Patent Grant
11164061
This application is based upon and claims the benefit of priority from Japanese Patent Application No. 2018-218392, filed Nov. 21, 2018, the entire contents of which are incorporated herein by reference.
Embodiments described herein relate generally to an IC card, a portable electronic device, an IC card processing method and a program.
A portable electronic device such as an IC card comprises a sensor for obtaining biological information of a user such as a fingerprint sensor. Such a portable electronic device performs an authentication process based on information obtained through use of the sensor.
Conventionally, one issue surrounding the portable electronic device has been its inability to perform an authentication process when there is an abnormality in the sensor.
In order to resolve the above issue, the present disclosure offers an IC card, a portable electronic device, an IC card processing method and a program which allow the authentication process to continue even if an abnormality occurs in the sensor.
A general architecture that implements the various features of the embodiments will now be described with reference to the drawings. The drawings and the associated descriptions are provided to illustrate the embodiments and not to limit the scope of the invention.
According to an embodiment, an IC card comprises a sensor, a storage, and a processor. The sensor obtains information for authentication. The storage stores an authentication list showing one or more authentication methods which use information from the sensor. The processor determines whether if there is an abnormality exists in the sensor. If it determines that the sensor is indeed abnormal, it updates the authentication list accordingly.
Hereinafter, certain embodiments will be described in detail with reference to the accompanying drawings.
An IC card processing system according to an embodiment authenticates a user who possesses the IC card. For example, the IC card processing system authenticates the user using the IC card inserted into an IC card processing device. The IC card processing system authenticates the user by a predetermined authentication method. More specifically, the IC card processing system may authenticate the user through PIN authentication, signature or fingerprint authentication.
For example, the IC card processing system authenticates the user of the IC card as either a cash card or a credit card (a cash card user or a credit card user). The IC card intended for the IC card processing system is not limited to a specific use or structure.
In the configuration example shown in
The processor 11 has the function of controlling the operation of the entire IC card processing device 1. The processor 11 may comprise an inner cache and various interfaces. The processor 11 realizes various processing actions by executing a program pre-stored in an internal memory, or in the ROM 12 or NVM 14. The processor 11, by executing the program, implements a function of transmitting a command to the IC card 2 by the reader writer 15, and a function of performing various processing actions based on data such as responses received from the IC card 2. Through such functions, the processor 11 transmits an authentication command which includes data necessary for authentication, through the reader writer 15 to the IC card 2.
Some of the various functions realized by the program executed by the processor 11 may be realized by a hardware circuit. In this case, the processor 11 controls the functions performed by the hardware circuit.
The ROM 12 is a non-volatile memory in which a control program, control data, etc. have been stored in advance. The control program and the control data stored in the ROM 12 are incorporated depending on the specification of the IC card processing device 1 in advance. The ROM 12, for example, stores the program to be controlled on a circuit board of the IC card processing device 1.
The RAM 13 is a volatile memory. The RAM 13 temporarily stores processing data of the processor 11. The RAM 13 stores various application programs based on instruction from the processor 11. Further, the RAM 13 may store data necessary for executing the application programs and execution results of the application programs.
The NVM 14 is a non-volatile memory capable of writing and rewriting data. The NVM 14 is constituted by, for example, an HDD (Hard Disk Drive), an SSD (Solid State Drive) or a flash memory. The NVM 14 stores control programs, applications and various data depending on the operational use of the IC card processing device 1.
The reader writer 15 is an interface for transmitting/receiving data to/from the IC card 2. The reader writer 15 is constituted by an interface that fits the communication system adopted by the IC card 2.
For example, if the IC card 2 is a contact type IC card, the reader writer 15 is configured with a contact unit, etc. for physical and electrical connection to the contact section of the IC card 2.
If the IC card 2 is a non-contact type IC Card, the reader writer 15 is configured with an antenna, a communication control unit, etc. for performing wireless communication with the IC card 2. The reader writer 15 performs power supply, clock supply, reset control, and transmission/reception of data for the IC card 2.
Through execution of such functions, the reader writer 15 performs power supply to the IC card 2, activation (start) of the IC Card 2, clock supply, reset control, transmission of various commands, and reception of responses to transmitted commands, under the control by the processor 11.
The operation unit 16 receives inputs of various operation instructions from the user. The operation unit 16 transmits the data of operation instructions input by the user to the processor 11. The operation unit 16 is, for example, a keyboard, a ten key, and a touch panel. Further, the operation unit 16 may be a panel that accepts an input of signature.
The display 17 is a display device that displays various information under the control of the processor 11. The display 17 is, for example, a liquid crystal monitor. Furthermore, when the operation unit 16 is constituted by a touch panel, the display 17 may be integrally formed with the operation unit 16.
