machine it can be checked whether connection lines to the card in the machine are routed from simulation circuits located outside a machine. Since the total counterfeiting of a card with an identical IC can be assumed to be ruled out due to the too high economic / know-how / risk threshold, this measure prevents a fraudster from assuming he knows how the IC works that one Equivalent circuit built from discrete components and this circuit z. B. connects via wires with a card acting as an adapter.

The machine also checks for other types of connections the environment is created externally.

Fig. 2 shows a block diagram of the IC 6. All parts shown individually are actually integrated in a single circuit. The power supply of the IC as well as the inputs and the outputs for data run via a contact strip 9 . This contact strip can either galvanic contacts or z. B. also have an inductive coupling loop. If the coupling of data and the power supply takes place via an inductive loop, the contact strip 9 also contains the converters required for this.

The IC contains a central unit 10 . This central unit is a special microprocessor that works with a permanently installed program from a program memory 11 . In another embodiment, the central unit 10 and the program memory 11 can also be designed as hard-wired logic within an integrated circuit.

The power supply takes place via an integrated power supply part 12 , in which the supply voltage fed in from the outside is converted into the values necessary for the central unit 10 . Such a high power supply must always be made available from the outside that a programming part 19 of the IC is able to store data memory 13 . . . 17 to program. In the supply part 12 it is therefore checked whether the supply voltage is high enough to always be able to actuate the central unit 10 and whether it is also sufficient for the destruction of the IC in embodiments of the card which provide self-destruction of the IC when misuse is detected . If the supply voltage is too low, the IC will not work. The self-destruction device of the IC can be verified, for example, by reprogramming a gate 24 . Normally this gate always remains open and the conditions of use can be read out from the memory 16 . If a final blocking of this identifier is required during the identification check, the gate 24 is blocked and thus no more usage conditions can be read out.

The central unit works e.g. B. only if conditions of use can be read.

This self-destruction can be triggered both by the card itself, by appropriate control of the program memory 11 , and by an external trigger signal. This trigger signal can be generated by the machine on machine cards if additional tests in the machine require destruction.

All data inputs and outputs take place via an input / output unit 18 . The central unit 10 is able to carry out all the functions described so far by means of a program. If the supply voltage is applied from the outside, the microprocessor of the central unit 10 starts up on its own and first checks whether the supply voltage is high enough.

The central unit 10 is then prompted for further functions via data input. The functions that can be performed are described below. The output of feedback after checking an entered personal number and other information takes place via the input / output unit 18 .

All parts of the IC described so far are integrated into one piece during the manufacture of the IC. The data storage 13 which is also still necessary. . . 17 are PROM memories and, as a whole or some of them, can either be integrated in the aforementioned IC during the manufacturing process or can be designed as a separate memory IC.

Various data are written into this PROM memory in the individual steps described below at different times, and a specific identification card is thus generated from a neutral one. The data store 13 . . . 17 are treated differently. Some stores are only through Gates 20 . . . 24 programmable. These programming blocking circuits can be deactivated, so that no further changes to the memory contents are subsequently possible. The data stores are also different in terms of their readability; ie only a few predetermined memories can be read from outside the card, others not. Which parts are programmable and readable when and why is explained below.

As already mentioned, the data storage part of the IC contains the memories 13 . . . 17th

The memory 13 , in which a protection code for protecting the card on the way from the factory to the issuing point is stored, can only be programmed as long as the gate 20 is in operation and can only be read internally via the gate 21 .

The memory 14 is used to store the personal code number, which can only be written when the gate 22 is in operation. The reference number cannot be read from the map, but can only be stored in the central unit 10 , where it is available for comparison purposes.

The memory 15 is used to hold data that are used to identify the respective card or account holder. The account number or any other information, including alpha-numerical information, which is used to identify the account holder, is therefore written into this memory. The identifier is only assigned to a customer after this programming. The memory 15 can only be programmed as long as the gate 23 is in operation. After programming, gate 23 is destroyed. The memory 15 then remains readable for the central unit 10 .

The memory 16 is used to record conditions of use, such as. B. Period length, period limit, daily limit. This data can only be written in when the card is issued, ie during initialization, via gate 24 .

The data 17 are stored in the memory 17 for each operation, such as the date, the number of failed attempts when entering the personal code number, account movement, etc.

The following are the initialization in context and the use of the card using the example of a card for described monetary applications.

After the last step in the production of the card, a protection code is generated as a numerical term in a random number generator and written into the memory 13 . At the same time, this protection code is posted on a separate document. After being stored, the gate 20 is destroyed, so that it is no longer possible to change the protective code or to write another code number into the memory 13 . The document is automatically inserted into an envelope under confidentiality conditions and the envelope is then sealed. The card and the envelope are then given a visually readable identical identification, e.g. B. the same serial number. The cards and envelopes provided with a protection code are brought separately to the issuing institute, where they are stored and managed separately. Up to this point, the cards are still neutral. When a card is issued to a customer, the neutral card in question is merged with the document bearing the same serial number. The envelope is then opened, preferably by the customer himself, and the visually readable protection code is removed.

