JP2002269529A - Password collating method and password collation system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a password collating method capable of collating password at a low cost to a plurality of cards having a common password. SOLUTION: This password collation method comprises performing, in a noncontact IC card and a reader/writer, four arithmetic operations, bit operation, logic operation or combinations thereof by use of inherent data, such as unique ID, serial number or the like possessed by each card and the predetermined common password used in a system, thereby forming and writing a password which differ by each card in the IC card at card issuing, and forming, at the time of password collation, a password natural to the card from the natural data of the IC card and the common password to the IC card by the same operation as in the issuing in the reader/writer or by host equipment followed by transmitting to the IC card, thereby performing collating within the IC card.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a non-contact data communication system for use in an ID card, a commuter pass, a prepaid card, etc.
It is suitable for use in non-contact type IC cards and reader / writers that can only read data or can read and write, have a password verification function, and do not have a communication data collision prevention function or a card selection function. The present invention relates to a password collation method and a password collation system.

[0002]

2. Description of the Related Art Conventionally, in a system of an IC card and a reader / writer that perform non-contact communication, when collation is performed using a predetermined password, which is allocated to each applied system and is determined in advance, a single card is used. IC cards and readers / writers designed to access
When a plurality of cards are held at the same time, a password can be simultaneously authenticated because of a common password, and there is a possibility that the same data can be rewritten or illegally read / written on a plurality of cards.

FIG. 7 is an external view of a case where two IC cards are held over a reader / writer that does not have a collision prevention function or a selection function. FIG. 8 shows the state of the reader /
FIG. 9 is an explanatory diagram of the operation of the writer. In FIG. 8, when a password collation command is allocated from the reader / writer to the IC card-1 and the IC card-2 by using a common password which is allocated to each applied system and is predetermined, each IC The card performs verification,
Send the response to the reader / writer.

[0004] Even if a response from each IC card collides in communication, each card is in a collated state, and the memory area of the IC card can be accessed. Therefore, from the reader / writer to the IC
When a data write command is transmitted to an area of the memory in the card, data is written to both of the two IC cards.

[0005]

As means for preventing this, there is an IC card and reader / writer system having a function of preventing communication collision between the IC card and the reader / writer and a card selecting function. To replace the IC card and the entire reader / writer system,
New development of card and reader / writer is necessary,
Its development time and cost were problems.

Accordingly, it is an object of the present invention to provide a password collation method and a password collation system capable of inexpensively collating a password with a plurality of IC cards having a common password.

[0007]

SUMMARY OF THE INVENTION In order to solve the above problems, the present invention provides a unique ID of each IC card.
And a common password used in the system,
By performing a combination of the four arithmetic operations, bit operations, logical operations, or the operations described on the left, a different password is generated for each card when an IC card is issued and written into the card. The unique password of the card is generated from the unique data of the IC card and the common password by the same calculation as at the time of issuance, and transmitted to the IC card, so that the collision prevention function or the selection function is performed by collation inside the IC card. An object of the present invention is to provide a collation method in which a password can be collated with a specific IC card even with an IC card and a reader / writer that do not have the card.

That is, the present invention relates to a password collation method for a non-contact type IC card and a reader / writer,
By performing a combination of four arithmetic operations, bit operations, logical operations, or left operations using unique data such as a unique ID and a serial number of each card and a predetermined common password used in the system, an IC is provided. When a card is issued, a different password is created for each card and written into the IC card. Also, at the time of password collation, the IC is calculated from the internal data of the IC card and a common password from the internal device of the reader / writer or a higher-level device using the same calculation as at the time of issuance. This is a password collation method in which a password unique to the card is created and transmitted to the IC card for collation inside the IC card.

The present invention is also a password collation method in which the non-contact type IC card and reader / writer do not have a communication data collision preventing function or a card selecting function.

The present invention also relates to a password collating system for a non-contact IC card and a reader / writer, wherein the password collating system comprises a plurality of non-contact IC cards and a reader / writer; The contact type IC card has a unique ID and a serial number, and the reader / writer determines the unique data such as the unique ID and serial number of the non-contact type IC card and a predetermined data used in the system. Using a common password, a combination of the four arithmetic operations, bit operations, logical operations, or the operations described on the left, create a different password for each card when a non-contact IC card is issued, write it in the IC card, and verify the password. Is the unique data of the IC card and the common password from inside the reader / writer or from the host device? Create an IC card-specific password in the same operation as when issuing a password verification system for verification within the IC card by transmitting to the IC card.

Further, the present invention is a password collating system in which the non-contact type IC card and reader / writer do not have a communication data collision preventing function or a card selecting function.

[0012]

DESCRIPTION OF THE PREFERRED EMBODIMENTS A password collating method and a password collating system according to an embodiment of the present invention will be described below.

FIG. 1 is an external view of a password collating method according to the present invention when two IC cards are held over a reader / writer.

FIG. 2 is an explanatory diagram of the operation of the reader / writer in the external view of FIG.

FIG. 3 is a diagram showing a memory map of an IC card in the password collating method according to the embodiment of the present invention. In the map of the memory in the IC card in FIG. 3, area A is an access free area, and area B is an area accessible after password verification.

FIG. 4 is a diagram showing a procedure for accessing a memory in an IC card in the password collating method according to the embodiment of the present invention. In the access procedure for the area B in the IC card, as shown in FIG. 4, data can be read and written after password verification.

Here, in FIG. 7, the IC card 2 is provided to a reader / writer that does not have a collision prevention function or a selection function.
There is a problem that data is written to both IC cards when the cards are held up, but the password matching method of the present invention performs password matching by the method described below. That is, different passwords are created for each IC card so that a plurality of IC cards are not simultaneously checked by a common password. This will be described.