The communication unit 18 is an interface for data transmission/reception with the server 10. For example, the communication unit 18 connects to the server 10 through a communication network such as the Internet. The communication unit 18 is, for example, an interface for supporting LAN connection.
The server 10 manages the IC card processing device 1. For example, the server 10 receives and stores operation logs etc. from the IC card processing device 1.
Furthermore, the server 10 performs PIN authentication online (online PIN authentication). The server 10, for example, receives a PIN from the IC card processing device 1 and verifies the received PIN with a pre-registered PIN. The server 10 transmits the verification result to the IC card processing device 1.
The IC card 2 is activated (turns an operable state) through receiving a supply of power from an external device such as the IC card processing device 1. The IC card 2 may perform contact type communication or non-contact type communication with the IC card processing device 1.
Next, a configuration example of the IC card 2 will be explained.
As shown in
The IC card 2 may comprise other configurations from those shown in
The processor 21 functions as a controller for controlling the entire IC card 2. The processor 21 performs various processing based on the control program and control data stored in the ROM 22 or NVM 24. For example, the processor 21 performs operation control of the IC card 2 or various processing depending on the operation of the IC card 2, by executing the program stored in the ROM 22.
Some of the various functions realized by the processor 21 performing a program may be realized by a hardware circuit. In this case, the processor 21 controls the functions performed by the hardware circuit.
The ROM 22 is a non-volatile memory storing a control program and control data in advance. The ROM 22 is incorporated into the IC card 2 with the control program and the control data already stored at the manufacturing stage. In other words, the control program and the control data stored in the ROM 22 are incorporated depending on the specification of the IC card 2, etc. in advance.
The RAM 23 is a volatile memory. The RAM 23 temporarily stores data of the processor 21 during processing. For example, the RAM 23 functions as a calculation buffer, reception buffer and transmission buffer. The calculation buffer temporarily stores the results, etc. of the various calculation processing executed by the processor 21. The reception buffer holds command data, etc. received from the reader writer 15 via the communication unit 25. The transmission buffer holds messages (response data), etc. to be transmitted to the reader writer 15 via the communication unit 25.
The NVM 24 (storage) is constituted by a non-volatile memory capable of writing and rewriting data, such as a flash ROM. The NVM 24 stores control programs, applications and various data depending on the operational use of the IC card 2. For example, program files and data files are created using the NVM 24. Each of the created files is written with control programs and various data.
Further, the NVM 24 stores authentication lists, etc. Matters regarding the authentication list will be described later.
The communication unit 25 is an interface for transmitting/receiving data to/from the reader writer 15. In other words, the communication unit 25 is an interface for transmitting/receiving data to/from the IC card processing device 1.
If the IC card 2 is a contact-type IC card, the communication unit 25 is configured by a communication controller and a contact section for transmission/reception of signals through physical and electrical contact with the reader writer 15. For example, the IC card 2 is activated by receiving supply for the operation power and the operation clock from the reader writer 15 via the contact section.
If the IC card 2 is a non-contact type IC Card, the communication unit 25 is configured by a communication controller and an antenna, the communication controller being a modulation/demodulation circuit for performing wireless communication with the reader writer 15. The IC card 2 receives, for example, radio waves from the reader writer 15 via the antenna and modulation/demodulation circuit. The IC card 2 generates the operation power and the operation clock by a power source (not shown) from the radio waves for activation.
Further, the communication unit 25 is an interface for transmitting/receiving data to/from the MPU 26. The communication unit 25 obtains the verification result of a fingerprint through the MPU 26.
The MPU 26 processes the fingerprint information from the fingerprint sensor 27. The MPU 26, for example, performs verification processing of the fingerprint information from the fingerprint sensor 27. In other words, the MPU 26 determines whether or not the fingerprint information from the fingerprint sensor 27 matches with the preset fingerprint information. The MPU 26 transmits the verification result to the processor 21 via the communication unit 25.
The fingerprint sensor 27 obtains fingerprint information (biological information) which shows a fingerprint from a finger of a user. The fingerprint sensor 27, for example, comprises a capacitance type fingerprint sensor. The fingerprint sensor 27 transmits the fingerprint information to the MPU 26. The fingerprint information is, for example, a fingerprint image derived from a size of the capacitance.
The fingerprint sensor 27 may extract features from the fingerprint image and generate fingerprint information indicating the features. The fingerprint sensor 27 may transmit the generated fingerprint information to the MPU 26.
Next, the authentication list will be explained.
