JP2003016420A - Ic card and access system therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To manage pieces of security data regarding individual with a single IC card by performing access control over the security data according to whether the security is high or low. SOLUTION: The security data regarding individual are stored in data storage parts 15 and 21 while divided into data with low security which can be used by even a person other than the bearer and data with high security which can be used by only the bearer. The low-security data are freely accessible and the high-security data can be accessed by comparing input fingerprint information (16) with registered fingerprint information (18) by a fingerprint comparing function part 17 and turning on a switch 19 only when they match each other. Consequently, the low-security data and high-security data can easily be managed with only the one IC card while the safety is secured.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card and an access system for the same, and more particularly to an access method for an IC card in which security data regarding an individual is stored.

[0002]

2. Description of the Related Art An IC card stores information relating to various individuals. In order to read this information from the IC card, generally, identification information such as a predetermined secret code number or password is used. Access to the IC card. In addition, recently, when accessing an IC card, instead of the identification information described above, or together with the identification information, fingerprint characteristic data is also used to determine whether or not the person is the IC card, and the access permission control is performed. There is also.

[0003]

In the method of accessing the IC card using only the identification information such as the personal identification number and the password, if the personal identification number and the password are known,
Even another person can access all the data in the IC card, so-called “spoofing” becomes easy, and the security of the data is low.

In the method using fingerprint feature data,
Although the security of data is extremely high, in the event of an emergency such as an accident, the data used by the person's blood type, medical history, and medical institutions such as medical examinations are urgently needed. At a minimum, it has the drawbacks of not being very secure and not being able to smoothly meet the demand for obtaining only the data necessary for treatment.

In other words, in the conventional IC card, when fingerprint characteristic data is used with an emphasis on data security, low security data is treated in the same manner as other high security data. Because it will be
We cannot deal with emergencies such as those mentioned above. On the other hand, if the security of the data is not so important and only the personal identification number or password is used, data with high security, for example, personal information, private key, electronic certificate, etc., can be easily leaked. There's a problem.

Further, in the conventional IC card, when the fingerprint characteristic data is stored, the fingerprint characteristic data is stored in the same memory area as other data, so that another person who knows the personal identification number or password can use it. Has a problem that it can be tampered with and that data other than fingerprint feature data can be referenced (accessed). Therefore, it is conceivable to store the fingerprint feature data in an external server with high security, but in this case, a process called fingerprint collection is required to register the fingerprint feature data in the server. At this time, there is also a problem that it is difficult to realize because the mental dislike of getting a fingerprint works.

An object of the present invention is to provide an IC card which can manage access to personal security data with a single card by enabling access control according to the level of security. Is to provide.

Another object of the present invention is to provide an IC card which can prevent the tampering of fingerprint characteristic data by another person and does not need to register the fingerprint characteristic data to another server or the like.

[0009]

An IC card according to the present invention is an IC card having a security data storage section for storing security data relating to an individual, wherein the individual identification information for identifying the individual is stored in advance. In response to the access from the specific information storage unit and the outside, only the first data, which is a part of the security data, is permitted to be accessed, and the input personal identification information and the personal identification information storage unit are input. When the stored personal identification information is compared with each other and coincides with each other, access permission control means for permitting access to second data having higher security than the first data among the security data is also provided. It is characterized by including.

The access permission control means prohibits access to the second data when the personal identification information input from the outside and the personal identification information stored in the storage unit do not match. It is characterized by Also,
The security data storage unit and the personal identification information storage unit are independent of each other.

Further, the access permission control means, when the personal identification number inputted from the outside is correct, the third data of the security data whose security is positioned between the first data and the second data. It is characterized in that the access is allowed. The personal identification information is characteristic data of any one of a fingerprint, an iris, a retina, a shape of a face, and a voiceprint, and the first security data is data related to blood type, medical history, medical examination, and the like. The second data is data relating to personal information, a secret key, a digital certificate, and the like. The personal identification information is fingerprint characteristic data, and the personal identification information further includes a fingerprint sensor for inputting the fingerprint characteristic data.

The IC card access system according to the present invention comprises a card reading unit for reading an IC card, a personal identification information input unit for inputting the personal identification information when accessing the IC card, and security data for storing security data concerning the individual. A storage unit, a personal identification information storage unit in which personal identification information for identifying an individual is stored in advance, and in response to access from outside, while permitting access to only a part of the security data,
When the personal identification information input from the personal identification information input unit and the personal identification information stored in the personal identification information storage unit are compared and found to be coincident, the partial data out of the security data is extracted. And an IC card having access permission control means for permitting access to data with high security.

That is, in the present invention, the security data relating to an individual is divided into at least two groups of low security data that can be used by others and high security data that is used only by the individual. Low security data can be freely accessed, and high security data can be accessed using personal identification information such as fingerprints. If the entered personal identification information matches the personal identification information registered in advance. Only allow access to. As a result, the low security data and the high security data can be easily managed while ensuring the safety with only one IC card.

The personal identification information such as a fingerprint and the security data are stored in independent memories to prevent falsification of the personal identification information such as a fingerprint.

