IC card issuing method and program

Abstract

To provide an IC card issuing method and program that are capable of reducing costs required for issuing an IC card.SOLUTION: In an IC card issuing method, an issuing system obtains unique data from an IC module included in an IC card to be issued; writes in the IC module both key data, which is generated from both the unique data and key-derived data, and issuance identification information including the key-derived data; and stores issuance data associated with the issuance identification information, in a server which can be accessed by any information processing device.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] An embodiment of the present invention relates to an IC card issuing method and program. [Background technology]

[0002] Generally, IC cards that can be used as credit cards, etc., are issued by having various data written by an LSI vendor (LSI manufacturer), module vendor (primary issuer), card vendor (secondary issuer), issuer (tertiary issuer), etc. Each vendor that issues an IC card incurs costs according to the time it takes to write data into the IC card (LSI built into the IC card). Furthermore, with conventional IC card issuance systems, each vendor issues a large number of IC cards in a short period of time, which results in the problem of incurring costs due to the introduction of equipment that writes data in parallel. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2005-134953 Summary of the Invention [Problem to be solved by the invention]

[0004] In order to solve the above problem, an IC card issuing method and program are provided that can reduce the cost of issuing an IC card. [Means for solving the problem]

[0005] According to an embodiment, an IC card issuance method involves an issuing system acquiring unique data from an IC module built into the IC card to be issued, the issuing system writing key data generated from the unique data and key derivative data and issuance identification information including the key derivative data into the IC module, and the issuing system storing the issuance data associated with the issuance identification information in a server accessible to any information processing device. [Brief explanation of the drawings]

[0006] [Figure 1] FIG. 1 is a diagram for explaining an overview of an IC card issuing system relating to an IC card issuing method according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing an example of the configuration of each issuing machine (issuing system) in the IC card issuing system according to the embodiment. [Figure 3] FIG. 3 is a block diagram showing an example of the configuration of a user-side system in the IC card issuing system according to the embodiment. [Figure 4] FIG. 4 is a sequence diagram for explaining an example of the operation of the issuing system as an issuing machine of each issuing vendor in the IC card issuing system according to the embodiment. [Figure 5] FIG. 5 is a sequence diagram for explaining an example of the operation of the user issuing system including the user terminal in the IC card issuing system according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0007] Hereinafter, embodiments will be described with reference to the drawings. The IC card issuing method according to the embodiment is a method for performing an issuing process in which data to be written by each vendor into an IC card to be issued is stored in a server on the cloud, and the user himself / herself writes each piece of data stored in the server on the cloud into the IC card, thereby making the IC card usable as a credit card, etc. The IC card issuing method according to the embodiment is realized by an IC card issuing system including a system operated by each vendor involved in the issuance of IC cards, a system used by a user, and a server provided in the cloud.

[0008] FIG. 1 is a diagram for schematically explaining an example of the configuration of an IC card issuing system that realizes an IC card issuing method according to an embodiment. In the example shown in Fig. 1, vendors for issuing IC cards include an LSI vendor, a primary issuing vendor, a secondary issuing vendor, and a tertiary issuing vendor. However, the vendor group in the IC card issuance system is not limited to the example shown in Fig. 1, and there may be at least one or more. For example, the vendor group may be such that the LSI vendor and the primary issuing vendor are the same vendor, there is no tertiary issuing vendor, or there are fourth-tier and higher issuing vendors.

[0009] In the configuration example shown in FIG. 1, the IC card issuing system includes systems 11, 12, and 13 of issuing vendors, a user issuing system 14 including user terminals used by users, and servers 21, 22, and 23 provided in the cloud. 1, an LSI vendor has an LSI manufacturing system 10. The LSI manufacturing system 10 has a configuration for writing data to an LSI embedded in an IC card C to be issued. The LSI is an IC chip equipped with a processor, various memories, and an interface.

[0010] In this embodiment, the LSI manufacturing system 10 writes unique data (e.g., a serial number) that is specific to each LSI. Furthermore, the LSI processed by the LSI manufacturing system 10 is written with a minimum program that can execute the processes described below (such as reading unique data and writing data), rather than the entire OS (operating system) required for operation as an IC card.

[0011] The primary issuing vendor has a primary issuing system 11 as an example of an issuing machine (primary issuing machine), and manages a primary server 21 in the cloud. The primary issuing system 11 executes primary processing on an IC module M in which a communication unit, which is a means of communicating with a reader / writer, is connected to an LSI manufactured by an LSI vendor. The primary processing by the primary issuing system 11 includes processing of saving primary data as data to be written to the IC module M (issue data) in the primary server 21 in the cloud, and writing data for reading the primary data saved in the primary server 21 to the IC module M.