The authentication list shows multiple authentication methods for authenticating the user possessing the IC card 2. The authentication list shows authentication methods corresponding to the condition(s) for the processing performed with the use of the IC card 2. More specifically, the authentication list may show an authentication method corresponding to the condition(s) regarding the amount of money (for example, for a withdrawal or settlement) for a processing operation performed with the use of the IC card 2. Furthermore, the authentication list may show multiple authentication methods for the same condition. For example, the authentication list may show a priority order of authentication methods corresponding to the condition. That is, the authentication list shows both an authentication method performed first, and an authentication method to be performed subsequently when the first method fails.
The “priority” indicates a priority order of the authentication method. In other words, the “priority” shows a priority order of the authentication methods corresponding to the same condition. The “priority” here indicates a higher priority order when the number is younger.
The “authentication method” shows authentication methods for authenticating the user using the IC card 2. For example, the “authentication method” includes the authentication method for authenticating with the use of information from the sensor, such as the fingerprint sensor 27. The “authentication method” here indicates “fingerprint authentication”, “offline PIN authentication”, “handwritten signature” or “online PIN authentication.”
The “fingerprint authentication” is an authentication method for checking the fingerprint information obtained through the fingerprint sensor 27 against preset fingerprint information (fingerprint information stored in the NVM 24, etc.).
The “offline PIN authentication” is an authentication method for checking the PIN input to the operation unit 16, etc. of the IC card processing device 1 against a PIN previously stored in the NVM 24, etc.
The “handwritten signature” is an authentication method for checking the signature input to the operation unit 16, etc. of the IC card processing device 1, against a pre-registered signature. For the “handwritten signature”, the signature may be checked either by the processor 21 of the IC card 2 or by the server 10.
The “online PIN authentication” is an authentication method which lets the server 10 check the PIN input to the operation unit 16, etc. of the IC card processing device 1. For example, the processor 11 of the IC card processing device 1 transmits the PIN input to the operation unit 16 etc. to the server 10. The server 10 checks the PIN received from the IC card processing device 1 against a pre-registered PIN. The server 10 transmits the verification result to the IC card processing device 1.
The “condition” indicates a condition for adopting the corresponding “authentication method.” The “condition” here is a monetary condition (an amount of money) related to the processing using the IC card 2. In the example shown in
In the example shown in
Further, in the authentication list, when the amount of the processing using the IC card 2 is below 10000 JPY, the indicated authentication method is “offline PIN authentication”, “handwritten signature” and “online PIN authentication.” The authentication list indicates that the priority order declines in the order of “offline PIN authentication”, “handwritten signature” and “online PIN authentication.”
The authentication list is not limited to a specific structure or configuration.
The authentication list is stored in the NVM 24 in advance. The authentication list is, e.g., stored in the NVM 24 when issuing the IC card 2.
The authentication list is, e.g., a CVM (Cardholder Verification Method) list.
Next, the functions realized by the IC card 2 will be explained. The functions of the IC card 2 are realized by the processor 21 executing a program stored in the ROM 22 or NVM 24, or the like.
The processor 21 has a function of determining the authentication method for authenticating the user from a plurality of authentication methods indicated in the authentication list.
It is assumed here that the user sets the IC card 2 to the reader writer 15 so that the IC card processing device 1 and the IC card 2 are able to communicate. It is further assumed that the user is to perform a predetermined processing operation (for example, the withdrawal or payment of money) using the IC card 2.
The processor 21 transmits the authentication list through the communication unit 25 to the IC card processing device 1.
The processor 11 of the IC card processing device 1 obtains the authentication list through the reader writer 15. When the authentication list is obtained, the processor 11 specifies the processing using the IC card 2 based on the operation from the user, etc. For example, the processor 11 accepts the input of the amount related to the processing using the IC card 2.
When the processing is specified, the processor 11 obtains the authentication method corresponding to the specified processing from the received authentication list. When the authentication method is obtained, the processor 11 transmits information indicating the obtained authentication method (for example, the authentication command showing the authentication method) through the reader writer 15 to the IC card 2.
The processor 21 of the IC card 2 obtains this information through the communication unit 25. When the information is obtained, the processor 21 determines, as the authentication method for authenticating the user, the authentication method indicated by the information.
The processor 21 does not need to transmit the authentication list to the IC card processing device 1. In this case, the processor 11 of the IC card processing device 1 transmits to the IC card 2, through the reader writer 15, information (e.g., the information showing the amount of money) showing the processing that makes use of the IC card 2.
The processor 21 of the IC card 2 receives this information through the communication unit 25. When the information is received, the processor 21 obtains the authentication method corresponding to the processing indicated by the information from the authentication list. When the authentication method is obtained, the processor 21 determines that the obtained authentication method is the authentication method for authenticating the user.