The card is then inserted into the input device located at the issuing institute in order to write the customer-specific data into the card. For this purpose, the protective code number read is first keyed in and stored via the input / output unit 18 in the central unit 10 of the card, where a comparison with the protective code number stored in the memory 13 takes place. If the comparison is negative, the IC will self-destruct after a predetermined number of negative attempts.

If the comparison is positive, then the IC issues an enable signal to the input device so that the further data can be entered.

First of all, the customer secretly keys in the personal code number chosen by himself, which is then transmitted back to the central unit 10 and from there stored in the memory 14 . After being saved, the gate 22 is automatically destroyed, so that the personal code number can no longer be changed.

The institute then enters the data used to identify the customer. So in the memory 15 z. B. the account number of the customer is saved and then the gate 23 is automatically destroyed, so that this data can no longer be changed.

The instructions for use are stored in the memory 16 and then the gate 24 is automatically destroyed. Finally, the initial account balance can be stored in the memory 17 .

After these entries have been made, the output gate 21 of the memory 13 is destroyed, so that the card cannot be initialized a second time by means of the used protection code, since it is no longer possible to check this protection code.

The card prepared in this way is handed over to the customer.

If a card can be validated repeatedly after its validity has expired, then further protection codes are used, which are treated as above; Accordingly, the memory 13 with the gates 20 and 21 is provided several times.

This is shown in FIG. 3, which has the corresponding extensions compared to FIG. 2. As you can see, the memories for the protection code and for the account management with the assigned gates are provided several times.

If the previously described period for a card has expired or their money is used up, the customer leaves with the card to his bank. At the bank you can pay for the cards except for the first protection code described above a second, third, etc. protection code in other locked and sealed envelopes. The card will now - as already described for the first protection code - after Input of the second protection code reinitialized.

During this initialization, the gate 26 is destroyed, so that no further data can be written into the first account memory 17 .

In addition, the gate 30 is now opened by a special programming, so that account management now takes place via the "account 2", memory 29 .

The functions of the gates 27 and 28 correspond to the gates 20 and 21 , and the protection code memory 41 corresponds to the protection code memory 13 .

The second and all further protection code memories are programmed with the protection code " 2 " (or " 3 " etc.) during production (last work step).

This extension with additional protection codes and additional account storage leads to a longer life and better Exploitation of the electronic parts of the card.

To use the card, place it in the corresponding test device or the appropriate machine introduced where initially it is checked within the identifier whether the supply voltage has the required amount, especially for a possible self-destruction of the IC.

The user is checked for his owner identity by entering the personal code number and comparing it with the stored code number in the central unit 10 . The personal code number can therefore not be read externally. If the result is positive, the account number can be checked next, while the IC will be destroyed automatically on the nth failed attempt. In addition, the number of possible failed attempts is entered on the card.

The conventional number can be used to check the account number Cards must be visible on the outside of the card so that it can be read and inserted into a test device. The check is carried out again in the IC of the card itself.  

In this test, an alarm is given after the nth failed attempt triggered, because then you can assume that the account number on the card has been changed, e.g. B. to charge another account. Here too the number of possible failed attempts is noted on the card.

Additionally and / or in combination with the above Tests are carried out further test measures, which in the Identifiers such a formation of the functional and / or Memory circuits require that they be used with commercially available therefore not specifically for the purpose according to the invention manufactured, circuits can not be represented.

This prevents fraudsters with commercial, circuits housed in counterfeit identifiers generate a "good" signal without the aforementioned additional tests have taken place.

After these tests, the actual operation can now take place, e.g. B. the cash issue can be initiated. If this operation is prohibited, e.g. B. because the spending limit was exceeded, ie too much money was requested, the customer automatically receives a corresponding message. The check whether a transaction is permitted takes place in the central unit 10 . If the account number should also be readable from the card in the machine, the program memory 11 must contain the corresponding program.

Account management takes place in the memory 17 , namely all processes are stored one after the other, and reading out is possible at any time. Since the old account balances cannot be deleted when the account is moved, the entire history of the account is available. Account statements can also be created using the card.

The invention is not based on the example of banking Transactions still based on the use of card Identifiers limited. So through the new system this also protects the access to protected areas that only selected people who deal with a genuine, valid and genuine identifiers as authorized Identify holder of the identifier, access granted becomes.

Furthermore, the identifiers can be used only persons recognized as authorized have access to facilities or to allow their intended commissioning, the serve to store or retrieve information (data).

It is particularly advantageous that unchangeable storable Conditions of use all possible even in offline operation Allocate applications a predeterminable scope for users.

With reference to FIGS. 4 and 5 show two embodiments will be explained a receptacle in the form of simple testing equipment A _1, A ₂ for testing of the designed as Eurocheque or credit card identifiers. These simplified test devices are used to check the user / owner identity and to check whether the account number printed on the outside has been changed, and they are used overall to check the authenticity of the card by determining by means of the two aforementioned checks whether the required IC is present in the card.