[0015]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a block diagram showing the configuration of an IC card according to an embodiment of the present invention. I / O (input / output)
The terminal 13 receives an access instruction from the outside and sends out security data for this access. This access instruction is directly input to the low security data access unit 14, and the storage unit 15 that stores the low security data (that is, regarding an individual who is also used by the person himself / herself) among the security data is accessed. Examples of this low security data are blood type,
It is data of medical history, medical examination, and the like, and is data used in medical institutions other than the person himself / herself.

The fingerprint data input terminal 16 is a terminal for inputting fingerprint characteristic data from the outside, and the inputted fingerprint characteristic data is supplied to the fingerprint collation function unit 17. On the other hand, a fingerprint characteristic data storage unit 18 is provided, and fingerprint characteristic data as personal identification information (personal identification information) of the user who owns this IC card is registered in advance. In the fingerprint collation function unit 17, the two pieces of information are compared and collated, a control signal is generated according to the collation result, and the switch 19 is turned on / off.

The access instruction from the I / O terminal 13 is also input to the high security data access section 20 through this switch 19, and the security data has higher security (that is, used only by the person himself / herself). Storage unit 2 that stores information about individuals
1 access is made. Examples of this high security data are personal information (name, address, telephone number, date of birth), private key (used during communication by public key cryptography on the Internet), data such as electronic certificate. Yes, it is data used only by the person himself.

FIG. 2A is a diagram showing the outline of the architecture of the IC card shown in FIG. 1. The IC card 1 has a CPU 11 and a memory 12, and I
In addition to the / O terminal 13, a power supply terminal (± 5V, OV), "R
There is an "set (reset)" terminal and a "Clock (clock)" terminal.

The memory 12 is a RAM as a working memory.
(Random access memory) 121 and ROM (read-on memory) 12 storing the operation program of the CPU
2 and storage units 15, 18 for storing various data shown in FIG.
21 and an EEPROM (electrically erasable programmable ROM) 123 corresponding to 21. This EEP
Although the ROM is shown as a single unit in the figure, each storage unit 1
In addition to being able to be physically independent in correspondence with 5, 18, and 21, address spaces can be treated as if they were physically independent by independently allocating address spaces.

An example of specifications of the CPU and the memory is shown in FIG. 2B, but this is merely an example, and the present invention is not limited to this.

FIG. 3 is a schematic block diagram of a card access system using the IC card of FIG.
Is connected to the computer 2 via a card R / W (read / write) device 3. In addition, a fingerprint reader 4 is provided, and in order to authenticate a user who accesses the IC card 1, the finger 5 of the user is placed to read the fingerprint of the finger 5 electrically or optically. Then, it has a function of converting it into electric digital information, extracting characteristic data, and sending it to the computer 2. Since such a fingerprint reading device 4 is well known, its description is omitted.

The operation of the embodiment of the present invention will be described below with reference to the flowchart of FIG. 4 and the state transition diagram of FIG. In FIGS. 4 and 5, the same reference numerals indicate equivalent operations (states). First, when the IC card 1 is inserted into the card R / W device 3 shown in FIG. 3 (step S
1), the I / C card 1 is powered on from the card R / W device 3. In this state, the switch 19 between the I / O terminal 13 and the high security data access section 20 is in the off state, so that the I / O terminal 13 is logically connected only to the low security data access section 14. become. Therefore, it is possible to access only the data storage unit 15 storing the low security data (step S
2).

This state is maintained until the fingerprint collation function unit 17 collates the fingerprint feature data stored in the fingerprint feature data storage unit 18 with the input fingerprint data and it is determined that they match. . Here, when the user places the finger 5 on the fingerprint reading device 4 of FIG. 3 and fingerprint data is collected, the fingerprint data is collected by the computer 2 and the card R / W.
The data is supplied to the fingerprint data input terminal 16 of the IC card via the device 3 (step S3).

The input fingerprint data and the fingerprint feature data stored in the fingerprint feature data storage unit 18 are subjected to a match determination process in the fingerprint matching function unit 17 (step S4). When it is determined that they match in this matching determination processing (step S5), the switch 19 is turned on and I
The / O terminal 13 is logically connected to the high security data access unit 20 as well as the low security data access unit 14. Therefore, not only the low security data but also the high security data in the data storage unit 21 can be accessed (step S6). This state is maintained until the IC card is removed from the card R / W device 3 (step S7).

If it is determined in step S5 that they do not match, the fingerprint collating function unit 17 does not generate a control signal for turning on the switch 19. Therefore, I / O
Since the terminal 13 and the high security data access unit 20 are not logically connected, access to high security data is prohibited.

In the above configuration, the private key, the electronic certificate, etc. are stored in the data storage unit 21 as high security data, and the blood type, medical history, medical examination, etc. are stored in the storage unit 15 as low security data. By setting it, it becomes possible to store not only low security data but also high security data with one card while ensuring the security thereof. That is, the high security data such as the private key and the electronic certificate can be called from the IC card only at the time of fingerprint authentication.

