IC card, computer program, service user confirmation system, and service user confirmation method

Abstract

To allow for confirming whether a user of an IC card has authority related to a service or not without reading personal attribute information from the IC card.SOLUTION: An IC card 10 is provided with authority confirmation means 100 which, in response to receiving a command message of an authority confirmation command including authority data 111 from a service device 11, compares a bit in the authority data 111 that is set to "1" with a bit corresponding to that bit of attribute data 101 to determine whether a service can be used or not.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a technique for verifying whether or not a user of a service has authority related to the service. [Background technology]

[0002] As a system for checking whether a user of a service has authority for the service, there is a system that stores attribute information of a person who owns an IC card in the IC card and checks whether the user has authority for the service by using the attribute information read from the IC card. As an example of such a system, Patent Document 1 discloses a system that manages admission to an age-restricted facility (e.g., a public gambling facility) by using age information read from an IC card held by a visitor. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2010-262462 A Summary of the Invention [Problem to be solved by the invention]

[0004] Following the issuance of the My Number Card by the Japanese government, the use of the My Number Card in a system to verify whether a user has the authority to use a service is being considered. For example, the use of the My Number Card in labor-saving stores equipped with self-checkouts is being considered for managing the purchase of products with age restrictions.

[0005] Individual number cards do not store just one piece of attribute information, but various pieces of attribute information for each person who owns the card. Since data can be read from an IC card on a file or record basis, if multiple pieces of attribute information are stored together in one data item on an individual number card, the combined data can be read out of the individual number card.

[0006] The attribute information stored in the My Number Card may contain sensitive information. For this reason, it is desirable to be able to confirm whether or not a My Number Card user has authority to use a service without reading out the attribute information from the My Number Card.

[0007] Therefore, in the present invention, it is possible to confirm whether or not an IC card user has authority for a service without reading out personal attribute information from the IC card. [Means for solving the problem]

[0008] The first invention for solving the above-mentioned problems relates to an IC card. The IC card according to the first invention stores attribute data in a data structure of a bit string in which a plurality of bits each assigned with a different attribute value are arranged, with a bit set to "1" corresponding to the attribute value relevant to the user, and when it receives from an external device a command message including authority data having the same data structure as the attribute data, with a bit set to "1" corresponding to an attribute value determined by the authority related to a service, it has an authority confirmation means for determining whether or not the service can be used by comparing the bit set to "1" in the authority data included in the command message with the corresponding bit in the attribute data. In the first invention, the authority determination means may determine that the data is available when all bits of the attribute data corresponding to a bit in the authority data that is set to "1" are set to "1", and may also determine that the data is available when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1".

[0009] The second invention for solving the above-mentioned problem relates to an IC chip mounted on an IC card. The IC chip according to the first invention stores attribute data in a data structure of a bit string in which a plurality of bits each assigned with a different attribute value are arranged, with a bit set to "1" corresponding to the attribute value to which the user is assigned, and when it receives from an external device a command message including authority data with the same data structure as the attribute data, with a bit set to "1" corresponding to an attribute value determined by the authority for a service, it includes an authority confirmation means for determining whether or not the service can be used by comparing the bit set to "1" in the authority data included in the command message with the corresponding bit in the attribute data. In the second invention, the authority determination means may determine that the data is available when all bits of the attribute data corresponding to a bit in the authority data that is set to "1" are set to "1", and may also determine that the data is available when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1".

[0010] The third invention, which solves the above-mentioned problems, relates to a computer program to be implemented in an IC card. The third invention is a computer program for causing a processor of the IC card to function as the authority verification means of the IC card described in the first invention.

[0011] The fourth invention for solving the above-mentioned problems is a service user authentication system including an IC card storing attribute data having a data structure of a bit string in which a number of bits are arranged, each of which is assigned a different attribute value, with a bit set to "1" corresponding to the attribute value to which the user applies, and a service device storing authority data having the same data structure as the attribute data, with a bit set to "1" corresponding to an attribute value determined by the authority related to the service. The service device according to a fourth aspect of the present invention includes a user confirmation means for transmitting a command message including the authority data to the IC card and causing the IC card to determine whether or not the service provided by the service device can be used. The IC card of the fourth invention has an authority confirmation means for determining whether or not the service can be used when it receives the command message from the service device by comparing a bit set to "1" in the authority data contained in the command message with the corresponding bit of the attribute data. In the fourth invention, the authority confirmation means provided in the IC card may determine that the IC card is usable when all bits of the attribute data corresponding to bits in the authority data that are set to "1" are set to "1", and may also determine that the IC card is usable when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1".

