Electronic information storage medium, processing method, and program

Abstract

To provide an electronic information storage medium, a processing method, and a program, which allow for preventing unauthorized use of functions provided by applications.SOLUTION: While in a state where the selection of a specific application via a specific interface is disabled, an IC card 1 enables selection of the specific application via the specific interface at the time user fingerprint data is registered.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] This relates to technical fields such as IC cards that can acquire human biometric data. [Background technology]

[0002] Conventionally, IC cards with a fingerprint authentication function have been proposed. For example, Patent Document 1 discloses an RFID device that includes an antenna for receiving RF (Radio Frequency) signals, an RFID chip that is powered by non-contact communication using the antenna, and a fingerprint authentication engine. The fingerprint authentication engine is configured to compare a fingerprint read by a fingerprint reader with pre-stored fingerprint data. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Special Publication No. 2017-538188 Summary of the Invention [Problem to be solved by the invention]

[0004] Incidentally, when the RFID device disclosed in Patent Document 1 is used, for example, as a credit card, there is a possibility that during the process of a newly issued credit card being delivered to a user by mail or other means, a third party may misuse the functions of an application within the device (e.g., a payment function) via contactless communication.

[0005] Therefore, the present invention has been made in consideration of such problems, and aims to provide an electronic information storage medium, processing method, and program that can prevent the unauthorized use of functions provided by applications. [Means for solving the problem]

[0006] In order to solve the above problem, the invention described in claim 1 is an electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing processing in response to the commands, the electronic information storage medium including: an acquisition means for acquiring biometric data from a biometric data acquisition sensor, the biometric data being used for user authentication and being acquired from the user's body by the biometric data acquisition sensor; and a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium. Among the above applications, Through the specific interface For all payment processing When biometric data is registered by the registration means in a state in which application selection is disabled, For payment processing and a setting means for setting an application to be selectable.

[0007] The invention described in claim 2 is the electronic information storage medium described in claim 1, characterized in that the specific interface is a contactless communication interface.

[0008] The invention described in claim 3 is the electronic information storage medium described in claim 2, characterized in that the electronic information storage medium has a plurality of interfaces including the non-contact communication interface and a contact communication interface.

[0009] The invention described in claim 4 is the electronic information storage medium according to any one of claims 1 to 3, wherein the external device transmits the specific interface to the electronic information storage medium. For payment processing When a selection command for an application is received, the For payment processing A determination means for determining whether or not an application is set to be selectable; For payment processing When it is determined that the application is set to be selectable, For payment processing and a selection means for selecting an application.

[0011] Claim 5 The invention described in is a processing method executed by a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing processing in response to the commands, the method comprising the steps of: acquiring, from the biometric data acquisition sensor, biometric data used for user authentication, the biometric data being acquired from a user's body by a biometric data acquisition sensor; and registering the acquired biometric data in the electronic information storage medium. Among the above applications, Through the specific interface For all payment processing When the biometric data is registered in a state in which application selection is disabled, For payment processing and setting the application to be selectable.

[0012] Claim 6 The invention described in the above relates to a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing processing in response to the commands, an acquisition means for acquiring biometric data from the biometric data acquisition sensor, the biometric data being acquired from a user's body by the biometric data acquisition sensor and used for user authentication, and a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium; Among the above applications, Through the specific interface For all payment processing When biometric data is registered by the registration means in a state in which application selection is disabled, For payment processing The present invention is characterized in that it functions as a setting means for setting an application to be selectable. Effect of the Invention

[0013] According to the present invention, it is possible to prevent unauthorized use of functions provided by an application. [Brief description of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram illustrating an example of a schematic configuration of an IC card 1. [Diagram 2] FIG. 11 is a diagram showing an example of an operation sequence for fingerprint registration; [Diagram 3] FIG. 11 is a diagram showing an example of an operation sequence when a payment processing application is selected. [Figure 4] FIG. 11 is a diagram showing an example of an operation sequence during payment processing. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment in which the present invention is applied to an IC card (one example of the electronic information storage medium of the present invention) with a fingerprint authentication function that has multiple interfaces for receiving commands from external devices and is equipped with an application for executing processing according to the commands. Examples of such IC cards include credit cards and electronic money cards.