For example, the private key is used at the time of communication by the public key cryptosystem on the Internet, but it is guaranteed that the private key used for the transmitted content is surely the one of himself. At the same time, it is possible to guarantee that the person who used the secret key is the person himself.

Since the low security data can be accessed not only by the person but also by another person, if the person is in a critical condition due to an accident or illness, it can be accessed by a medical person. In addition, as the fingerprint characteristic data, if the person himself / herself is a prohibited child, fingerprint data of a guardian can be registered, and this IC card can be used by a guardian instead of the person himself / herself. Become.

Further, fingerprint data of a plurality of fingers of the person (right forefinger, left forefinger, etc.) can be registered, and even if the fingertip is injured due to injury or the like, the person's denial rate can be lowered. You can also

In the above embodiment, the security data is divided into high and low levels according to the security.
Divided into 3 steps, the lowest security data can be accessed not only by the person but also by others, the middle security data is the access method using the identification number and the identification information of the password as before, and the highest security data is the fingerprint. By using the access method based on the collation result based on the characteristic data, the data of three security levels is 1
One IC card is enough.

By replacing the fingerprint data input terminal 16 with a fingerprint sensor, the fingerprint reading device 4 shown in FIG. 3 becomes unnecessary. Further, in order to identify the person, in addition to using fingerprint feature data, it is possible to use information that can identify the person, for example, biological information (biometric information) such as iris, retina, face shape, and voiceprint. Is clear.

[0032]

As described above, according to the present invention, the access permission control according to the security level of the security data about an individual is performed by using the personal identification information such as the fingerprint. There is an effect that a single card can manage these various data. In addition, even if the card is passed to another person when the card is lost, the high security data cannot be accessed without the personal identification information such as the fingerprint of the person, so that the safety of the high security data can be secured.

Further, the fingerprint characteristic data is stored in an independent memory (storage unit) separate from the security data concerning the individual, so that even if the card is passed to another person, the fingerprint characteristic data is stored. Since it is not possible to access the storage part of the fingerprint feature data, it is possible to prevent the fingerprint feature data from being tampered with, and it is not necessary to store the fingerprint feature data in another highly secure server, etc. There is an effect that the feeling is wiped off.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of an IC card according to an embodiment of the present invention.

2A is a diagram showing the architecture of the IC card of FIG. 1, and FIG. 2B is a diagram showing an example of its specifications.

FIG. 3 is a schematic configuration diagram of an access system of the IC card of FIG.

FIG. 4 is a flowchart showing the operation of the IC card of the embodiment of the present invention.

FIG. 5 is a state transition diagram of the IC card according to the embodiment of the present invention.

[Explanation of symbols]

1 IC card 2 computers 3 card R / W device 4 fingerprint reader 5 fingers 11 CPU 12 memories 13 I / O terminals 14 Low security data access section 15,21 data storage 16 Fingerprint data input terminal 17 Fingerprint matching function section 18 Fingerprint feature data storage 19 switch 20 High security data access section

   ─────────────────────────────────────────────────── ─── Continued front page    F term (reference) 2C005 HA03 JB01 JB06 JB40 MA04                       SA12 SA13 SA15 SA16 SA22                 5B035 AA13 BB09 CA38                 5B058 CA01 CA27 KA02 KA08 KA31                       KA38

Claims (8)

[Claims] 1. An IC card having a security data storage unit storing security data about an individual, the personal identification information storage unit pre-stored individual identification information for identifying the individual, and access from outside. In response, the access to only the first data, which is a part of the security data, is permitted, and the input personal identification information is compared with the personal identification information stored in the personal identification information storage unit. If the two match, the IC card includes an access permission control unit that also permits access to second data having higher security than the first data among the security data. 2. The access permission control means prohibits access to the second data when the personal identification information input from the outside and the personal identification information stored in the storage unit do not match. The IC card according to claim 1, wherein: 3. The IC card according to claim 1, wherein the security data storage section and the personal identification information storage section are independent of each other. 4. The access permission control means, when the personal identification number inputted from the outside is correct, the third data of the security data whose security is positioned between the first data and the second data. 4. The IC card according to claim 1, wherein the access is permitted. 5. The IC card according to claim 1, wherein the personal identification information is characteristic data of any of a fingerprint, an iris, a retina, a face shape, and a voice print. 6. The first security data is data relating to blood type, medical history, medical examination, etc., and the second data is data relating to personal information, private key, electronic certificate, etc. The IC card according to any one of claims 1 to 5. 7. The IC card according to claim 1, wherein the personal identification information is fingerprint characteristic data, and a fingerprint sensor for inputting the fingerprint characteristic data is further included. 8. A card reading unit for reading an IC card, an individual identification information input unit for inputting the individual identification information when accessing the IC card, a security data storage unit for storing security data about the individual, and an individual identification Personal identification information storage unit for storing personal identification information in advance, and in response to an access from the outside, only a part of the security data is permitted to be accessed and is input from the personal identification information input unit. When the personal identification information and the personal identification information stored in the personal identification information storage unit are compared and coincident with each other, access is made to data having higher security than the part of the security data. And an IC card having access permission control means for permitting Seth system.