[0012] Specifically, the primary processing by the primary issuing system 11 includes processing such as reading unique data from the IC module M and writing a first key (first key data) and a primary ID (primary identification information, primary issued identification information) to the IC module M. The primary issuing system 11 also performs processing such as saving the OS data and primary issued data to be written to the IC module M in the primary server 21 on the cloud as primary processing.

[0013] The primary server 21 is composed of a server device equipped with a processor, various memories including a storage device for storing primary data, and various interfaces. The primary server 21 stores OS data and primary issuance data in the storage device as data to be written as primary issuance. The OS data is operating system (OS) data that enables the IC module M to operate as an IC card. For example, the primary server 21 stores the OS data in advance in the storage device, and stores primary issuance data associated with the primary identification information of the IC module M uploaded from the primary issuance system 11 in the storage device. In this case, when primary data corresponding to the primary identification information is requested from a user terminal 41 (see FIG. 3) serving as an information processing device, the primary server 21 simply supplies the primary issuance data and OS data corresponding to the primary identification information to the requesting user terminal 41.

[0014] The secondary issuance vendor has a secondary issuance system 12 as an example of an issuing machine (secondary issuing machine), and manages a secondary server 22 in the cloud. The secondary issuance system 12 executes secondary processing on an IC card C in which a primarily processed IC module M is incorporated into a card-shaped main body. The secondary processing by the secondary issuance system 12 includes processing of saving secondary data, which is data to be written to the IC card C incorporating the primarily processed IC module M, in the secondary server 22 in the cloud, and writing data for reading the secondary data saved in the secondary server 22 into the IC card C.

[0015] For example, as secondary processing, the secondary issuance system 12 executes processing such as reading unique data from the IC module M and writing a second key (second key data) and a secondary ID (secondary identification information, secondly issued identification information) to the IC module M of the IC card C. Also, as secondary processing, the secondary issuance system 12 executes processing to store the secondary data to be written to the IC card C as secondary issuance in the secondary server 22 on the cloud.

[0016] The secondary server 22 is composed of a server device equipped with a processor, various memories including a storage device for storing secondary data, and various interfaces. The secondary server 22 stores the secondarily issued data uploaded from the secondary issuing system 12 in a storage device in association with the secondary identification information. Furthermore, when secondary data corresponding to the secondary identification information is requested from a user terminal 41 serving as an information processing device, the secondary server 22 may supply the secondarily issued data corresponding to the secondary identification information to the user terminal 41 that made the request.

[0017] The tertiary issuance vendor has a tertiary issuance system 13 as an example of an issuing machine (tertiary issuing machine) and manages a tertiary server in the cloud. The tertiary issuance system 13 performs tertiary processing on the secondarily processed IC card C. The tertiary processing by the tertiary issuance system 13 includes processing of storing tertiary data, which is data to be written to the secondarily processed IC card C, in the tertiary server 23 in the cloud, and writing data for reading the tertiary data stored in the tertiary server 23 to the IC card C.

[0018] For example, the tertiary processing by the tertiary issuance system 13 executes processing such as reading unique data from the IC card C2 and writing third key data (third key) and a tertiary ID (tertiary identification information, tertiary issuance identification information) to the IC module M of the IC card C. Furthermore, as tertiary processing, the tertiary issuance system 13 executes processing such as saving the tertiary data to be written to the IC card C as tertiary issuance in the tertiary server 23 on the cloud.

[0019] The tertiary server 23 is composed of a server device equipped with a processor, various memories including a storage device for storing secondary data, and various interfaces. The tertiary server 23 stores the tertiary issued data uploaded from the tertiary issuing system 13 in a storage device in association with the tertiary identification information. Furthermore, when tertiary data corresponding to the tertiary identification information is requested from a user terminal 41 serving as an information processing device, the tertiary server 23 may supply the tertiary issued data corresponding to the tertiary identification information to the user terminal 41 that made the request.

[0020] The user issuing system 14 is a system configured from a user terminal 41 (see FIG. 3) as an information processing device used by a user and various devices with which the user terminal 41 can communicate. The user terminal 41 is an information processing device equipped with a processor, various memories, a communication unit, various interfaces, an operation unit, a display unit, etc. For example, the user terminal 41 is a personal computer (PC) or a smartphone.

[0021] The user issuing system 14 executes a card issuing process to issue an IC card C processed by each vendor (an IC card processed by the tertiary issuing system 13 in the example shown in FIG. 1) as an operable card such as a credit card. The card issuing process (user issuing process) by the user issuing system 14 executes processes such as reading unique data and each piece of identification information from the IC card C, mutual authentication between the user terminal 41 and the IC card C using key data generated from the unique data and each piece of identification information, and writing data stored by each vendor in each of the cloud servers 21, 22, and 23.