[0012] The fifth invention for solving the above-mentioned problems is a method invention. The method according to the fifth invention is a service user verification method including an IC card storing attribute data in a data structure of a bit string in which a plurality of bits each assigned a different attribute value are arranged, with a bit "1" set in the bit corresponding to the attribute value to which the user applies, and a service device storing authority data in the same data structure as the attribute data, with a bit "1" set in the bit corresponding to the attribute value for the authority related to the service. In the service user verification method of the fifth invention, the service device executes step a of transmitting a command message including the authority data to the IC card, and when the IC card receives the command message from the service device, step b of determining whether the service provided by the service device can be used by comparing a bit set to "1" in the authority data included in the command message with a corresponding bit in the attribute data. In step b of the fifth invention, the IC card may be determined to be usable if all bits of the attribute data corresponding to bits in the authority data that are set to "1" are set to "1", or may be determined to be usable if at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1". Effect of the Invention

[0013] In the present invention, the process of checking whether or not a service user has authority to use the service is performed by an IC card, not by a device that provides the service. Therefore, when checking whether or not a service user has authority to use the service, the attribute data stored in the IC card is not leaked outside the IC card. [Brief description of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram illustrating a configuration of a service user confirmation system. [Diagram 2] FIG. 1 is a block diagram of a service user confirmation system. [Diagram 3] FIG. 4 is a diagram for explaining attribute data stored in an IC card. [Figure 4] FIG. 4 is a diagram illustrating authority data stored in the service device. [Diagram 5] FIG. 2 is a diagram for explaining the operation of the service user confirmation system. [Figure 6] FIG. 11 is a diagram for explaining a process for determining whether a service is available. [Figure 7]FIG. 1 shows an example of authority data. [Figure 8] FIG. 2 shows an example of authority data. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] From here, an embodiment of the present invention disclosed in this application will be described. The embodiment described from now on is for facilitating understanding of the present invention. The present invention is not limited to this embodiment. Furthermore, unless otherwise specified, the drawings are schematic diagrams drawn for facilitating understanding of the present invention.

[0016] Fig. 1 is a diagram for explaining the configuration of a service user identification system 1 according to this embodiment. The service user identification system 1 shown in Fig. 1 includes an IC card 10 owned by a user 2 who receives a service, and a service device 11 which is a device that provides the service and is connected to an IFD 12 (Interface device) which is a device that communicates with the IC card 10.

[0017] In FIG. 1, the service device 11 is illustrated as a self-checkout installed in a store selling products with age restrictions, such as alcohol and tobacco, but the present invention can be applied to various services that check whether or not the user 2 corresponds to an attribute value determined by the authority related to the service. For example, as in Patent Document 1, the present invention can be applied to a gate system of a facility that sets an age restriction for admission. In addition, if the IFD 12 is connected to a network, the present invention can also be applied to various online services.

[0018] Fig. 2 is a block diagram of the service user verification system 1 according to this embodiment. Fig. 2 shows a block diagram of an IC card 10 held by a user 2 and a block diagram of a service device 11 that provides a service to the user 2.

[0019] The IC card 10 held by the user 2 who receives the service is a card medium equipped with an IC chip 10a. The IC chip 10a equipped in the IC card 10 is equipped with a processor 102, a UART 104 (Universal Asynchronous Receiver Transmitter), and an NVM 103 (Non-volatile memory) as hardware. There are various types of IC cards 10, such as contact type and contactless type, but the present invention does not care about the type of IC card 10. The IC card 10 also has hardware not shown in FIG. 2, such as a ROM (Read Only Memory) and a RAM (Random Access Memory).