[0016] [1. Configuration and functions of IC card 1] First, the configuration and functions of an IC card 1 according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of a schematic configuration of the IC card 1. As shown in Fig. 1, the IC card 1 is configured to include an antenna unit 11, an I / O circuit 12, a fingerprint sensor 13, a fingerprint controller 14, and a main controller 15.

[0017] The antenna unit 11 receives radio waves (RF signals) transmitted from a reader / writer (RW) included in the external device, and outputs the electrical signal to the main controller 15 via the I / O circuit 12. The antenna unit 11 also transmits the electrical signal output from the main controller 15 via the I / O circuit 12 as radio waves. This allows contactless communication between the main controller 15 and the external device. Note that power can be supplied to each component of the IC card 1 by induced voltage from the antenna unit 11.

[0018] The I / O circuit 12 is electrically connected to the main controller 15, and has eight terminals, C1 to C8, defined in ISO / IEC 7816, for example. For example, the C6 terminal is electrically connected to the antenna unit 11, and can be used as a part of a non-contact communication interface for performing non-contact communication with an external device. The C7 terminal is electrically connectable to an external device, and can be used as a part of a contact communication interface for performing contact communication with an external device. Note that power can be supplied to each component of the IC card 1 from the external device via the C1 terminal.

[0019] The fingerprint sensor 13 (an example of a biometric data acquisition sensor) is mounted on the surface of the IC card 1, reads a fingerprint from the pad of a finger of a user who uses the IC card 1, and acquires the fingerprint data (an example of biometric data). For example, the fingerprint sensor 13 has tens of thousands of electrodes and a contact surface that the pad of the user's finger contacts, and when the pad of the user's finger contacts this contact surface, an amount of charge corresponding to the proximity of the unevenness of the pad of the user's finger (i.e., the unevenness that constitutes the fingerprint) to the contact surface is accumulated in the electrodes. The fingerprint sensor 13 acquires fingerprint data by detecting the amount of charge accumulated in each electrode and converting it into a numerical value (i.e., a numerical value corresponding to the amount of charge). Note that the fingerprint sensor 13 may acquire fingerprint data by a method other than the above.

[0020] The fingerprint controller 14 and the main controller 15 each include a RAM (Random Access Memory), a ROM (Read Only Memory), an NVM (Nonvolatile Memory), and a CPU (Central Processing Unit). The fingerprint controller 14 and the main controller 15 are electrically connected. The main controller 15 is capable of transmitting and receiving commands / responses to and from an external device via the I / O circuit 12. The fingerprint controller 14 and the main controller 15 may be formed on a single IC chip or on separate IC chips.

[0021] The fingerprint controller 14 drives the fingerprint sensor 13 to read the user's fingerprint and transmit the fingerprint data. As a result, the fingerprint controller 14, as an acquisition means of the present invention, acquires fingerprint data from the fingerprint sensor 13 to be used for user authentication. Communication between the fingerprint sensor 13 and the fingerprint controller 14 is performed, for example, via a SPI (Serial Peripheral Interface). The fingerprint controller 14 may be incorporated in the main controller 15.

[0022] The main controller 15 is an example of a computer in the present invention. An OS (Operating System), applications, and an API (Application Programming Interface) are stored in the ROM or NVM of the main controller 15. Here, the applications include a management application and a payment processing application. The management application is configured to include the program of the present invention. The NVM may be a flash memory or an "Electrically Erasable Programmable Read-Only Memory".

[0023] The NVM also includes payment data. The payment data may be a payment ID (identification information) unique to the user of the IC card 1. In this case, the payment ID is linked to the user's payment information and managed by a predetermined payment processing server. The payment information includes information necessary for payment according to the payment method. Examples of the payment method include electronic money payment and credit card payment. For example, when the payment method is credit card payment, the payment information includes data such as a credit card number, a cardholder's name, and an expiration date required for credit card payment. When the payment method is electronic money payment, the payment information includes data such as an electronic money number and electronic value required for electronic money payment. The NVM may also include the payment information as payment data.

