Card transfer support system and card transfer support method

Abstract

To support transfer from an IC card corresponding to a predetermined encryption method to a new IC card corresponding to another encryption system.SOLUTION: A card transfer support system includes: a settlement terminal that determines an encryption method of a received IC card and transmits identification information of the IC card to a server in a case where the IC card is a target of transfer to a new IC card corresponding to another encryption method; the server that transmits user information necessary for issuing the new IC card to a data generation terminal based on the identification information; the data generation terminal that generates IC card issuance information used when issuing the new IC card based on the user information and transmits the IC card issuance information to an issuance terminal; and the issuance terminal that issues the new IC card based on the IC card issuance information.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] An embodiment of the present invention relates to a card transfer support system and a card transfer support method. [Background technology]

[0002] In recent years, with the advent of quantum computers, there is an increasing possibility that some existing cryptographic methods (RSA encryption, elliptic curve cryptography, etc.) may be broken. Therefore, research, development, and practical application of PQC (Post-Quantum Cryptography), a cryptography method that can maintain security even when sufficiently large quantum computers are put into practical use, is being promoted.

[0003] For example, it may be preferable to quickly replace an IC (Integrated Circuit) card compatible with an existing encryption method with a new IC card compatible with the PQC method.

[0004] Furthermore, as a conventional technology, for example, there is a technology that uses a portable information processing device (such as an IC card) to determine whether an authentication device (such as a card reader / writer) supports the conventional encryption method or the new encryption method, and if it supports the conventional encryption method, stops the authentication device and removes the conventional encryption method from the system. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2016-136390 Summary of the Invention [Problem to be solved by the invention]

[0006] However, while the above-mentioned conventional technology can remove authentication devices using conventional encryption methods from the system, it does not support (promote) the transition from IC cards compatible with existing encryption methods to new IC cards compatible with the PQC method.

[0007] Therefore, an object of the present invention is to provide a card migration support system and a card migration support method that can support the migration from an IC card that supports a specified encryption method to a new IC card that supports a different encryption method. [Means for solving the problem]

[0008] The card migration support system of an embodiment includes a payment terminal that determines the encryption method of an accepted IC card and, if the IC card is to be migrated to a new IC card that supports a different encryption method, sends identification information of the IC card to a server; the server that sends user information required to issue the new IC card based on the identification information to a data generation terminal; the data generation terminal that generates IC card issuance information to be used when issuing the new IC card based on the user information and sends the IC card issuance information to an issuing terminal; and the issuing terminal that issues the new IC card based on the IC card issuance information. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing the overall configuration of a card transfer support system according to an embodiment. [Figure 2] FIG. 2 is a diagram showing the configuration of an IC card according to an embodiment. [Figure 3] FIG. 3 is a configuration diagram of the payment terminal according to the embodiment. [Figure 4] FIG. 4 is a configuration diagram of a server according to an embodiment. [Figure 5] FIG. 5 is a configuration diagram of a data generation terminal according to the embodiment. [Figure 6] FIG. 6 is a diagram illustrating the configuration of the publishing terminal according to the embodiment. [Figure 7] FIG. 7 is a sequence diagram showing the flow of processing in each component of the card transfer support system according to the embodiment. [Figure 8] FIG. 8 is a diagram showing the overall configuration of a modified card transfer support system. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments of the card transfer support system and card transfer support method of the present invention will be described with reference to the accompanying drawings. In the embodiments, the PQC method is mainly assumed as the new encryption method (other encryption method).

[0011] Figure 1 is an overall configuration diagram of a card transfer support system S according to an embodiment. The card transfer support system S comprises a payment terminal 2 and an issuing terminal 3 installed in a store ST, and a server 4 and a data generation terminal 5 installed in a card company CC. The payment terminal 2 is a device that executes processes related to an IC card 1.

[0012] 2 is a diagram showing the configuration of an IC card 1 according to an embodiment. The IC card 1 is compatible with existing encryption methods. The IC card 1 is, for example, a credit card, and has a card-shaped main body C made of plastic or the like. The IC card 1 also has a module M built into the main body C.