Further, the processor 21 has a function of authenticating the user based on the determined authentication method.
When the authentication method is determined, the processor 21 authenticates the user in accordance with this authentication method.
For example, when the authentication method is a fingerprint authentication, the processor 21 obtains user fingerprint information through the fingerprint sensor 27. When the fingerprint information is obtained, the processor 21 checks the obtained fingerprint information. For example, the processor 21 checks the obtained fingerprint information against preset fingerprint information using the MPU 26.
Further, when the authentication method is an offline PIN authentication, the processor 21 checks the PIN included in the authentication command against a preset PIN. If the PIN is not included in the authentication command, the processor 21 may, via the communication unit 25, transmit a response requesting the PIN to the IC card processing device 1.
When the checking is successful, the processor 21 transmits, via the communication unit 25, a response indicating that the verification was successful to the IC card processing device 1.
Further, the processor 21 has a function to check for whether there is an abnormality in the sensor such as the fingerprint sensor 27.
For example, if the verification of the authentication processing fails, the processor 21 checks if there is an abnormality in the sensor used in the authentication processing. In an exemplary instance, if the verification of fingerprint information (fingerprint authentication) fails, the processor 21 checks if there is an abnormality in the fingerprint sensor 27.
For example, the processor 21 checks for an abnormality with a predetermined self-diagnosis program. The processor 21 checks whether there is an abnormality in the sensor by checking the signal from the sensor (for example, the fingerprint sensor 27) in accordance with the self-diagnosis program. The processor 21 may run the self-diagnosis program multiple times to determine if there is an abnormality in the sensor when an abnormality is detected consecutively. The method of the processor 21 checking for an abnormality in the sensor is not limited to a specific method.
Further, the processor 21 may check for an abnormality in the sensor in accordance with the command from the IC card processing device 1 at the activation of the IC card 2.
In addition, the processor 21 has a function of updating the authentication list when an abnormality in the sensor has been determined.
The processor 21 updates the contents concerning the authentication method using information from the sensor determined as being abnormal. In other words, the processor 21 updates the authentication list so as not to perform the authentication method using information from the sensor determined as being abnormal. The following explains what happens when the processor 21 determines that the fingerprint sensor 27 is abnormal.
The processor 21 updates the contents concerning the authentication method (in other words, fingerprint authentication) using information (in other words, fingerprint information) from the fingerprint sensor 27. For example, the processor 21 substitutes the “fingerprint authentication” with other authentication methods in the authentication list. More specifically, the processor 21 may change the “fingerprint authentication” to “offline PIN authentication.” Particulars of the change may be prescribed in the program in advance and stored in the ROM 22 or NVM 24.
The processor 21 may instead delete the “fingerprint authentication” from the authentication list. In other words, the processor 21 may delete the “fingerprint authentication”, a “condition” corresponding to the “fingerprint authentication”, and a “priority” corresponding to the “fingerprint authentication.” The processor 21 may elevate the “priority” which is subsequent to the deleted “priority.” How the deletion and elevation should be performed may be prescribed in the program in advance and stored in the ROM 22 or NVM 24.
If the processor 21 deletes the “fingerprint authentication”, “priority” and “transaction amount 10000 JPY or over” from the authentication list, and there is no other authentication method corresponding to “transaction amount 10000 JPY or over”, the IC card 2 cannot perform authentication processing for “transaction amount 10000 JPY or over.”
The processor 21 may set a limit regarding the authentication processing of the IC card 2 when the authentication list is updated. For example, the processor 21 may set a limit on a number of times for which authentication processing can be performed, or a time limit for the authentication processing of the IC card 2.
When the authentication method is changed (for example, in the case of
When the authentication list is updated, the processor 21 determines if authentication processing corresponding to the processing using the IC card 2 is on the authentication list. When the authentication processing corresponding to the processing using the IC card 2 is determined to be on the authentication list, the processor 21 returns to the process of determining the authentication method for authenticating the user from the authentication methods indicated on the authentication list.
In addition, when it is determined that the authentication processing corresponding to the processing using the IC card 2 is not on the authentication list, the processor 21 transmits to the IC card processing device 1, through the communication unit 25, a response indicating that the authentication processing has failed.
Further, when it is determined that there is no abnormality in the sensor, the processor 21 transmits to the IC card processing device 1, through the communication unit 25, a response indicating that the authentication processing has failed.
Next, the operational example of the IC card 2 will be explained.