[0024] In the IC card 1 configured as above, the following two parameters (a) and (b) are set to True or False, for example, when the card is issued.

[0025] Parameter (a): Disables the selection of a specific application via the contact communication interface when a fingerprint is not registered. Parameter (b): Disables the selection of a specific application via the contactless communication interface when a fingerprint is not registered.

[0026] Here, the specific application is, for example, a payment processing application, and is set in advance when the card is issued. True or False associated with each parameter may be represented by a flag stored in the NVM of the main controller 15. When the flag of either one of the parameters (a) and (b) is set to True, the specific application cannot be selected in the contact communication interface or the contactless communication interface when a fingerprint is not registered. This state is called an inactive (deactivated) state of the contact communication or the contactless communication interface. On the other hand, when the flags of both the parameters (a) and (b) are set to True, the specific application cannot be selected in either the contact communication interface or the contactless communication interface when a fingerprint is not registered. This state is called an inactive state of the specific application.

[0027] The main controller 15 executes the program of the present invention, thereby functioning as the registration means, setting means, determination means, and selection means of the present invention. The main controller 15 writes the fingerprint data acquired from the fingerprint controller 14 to a predetermined area of ​​the NVM. This causes the fingerprint data to be registered (fingerprint registration) in the IC card 1. Then, when a fingerprint is registered in a state in which the selection of a specific application via a specific interface is set to be disabled, the main controller 15 sets the selection of the specific application via the specific interface to be enabled. This causes the flags of both or either one of the parameters (a) and (b) to be set to False.

[0028] Here, the specific interface refers to both or either one of the non-contact communication interface and the contact communication interface. In this way, the inactivated specific interface or specific application is activated at the timing when the user's fingerprint is registered in the IC card 1. Furthermore, when the main controller 15 receives a selection command for a specific application from an external device via the specific interface, the main controller 15 determines whether or not the specific application is set to be selectable via the specific interface, and selects the specific application when it determines that the specific application is set to be selectable.

[0029] Note that commands transmitted and received between the main controller 15 and an external device are composed of command APDUs (Application Protocol Data Units) defined in ISO7816, for example. The command APDU is composed of at least CLA, INS, P1, and P2. CLA indicates a command class, and INS indicates a command code. For example, the INS identifies the type of command. Furthermore, P1 and P2 indicate command parameters. A response indicating the result of processing according to the command is returned to the external device. The response is composed of a response APDU defined in ISO7816, for example. The response APDU is composed of a status word (SW), for example. Alternatively, the response APDU is composed of Data and SW, for example.

[0030] [2. Operation of IC card 1] Next, the operation of the IC card 1 will be described. In the following operation example, an IC card 1 is taken as an example, which is shipped with a specific application as a payment processing application, a specific interface as a contactless communication interface, the contact communication interface activated, and the contactless communication interface deactivated. In other words, immediately after the shipment of the IC card 1, only payment by contact communication is possible. The shipped IC card 1 is delivered to the user by mail or other means.

[0031] (2.1. Fingerprint registration operation) First, the operation during fingerprint registration will be described with reference to Fig. 2. Fig. 2 is a diagram showing an example of an operation sequence during fingerprint registration. In Fig. 2, the registration terminal 2 is an example of an external device having a reader / writer, and may be, for example, a small fingerprint registration device delivered to a user together with the IC card 1, or may be a fingerprint registration device installed at a predetermined location such as a store. In the latter case, the user of the IC card 1 visits the location where the registration terminal 2 is installed to register his / her fingerprint. The user of the IC card 1 brings the IC card 1 close to the reader / writer of the registration terminal 2 or attaches it while touching his / her finger on the fingerprint sensor 13 of the IC card 1.

[0032] Since a certain amount of power is required to write the fingerprint data to the NVM of the main controller 15, it is preferable that the IC card 1 and the registration terminal 2 are electrically connected to each other to perform contact communication. However, non-contact communication may be performed between the IC card 1 and the registration terminal 2 as long as the IC card 1 can secure the power required to write the fingerprint data to the NVM of the main controller 15 by electromagnetic induction coupling with the registration terminal 2 (i.e., by induced voltage).