[0022] Next, the configuration of the nth (1st, 2nd, 3rd) order issuing systems 11, 12, 13 as issuing machines in the IC card issuing system that realizes the IC card issuing method according to the embodiment will be described. FIG. 2 is a block diagram showing an example of the configuration of issuing systems 11, 12, and 13 as issuing machines in an IC card issuing system that realizes an IC card issuing method according to an embodiment. As shown in Figure 2, the first (second, third) issuing system 11 (12, 13) includes a control device 31, a reader / writer (RW) 32, an issuing HSM 33, a transport control unit (PLC) 34, and a transport mechanism 35. The control device 31 is connected to the reader / writer 32, the issuing HSM 33, and the transport control unit 34. The transport control unit 34 is connected to the transport mechanism 35. Note that the nth issuing system 11 (12, 13) is not limited to the configuration shown in Figure 2, and may include other configurations as needed in addition to the configuration shown in Figure 2, or certain configurations may be excluded.

[0023] The issuing system 11 (12, 13) of each issuing vendor processes the IC module M incorporating the LSI to be issued or the IC card C incorporating the IC module M. Here, the explanation will be given assuming that the issuing system 11 of the primary issuing vendor processes the IC module M. In the issuing system 11, for example, the IC module M is supported on a mount made of paper, plastic, vinyl, or the like and is transported by the transport mechanism 35 to a position for communication with the reader / writer 32.

[0024] The IC module M includes an LSI and a communication unit supplied by an LSI vendor. The IC card C has the IC module M embedded in a card-shaped main body. The IC module M (or the IC module M built into the IC card C) communicates with the reader / writer 32. The IC module M is activated by power supplied from the reader / writer 32, and executes processing in accordance with commands from the reader / writer 32.

[0025] The control device 31 is an information processing device equipped with a processor, various memories, and various interfaces. The memories equipped in the control device 31 include ROM, which is a nonvolatile memory, RAM, which temporarily stores data, and NVM, which is a nonvolatile memory that allows data to be rewritten. The control device 31 may also be equipped with an operation unit through which an operator inputs various operation instructions and a display unit that displays various information.

[0026] The control device 31 executes the processes described below by having the processor execute a program stored in the memory. For example, the control device 31 acquires data stored in the memory of the IC module M via the reader / writer 32, and writes (key data and issuing identification information) to the memory of the IC module M. The control device 31 also causes the issuing HSM 33 to generate key data, and stores data in the server 21 (22, 23) in the cloud on the network.

[0027] The reader / writer 32 is a device that performs data communication with the IC module M (IC module M built into the IC card C). The reader / writer 32 includes a communication interface according to the communication method of the IC module M. For example, if the IC module M is built into a contact-type IC card, the reader / writer 32 is configured with a contact section for physically and electrically connecting to the contact section of the IC module M. On the other hand, if the IC module M is built into a contactless IC card, the reader / writer 32 is configured with an antenna and a communication control section for wireless communication with the IC module M. Under the control of the control device 31, the reader / writer 32 supplies power to the IC module M, supplies an operating clock, performs reset control, transmits various commands, and receives responses to the transmitted commands.

[0028] The issuing HSM (Hardware Security Module) 33 is a device that has the function of securely storing data and performing secure arithmetic processing within hardware. For example, the issuing HSM 33 has a robust structure and an internal processor for securely storing and using keys. The issuing HSM 33 executes arithmetic functions using an internal processor within the main body, and performs arithmetic processing without extracting any keys from the outside. In this embodiment, the issuing HSM 33 has a key that is common with the network HSM 43 (see FIG. 3), which will be described later. The issuing HSM 33 has the function of generating key data from unique data and key derivative data (for example, a key ID or a product identification ID).

[0029] The transport control unit (PLC: programmable logic controller) 34 transports the IC module M by controlling the transport mechanism 35. For example, the transport control unit 34 transports a mount having the IC module M to a position where the reader / writer 32 and the IC module M can communicate with each other. The transport mechanism 35 has a mechanism for transporting the IC module M. Based on a control signal from the transport control unit 34, the transport mechanism 35 transports the mount having the IC module M to a position where the IC module M can communicate with the reader / writer 32 (communication position).

[0030] Next, the configuration of the user issuing system 14 in the IC card issuing system that realizes the IC card issuing method according to the embodiment will be described. FIG. 3 is a block diagram showing an example of the configuration of the user issuing system 14 in the IC card issuing system that realizes the IC card issuing method according to the embodiment. As shown in Fig. 3, the user issuing system 14 includes a user terminal 41, a reader / writer 42, and a network HSM 43. Note that the user issuing system 14 is not limited to the configuration shown in Fig. 3, and may include other configurations as needed in addition to the configuration shown in Fig. 3, or certain configurations may be excluded.