[0013] The module M includes an IC chip Ca, a communication unit 15, an MPU (Micro Processor) 16, etc. The IC chip Ca includes a processor 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, an NVM (Non-Volatile Memory) 14, etc. The processor 11 is connected to the ROM 12, the RAM 13, the NVM 14, and the communication unit 15 via a data bus or the like. The communication unit 15 is connected to the MPU 16 via a data bus or the like.

[0014] The IC card 1 is not limited to the configuration shown in FIG. 2, and various components may be added, deleted, or replaced.

[0015] The processor 11 functions as a control unit that controls the entire IC card 1. The processor 11 performs various processes based on control programs, control data, etc. stored in the ROM 12 or the NVM 14. For example, the processor 11 executes a program stored in the ROM 12 to control the operation of the IC card 1 and perform various processes according to the operating mode of the IC card 1. Note that some of the various functions realized by the processor 11 executing the program may be realized by a hardware circuit.

[0016] The ROM 12 is a non-volatile memory that stores in advance control programs, control data, etc. The ROM 12 is incorporated into the IC card 1 at the manufacturing stage with the control programs, control data, etc. stored therein.

[0017] The RAM 13 is a volatile memory that temporarily stores data and the like being processed by the processor 11.

[0018] The NVM 14 is configured by a nonvolatile memory such as a flash ROM to which data can be written and rewritten, and stores various data such as control programs and applications according to the operational use of the IC card 1.

[0019] The communication unit 15 is an interface for transmitting and receiving data to and from the payment terminal 2. When the IC card 1 is realized as a contact-type IC card, the communication unit 15 is composed of a communication control unit and a contact unit for transmitting and receiving signals by making physical and electrical contact with the payment terminal 2. In this case, the IC card 1 is activated by receiving operating power and an operating clock from the payment terminal 2 via the contact unit.

[0020] When IC card 1 is realized as a contactless IC card, communication unit 15 is composed of a communication control unit such as a modulation / demodulation circuit for wireless communication with payment terminal 2, and an antenna. In this case, IC card 1 receives radio waves from payment terminal 2 via the antenna, modulation / demodulation circuit, etc. From the radio waves, IC card 1 generates operating power and an operating clock using a power supply unit (not shown) to activate it.

[0021] The communication unit 15 also transmits and receives data to and from the MPU 16 .

[0022] 3 is a configuration diagram of the payment terminal 2 according to the embodiment. The payment terminal 2 communicates with the IC card 1 used by the user, and transmits information to the IC card 1 and receives information from the IC card 1.

[0023] The payment terminal 2 includes a processor 21, a ROM 22, a RAM 23, an auxiliary storage device 24, a card reader / writer 25, an operation unit 26, a display 27, a communication interface 28, and the like.

[0024] Processor 21 executes various processes such as calculations and controls required for the operation of payment terminal 2 based on programs stored in at least one of ROM 22 and auxiliary storage device 24. Processor 21 is, for example, a CPU (Central Processing Unit), MPU, etc. Payment terminal 2 may also be configured to execute various processes by combining two or more processors 21 and cooperating with each other.

[0025] For example, the processor 21 has a function of transmitting command data to the IC card 1 via the card reader / writer 25, a function of executing processing based on response data received from the IC card 1, and the like, by executing a program.

[0026] The processor 21 also determines the encryption method of the received IC card 1, and transmits the identification information of the IC card 1 to the server 4 if the IC card 1 is a target for migration to a new IC card that supports the PQC method.

[0027] The ROM 22 stores programs such as an operating system (OS) and application software, etc. The ROM 22 also stores data and the like used by the processor 21 when it performs various processes.

[0028] The RAM 23 stores data that is temporarily used when the processor 21 performs various processes.

[0029] The auxiliary storage device 24 is, for example, an EEPROM (Electric Erasable Programmable Read Only Memory) (registered trademark), an HDD (Hard Disk Drive), an SSD (Solid State Drive), etc. The auxiliary storage device 24 may store some or all of the above programs. The auxiliary storage device 24 also stores data used by the processor 21 when performing various processes, data generated by the various processes performed by the processor 21, various setting values, etc.

[0030] The card reader / writer 25 is an interface device for transmitting and receiving data to and from the IC card 1 .

[0031] Operation unit 26 accepts input instructions from the operator of payment terminal 2. Operation unit 26 transmits input data corresponding to the accepted input instructions to processor 21. Operation unit 26 is, for example, a keyboard, a numeric keypad, a touch panel, or the like.