The only difference between the two embodiments is the numerical display field 31 in FIG. 4, which is used to display the number automatically read from the card in order to compare the identification / account numbers so that they can be compared visually with the number 3 on the outside of the card 1 can be.

This display field is not included in the embodiment according to FIG. 5. The test, ie the comparison of the number applied on the outside, which is keyed in here via a keyboard 32 , is carried out inside the card by means of the IC 6 . In accordance with the result of the comparison, the IC sends a signal to the test device which either causes the display to show "enable" or "correct" in a field 33 or "alarm" or "not correct" in a field 34 .

The displays in fields 33 and 34 are used in the same way to compare the personal number. A switch 35 is used to start up the device, while a delete key 36 is used to end a partial test and to delete incorrect entries.

In principle, even with this (simple) type of ID check self-destruction of the IC after a predetermined number of unsuccessful attempts to enter a personal code and possibly identification / account number possible. For such self-destruction is the necessary in the test device electrical power provided.

In FIG. 6, after the above-mentioned function of FIG. 4 and FIG. 5 is a self-explanatory functional diagram of the testing of identifiers in conventional credit / Eurocheque cards or in corresponding non-automatic applications shown.

FIG. 7 shows a block diagram and in FIG. 8 the functional sequence of a recording device A ₃ in the form of an automatic machine, which is also suitable for effecting account management in the identifier.

As a test device, the machine contains a reading part 37 into which the identifier 1 can be inserted. The reading part is capable of supplying the identifier with electricity and sending data to the identifier or receiving data from there. The control of the machine is carried out by the central unit 10 with the program memory 11 , which are shown outside of the identifier to simplify the representation. Data is entered via a built-in keyboard 38 . During the check, notifications and alarms to the outside world and, after passing the check, a release signal can be given to the functional part of the machine to initiate the corresponding transaction. In addition to the account management in the identifier, the data is stored in a data storage device 39 in such a machine. This data storage is either exchanged at intervals and transferred to the EDP at a central office or queried by the central EDV in the case of online operation.

The automat also contains a test device 40 with which it can be determined whether there are connections from the point in the identifier at which the IC is arranged in the case of real cards to the outside of the reading part or the automat. This is intended to secure the system against lawbreakers who want to replace the functional complex of the IC in the identifier with a simulation circuit made up of discrete components outside the identifier.

The identifier can also be retained.

The order to introduce the identifier into one Vending machine can be designed so that after insertion or inserting the identifier by the user Flap or lid manually by the user is closing or the flap or the lid automatically getting closed. The flap or lid are designed that they may lead outward from the identifier Connection lines of any kind through the closing process interrupt, e.g. B. cut off and that they further the identifiers in the machine interact with a fixed around the identifiers reading part of the Automatically applied shielding against non-line dependent Connections, e.g. B. electromagnetic or mechanical  Waves, shield. The closure is designed that the functions of the machine only when fully closed Flap or lid run off and open to be interrupted.

Further testing is initially similar to the simplified test apparatus according to Fig. 4 and Fig. 5, by the personal shopping number is entered. The personal code number is transferred to the identifier and checked for agreement within the identifier.

Only a signal comes back from the identifier, with the Match or mismatch is displayed.

If the personal code number is entered incorrectly, is done a note. The entry can be repeated a maximum of n times. In practice, n is usually the number of three Try chosen. After the nth entry, a failed attempt counter, who are also trained in the identifiers an alarm signal can be issued, the IC in the identifier electrically destroyed and in the identifier Notice of failed attempts entered.

If the personal code number has been entered correctly, you can then the data of the data store from the identifiers issued to identify the User are necessary. Likewise, the usage data and read the account data and saved it in the machine. After reading this data from the identifier the desired transaction can be made in the machine can be entered.

With the help of the terms of use and / or the usage data it is checked whether the desired transaction allows is. If the transaction is not allowed, a hint can be given are issued, and a changed transaction request  must be entered. The transaction is considered allowed The next step is to update the account in the identifier, and also the transaction data recorded in the machine and / or for evaluation transferred to the IT center. Then there is a Release signal from the test part of the machine, and the The transaction is in progress.

In the case of off-line operation, the data storage is limited Exchanged intervals for an empty data storage, and the recorded data are used for evaluation in the IT center brought. One then takes place in the IT center Updating the accounts of the holders of the identifiers, so that the head office depending on the changing rhythm of Data storage in the transaction machine the accounts à jour can hold.

The individual elements of the device described, such as Identifiers, input coding device, testing device and automat, can also be used in other devices. For this Elements is therefore also element protection according to the concerned claims.

Claims (3)

1. Device for performing processing operations with an identifier, which is designed in the form of a card with an integrated circuit accommodated therein, the device having a reading part for receiving and contacting the identifier, characterized in that a locking device is provided for closing the Reading part after the introduction of the identifier and that the functions of the device only run when the locking device is completely closed and are interrupted when opening. 2. Device according to claim 1, characterized in that the locking device as a flap or lid or slide gate is formed. 3. Device according to claim 1, characterized in that the locking device is designed so that the Identifi Cables leading to the outside through the Closing process are interrupted.