[0031] The user terminal 41 is an information processing device operated by the user himself / herself. The user terminal 41 as an information processing device includes a processor, various memories, and various interfaces. For example, the user terminal 41 has an interface that connects to the reader / writer 42 and an interface that connects to the network HSM 43 via a network such as the Internet. The user terminal 41 may also include an operation unit through which the user inputs various operation instructions and a display unit that displays various information.

[0032] The memories included in the user terminal 41 include ROM, which is a nonvolatile memory, RAM, which temporarily stores data, and NVM, which is a nonvolatile memory that allows data to be rewritten. The user terminal 41 executes the processes described below by having a processor execute a program stored in the ROM or NVM.

[0033] For example, the user terminal 41 acquires data stored in the LSI of the IC module M built into the IC card C through the reader / writer 42, and writes data to the IC module M of the IC card C. The user terminal 41 also causes the network HSM 43 to generate key data, and acquires data from each server 21, 22, 23 in the cloud via the network.

[0034] The reader / writer 42 is a device that performs data communication with the IC module M built into the IC card C. The reader / writer 42 includes an interface for communicating with the user terminal 41 as well as a communication interface according to the communication method of the IC module M built into the IC card C. For example, if the IC card C is a contact-type IC card, the reader / writer 42 has components such as a contact section for physically and electrically connecting to the contact section of the IC module M built into the IC card C. On the other hand, if the IC card C is a contactless IC card, the reader / writer 42 has components such as an antenna and a communication control section for wireless communication with the IC module M built into the IC card C. Under the control of the user terminal 41, the reader / writer 42 supplies power to the IC module M, supplies an operating clock, performs reset control, transmits various commands, and receives responses to the transmitted commands.

[0035] The network HSM (Hardware Security Module) 43 is a device that has the function of securely storing data and performing secure arithmetic processing within hardware. The network HSM 43 has a key that is common to the issuing HSM 33 provided in each of the issuing systems (issuing machines) 11, 12, and 13. The network HSM 43 has a function of generating key data from unique data and key derivation data supplied from the user terminal 41 using the key that is common to the issuing HSM 33. For example, when the network HSM 43 is supplied with the LSI unique data and first key derivation data (e.g., a key ID) included in the first identification information from the user terminal 41, the network HSM 43 generates first key data from the unique data and the first key derivation data using the key that is common to the issuing HSM 33 of the primary issuing system 11 and transmits the first key data to the user terminal 41.

[0036] Next, the processing performed by each of the issuing systems (issuing machines) 11, 12, and 13 in the IC card issuing system will be described. FIG. 4 is a sequence diagram for explaining an example of the operation of processing (n-th order processing) by n-th order issuing systems 11, 12, and 13 as issuing machines in the IC card issuing system. First, the primary processing by the primary issuing system 11 will be described as an example of nth processing by the nth issuing system as an issuing machine in the IC card issuing system shown in Fig. 4. The primary issuing system 11 executes the primary processing on an IC module M (issuance target device) in which a communication unit and the like are connected to an LSI supplied from an LSI vendor.

[0037] The control device 31 of the primary issuing system 11 transports the IC module M to be issued to the communication position for the reader / writer 32 using the PLC 34 and the transport mechanism 35. When the IC module M is transported to the communication position, the control device 31 acquires unique data from the IC module M using the reader / writer 32 (ST11). Here, the unique data acquired from the IC module M is assumed to be unique data assigned to the LSI of the IC module M (for example, a serial number unique to the LSI).

[0038] For example, the control device 31 instructs the reader / writer 32 to read the unique data from the IC module M. In response to the instruction from the control device 31, the reader / writer 32 transmits a read command to the IC module M requesting that the unique data be read. The IC module M reads the unique data in response to the read command from the reader / writer 32, and transmits a response containing the read unique data to the reader / writer 32. The reader / writer 32 receives the response from the IC module M to the read command, and supplies the unique data included in the response to the control device 31. As a result, the control device 31 obtains the unique data of the IC module M to be issued.

[0039] When the control device 31 acquires the unique data, it sets issued identification information (primary identification information, primary issued identification information) as ID information to be used in the primary processing for the IC module M. The primary identification information is information including key derivation data (first key derivation data) for generating first key data to be used in the primary processing. The first key derivation data may be included in the primary identification information and may be information for generating the first key data. For example, the first key derivation data included in the primary identification information may be the ID of the first key to be written to the IC module M as the primary processing, or may be a product identification ID assigned to the IC module M by the primary issuing system 11.

