How to update the PIN for an IC card with biometric authentication function

Abstract

To provide a method for, when a user forgets the PIN, easily and quickly reissuing a PIN by utilizing existing authentication procedures without requiring a specific device or the like.SOLUTION: An IC card settlement terminal issues a PIN collation command to an IC card (S001). When the IC card determines that an entered PIN is not correct (S005), the IC card acquires biometric information by biometric information acquisition means, collates the biometric information with registered biometric information, and if they match (S302), retains information indicating being biometrically authenticated (S003), and returns to the step of issuing the PIN collation command. Next, if the number of PIN attempts is left, the IC card settlement terminal transmits a PIN newly entered by an owner in response to a reissued PIN collation command to the IC card, and the IC card uses the transmitted PIN as a new PIN and updates the PIN (S101), erases the information indicating being biometrically authenticated, and returns the number of PIN attempts to an initial value.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to a method for updating a personal identification number (PIN) of an IC card with a biometric authentication function. [Background technology]

[0002] When using IC cards such as cash cards, debit cards, and credit cards, the mainstream method of identity verification is through the use of a personal identification number (PIN) consisting of four to six digits.

[0003] In response to this, a technology has been proposed that improves the convenience and security of identity verification when using an IC card by using an IC card that has the function of recording a user's unique biometric information, such as a fingerprint (Patent Document 1).

[0004] However, the technology of Patent Document 1 mentioned above requires a dedicated terminal device to communicate with a higher-level card management server when registering biometric information on an IC card and authenticating it, and requires the user to go to a specific location, which reduces convenience.

[0005] On the other hand, although PINs are very convenient, they have issues with the complication of having to remember the numbers and the risk of the numbers being stolen. In particular, with the number of cards owned by each person increasing in recent years, it is becoming increasingly common for people to forget the PINs they set for each card.

[0006] Previously, when reconfirming or updating a PIN, the cardholder had to contact the card company, complete identity verification, and then either receive the PIN by mail at a later date, or go through the procedure for card reissue, as shown in Figure 6. As a result, users were unable to make payments using the PIN at stores until they received the new PIN or reissued card, making it very troublesome for users to update their PIN. In addition, card companies had to allocate manpower to handle these transactions at counters and reissue cards, which resulted in large costs and personnel burdens.

[0007] In other words, with conventional technology, IC card authentication required the use of a specific device or location, and updating a PIN or reissuing a card required time and effort, resulting in issues with convenience. [Prior art documents] [Patent documents]

[0008] [Patent Document 1] JP 2018-151799 A Summary of the Invention [Problem to be solved by the invention]

[0009] The problem that the present invention aims to solve is to provide a method for improving convenience in the case of an IC card with biometric authentication function, by utilizing existing authentication procedures to easily and quickly reissue a PIN without requiring any specific device, etc., when the PIN is forgotten. [Means for solving the problem]

[0010] In order to solve the above problem, one aspect of the present invention is A PIN update method for an IC card with a biometric authentication function, comprising the steps of: In a PIN verification procedure in which a PIN verification is performed at an IC card payment terminal for an IC card on which the owner's biometric information is registered, The IC card payment terminal includes: issuing a PIN verification command to the IC card; Obtaining from the IC card the number of PIN attempts, which is the number of times the PIN can be re-entered, and information on whether biometric authentication has been performed or not, which is recorded on the IC card; If the number of PIN attempts remains and biometric authentication has not been performed, the PIN entered by the owner is transmitted to the IC card; In the IC card, a determination is made as to whether the input PIN is correct, and if it is determined to be incorrect, biometric information is acquired by a biometric information acquisition means provided in the IC card; The biometric information is compared with the biometric information registered on the IC card, and if they match, the information indicating that biometric authentication has been completed is stored and the process returns to the step of issuing the PIN verification command. Next, the IC card payment terminal The number of PIN attempts, which is the number of times the PIN can be re-entered, and the biometric authentication information recorded on the IC card are obtained; The number of PIN attempts If it remains and has been biometrically authenticated, In response to the reissued PIN verification command, a new PIN entered by the owner is sent to the IC card; In the IC card, The PIN is updated using the transmitted PIN as a new PIN, The biometric authentication information is erased, and the number of PIN attempts is reset to the initial value. The present invention relates to a PIN update method for an IC card with a biometric authentication function.

[0011] In the above-mentioned PIN update method for an IC card with biometric authentication function, After resetting the number of PIN attempts to the initial value, the process may return to the step of issuing the PIN verification command.