[0020] The UART 104 is a circuit that performs data communication with the IFD 12 connected to the service device 11 .

[0021] The NVM 103 is an electrically rewritable non-volatile memory. The NVM 103 stores attribute data 101 in a bit string data structure in which a plurality of bits are arranged, each of which is assigned a different attribute value, and in which a bit corresponding to the attribute value to which the user is assigned is set to "1."

[0022] The processor 102 is a circuit configured to execute a computer program. When the IC card 10 receives a command message of an authority confirmation command including authority data 111 described later from an external device (here, the service device 11), the IC card 10 stores a computer program that executes a process of determining whether or not a service can be used by comparing a bit in the authority data 111 that is set to "1" with a corresponding bit in the attribute data 101. The processor 102 of the IC card 10 functions as the authority confirmation means 100 by executing this computer program.

[0023] The service device 11, which is a device that provides a service, includes, as hardware, a processor 112, a storage 113, a display 115, and an input / output port 114, and is connected to the IFD 12 via the input / output port 114. The service device 11 also includes hardware not shown in FIG. 2, such as a ROM, a RAM, or a network interface.

[0024] The storage 113 is a storage device that stores data. For example, a solid state drive (SSD) using a semiconductor memory can be used for the storage 113. The storage 113 stores authority data 111, which is data having the same data structure as the attribute data 101 and has a bit "1" set corresponding to an attribute value determined by the authority related to the service.

[0025] The display 115 is a device that displays information. For example, a liquid crystal display or an organic EL (Electro-Luminescence) display can be used for the display 115.

[0026] The input / output port 114 is a circuit for connecting peripheral devices to the service device 11. The input / output port 114 complies with a predetermined interface standard (for example, USB: Universal Serial Bus). The IFD 12 connected to the service device 11 via the input / output port 114 is a device for communicating with the IC card 10, and the IFD 12 is a device equivalent to a reader / writer compatible with the IC card 10.

[0027] The processor 112 of the service device 11 is a circuit configured to execute a computer program. In this embodiment, the service device 11 stores a computer program that executes a process of transmitting the authority data 111 to the IC card 10 and causing the IC card 10 to determine whether or not the service provided by the service device 11 can be used. The processor 112 of the service device 11 functions as a user confirmation means 110 by executing this computer program.

[0028] Conventionally, the device providing the service would obtain data indicating the attribute values ​​of user 2 from user 2, and based on this data, would confirm whether user 2 has the authority to access the service provided by the service device 11.

[0029] In response to this, the service device 11 according to this embodiment transmits authority data 111 describing attribute values ​​determined by the authority related to the service provided by the service device 11 to the IC card 10 held by the user 2, and causes the IC card 10 to determine whether the service provided by the service device 11 can be used. In this way, by causing the IC card 10 to perform a process for checking whether the service user 2 has the authority related to the service, the attribute data 101 stored in the IC card 10 is not leaked outside the IC card 10 when checking whether the service user 2 has the authority related to the service.

[0030] Fig. 3 is a diagram for explaining the attribute data 101 stored in the IC card 10. Fig. 4 is a diagram for explaining the authority data 111 stored in the service device 11.

[0031] The attribute data 101 stored in the IC card 10 has a bit string data structure in which multiple bits are assigned different attribute values, and the bit corresponding to the attribute value to which the user is assigned is set to "1." The length of the attribute data 101 and the attribute value assigned to each bit do not change for the IC card 10, but the bit in the attribute data 101 that is set to "1" is determined depending on the user 2 of the IC card 10.

[0032] The attribute data 101 shown in FIG. 3 is 8-bit data. In the attribute data 101 shown in FIG. 3, the following attribute values ​​are assigned, starting from the most significant bit: "Japanese nationality", "male", "female", "18 years old or older", "20 years old or older", "25 years old or older", "standard car license", and "large car license". Naturally, the bits that are set to "1" differ depending on the user 2 who possesses the IC card 10, but the bits that are set to "1" in the attribute data 101 shown in FIG. 3 are bits with bit numbers 1, 3, 4, 6, and 7. That is, in the attribute data 101 shown in FIG. 3, the bits assigned to "Japanese nationality", "male", "18 years old or older", "20 years old or older", and "standard car license" are all set to "1", and the value is "DAh (h is (hexadecimal notation)

[0033] The authority data 111 stored in the service device 11 has the same data structure as the attribute data 101 stored in the IC card 10. The length of the authority data 111 and the attribute values ​​assigned to each bit are the same as those of the attribute data 101 stored in the IC card 10. Unlike the attribute data 101 stored in the IC card 10, a bit set to "1" in the authority data 111 is a bit assigned an attribute value determined by the authority related to the service provided by the service device 11.