[0040] After setting the key derivation data (first key derivation data) for generating the key data (first key data), the control device 31 supplies the unique data and the first key derivation data to the issuing HSM 33 and requests the generation of the first key data (ST12).

[0041] When the issuing HSM 33 receives the unique data and the first key derivation data from the control device 31, it generates first key data from the unique data and the first key derivation data using a key shared with the network HSM 43 (ST13). After generating the first key data, the issuing HSM 33 transmits the generated first key data to the control device 31 (ST14). As a result, the control device 31 obtains the first key data generated by the issuing HSM 33.

[0042] When the control device 31 acquires the first key data generated by the issuing HSM 33, it transmits the first key data and the primary identification information as data to be written to the IC module M via the reader / writer 32 (ST15). That is, the control device 31 instructs the reader / writer 32 to write the first key data and the primary identification information to the IC module M. In response to the instruction from the control device 31, the reader / writer 32 transmits a write request command in which the first key data and the primary identification information are set to the IC module M.

[0043] The IC module M receives a write request command in which the first key data and primary identification information are set from the reader / writer 32. Upon receiving the write request command from the reader / writer 32, the IC module M writes the requested first key data and primary identification information to the non-volatile memory provided in the IC module M (ST16). Upon completing the write process in response to the write request command, the IC module M transmits a response indicating the completion of writing to the reader / writer 32. Upon receiving the response indicating the completion of writing from the IC module M, the reader / writer 32 supplies information indicating the completion of writing to the control device 31. This allows the control device 31 to complete writing the first key data and primary identification information to the IC module M to which the command is to be issued.

[0044] Furthermore, the control device 31 writes the first key data and the primary identification information into the IC module M, and also performs processing to store in the primary server 21 primary data including the primarily issued data to be written to the IC module M as the primary issuance. That is, the control device 31 generates primary data in which the primarily issued data and OS data to be written to the IC module M as the primary issuance correspond to the primary identification information. However, if the OS data is to be stored in the primary server 21 in advance, the control device 31 only needs to generate primary data in which the primarily issued data corresponds to the primary identification information.

[0045] When the control device 31 generates primary data to be stored in the primary server 21, it transmits the generated primary data to the primary server 21 in the cloud (ST17). When the primary server 21 in the cloud receives the primary data from the control device 31 of the primary issuing system 11, it stores the primary issuing data and OS data included in the received primary data in association with information indicated by the primary identification information (for example, the first product ID assigned by the primary issuing system 11) (ST18).

[0046] Through the above processing, the primary issuance system (first issuance machine) can write the first key data and primary identification information to the IC module to be issued, and store the primary issuance data (or the primary issuance data and OS data) to be written to the IC module as the primary issuance on a server in the cloud.

[0047] The secondary processing by the secondary issuing system 12 and the tertiary processing by the tertiary issuing system are executed in the same procedure as the above-mentioned primary processing, as shown in Fig. 4. For example, the secondary issuing system (second issuing machine) 12 executes the secondary processing on an IC card C (issuance target device) incorporating an IC module that has undergone primary processing, in the same processing procedure as the above-mentioned primary processing, as shown in Fig. 4. This allows the secondary issuing system 12 to write second key data and secondary identification information (secondarily issued identification information) into an IC card incorporating an IC module that has undergone primary processing, and to store the secondarily issued data to be written to the IC card as second issuance in a secondary server in the cloud.

[0048] Furthermore, the tertiary issuing system (third issuing machine) 13 executes tertiary processing on an IC card C incorporating the secondarily processed IC module M, according to the processing procedure shown in Fig. 4. As a result, the tertiary issuing system 13 can write third key data and tertiary identification information (tertiary issued identification information) into the secondarily processed IC card, and store the tertiary issued data to be written into the IC card as tertiary issuance in a tertiary server in the cloud.

[0049] Next, a process (user issuing process) by the user issuing system 14 including the user terminal 41 in the IC card issuing system will be described. FIG. 5 is a sequence diagram for explaining an example of the operation of the user issuing process by the user issuing system 14 in the IC card issuing system. The user acquires an IC card C that has undergone the processes (primary process, secondary process, and tertiary process) by the issuing systems 11, 12, and 13 of the respective vendors described above as an IC card that can be issued. When the user acquires the IC card C that can be issued, the user executes the user issuance process using a user terminal 41 connected to a reader / writer 42. The user terminal 41 is assumed to have installed therein a program (issuance application) for executing the user issuance process.

[0050] For example, the user sets the IC card C so that it can communicate with the reader / writer 42, and inputs an instruction to execute the user issuance process to the user terminal 41. In response to the user's instruction, the user terminal 41 starts the user issuance process by activating the issuance app. When the user terminal 41 activates the issuance app, it communicates with the IC card C via the reader / writer 42.