[0012] In the above-mentioned PIN update method for an IC card with a biometric authentication function, the biometric information may be fingerprint information. Effect of the Invention

[0013] According to the present invention, the following effects can be obtained. 1) Improved convenience for cardholders By incorporating the PIN update procedure into the PIN Verify command processing procedure, the PIN can be changed immediately, reducing the need to contact the card company and improving convenience for the cardholder. In addition, the card company also reduces personnel costs by eliminating the need to allocate manpower to respond to inquiries at the counter or to reissue cards. 2) Low barrier to entry Since fingerprint authentication is performed on the IC card, there is no need to prepare a dedicated payment terminal that supports fingerprint authentication, and it can be used as is with payment terminals that are already in use at stores, etc., making the barrier to introduction low. In other words, since the processing involves incorporating a PIN rewrite function into the existing PIN Verify command, there is no need to install new payment terminals. [Brief description of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram of a typical IC card transaction flow. [Diagram 2] FIG. 1 is a diagram showing a typical conventional PIN verification flow. [Diagram 3] FIG. 2 is a diagram of a PIN verification flow including the PIN update method of the present invention. [Figure 4] FIG. 11 is a diagram showing another example of a PIN verification flow including the PIN updating method of the present invention. [Diagram 5] FIG. 2 is a schematic diagram of an IC card and a payment terminal. [Figure 6] FIG. 1 is a schematic diagram of a conventional PIN reissue or card reissue method. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, the embodiments of the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments described below. In addition, in the embodiments shown below, technically preferable limitations are imposed for carrying out the invention, but these limitations are not essential requirements for the present invention.

[0016] Figure 1 is a diagram of a typical transaction flow using an IC card. In outline, when an IC card payment terminal (hereinafter simply referred to as the payment terminal) detects that an IC card has been set, it starts supplying power to the IC card, sends a reset command to activate the IC card, and starts a processing procedure based on the normal PIN authentication procedure. A detailed description of the typical processing flow is omitted, but in step (7) cardholder verification, the cardholder is authenticated using the PIN. If the PIN is authenticated as correct, necessary administrative processing is carried out, and if the card action in (10) is an online inquiry, online processing is carried out, and the flow is completed.

[0017] 5 shows an example of the situation in which IC card 100 is set in payment terminal 200, and depicts a scene in which contact-type IC card 100 equipped with fingerprint sensor 120 as a biometric authentication function and contact terminal 102 is inserted in the direction of the arrow into a card slot of payment terminal 200 to proceed with payment processing. Payment terminal 200 is equipped with keyboard 201 for receiving input of necessary information such as a PIN, and display unit 202. IC card 100 does not necessarily have to be of the contact type as shown in this figure, and a non-contact type IC card and IC card payment terminal may also be used.

[0018] In step (7) cardholder verification in FIG. 1, an overview of the processing at each step in the PIN verification flow that has been generally performed in the past will be described with reference to FIG. 2 and FIG. As a first step in the flow of FIG. 2, payment terminal 200 requests data on the remaining number of PIN attempts from IC card 100 in order to start authentication, and IC card 100 transmits the data on the remaining number of PIN attempts to payment terminal 200.

[0019] Step X001: The user is requested to input a PIN, and the user inputs the PIN into the keyboard 201 provided in the payment terminal 200. The payment terminal 200 performs PIN verification (PIN verification) on the IC card 100 to confirm whether the PIN belongs to the user. The terminal 200 transmits a Verify command and the input PIN.

[0020] Step X002: The IC card 100 judges whether or not there are any remaining attempts based on the data of the remaining number of PIN attempts. If there are any remaining attempts, the process proceeds to step X003 for PIN verification, and if there are no remaining attempts, the process proceeds to step X006 for an error response. Step X003: The IC card 100 compares the PIN received from the settlement terminal 200 with the registered PIN to perform PIN verification.

[0021] Step X004: If they match, it is determined that the PIN verification is successful, and the process proceeds to step X005. If they do not match, the process proceeds to step X007. Step X005: A normal end response is returned to the payment terminal 200, and the flow is completed.

[0022] Step X006: Return the error code "6983" to the payment terminal 200 and complete the process. Step X007: The number of PIN attempts is decreased by one and updated. Step X008: Return error code "63CX" to payment terminal 200, and return to step X001. Note that "X" in the error code is a variable value according to the number of attempts, for example, a numerical value indicating the remaining number of attempts (the same applies to the examples of the present invention described below).