[0032] The display 27 is a display device that displays various information under the control of the processor 21. The display 27 is, for example, a liquid crystal monitor. The display 27 may be formed integrally with the operation unit 26, for example.

[0033] The communication interface 28 is an interface for communicating with an external device such as the server 4.

[0034] Furthermore, the payment terminal 2 has a card lock function that sets data on the IC card 1 to make it unusable.

[0035] 4 is a configuration diagram of the server 4 according to the embodiment. The server 4 is a computer device that performs processing related to the screening and issuance of credit cards (IC cards 1). The server 4 includes a processor 41, a ROM 42, a RAM 43, an auxiliary storage device 44, an operation unit 45, a display 46, a communication interface 47, and the like. Each component is connected via a data bus or the like.

[0036] The processor 41 controls the entire server 4. For example, based on the identification information of the IC card 1 received from the payment terminal 2, the processor 41 transmits to the data generation terminal 5 user information (such as name, address, and date of birth) required to issue a new IC card.

[0037] The ROM 42 stores various programs executed by the processor 41 and various data.

[0038] The RAM 43 is used as a working area when processing is executed by the processor 41. The auxiliary storage device 44 stores data used by the processor 41 when performing various processes, data generated by the various processes performed by the processor 41, various setting values, etc.

[0039] The operation unit 45 receives input instructions from an operator of the server 4. The operation unit 45 transmits input data corresponding to the received input instructions to the processor 41. The operation unit 45 is, for example, a keyboard, a numeric keypad, a touch panel, or the like.

[0040] The display 46 is a display device that displays various information under the control of the processor 41. The display 46 is, for example, a liquid crystal monitor.

[0041] The communication interface 47 is an interface for communicating with external devices such as the payment terminal 2 and the data generation terminal 5.

[0042] 5 is a configuration diagram of a data generation terminal 5 according to an embodiment. The data generation terminal 5 is a computer device that performs processes related to the issuance of new IC cards compatible with the PQC method. The data generation terminal 5 includes a processor 51, a ROM 52, a RAM 53, an auxiliary storage device 54, an operation unit 55, a display 56, a communication interface 57, and the like. Each component is connected via a data bus or the like.

[0043] The processor 51 controls the entire data generation terminal 5. The processor 51 generates IC card issuance information (including PQC key information) to be used when issuing a new IC card, based on, for example, user information received from the server 4, and transmits the IC card issuance information to the issuing terminal 3.

[0044] The ROM 52 stores various programs executed by the processor 51 and various data.

[0045] The RAM 53 is used as a working area when processing is executed by the processor 51. The auxiliary storage device 54 stores data used by the processor 51 when performing various processes, data generated by the various processes performed by the processor 51, various setting values, etc.

[0046] The operation unit 55 accepts input instructions from the operator of the data generation terminal 5. The operation unit 55 transmits input data corresponding to the accepted input instructions to the processor 51. The operation unit 55 is, for example, a keyboard, a numeric keypad, a touch panel, or the like.

[0047] The display 56 is a display device that displays various information under the control of the processor 51. The display 56 is, for example, a liquid crystal monitor.

[0048] The communication interface 57 is an interface for communicating with external devices such as the server 4 and the publishing terminal 3.

[0049] 6 is a configuration diagram of the issuing terminal 3 of the embodiment. The issuing terminal 3 is a device for issuing new IC cards.

[0050] The issuing terminal 3 includes a processor 31, a ROM 32, a RAM 33, an auxiliary storage device 34, a card issuing unit 35, an operation unit 36, a display 37, a communication interface 38, and the like.

[0051] The processor 31 executes various processes such as calculations and controls required for the operation of the publishing terminal 3 based on programs stored in at least one of the ROM 32 and the auxiliary storage device 34. The processor 31 is, for example, a CPU, an MPU, etc. The publishing terminal 3 may be configured to execute various processes by combining two or more processors 31 in cooperation with each other.

[0052] For example, the processor 31 controls the card issuing unit 35 based on the IC card issuance information received from the data generation terminal 5 to issue a new IC card.

[0053] The ROM 32 stores programs such as an operating system (OS) and application software, etc. The ROM 32 also stores data and the like that is used by the processor 31 when it performs various processes.