[0051] When the reader / writer 42 and the IC card C are able to communicate with each other, the user terminal 41 acquires the unique data and the primary identification information from the IC card C (ST31). The user terminal 41 instructs the reader / writer 42 to read the unique data and the primary identification information from the IC card C (module M built in the IC card C). In response to the instruction from the user terminal 41, the reader / writer 42 transmits a read command to the IC card C requesting to read the unique data and the primary identification information.

[0052] The IC card C reads the unique data and primary identification information in response to a read command from the reader / writer 42, and transmits a response including the read unique data and primary identification information to the reader / writer 42. The reader / writer 42 receives the response to the read command from the IC module M, and supplies the unique data and primary identification information included in the response to the user terminal 41. In this way, the user terminal 41 acquires the unique data and primary identification information from the IC card C to be issued.

[0053] Upon acquiring the unique data and the primary identification information, the user terminal 41 transmits a request to the network HSM 43 to generate first key data (first key) using the unique data and the first key derivative data included in the primary identification information (ST32). Here, it is assumed that access information for accessing the network HSM 43 is set in the issuing application. The user terminal 41 accesses the network HSM 43 via the Internet based on the access information and transmits the key generation request.

[0054] When the network HSM 43 receives the unique data and the first key derivation data from the user terminal 41, it generates first key data from the unique data and the first key derivation data using a key shared with the issuing HSM 33 of the primary issuing system 11 (ST33). The network HSM 43 transmits the first key data generated from the unique data and the first key derivation data to the user terminal 41 (ST34). As a result, the user terminal 41 obtains the first key data generated by the network HSM 43.

[0055] When the user terminal 41 acquires the first key data generated by the network HSM 43, it executes mutual authentication with the IC card C using the acquired first key data (ST35). For example, the user terminal 41 and the IC card C perform mutual authentication based on whether or not the first key data generated by the network HSM 43 matches the first key data written in the IC module M in the IC card C.

[0056] Here, the network HSM 43 and the issuing HSM 33 of the primary issuing system 11 generate first key data using a common key. Therefore, if the unique data and the first key derivative data are the same, the first key data generated by the issuing HSM 33 of the primary issuing system 11 in ST13 above and the first key data generated by the network HSM 43 in ST33 will be the same data. Therefore, the first key data stored in the IC module M that has been successfully processed by the primary issuing system 11 will be the same as the first key data generated by the network HSM 43. Therefore, the user terminal 41 and the IC card C can mutually authenticate each other based on whether or not the first key data match.

[0057] When the mutual authentication with the IC card C using the first key data is successful, the user terminal 41 requests the primary data from the primary server 21 in the cloud by specifying the primary identification information acquired from the IC card C (ST36). Here, it is assumed that the access information for accessing the primary server 21 is set in the issuing application. The user terminal 41 accesses the primary server 21 via the Internet based on the access information of the primary server and transmits a request for the primary data.

[0058] When the primary server 21 receives a request for primary data from the user terminal 41, it reads out the primary data corresponding to the information indicated by the specified primary identification information from the data stored in the storage device, and supplies the primary data corresponding to the primary identification information to the user terminal 41 (ST37). That is, the primary server 21 transmits the primary issue data and OS data corresponding to the primary identification information to the user terminal 41 as primary data.

[0059] When the user terminal 41 acquires the primary data from the primary server 21, it instructs the reader / writer 42 to write the acquired primary data to the IC card C. In response to the instruction from the user terminal 41, the reader / writer 42 transmits a write request command to the IC card C requesting writing of the primary data including the OS data and the primary issue data (ST38).

[0060] When the IC card C receives the write request command from the reader / writer 42, it writes the OS data and the primary issued data requested to be written by the command to the nonvolatile memory provided in the LSI of the module M built into the IC card C (ST39). When the write process according to the write request command is completed, the IC card C transmits a response indicating the completion of writing to the reader / writer 42.

[0061] The user terminal 41 may write the primary data to the IC card in any procedure. For example, the user terminal 41 may write the divided data of the primary data acquired from the primary server 21 to the IC card C in a predetermined order. As a specific example, the user terminal 41 may write the OS data to the IC card C first, and then write the primary issued data to the IC card C after the writing of the OS data is completed.

[0062] When the reader / writer 42 receives a response indicating the completion of writing from the IC card C, it supplies information indicating the completion of writing to the user terminal 41. When the user terminal 41 acquires the information indicating the completion of writing of the primary data to the IC card C via the reader / writer 42, it determines that the writing process of the primary data corresponding to the primary processing has been completed.

[0063] When the writing process of the primary data corresponding to the primary processing is completed, the user terminal 41 further executes the writing process of the secondary data corresponding to the secondary processing. The writing process of the secondary data is performed by the same procedure as in ST31-39 described above.