[0033] 2, when the registration terminal 2 recognizes the IC card 1, it starts communication, and after a management application is selected in the main controller 15, it transmits a fingerprint registration command to the IC card 1 (step S1). The fingerprint registration command is transmitted to the main controller 15 via the I / O circuit 12. Next, when the main controller 15 receives the fingerprint registration command from the registration terminal 2, it transmits a fingerprint reading command to the fingerprint controller 14 in response to the fingerprint registration command by the management application (step S2).

[0034] Next, when the fingerprint controller 14 receives a fingerprint reading command from the main controller 15, it transmits a fingerprint reading signal to the fingerprint sensor 13 in response to the fingerprint reading command (step S3). Next, when the fingerprint sensor 13 receives a fingerprint reading signal from the fingerprint controller 14, it reads a fingerprint from the pad of the finger of the user who uses the IC card 1 in response to the fingerprint reading signal (step S4), and transmits the fingerprint data to the fingerprint controller 14 (step S5).

[0035] Next, when the fingerprint controller 14 receives the fingerprint data from the fingerprint sensor 13, it transmits a response including the fingerprint data to the main controller 15 (step S6). Next, when the main controller 15 receives the response from the fingerprint controller 14, it registers the fingerprint by writing the fingerprint data included in the response to a predetermined area of ​​the NVM using a management application (step S7).

[0036] Next, the main controller 15 enables the selection of a payment processing application via the contactless communication interface by the management application (step S8). That is, the flag of parameter (b) is set to False (that is, the value on the NVM is rewritten). However, it is also possible that the flag of parameter (b) is not set to False (that is, the value on the NVM is not rewritten). That is, the parameter (b) is configured to restrict the behavior when a fingerprint is not registered, and after a fingerprint is registered, no restriction is imposed on the selection of an application regardless of whether the parameter (b) is True or False. Next, the main controller 15 transmits a response indicating normal termination (SW:9000) to the registration terminal 2 via the I / O circuit 12 (step S9).

[0037] (2.2. Operation when selecting a payment processing application) Next, the operation when a payment processing application is selected will be described with reference to Fig. 3. Fig. 3 is a diagram showing an example of an operation sequence when a payment processing application is selected. In Fig. 3, a payment terminal 3 is an example of an external device having a reader / writer, and is, for example, a payment device installed at a predetermined location such as a store. A user of an IC card 1 visits a predetermined location such as a store, and brings the IC card 1 close to the reader / writer of the payment terminal 3 or attaches it when making a payment for a product or service, for example.

[0038] 3, the payment terminal 3 starts communication when it recognizes the IC card 1, and after a management application is selected in the main controller 15, it transmits a selection command (including an application ID) for selecting a payment processing application to the IC card 1 (step S11). The selection command is transmitted to the main controller 15 via the I / O circuit 12.

[0039] Next, when the main controller 15 receives a selection command from the payment terminal 3, it calls an API (function) for confirming the fingerprint registration status from the management application (step S12). The confirmation API confirms the fingerprint registration status, and the confirmation result is returned to the management application as a return value (return value of the function). In this operation example, since a specific interface is a contactless communication interface, the confirmation API confirms the flag of the parameter (b), and returns True or False, which the flag indicates, as a return value. Here, if the user's fingerprint has already been registered by the operation sequence shown in FIG. 2, False is returned as the return value.

[0040] Next, the main controller 15 determines whether or not a fingerprint has been registered based on the result of the fingerprint registration status check (True or False) (step S13). In other words, it is determined whether or not the selection of a payment processing application via a contactless communication interface is enabled. If the main controller 15 determines that a fingerprint has not been registered (the check result is True) (step S13: NO), the process proceeds to step S14. On the other hand, if the main controller 15 determines that a fingerprint has been registered (the check result is False) (step S13: YES), the process proceeds to step S17.