[0054] The RAM 33 stores data that is temporarily used when the processor 31 performs various processes.

[0055] The auxiliary storage device 34 is, for example, an EEPROM, an HDD, an SSD, etc. The auxiliary storage device 34 stores data used by the processor 31 when performing various processes, data generated by the processor 31 in various processes, various setting values, etc.

[0056] The card issuing unit 35 has a mechanism for issuing a new IC card based on a control signal from the processor 31.

[0057] The operation unit 36 accepts input instructions from the operator of the issuing terminal 3. The operation unit 36 transmits input data corresponding to the accepted input instructions to the processor 31. The operation unit 36 is, for example, a keyboard, a numeric keypad, a touch panel, or the like.

[0058] The display 37 is a display device that displays various information under the control of the processor 31. The display 37 is, for example, a liquid crystal monitor. The display 37 may be formed integrally with the operation unit 36, for example.

[0059] The communication interface 38 is an interface for communicating with an external device such as the data generation terminal 5.

[0060] Next, the processing flow of each component of the card transfer support system S will be described with reference to Fig. 7. Fig. 7 is a sequence diagram showing the processing flow of each component of the card transfer support system S of an embodiment. First, when a user uses an IC card 1 with a payment terminal 2, in step S1, the payment terminal 2 starts (conducts) a transaction.

[0061] Next, in step S2, the payment terminal 2 requests the IC card 1 to provide data stored in the IC card 1 relating to the corresponding encryption method.

[0062] Next, in step S3, if the IC card 1 is compatible with the PQC method, it transmits the corresponding data, and if it is compatible only with the existing encryption method, it transmits nothing. Note that the IC card 1 may transmit the corresponding data if it is compatible only with the existing encryption method.

[0063] Next, in step S4, the payment terminal 2 determines whether or not the IC card 1 is compatible with the PQC method (new encryption method), and if Yes, continues the transaction, and if No, proceeds to step S5.

[0064] In step S5, the payment terminal 2 requests the IC card 1 for information (identification information) such as a card number for identifying the user.

[0065] Next, in step S6, the IC card 1 transmits the information to the payment terminal 2. Next, in step S7, the payment terminal 2 transmits the information to the server 4.

[0066] Next, in step S8, the server 4 searches its own user DB (Data Base) for the information.

[0067] Next, in step S9, the server 4 transmits to the data generation terminal 5 user information required to issue a new IC card compatible with the PQC method.

[0068] Next, in step S10, the data generation terminal 5 generates, based on the user information, IC card issuance data (IC card issuance information) to be used when issuing a new IC card.

[0069] Next, in step S11, the data generation terminal 5 transmits the IC card issuance data to the issuance terminal 3.

[0070] Next, in step S12, the issuing terminal 3 uses the IC card issuance data to issue a new IC card compatible with the PQC method (new encryption method), thereby allowing the user to obtain the new IC card on the spot.

[0071] Next, in step S13, the issuing terminal 3 notifies the data generating terminal 5 that the issuance of the new IC card has been completed.

[0072] Next, in step S14, the data generation terminal 5 notifies the server 4 that the issuance of the new IC card has been completed.

[0073] Next, in step S15, the server 4 notifies the payment terminal 2 that the issuance of the new IC card has been completed.

[0074] Next, in step S16, the payment terminal 2 performs card locking by setting data to disable the use of the IC card 1 that is compatible only with the existing encryption method. Specifically, for example, in the case of a contactless transaction, the payment terminal 2 prompts the user to tap or insert the IC card 1 into the payment terminal 2 again, thereby performing card locking.

[0075] Next, in step S17, the IC card 1 notifies the payment terminal 2 that the card has been locked.

[0076] Next, in step S18, the payment terminal 2 completes the transaction.

[0077] Next, a modified card transfer support system S will be described with reference to Fig. 8. Fig. 8 is an overall configuration diagram of the modified card transfer support system S.

[0078] Unlike the case of Fig. 1, in Fig. 8, the issuing terminal 3 is installed at the card company CC rather than at the store ST. This allows the card company CC to check and manage the new IC card issued from the issuing terminal 3. In this case, the new IC card is sent to the user by a predetermined delivery means or the like.