[0064] When the user terminal 41 starts the process of writing secondary data, it acquires unique data and secondary identification information from the IC card C (ST41). As in ST31 above, the user terminal 41 reads the unique data and secondary identification information from the IC card C (module M built into the IC card C) using the reader / writer 42. However, the user terminal 41 may read the secondary identification information from the IC card C in ST41, and acquire the unique data read in ST31 above and the secondary identification information read from the IC card C in ST41.

[0065] Upon acquiring the unique data and secondary identification information, the user terminal 41 transmits to the network HSM 43 a request to generate key data (second key) using the unique data and the second key derivative data included in the secondary identification information (ST42).

[0066] When the network HSM 43 receives the unique data and the second key derivation data from the user terminal 41, it generates second key data from the unique data and the second key derivation data using a key shared with the issuing HSM 33 of the secondary issuing system 12 (ST43). The network HSM 43 transmits the second key data generated from the unique data and the second key derivation data to the user terminal 41 (ST44).

[0067] When the user terminal 41 acquires the second key data generated by the network HSM 43, it executes mutual authentication with the IC card C using the acquired second key data (ST45). For example, the user terminal 41 and the IC card C perform mutual authentication based on whether or not the second key data generated by the network HSM 43 matches the second key data written in the IC module M in the IC card C.

[0068] When mutual authentication with the IC card C using the second key data is successful, the user terminal 41 requests secondary data from the secondary server 22 in the cloud by specifying the secondary identification information acquired from the IC card C (ST46). When the secondary server 22 receives the request for secondary data from the user terminal 41, it reads out the secondary data corresponding to the specified secondary identification information from the storage device and provides it to the user terminal 41 (ST47).

[0069] When the user terminal 41 acquires the secondary data from the secondary server 22, it instructs the reader / writer 42 to write the acquired secondary data to the IC card C. In response to the instruction from the user terminal 41, the reader / writer 42 transmits a write request command to the IC card C requesting writing of the secondary data (ST48).

[0070] In response to the write request command from the reader / writer 42, the IC card C writes the secondary data to a non-volatile memory provided in the LSI of the module M built into the IC card C (ST49). When the user terminal 41 acquires the notification that the writing of the secondary data in the IC card C has been completed via the reader / writer 42, it determines that the writing process of the secondary data corresponding to the secondary processing has been completed.

[0071] Furthermore, when the writing process of the secondary data corresponding to the secondary processing is completed, the user terminal 41 executes the writing process of the tertiary data corresponding to the tertiary processing. The writing process of the tertiary data is performed by the same procedure as in ST31-39 or ST41-439 described above.

[0072] When the user terminal 41 starts the process of writing tertiary data, it acquires the unique data and tertiary identification information from the IC card C using the reader / writer 42, similar to ST31 (ST51). However, the user terminal 41 may read the tertiary identification information from the IC card C in ST51, and acquire the unique data read in ST31 and the secondary identification information read from the IC card C in ST51.

[0073] Upon acquiring the unique data and the tertiary identification information, the user terminal 41 transmits to the network HSM 43 a request to generate key data (third key) using the unique data and the third key derivative data included in the tertiary identification information (ST52).

[0074] When the network HSM 43 receives the unique data and the third key derivation data from the user terminal 41, it generates third key data from the unique data and the third key derivation data using a key shared with the issuing HSM 33 of the tertiary issuing system 13 (ST53). The network HSM 43 transmits the third key data generated from the unique data and the third key derivation data to the user terminal 41 (ST54).

[0075] When the user terminal 41 acquires the third key data generated by the network HSM 43, it executes mutual authentication with the IC card C using the acquired third key data (ST55). For example, the user terminal 41 and the IC card C perform mutual authentication based on whether or not the third key data generated by the network HSM 43 matches the third key data written in the IC module M in the IC card C.

[0076] When the user terminal 41 has successfully mutually authenticated with the IC card C using the third key data, it requests tertiary data from the tertiary server 23 in the cloud by specifying the tertiary identification information acquired from the IC card C (ST56). When the tertiary server 23 receives the request for tertiary data from the user terminal 41, it reads out the tertiary data corresponding to the specified tertiary identification information from the storage device and provides it to the user terminal 41 (ST57).

[0077] When the user terminal 41 acquires the tertiary data from the tertiary server 23, it instructs the reader / writer 42 to write the acquired tertiary data to the IC card C. In response to the instruction from the user terminal 41, the reader / writer 42 transmits a write request command to the IC card C requesting the writing of the tertiary data (ST58).