[0023] As in the above example, if the PIN cannot be authenticated using conventional PIN authentication, an error occurs. The process ends with the message "You can't update your PIN in this flow." To update your PIN, you must either have the card company send you the PIN by mail or go through the process of reissuing your card, as mentioned above.

[0024] In contrast, in the PIN verification flow of the PIN update method of the present invention, When the owner inputs the PIN for the "Verify" command and there is a PIN verification error, instead of immediately sending an error from the IC card to the payment terminal, access the biometric authentication function and perform biometric authentication (if there is no response within a certain time, send the error result to the payment terminal as usual).

[0025] And when the biometric authentication is successful, after the card sets the biometric authentication OK flag, it sends an error result from the IC card to the payment terminal. Next, due to a retry of PIN verification occurring in the normal routine on the terminal side, this is utilized for PIN update. At the time of this retry, the owner inputs the new PIN they want to set. The card checks whether the biometric authentication OK flag is set. If it is set, it performs the "PIN update" process, and if it is not set, it performs the normal "PIN verification" process.

[0026] An example of the PIN verification flow in the PIN update method of the present invention will be described in more detail with reference to FIG. 3. In the present invention, since it is realized by incorporating biometric authentication and PIN update processes during the process of (7) cardholder verification in FIG. 1, FIG. 3, similar to FIG. 2, describes the content of the steps of the process of (7) cardholder verification in FIG. 1 in more detail. Also, for other parts of the process, the same process as the general IC card process flow shown in FIG. 1 can be applied.

[0027] <Example of command flow until PIN update> (Example from the state where the biometric authentication OK flag, which is information indicating that biometric authentication has been performed, is not set until PIN update is completed) S001: Perform the PIN verification (Verify) command [1st time] [Send 00200080 08 24 XXXX FFFFFFFFF] S002: Check the number of PIN trial attempts (⇒ There are remaining PIN trial attempts) S003: Check whether the biometric authentication OK flag is set (⇒ No biometric authentication OK flag) S004: Perform normal PIN verification (⇒ S005: PIN verification fails) S301: Biometric authentication is performed (⇒ S302: Biometric authentication successful) S303: Set biometric authentication OK flag S304: Return error response "63CX" [Receive 63CX] (PIN verification is retried according to the device's normal routine) S001: Execute Verify command [2nd time] [Send 00200080 08 24 XXXX FFFFFFFFF] S002: Check the number of PIN attempts (⇒ PIN attempts remaining) S003: Check if the biometric authentication OK flag is set (⇒ Biometric authentication OK flag is set) (Enter the new PIN you want to set) S101: Update PIN value to entered value S102: Remove the biometric authentication OK flag S103: Reset the number of PIN attempts to the initial value S104: Return normal response of “9000” [Receive 9000]

[0028] The above is an example of the flow when a PIN is updated according to the PIN update method of the present invention. Depending on the situation, the PIN may not be updated. For example, if there are no attempts remaining in S002: Check the number of PIN attempts, proceed to S201, return an error of "6983", and end the process. Also, if S302: Biometric authentication fails, the remaining number of attempts is decremented by one, S402: return an error response of "63CX", return to S001, and perform the update process again.

[0029] As another example of the flow, for example, as shown in FIG. 4, after S103: resetting the number of PIN attempts to the initial value, S105: Return error response "63CX" (PIN verification is retried according to the device's normal routine) S001: Execute Verify command [3rd time] The following omitted and then performing PIN verification using the updated PIN, thereby making it possible to confirm the validity of the updated PIN.

[0030] An example of a specific usage image at a payment terminal is shown below. Note that this is an example of using fingerprint authentication as the biometric authentication method (note that the signaling method described below is just an example and is not specified). (1) When making a payment, if the payment terminal requests you to enter your PIN, enter your PIN. (2) If the PIN verification fails, some kind of signal is given to prompt the user to perform fingerprint authentication. (3) Authentication is performed by touching the finger to the fingerprint authentication sensor. (4) Once fingerprint authentication is complete, some kind of signal will let you know that it is okay to release your finger. (Example: A light flashes, etc.) (5) In addition, some kind of signal will indicate whether the fingerprint authentication was successful or not. (Example: changing the color for success / failure) (6) After you release your finger, the PIN verification (enter a new PIN) flow will begin again. (7) When verifying the PIN, if the biometric authentication OK flag is set, a new Prompt for PIN input (e.g., a light flashes quickly) (8) Enter a new PIN value (9) Some kind of signal will let you know when the PIN update has been completed successfully. (e.g. change color, etc.) (10) The PIN verification process continues. After this, the process is the same as for regular cards.