[0041] In step S14, the main controller 15 calls an API for confirming the communication protocol (for example, a function called APDU.getProtocol()) from the management application. The confirmation API confirms whether the communication at that time is contact communication or contactless communication, and returns the confirmation result as a return value to the management application. In other words, it is confirmed whether the selection command was received by contact communication or contactless communication, and the confirmation result is returned as a return value.

[0042] Next, the main controller 15 determines whether the current communication is non-contact communication or not based on the communication protocol confirmation result (step S15). If the main controller 15 determines that the current communication is non-contact communication (step S15: YES), it transmits a response indicating abnormal termination to the payment terminal 3 via the I / O circuit 12 (step S16). If the payment terminal 3 receives the response indicating abnormal termination, it does not proceed to payment processing. On the other hand, if the main controller 15 determines that the current communication is not non-contact communication (i.e., contact communication) (step S15: NO), it proceeds to step S17.

[0043] In step S17, the main controller 15 selects a payment processing application. As a result, even if the user starts using the IC card 1 without registering fingerprint data after receiving the IC card 1 (for example, forgetting to register), payment can be made using the IC card 1 if the current communication is contact communication. Next, the main controller 15 transmits a response (including FCI (File Control Information)) indicating normal completion to the payment terminal 3 via the I / O circuit 12 (step S18). When the payment terminal 3 receives the response indicating normal completion, it proceeds to payment processing.

[0044] (2.3. Operation during payment processing) Next, the operation during payment processing will be described with reference to Fig. 4. Fig. 4 is a diagram showing an example of an operation sequence during payment processing. Note that the operation during payment processing described below is premised on the premise that a fingerprint has been registered according to the operation sequence during fingerprint registration shown in Fig. 2. In Fig. 4, when the payment terminal 3 starts payment processing, it transmits a payment command to the IC card 1 (step S22). The payment command is transmitted to the main controller 15 via the I / O circuit 12.

[0045] Next, when the main controller 15 receives a payment command from the payment terminal 3, the payment processing application transmits a fingerprint reading command to the fingerprint controller 14 (step S23). Next, when the fingerprint controller 14 receives a fingerprint reading command from the main controller 15, the fingerprint controller 14 transmits a fingerprint reading signal to the fingerprint sensor 13 in response to the fingerprint reading command (step S24). Next, when the fingerprint sensor 13 receives a fingerprint reading signal from the fingerprint controller 14, the fingerprint sensor 13 reads a fingerprint from the pad of the finger of the user who uses the IC card 1 in response to the fingerprint reading signal (step S25), and transmits the fingerprint data to the fingerprint controller 14 (step S26). Next, when the fingerprint controller 14 receives the fingerprint data from the fingerprint sensor 13, the fingerprint controller 14 transmits a response including the fingerprint data to the main controller 15 (step S27).

[0046] Next, when the main controller 15 receives a response from the fingerprint controller 14, the payment processing application acquires fingerprint data from the response and acquires registered fingerprint data from the NVM (step S28). Next, the main controller 15 compares the fingerprint data acquired from the response with the fingerprint data acquired from the NVM by the payment processing application, and determines whether the degree of match between the two is equal to or greater than a threshold (for example, whether the two fingerprint data match) (step S29). That is, the payment processing application performs user authentication. If the main controller 15 determines that the degree of match between the two is not equal to or greater than a threshold (step S29: NO), the main controller 15 transmits a response indicating an abnormal end to the payment terminal 3 via the I / O circuit 12 as a failure of user authentication (step S30). If the payment terminal 3 receives a response indicating an abnormal end, it stops the payment processing. On the other hand, if the main controller 15 determines that the degree of match between the two is equal to or greater than a threshold (step S29: YES), the user authentication is successful, and the process proceeds to step S31.

[0047] In step S31, the main controller 15 acquires payment data from the NVM using the payment processing application. Next, the main controller 15 uses the payment processing application to send a response (including payment data) indicating normal completion to the payment terminal 3 via the I / O circuit 12 (step S32). When the payment terminal 3 receives the response indicating normal completion, it acquires the payment data from the response, accesses the payment processing server as necessary, and uses the payment data to execute payment to charge the user for the product or service.