[0078] In response to the write request command from the reader / writer 42, the IC card C writes the tertiary data to a non-volatile memory provided in the LSI of the module M built into the IC card C (ST59). When the user terminal 41 acquires the completion of writing of the tertiary data in the IC card C via the reader / writer 42, it determines that the writing process of the tertiary data corresponding to the tertiary processing has been completed.

[0079] Through the above user issuance process, primary data (OS data and primary issuance data), secondary data (secondary issuance data), and tertiary data (tertiary issuance data) are written to the IC card. The IC card with the primary data, secondary data, and tertiary data written becomes a card that can be used as a credit card, etc. This makes it possible to issue IC cards using a user terminal operated by the user.

[0080] As described above, in the IC card issuance method according to the embodiment, the nth issuing system writes nth key data and nth identification information including the nth key derivative data generated by the issuing HSM from unique data and nth key derivative data acquired from an IC module built into the IC card to be issued, and stores the nth issuance data associated with the nth identification information in the nth server. Furthermore, the user terminal operated by the user performs mutual authentication with the IC card using the nth key data generated by the network HSM from the unique data and nth key derivative data acquired from the IC card, and if mutual authentication with the IC card is successful, writes the nth issuance data acquired from the nth server to the IC card.

[0081] According to the IC card issuance method described above, each issuing system only needs to write key data and identification information into the IC module of the IC card to be issued, and the end user can use a user terminal to securely issue the IC card they have received as an operational card such as a credit card. This reduces the workload of each vendor involved in issuing IC cards for writing data into the IC module and reduces the cost of equipment for the issuing system, making it possible to provide low-cost IC cards such as credit cards.

[0082] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims. [Explanation of symbols]

[0083] 11...Primary issuance system (issuing machine), 12...Secondary issuance system (issuing machine), 13...Tertiary issuance system (issuing machine), 14...User issuance system, 20...Cloud, 21...Primary server (server), 22...Second server (server), 23...Tertiary server (server), 31...Control device (information processing device), 32...Reader / writer (RW), 33...Issuing HSM, 34...Transport control unit, 35...Transport mechanism, 41...User terminal, 42...Reader / writer (RW), 43...Network HSM, M...IC module, C...IC card.

Claims

1. An IC card issuing method for issuing an IC card, comprising: The issuing system acquires unique data from the IC module built into the IC card to be issued, the issuing system writes key data generated from the unique data and key derivation data and issuing identification information including the key derivation data into the IC module; the issuing system stores the issuing data associated with the issuing identification information in a server accessible by any information processing device; IC card issuing method.

2. and when the information processing device operated by the user has successfully performed mutual authentication with the IC card using the key data, the information processing device writes the issuance data corresponding to the issuance identification information obtained from the server to the IC card. The IC card issuing method according to claim 1.

3. the issuing system obtains the key data generated by the issuing HSM from the unique data and the key derivation data using a registered key; the information processing device acquires the key data generated by the network HSM from the unique data and the key derivative data using a key common to the key registered in the issuing HSM; The IC card issuing method according to claim 1.

4. The issuing system includes a primary issuing system and a secondary issuing system, the primary issuing system writes first key data generated from the unique data and first key derivation data and primary issue identification information including the first key derivation data into the IC module; the primary issuing system stores the primary issuing data associated with the primary issuing identification information in a primary server accessible by any information processing device; the secondary issuing system writes second key data generated from the unique data and the second key derivation data and secondary issuing identification information including the second key derivation data into an IC card having the IC module built in; The secondary issuing system stores the secondary issuing data associated with the secondary issuing identification information in a secondary server accessible by any information processing device. The IC card issuing method according to claim 1.

5. Furthermore, when the information processing device operated by the user succeeds in mutual authentication with the IC card using the first key data, the information processing device writes the primarily issued data corresponding to the primarily issued identification information acquired from the primary server to the IC card; If the information processing device succeeds in mutual authentication with the IC card using the second key data, the information processing device writes the secondly issued data corresponding to the secondly issued identification information acquired from the secondary server to the IC card.

5. The IC card issuing method according to claim 4.

6. the primary server stores the primarily issued data associated with the primarily issued identification information and OS data used for the operation of the IC card; When the mutual authentication with the IC card using the first key data is successful, the information processing device writes the primarily issued data and the OS data corresponding to the primarily issued identification information acquired from the primary server to the IC card.

6. The IC card issuing method according to claim 5.

7. the unique data is identification data assigned to an LSI incorporated in the IC module; 7. The IC card issuing method according to claim 1.

8. A computer included in an issuing system for issuing IC cards, A function to acquire unique data from an IC module built into the IC card to be issued; a function of writing key data generated from the unique data and key derivation data and issuing identification information including the key derivation data into the IC module; a function of storing the issuance data associated with the issuance identification information in a server accessible by any information processing device; A program to achieve this.

Images