Transaction device using information storage card

Description: TECHNICAL FIELD [Detailed description of the invention]

【0001】

[Technical field to which the invention belongs]

The present invention relates to a trading device using an information recording card such as a vending machine using an IC card, and particularly in a vending machine or the like, a transaction using an information recording card capable of making a highly secure payment. Regarding the device.

【0002】

[Conventional technology]

In recent years, the use of IC cards has been promoted as a card for using credit cards and electronic money. By using such a card, payment can be made without using cash, but in such a system, electronic money replaced with conventional coins or banknotes, that is, electronic data is sent to a malicious third party. It needs to be a secure system that cannot be stolen.

【0003】

Therefore, for example, in a vending machine or the like, card information such as electronic money data or a card ID from an IC card is used as, for example, a card processing machine that reads this card information, and card information and purchased products from this card processing machine. When exchanging and exchanging with a card controller that operates card information based on it, encrypted communication is used. By doing so, even if the card information is stolen in the transmission path of the card information between devices, the contents of the card information cannot be deciphered by a malicious third party.

【0004】

[Problems to be Solved by the Invention]

In such a conventional vending machine, as shown in FIG. 17, a cryptographic processing machine 62 for encrypting data and decrypting the data is provided separately from the card controller 61, and the card controller 61 , The cryptographic data or the cryptographic data is transmitted to the cryptographic processing machine 62, the cryptographic processing machine 62 converts the plain text data into the cryptographic data, and the cryptographic data is converted into the plain text data and returned to the card controller 61. .. By doing so, even if the existing card controller 61 does not have the encryption processing function for encrypting and decrypting the data, the card controller 61 is newly provided with the encryption processing function. Encrypted communication can be performed between the card controller 61 and the card processor 63 without the need for.

【0005】

However, if the card information is stolen in the transmission path between the card controller 61 and the card processor 63, the data flowing between them is unlikely to be decrypted because it is encrypted data, but the encryption processing function If the card information is stolen in the transmission line between the card controller 61 that does not have the card controller 61 and the encryption processing machine 62 for performing encryption processing in place of this card controller 61, this transmission line corresponds to the plain text data. Since the encrypted data to be used is exchanged, if an attempt is made to decrypt the plain text data and the encrypted data, the data may be decrypted. Therefore, there is a problem that the card information can be falsified by a malicious third party and may be misused.

【0006】

Therefore, the present invention has been made by paying attention to the above-mentioned conventional unsolved problem, and provides a trading device using an information recording card capable of preventing leakage of card information in the device with higher accuracy. It is an object.

【0007】

[Means for solving problems]

In order to achieve the above object, the trading device using the information recording card according to claim 1 of the present invention has a plurality of processing devices for processing the card information recorded on the inserted information recording card, and the above-mentioned In a trading device using an information recording card in which card information is encrypted between the processing devices for confidential communication, among the processing devices, a cipher that does not have an encryption processing means for performing the encryption and decryption thereof. Between the processing device without processing means and the processing device with encryption processing means having the encryption processing means, the encryption processing means and the auxiliary encryption processing means for performing encryption and decryption simpler than the encryption processing means are provided. The secret communication device is inserted, and the auxiliary encryption processing means is provided in the processing device without the encryption processing means, and the card information is transmitted between the secret communication device and the processing device with the encryption processing means. The card information is encrypted by the auxiliary encryption processing means and communicated between the secret communication device and the processing device without the encryption processing means.

【0008】

Further, the trading device using the information recording card according to claim 2 is the trading device using the information recording card according to claim 1, wherein the secret communication device and the processing device without cryptographic processing means are a bus and a processing device. It is characterized by being channel-connected. Further, the trading device using the information recording card according to claim 3 is the trading device using the information recording card according to claim 1 or 2, and the auxiliary cryptographic processing means is the processing device without the cryptographic processing means. It is characterized in that the encryption is performed using a random number shared by the secret communication device and a unique value specified by the card information to be processed.

【0009】

Further, the trading device using the information recording card according to claim 4 is the trading device using the information recording card according to claim 1 or 2, and the processing device without encryption processing means and the secret communication device are described in advance. The auxiliary encryption processing means includes a storage means for storing card information processed before a set number of times, and the auxiliary encryption processing means stores a random number shared by the processing device without the encryption processing means and the secret communication device and the past stored by the storage means. It is characterized in that the encryption is performed using the unique value specified by the card information of.

【0010】

Further, the trading device using the information recording card according to claim 5 is the trading device using the information recording card according to claim 3 or 4, and the processing device without cryptographic processing means and the secret communication device are previously described. The previous card information storage means for storing the processed card information and the information recording card to be processed this time and the information recording card processed last time based on the previous card information stored by the previous card information storage means are the same. The auxiliary encryption processing means includes a comparison means for determining whether or not the information recording card to be processed is continuously the same, and a measurement means for measuring the number of consecutive times when the information recording cards to be processed are the same. When it is determined that the information recording card of the above and the information recording card processed last time are the same, the encryption method is changed according to the number of consecutive times measured by the measuring means. It is supposed to be.