[0048] As described above, according to the above embodiment, when the selection of a specific application via a specific interface is set to be impossible, the selection of a specific application via the specific interface is set to be possible at the time the user's fingerprint data is registered, thereby preventing the functions of the application from being misused.

[0049] In the above embodiment, the present invention is applied to an IC card with a fingerprint authentication function that has a plurality of interfaces for receiving commands from an external device and is equipped with a specific application for executing a process according to the command. However, the present invention can also be applied to an IC card with a fingerprint authentication function that has only one interface (e.g., a contactless communication interface) for receiving commands from an external device and is equipped with a specific application for executing a process according to the command. For example, the present invention can also be applied to an IC card with only a contactless communication function or an IC card with only a contact communication function. In this case, the application cannot be selected until the user's fingerprint data is registered in the IC card. If the application is a payment processing application, payment processing cannot be performed. In other words, payment cannot be performed using the IC card at all until the fingerprint data is registered, and payment can be performed using the IC card at the same time as the fingerprint data is registered. The specific application may be an application other than the payment processing application (e.g., an application for viewing confidential information). In the above embodiment, the IC card is the electronic information storage medium of the present invention. However, the main controller 15 (or the IC chip constituting the main controller 15) may be the electronic information storage medium of the present invention.

[0050] In the above embodiment, a fingerprint sensor, which is an example of a biometric data acquisition sensor, is mounted on the IC card 1, but the present invention is applicable even when the fingerprint sensor is not mounted on the IC card 1. In this case, the fingerprint sensor is installed at a predetermined location such as a store, and is capable of communicating with the IC card 1. In the above embodiment, fingerprint data is used as an example of biometric data used for user authentication, but the user's face, the pattern on the user's palm, the blood vessels (veins) in the user's palm or fingers, or the iris of the user's eye may be acquired as biometric data, and the present invention is applicable to such cases. [Explanation of symbols]

[0051] 1 IC card 2. Registered terminal 3. Payment terminal 11 Antenna section 12 I / O circuit 13 Fingerprint sensor 14 Fingerprint Controller 15 Main Controller

Claims

1. An electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing a process in response to the command, an acquisition unit that acquires biometric data from a biometric data acquisition sensor, the biometric data being used for user authentication; a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium; a setting means for setting the application for payment processing to be selectable via a specific interface when biometric data is registered by the registration means in a state in which all of the applications for payment processing are set to be unselectable via the specific interface; and An electronic information storage medium comprising:

2. 2. The electronic information storage medium according to claim 1, wherein the specific interface is a contactless communication interface.

3. 3. The electronic information storage medium according to claim 2, wherein the electronic information storage medium has a plurality of interfaces including the contactless communication interface and a contact communication interface.

4. a determination means for determining whether or not the payment processing application is set to be selectable via the specific interface when a selection command for the payment processing application is received from the external device via the specific interface; a selection means for selecting the payment processing application when the determination means determines that the payment processing application is set to be selectable; and 4. The electronic information storage medium according to claim 1, further comprising:

5. A processing method executed by a computer included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and having an application for executing processing in response to the commands, comprising: acquiring biometric data from a biometric data acquisition sensor, the biometric data being acquired from a body of a user and used for user authentication; registering the acquired biometric data in the electronic information storage medium; when the biometric data is registered in a state in which all of the applications for payment processing are set to be unselectable via a specific interface, setting the application for payment processing to be selectable via the specific interface; A processing method comprising the steps of:

6. A computer that is included in an electronic information storage medium having one or more interfaces for receiving commands from an external device and an application for executing a process in response to the command, an acquisition unit that acquires biometric data from a biometric data acquisition sensor, the biometric data being used for user authentication; a registration means for registering the biometric data acquired by the acquisition means in the electronic information storage medium; A program characterized by functioning as a setting means for setting the selection of the payment processing application via a specific interface to be possible when biometric data is registered by the registration means in a state in which selection of all payment processing applications via a specific interface is set to be impossible among the applications.

Images