FIG. 5 is an explanatory diagram of a procedure for creating a password in the password matching method according to the embodiment of the present invention. As shown in FIG. 5, first, the unique data (unique ID and serial number) of the IC card is read from the area C of the memory in the IC card from the reader / writer. Next, a predetermined calculation is performed using the common password used in the system and the read unique data, and a different password is created for each card. The computations performed in this case were performed using four arithmetic operations and bit operations.

FIG. 6 shows an example of the contents of the password and ID calculations in the password matching method according to the embodiment of the present invention.
From FIG. 6, first, the lower 4 bits of the password and b of ID1
It7 is added to bit0 to bit2 of ID2, and the result is set to bit0 to bit4 of NEW_PSW1. If there is a carry, carry 4 to bit
Set to 5. Bit0 of ID1 and bit4 of ID4
0 is added, and the result is set in bit6 of NEW_PSW1. If there is a carry, set bit7. This completes the processing for one byte (NEW_PSW1).

Next, the lower 4 bits of PSW2 and bit3 to bit6 of ID2 are added, and the result is added to NEW_PS.
Set to bit0 to bit3 of W2. If there is a carry, the carry is added to bits 4 and bi of NEW_PSW2.
Set to t5.

The bit2 of ID2 is added to the bit1 of ID4, and the result is set in bit6 of NEW_PSW2. If there is a carry, set bit7. This completes the process for the second byte (NEW_PSW2). Hereinafter, similarly, NEW_PSW3, NEW_PSW
Operation 4 is performed by setting the bit of each data as shown in FIG. The created password is written into the area D of the memory in the IC card by using a write command. This completes the writing of the IC card from the creation of the password.

When performing the calculation, the calculation may be performed using a plurality of passwords. The calculation using the data unique to the IC card and the common password is preferably performed inside the reader / writer from the viewpoint of security, but may be performed by a higher-level device of the reader / writer. FIG. 6 shows, as an example, the contents of the calculation at the time of password creation performed in the present case.

A case where the password is collated using the password created by the above method will be described. First, IC card 1
Is read out from the memory area C, and an operation determined using the ID and the common password is performed inside the reader / writer or in a higher-level device of the reader / writer, and the result is transmitted to the IC card as a password as a collation command. Send with. In the target IC card 1, when the correct password is received, the state is already verified, and the data can be read and written in the memory area B for which access has been restricted. Since the IC card 2 is different from the password that the user himself / herself has, the state of the IC card 2 is not verified, and the memory area B cannot be accessed.

When reading the ID, the IC card 1 and the IC
If the cards 2 respond at the same time, the data will collide, and the reader / writer will not be able to receive data normally. Therefore, the reader / writer performs error processing and does not execute password collation.

[0025]

As described above, according to the present invention, using the unique ID of each card and the common password used in the system, four arithmetic operations, bit operations, logical operations, or By performing a combination of calculations, a different password is generated for each card when the card is issued and written inside the card.
A collision prevention function is generated by generating a password unique to the card from the reader / writer or from a higher-level device from the unique data of the card and the common password by the same operation as at the time of issuance, transmitting it to the card, and collating it inside the card. Alternatively, it is possible to provide a password collation method and a password collation system capable of collating a password with a specific card even with a card having no selection function and a reader / writer.

[Brief description of the drawings]

FIG. 1 is an external view of a password collation method according to the present invention when two IC cards are held over a reader / writer.

FIG. 2 is an explanatory diagram of the operation of the reader / writer in the external view of FIG. 1;

FIG. 3 is a diagram showing a memory map of an IC card in a password collating method according to an embodiment of the present invention.

FIG. 4 is a view showing a procedure for accessing a memory in an IC card in the password collating method according to the embodiment of the present invention.

FIG. 5 is an explanatory diagram of a procedure for creating a password in the password matching method according to the embodiment of the present invention.

FIG. 6 is a diagram showing an example of the contents of a password and ID calculation in the password matching method according to the embodiment of the present invention.

FIG. 7 is an external view when two IC cards are held over a reader / writer that does not have a collision prevention function or a selection function.

8 is an explanatory diagram of the operation of the reader / writer in the external view of FIG. 7;

[Explanation of symbols]

 1,2,1 ', 2' IC card 3,3 'reader / writer

Claims (4)

[Claims] 1. A password collating method for a non-contact type IC card and a reader / writer, comprising: an arithmetic operation using unique data of the non-contact type IC card and a predetermined common password used in a system; By performing a bit operation, a logical operation, or a combination of the operations described on the left, a different password is created for each card at the time of issuing the IC card and written in the IC card. A password collation method characterized in that a password peculiar to an IC card is created from the unique data of the card and a common password by the same operation as at the time of issuance, and transmitted to the IC card for collation inside the card. 2. The non-contact type IC card and a reader /
2. The password verification method according to claim 1, wherein the writer does not have a communication data collision prevention function or a card selection function. 3. A password collating system for a non-contact IC card and a reader / writer, wherein the password collating system comprises a plurality of non-contact IC cards and a reader / writer, and the plurality of non-contact IC cards. Has unique data, and the reader / writer uses the unique data of the non-contact type IC card and a predetermined common password used in the system to perform four arithmetic operations, bit operations, and logical operations. Or a combination of the above calculations, creating a different password for each card when a non-contact IC card is issued and writing it inside the IC card, and at the time of password verification, inside the reader / writer, or from a higher-level device, Create a password unique to the IC card from the data and the common password by the same calculation as when issuing it, By sending to the IC card,
A password collation system characterized by collation inside a C card. 4. The non-contact IC card and a reader /
4. The password verification system according to claim 3, wherein the writer does not have a communication data collision prevention function or a card selection function.