[0034] Since the attribute data 101 shown in FIG. 3 is an 8-bit bit string, the authority data 111 shown in FIG. 4 is also an 8-bit bit string. As with the attribute data 101 shown in FIG. 3, in the authority data 111 shown in FIG. 4, the attribute values ​​are assigned in order from the most significant bit to be "Japanese nationality", "male", "female", "18 years old or older", "20 years old or older", "25 years old or older", "regular car license", and "large car license". The bit to which "1" is set is different depending on the authority related to the service provided by the service device 11, but in the authority data 111 shown in FIG. 4, the bits to which "1" is set are bits with bit numbers 3 and 7. That is, the value of the authority data shown in FIG. 4 is "88h", and the attribute values ​​determined by the authority related to the service provided by the service device 11 are "20 years old or older" and "Japanese nationality". In this embodiment, the length of the attribute data 101 and the authority data 111 are each 8 bits, but when a wide range of authorities and attributes are required, the length of these data can be extended by the required size.

[0035] From here, the operation of the service user identification system 1 according to this embodiment will be described. The explanation of the operation of the service user identification system 1 according to this embodiment also includes the explanation of the service user identification method according to the present invention. Figure 5 is a diagram for explaining the operation of the service user identification system 1.

[0036] When the service device 11 is not in use, the IFD 12 connected to the service device 11 performs an operation to detect the IC card 10. When the IFD 12 connected to the service device 11 detects the IC card 10 electrically coupled to the IFD 12, it notifies the service device 11 that the IC card 10 has been detected (step S1).

[0037] When the IFD 12 detects the IC card 10, the user confirmation means 110 of the service device 11 is activated. The user confirmation means 110 of the service device 11 transmits a command message of an authority determination command to the IC card 10 via the IFD 12 (step S2). The authority determination command is a command that causes the IC card 10 to confirm whether or not the user 2 has authority related to the service provided by the service device 11. The command message of the authority determination command includes authority data 111 stored in the service device 11. The command message of the authority determination command may also include a parameter indicating a combination logic used when determining whether or not the service can be used.

[0038] When the command message of the authority determination command is transmitted, the authority confirmation means 100 of the IC card 10 is activated. The authority confirmation means 100 of the IC card 10 compares a bit set to "1" in the authority data 111 included in the command message of the authority determination command with a corresponding bit in the attribute data 101 to determine whether or not the service can be used (step S3). The details of the process for determining whether or not the service can be used will be described later.

[0039] After determining whether the service can be used based on the authority data 111 transmitted from the service device 11 and the attribute data 101 stored in the IC card 10, the authority confirmation means 100 of the IC card 10 transmits a response message of the authority determination command including the determination result regarding whether the service can be used to the IFD 12 (step S4).

[0040] When the IFD 12 receives the response message to the rights decision command, the user confirmation means 110 of the service device 11 confirms the decision result included in the response message to the rights decision command, and branches the process according to the decision result (step S5).

[0041] If the determination result indicates that the service is available, the user confirmation means 110 of the service device 11 executes a process of providing the service provided by the service device 11 to the user 2 using the service device 11 (step S6), and the procedure in Fig. 5 ends. If the determination result indicates that the service is unavailable, the user confirmation means 110 of the service device 11 does not permit the user 2 using the service device 11 to use the service provided by the service device 11, and the procedure in Fig. 5 ends.