【0011】

In the inventions according to claims 1 to 5, a secret communication device is inserted between the processing device without cryptographic processing means and the processing device with cryptographic processing means, and the secret communication device and the processing device with cryptographic processing means are inserted. The card information is encrypted by the cryptographic processing means to communicate with each other, and between the secret communication device and the processing device without the cryptographic processing means, an auxiliary cryptographic processing means simpler than the cryptographic processing means, that is, for example, card information The card information is encrypted and communicated by the auxiliary encryption processing means, which performs encryption that can be processed by this encryption processing means additional processing device without significantly changing the processing device without the encryption processing means such as scrambling.

【0012】

That is, when the card information is transmitted from the processing device with the cryptographic processing means to the processing device without the cryptographic processing means, the processing device with the cryptographic processing means encrypts the card information by the cryptographic processing means and sends it to the confidential communication device to conceal the card information. In the communication device, after decrypting this with the encryption processing means, it is encrypted by the auxiliary encryption processing means and transmitted to the processing device without the encryption processing means, and in the processing device without the encryption processing means, this is decrypted by the auxiliary encryption processing means. To process.

【0013】

Therefore, since encrypted communication is performed between the processing device with the cryptographic processing means and the secret communication device and between the processing device without the cryptographic processing means and the secret communication device, the encrypted data is a malicious third. Even if it is stolen by a person, it will be difficult to analyze it. At this time, since the auxiliary encryption means performs simple encryption, it can be realized without major changes on the processing device side without encryption processing means. Become.

【0014】

In addition, by connecting the secret communication device and the processing device with cryptographic processing means to the bus and port, it is possible to reduce the time required for passing card information between the secret communication device and the processing device with cryptographic processing means. It will be possible. Further, at this time, if the auxiliary encryption processing means encrypts using the random number shared between the processing device with the encryption processing means and the secret communication device and the unique value specified by the card information to be processed, the encryption can be performed. Encryption is performed by a different method each time the card is processed and each time the card to be processed is changed, which makes it more difficult to analyze the card information between the processing device with encryption processing means and the secret communication device. Can be.

【0015】

In addition, by encrypting using the card information of the processing target before the preset number of times stored in each other and the shared random number, when performing this processing, confidential communication with the processing device without encryption processing means Since encryption is performed using card information that is not exchanged with the device and is updated each time processing is performed, the card information between the processing device with encryption processing means and the secret communication device is used. The analysis can be made more difficult.

【0016】

Furthermore, the number of consecutive times when the information recording card to be processed is the same continuously between the processing device without cryptographic processing means and the secret communication device is measured, and the information recording card to be processed this time is the previous time. When it is the same as the processed information recording card, not only the encryption method is changed according to the shared random number and the card information to be processed this time or the card information to be processed before the preset number of times, but also the processing for the same card is performed. Since the encryption method is further changed according to the number of consecutive times, it is possible to make the analysis of the card information more difficult. For example, a malicious third party uses the same card for analysis. Even if the card information is stolen by performing processing many times, it is possible to make the analysis difficult.

【0017】

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described. FIG. 1 is a functional configuration diagram showing an example of a vending machine to which the present invention is applied. In the figure, 1 is a card processing machine that reads card information such as card ID information and deposit information recorded on card 2 that can be used as electronic money such as IC cards, and writes balance information after product purchase. Is. The card processor 1 is connected to the card controller 4 via the secret communication module 3.

【0018】

Then, the card controller 4 operates the card processor 1 according to the instruction from the vending machine master 5 to write and read the card information to the card 2, and notifies the vending machine master 5 of the card ID information or the card balance information. To do. In addition, when the vending machine master 5 notifies the subtraction amount of the card balance information according to the purchased product, the card balance information from the card 2 is operated accordingly to subtract the notified subtraction amount, or the card. The card balance information is updated by notifying the processing machine 1 of the subtraction amount and instructing the processing machine 1 to update the card balance.

【0019】

The vending machine master 5 is the same as the known vending machine master, and determines whether the card 2 is valid based on the card ID information, and also determines the selected product charge and the card balance information selected by the user. When it is determined that the product can be purchased based on the above, the product discharge control device 6 is controlled to discharge the selected product of the user, and the card controller 4 is notified of the charge according to the selected product. Etc. are performed.