[0079] As described above, the card transfer support system S of this embodiment can support the transfer from an IC card 1 that supports an existing encryption method to a new IC card that supports another encryption method (PQC method) through the above-described cooperative processing by the payment terminal 2, issuing terminal 3, server 4, and data generation terminal 5. In other words, the transfer from the IC card 1 to the new IC card can be forced. This can improve the security of payments using IC cards in the payment market.

[0080] Furthermore, when a new IC card is issued, a card lock can be implemented on the IC card 1 that is compatible only with the existing encryption method, thereby preventing the IC card 1 from being used thereafter. Note that a locked IC card 1 cannot be used not only with the payment terminal 2 that implemented the card lock, but also with other payment terminals. This further improves the security of payments using IC cards.

[0081] Furthermore, as shown in FIG. 1, if an issuing terminal 3 is installed in the store ST where the payment terminal 2 is installed, the user can immediately obtain the new IC card issued by the issuing terminal 3, which is convenient.

[0082] The program executed by the payment terminal 2 of this embodiment is provided by being pre-installed in the ROM 22 or the like. The program may be provided by being recorded in an installable or executable file format on a computer-readable recording medium such as a CD-ROM, a flexible disk (FD), a CD-R, or a digital versatile disk (DVD).

[0083] Furthermore, the program may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network.The program may also be provided or distributed via a network such as the Internet.

[0084] The program is modularly structured with each functional unit, and in actual hardware, an example of a processor 21 such as a CPU reads the program from the ROM 22 and executes it, causing each functional unit to be loaded onto the main memory device and generated.

[0085] Although an embodiment of the present invention has been described, this embodiment is presented as an example and is not intended to limit the scope of the invention. This novel embodiment can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. This embodiment and its modifications are included within the scope and spirit of the invention, and are also included in the invention described in the claims and their equivalents.

[0086] For example, the encryption method of the new IC card to which the data is transferred is not limited to the PQC method, and may be any encryption method other than the encryption method of the original IC card.

[0087] Furthermore, the locations where the payment terminal 2, the issuing terminal 3, the server 4, and the data generation terminal 5 are installed are not limited to the locations shown in FIGS. [Explanation of symbols]

[0088] 1...IC card, 2...payment terminal, 3...issuing terminal, 4...server, 5...data generation terminal, 11...processor, 12...ROM, 13...RAM, 14...NVM, 15...communication unit, 16...MPU, 21...processor, 22...ROM, 23...RAM, 24...auxiliary storage device, 25...card reader / writer, 26...operation unit, 27...display, 28...communication interface, 31...processor, 32...ROM, 33...RAM, 34...auxiliary storage device, 35...card issuing unit, 36...operation unit, 37...display, 38...communication interface, 41...processor, 42...ROM, 43...RAM, 44...auxiliary storage device, 45...operation unit, 46...display, 47...communication interface, 51...processor, 52...ROM, 53...RAM, 54...auxiliary storage device, 55...operation unit, 56...display, 57...communication interface, S...card migration support system

Claims

1. a payment terminal that determines the encryption method of an accepted IC (Integrated Circuit) card, and if the IC card is to be migrated to a new IC card that supports a different encryption method, transmits identification information of the IC card to a server; the server transmitting user information necessary for issuing the new IC card to a data generation terminal based on the identification information; the data generation terminal that generates IC card issuance information to be used when issuing the new IC card based on the user information and transmits the IC card issuance information to an issuing terminal; and an issuing terminal that issues the new IC card based on the IC card issuance information.

2. 2. The card transfer support system according to claim 1, wherein the settlement terminal has a card lock function for setting data to the IC card to make it unusable.

3. The card transfer assistance system according to claim 1 , wherein the other encryption method is a PQC (Post-Quantum Cryptography) method.

4. a step in which the payment terminal determines the encryption method of the accepted IC card, and if the IC card is to be migrated to a new IC card that supports a different encryption method, transmits identification information of the IC card to a server; a step in which the server transmits user information necessary for issuing the new IC card to a data generation terminal based on the identification information; a step in which the data generation terminal generates IC card issuance information to be used when issuing the new IC card based on the user information, and transmits the IC card issuance information to an issuing terminal; The card transfer support method includes a step in which the issuing terminal issues the new IC card based on the IC card issuance information.

Images