[0042] Hereinafter, the contents of the process in which the authority confirmation means 100 of the IC card 10 judges whether or not a service can be used based on the authority data 111 transmitted from the service device 11 and the attribute data 101 stored in the IC card 10 will be described. Fig. 6 is a diagram for explaining the process of judging whether or not a service can be used. Fig. 7 is a first diagram showing an example of the authority data 111. Fig. 8 is a second diagram showing an example of the authority data 111.

[0043] In the process of determining whether or not a service can be used, when the authority confirmation means 100 of the IC card 10 receives the authority data 111 from the service device 11, it compares the bit in the authority data 111 that is set to "1" with the corresponding bit in the attribute data 101 (step S30).

[0044] In order to compare the bits in the authority data 111 that are set to "1" with the corresponding bits in the attribute data 101, in this embodiment, the authority confirmation means 100 of the IC card 10 performs a bit operation on the authority data 111 and the attribute data 101. The bit operation means an operation in which a logical operation is performed for each bit. The logical operation performed for each bit is a logical AND. That is, in the bit operation according to this embodiment, the operation result becomes "1" only for the bits that are set to "1" in both the authority data 111 and the attribute data 101. In addition, since the authority data 111 and the attribute data 101 are data of the same length, the operation result of the bit operation on the authority data 111 and the attribute data 101 also becomes data of the same length as the authority data 111 and the attribute data 101.

[0045] Next, the authority confirmation means 100 of the IC card 10 analyzes the result of comparing the bit set to "1" with the corresponding bit in the attribute data 101 using a combinational logic specified in the authority confirmation means 100 of the IC card 10 to determine whether or not the service can be used (step S31), and the procedure in Fig. 6 ends. The combinational logic can be set in advance in the authority confirmation means 100 of the IC card 10, or can be specified to the IC card 10 by the service device 11 using a parameter in the command message of the authority determination command.

[0046] The combination logic used to determine whether or not a service can be used may be AND logic or OR logic. AND logic is a combination logic that determines that a service can be used if the user 2 corresponds to all attribute values ​​defined by the authority related to the service provided by the service device 11. If the user 2 corresponds to all attribute values ​​defined by the authority related to the service provided by the service device 11, the result of the bit operation between the authority data 111 and the attribute data 101 will match the authority data 111. In other words, if the combination logic is AND logic, when the result of the bit operation between the authority data 111 and the attribute data 101 matches the authority data 111, the authority confirmation means 100 of the IC card 10 determines that the service provided by the service device 11 is available.

[0047] OR logic is a combination logic that determines that the service provided by the service device 11 is available if the user 2 corresponds to at least one of the attribute values ​​defined by the authority related to the service provided by the service device 11. If the user 2 corresponds to at least one of the attribute values ​​defined by the authority related to the service provided by the service device 11, at least one bit of the operation result of the bit operation between the authority data 111 and the attribute data 101 will be set to "1". In other words, when the combination logic is OR logic, if the operation result of the bit operation between the authority data 111 and the attribute data 101 is not "0", the authority confirmation means 100 of the IC card 10 determines that the service provided by the service device 11 is available.

[0048] The above is merely an example of a process for determining whether or not a service can be used based on the authority data 111 transmitted from the service device 11 and the attribute data 101 stored in the IC card 10. Any method may be used to determine whether or not a service can be used.

[0049] As in FIG. 4, the value of the authority data 111 shown in FIG. 7 is "88h." As shown in FIG. 7, the result of a bit operation between the authority data 111 shown in FIG. 7 (value "88h") and the attribute data 101 shown in FIG. 3 (value "DAh") is "88h." Because the result of the bit operation matches the value of the authority data, when AND logic is used for the combination logic, the determination result regarding whether or not the service can be used is "Yes." Also, because the result of the bit operation is not "00h," the determination result regarding whether or not the service can be used is also "Yes" when OR logic is used for the combination logic.