First, the processor 21 of the IC card 2 determines the authentication method for authenticating the user from multiple authentication methods indicated on the authentication list (S11). When the authentication method is determined, the processor 21 performs the authentication processing in accordance with the determined authentication method (S12).
If the authentication fails (S13, NO), the processor 21 checks if there is an abnormality in a sensor used in the authentication processing (S14).
When it is determined that there is an abnormality in the sensor (S15, YES), the processor 21 updates the authentication list in accordance with the update method and steps stored in the ROM 22 or NVM 24 (S16). When the authentication list is updated, the processor 21 determines if the authentication method corresponding to the aforementioned processing is on the authentication list (S17).
When it is determined that the authentication method corresponding to the aforementioned processing is on the authentication list (S17, YES), the processor 21 returns to S11.
When it is determined that there is no abnormality in the sensor (S15, NO) or determined that the authentication method corresponding to the aforementioned processing is not on the authentication list (S17, NO), the processor 21 transmits a response indicating that the authentication has failed to the IC card processing device 1 through the communication unit 25 (S18).
When the authentication is successful (S13, YES) the processor 21 transmits a response indicating that the authentication was successful to the IC card processing device 1 through the communication unit 25 (S19).
When the response indicating that the authentication has failed is transmitted to the IC card processing device 1 (S18), or when a response indicating that the authentication was successful is transmitted to the IC card processing device 1 (S19), the processor 21 ends the operation.
Note that when the processor 21 performs the authentication process without the sensor (offline PIN authentication etc.) in S12, there may not be a need to perform S14 to S17. In other words, the processor 21 will move to S19 if the authentication is successful, and will move to S18 if unsuccessful.
Further, the processor 21 may notify the IC card processing device 1 that the authentication list has been updated. In this case, the processor 11 of the IC card processing device 1 may, through the communication unit 18, provide notification of the authentication list having been updated (or the sensor being abnormal) to the server 10. Further, the processor 11 may present to the user the fact that the authentication list has been updated (or the sensor is abnormal) through the display 17, etc.
In addition, the IC card 2 may comprise a sensor for obtaining other biological information. More specifically, the IC card 2 may comprise a sensor for obtaining an iris, vein or voiceprint.
The IC card configured as above determines whether there is an abnormality in the sensor for obtaining information used in the authentication processing. When the IC card determines that there is an abnormality in the sensor, the contents of the authentication processing in the authentication list are updated. As a result, the IC card can perform other authentication processing when there is an abnormality in the sensor. Therefore, the convenience of the IC card is improved. Further, even in cases of attempted fraud, where, for example, a finger may be deliberately changed to trigger a failure of fingerprint authentication and to change the authentication method from the fingerprint authentication to offline PIN, the embodiment performs the operation check of the fingerprint sensor itself; thus, the security level cannot be easily diminished and this will also improve the convenience of the IC card.
In addition, the IC card can present to the user the fact that there is an abnormality in the sensor by updating the authentication list.
While certain embodiments have been described, these embodiments have been presented by way of example only, and are not intended to limit the scope of the inventions. Indeed, the novel embodiments described herein may be embodied in a variety of other forms; furthermore, various omissions, substitutions and changes in the form of the embodiments described herein may be made without departing from the spirit of the inventions. The accompanying claims and their equivalents are intended to cover such forms or modifications as would fall within the scope and spirit of the inventions.
| Number | Date | Country | Kind |
|---|---|---|---|
| JP2018-218392 | Nov 2018 | JP | national |
| Number | Name | Date | Kind |
|---|---|---|---|
| 9615322 | Choi | Apr 2017 | B2 |
| 20050240778 | Saito | Oct 2005 | A1 |
| 20070058843 | Theis et al. | Mar 2007 | A1 |
| 20080180212 | Aikawa et al. | Jul 2008 | A1 |
| 20080252412 | Larsson et al. | Oct 2008 | A1 |
| 20130065564 | Conner | Mar 2013 | A1 |
| 20130207786 | Hutzler | Aug 2013 | A1 |
| 20180211022 | Wagner et al. | Jul 2018 | A1 |
| 20180308101 | Valencia | Oct 2018 | A1 |
| 20190180018 | Miura | Jun 2019 | A1 |
| Number | Date | Country |
|---|---|---|
| 2002-120670 | Apr 2002 | JP |
| 2002-351845 | Dec 2002 | JP |
| 2009-500246 | Jan 2009 | JP |
| WO 2018047949 | Mar 2018 | WO |
| Entry |
|---|
| Extended European Search Report dated Mar. 16, 2020 in European Patent Application No. 19210425.5, 11 pages. |
| Number | Date | Country | |
|---|---|---|---|
| 20200160131 A1 | May 2020 | US |