[0031] If a user wants to change their PIN, they will be asked to verify their PIN once, then perform fingerprint authentication, and then simply enter the newly set PIN in the second PIN verification to update their PIN. This means that PINs can be updated instantly, without the need for time-consuming and tedious communication with the card company as in the past.

[0032] As described above, according to the present invention, by incorporating a PIN update process into the personal identification process (PIN Verify) performed with a general IC card, a user can safely and quickly change his or her own PIN.

[0033] The IC card 100 used in the present invention may have the same configuration as a conventionally known IC card. For example, as shown in Fig. 6, in addition to a fingerprint sensor 120 and a contact terminal 102 as biometric authentication functions, the IC card 100 may be equipped with a display unit that shows the status of the card or the authentication process, a storage unit that stores information necessary for authentication, a processing unit that processes the authentication process and data, a communication unit that communicates data with a higher-level host such as a payment terminal, and a power supply unit that supplies the power necessary for these processes, all of which are not shown.

[0034] The display unit provides visual information to the user by, for example, a single-color or multi-color light-emitting device, such as an LED. The display unit informs the user of the state of the IC card and its changes by transitions of the display color, display time, display fluctuation, and other combinations of visually identifiable information. By changing the color, brightness, or timing of lighting, different states can be distinguished.

[0035] The power supply unit has a self-supplied power source such as a battery or a solar cell, or has a near field communication (NFC) function and has a mechanism for receiving power via electromagnetic induction from a general-purpose mobile terminal device or its charging device, for example.

[0036] The fingerprint sensor 120 can have a function of extracting the pattern features of a fingerprint by contact scanning the user's finger in the case of a one-dimensional sensor, or by holding the finger in contact in the case of a two-dimensional sensor. The biometric information is not limited to this, and any information that is unique to the user and can be obtained by a sensor provided on the card, such as a vein pattern or iris pattern, can be used.

[0037] Also, although not shown in the figure, the processing unit may be a central processing unit (CPU), which has an OS on the hardware layer of the IC chip and has the function of executing various applets stored in the memory unit by integrating and controlling the memory unit, communication unit, and acquisition unit.

[0038] The memory unit has the function of storing the code of various applets and the data or results required for calculation processing, and mainly consists of storage devices such as Random Access Memory (RAM) which supports high-speed and frequent rewriting, Electrically Erasable Programmable Read-Only Memory (EEPROM) such as flash memory which can retain data and be rewritten even when powered off, and Read Only Memory (ROM) which retains data that does not need to be permanently rewritten. [Explanation of symbols]

[0039] 100···IC card 102...Contact terminal 120 Fingerprint sensor 200...Payment terminal 201··Keyboard 202...Display section

Claims

1. A method for updating a PIN for an IC card with a biometric authentication function, comprising the steps of: In a PIN verification procedure for performing PIN verification on an IC card on which biometric information of an owner is registered at an IC card payment terminal, The IC card payment terminal includes: issuing a PIN verification command to the IC card; A PIN trial count, which is the number of times a PIN can be re-entered, and information on whether biometric authentication has been performed or not, which is recorded in the IC card, are obtained from the IC card; If the number of PIN attempts remains and biometric authentication has not been performed, the PIN entered by the owner is transmitted to the IC card; In the IC card, A determination is made as to whether the input PIN is correct or not, and if it is determined that the PIN is incorrect, biometric information is acquired by a biometric information acquisition means provided in the IC card; If the biometric information matches the biometric information registered in the IC card, the biometric information is stored as biometric authentication completion information and the process returns to the step of issuing the PIN verification command. Next, the IC card payment terminal Acquire the number of PIN attempts, which is the number of times the PIN can be re-entered, and the biometric authentication information recorded on the IC card; If the number of PIN attempts remains and biometric authentication has been completed, a PIN newly input by the owner in response to a PIN verification command that is issued again is transmitted to the IC card; In the IC card, The PIN is updated using the transmitted PIN as a new PIN, The biometric authentication information is erased, and the number of PIN attempts is reset to the initial value. A PIN updating method for an IC card with a biometric authentication function.

2. 2. The PIN update method for an IC card with biometric authentication function according to claim 1, wherein the step of issuing the PIN verification command is repeated after resetting the number of PIN trial times to an initial value.

3. 3. The PIN updating method for an IC card with a biometric authentication function according to claim 1, wherein the biometric information is fingerprint information.

Images