[0050] Unlike FIG. 4, the value of the authority data 111 shown in FIG. 8 is "03h." As shown in FIG. 8, the result of a bit operation between the authority data 111 shown in FIG. 8 (value "03h") and the attribute data 101 shown in FIG. 3 (value "DAh") is "02h." Because the result of the bit operation does not match the value of the authority data, when AND logic is used for the combination logic, the result of the determination as to whether the service can be used is "unavailable." Also, because the result of the bit operation is not "0h," when OR logic is used for the combination logic, the result of the determination as to whether the service can be used is "available." [Explanation of symbols]

[0051] 1. Service User Identification System 10 IC Card 10a IC chip 100 Authority Verification Method 101 Attribute Data 11 Service equipment 111 Permissions Data

Claims

1. A data structure of a bit string in which multiple bits are arranged, each of which is assigned a different attribute value. Attribute data in which a bit corresponding to the attribute value to which the user is assigned is set to "1" is stored. and an authority confirmation means for, when receiving from an external device a command message including authority data having the same data structure as the attribute data and in which a bit "1" is set in the authority data included in the command message and a corresponding bit in the attribute data, determining whether or not the service can be used by comparing the bit "1" in the authority data included in the command message with the corresponding bit in the attribute data.

1. An IC card comprising:

2. 2. The IC card according to claim 1, wherein the authority confirmation means determines that the IC card is usable when all bits of the attribute data corresponding to a bit in the authority data that is set to "1" are set to "1".

3. 2. The IC card according to claim 1, wherein the authority confirmation means determines that the IC card is usable when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1."

4. An IC chip mounted on an IC card, A data structure of a bit string in which multiple bits are arranged, each of which is assigned a different attribute value. Attribute data in which a bit corresponding to the attribute value to which the user is assigned is set to "1" is stored. and an authority confirmation means for, when receiving from an external device a command message including authority data having the same data structure as the attribute data and in which a bit "1" is set in the authority data included in the command message and a corresponding bit in the attribute data, determining whether or not the service can be used by comparing the bit "1" in the authority data included in the command message with the corresponding bit in the attribute data. An IC chip characterized by:

5. The IC chip according to claim 4, wherein the authority confirmation means determines that the IC chip is available when all bits of the attribute data corresponding to a bit in the authority data that is set to "1" are set to "1".

6. The IC chip according to claim 4, characterized in that the authority confirmation means determines that the IC chip is usable when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1".

7. A computer program for causing a processor of an IC card to function as the authority confirmation means provided in the IC card according to any one of claims 1 to 3.

8. The IC card stores attribute data having a bit string data structure in which a plurality of bits are arranged to be assigned different attribute values, with a bit "1" set in the bit corresponding to the attribute value to which a user is assigned, and a service device stores authority data having the same data structure as the attribute data, with a bit "1" set in the bit corresponding to an attribute value determined by an authority related to a service, the service device includes a user confirmation means for transmitting a command message including the authority data to the IC card and causing the IC card to determine whether or not a service provided by the service device is available; said IC card comprises an authority confirmation means for, when receiving said command message from said service device, comparing a bit in said authority data included in said command message which is set to "1" with a corresponding bit in said attribute data, thereby determining whether or not the service provided by said service device can be used. A service user confirmation system comprising:

9. The service user verification system of claim 8, wherein the authority verification means provided in the IC card determines that the service is available when all bits of the attribute data corresponding to bits in the authority data that are set to "1" are set to "1."

10. The service user verification system of claim 8, wherein the authority verification means provided in the IC card determines that the service is available when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1."

11. A method executed by an IC card storing attribute data having a bit string data structure in which a plurality of bits are arranged to be assigned different attribute values, with a bit "1" set in the bit corresponding to the attribute value corresponding to a user, and a service device storing authority data having the same data structure as the attribute data, with a bit "1" set in the bit corresponding to an attribute value determined by an authority related to a service, comprising: a step a in which the service device transmits a command message including the authority data to the IC card; a step b in which, when the IC card receives the command message from the service device, it compares a bit in the authority data included in the command message that is set to "1" with a corresponding bit in the attribute data to determine whether or not the service provided by the service device can be used; A method for verifying service users.

12. 12. The service user verification method according to claim 11, characterized in that in step b, the IC card determines that the IC card is usable if all bits of the attribute data corresponding to bits in the authority data that are set to "1" are set to "1".

13. The service user verification method according to claim 11, characterized in that the IC card is determined to be usable when at least one bit of the attribute data corresponding to a bit in the authority data that is set to "1" is set to "1".

Images