【0020】

The card processor 1 is connected to the secret communication module 3 via a communication line, and is exchanged between the arithmetic processing unit (CPU) 11 that reads and writes data from the card 2 and the secret communication module 3. It includes an encryption processing unit 12 that encrypts and decrypts data. Then, the encryption processing unit 12 performs encryption and decryption processing according to, for example, an encryption algorithm registered in ISO, and exchanges data between the secret communication module 3 and the card processing machine 1 by encrypted communication. It is designed to be done by.

【0021】

The card controller 4 is a random number (hereinafter, a random number) generated by the card controller 4 and shared with the secret communication module 3 and an arithmetic processing unit (CPU) 41 that executes a predetermined process in response to a command from the vending machine master 5. It is equipped with a card information storage unit 42 for storing a shared random number) as a scramble key. Then, the card controller 4 is connected to the scrambled data storage unit 32 of the secret communication module 3 by bus and is connected to the arithmetic processing unit 31 by a port, and a start command or a synchronization signal or the like is connected to the port via a communication line. When the data such as card information is transmitted, the transmitted data is scrambled by a predetermined scramble method based on the shared random number and the card unique value set based on the card ID information of the card 2 to be processed, and this is described above. When writing to the scrambled data storage unit 32 and giving a read instruction via the communication line connected to the secret communication module 3 port, and when a data read instruction is given from the secret communication module 3 via the communication line connected to the port. The designated data is read from the scrambled data storage unit 32, and the scrambled data is unscrambled based on the shared random number and the card unique value.

【0022】

Further, the card controller 4 is used to read the card information of the card 2 or write the card information to a removable card processing machine outside the vending machine, or to input setting data to the card controller 4. The data loader or an external device 7 such as a connecting device for connecting to the vending machine network can be connected via the secret communication module 3.

【0023】

Similar to the card processor 1, the external device 7 communicates with the secret communication module 3 and exchanges data with the arithmetic processing unit (CPU) 71 and the secret communication module 3 to execute a predetermined process. It is equipped with an encryption processing unit 72 that encrypts and decrypts data exchanged between them, and by performing encrypted communication with the secret communication module 3, data is exchanged with the card controller 4 via the secret communication module 3. It has become.

【0024】

As shown in FIG. 1, the secret communication module 3 scrambles and descrambles the data exchanged with and from the card controller 4 by a scramble method shared with the card controller 4, and also with the card processor 1. The arithmetic processing unit (CPU) 31 that encrypts and decrypts the data exchanged between them according to the encryption processing unit 12 shared with the encryption processing unit 12 of the card processing machine 1, the secret communication module 3 and the card controller 4. A storage area for writing data to be exchanged between the two, a scrambled data storage unit 32 accessible by the arithmetic processing unit 31 of the secret communication module 3 and the arithmetic processing unit 41 of the card controller 4, and the card processor 1 and arithmetic. A communication processing unit 34 and a card processing machine that perform input / output processing between the processing unit 31 and an external device such as an external card processor, data loader, etc. and the arithmetic processing unit 31. It is equipped with a card information storage unit 35 for storing card ID information, shared random numbers, and the like from 1, and this secret communication module 3 is formed by one chip.

【0025】

Then, when the arithmetic processing unit 31 sends / receives data to / from the card controller 4, the transmitted data is generated by the card controller 4 and shared with the secret communication module 3 at the time of data transmission. Based on the card ID information of the card 2 to be processed and the card unique value calculated from the card ID information, the data is scrambled by a predetermined scramble method and written to the scrambled data storage unit 32, and a read instruction is given to the card controller 4 when data is received. , When a read instruction is given from the card controller 4, the data of the scramble data storage unit 32 is read, and the data is exchanged via the bus by descrambling the data based on the shared random number and the card unique value. I do.

【0026】

Although not shown, the card processor 1, the secret communication module 3, and the card controller 4 are a storage device such as a ROM for storing each processing program, a temporary data storage device such as a RAM for program working, and others. It is equipped with a communication processing device and the like for input / output processing of data with the equipment of. Next, the operation of the first embodiment will be described with reference to a flowchart showing a processing procedure of each part.

【0027】

When the card 2 is inserted into the vending machine, the card processor 1 detects that the card 2 has been inserted in step S1 as shown in FIG. 2, and proceeds to step S2 to input the card information from the card 2. read. Then, the card ID information is extracted from the read card information, encrypted by the encryption processing unit 12, and then transmitted to the secret communication module 3 (step S3).

【0028】

In the secret communication module 3, the encrypted data from the card processor 1 is input to the arithmetic processing unit 31 via the communication processing unit 34, and when the arithmetic processing unit 31 receives the encrypted data, steps S110 to S120 in FIG. 3 The input encrypted data is decrypted into plain text data, and the decrypted plain text data is stored in the card information storage unit 35.

【0029】

Subsequently, the arithmetic processing unit 31 generates a random number, and uses this to perform mutual authentication processing with the card controller 4 (step S130). For example, the arithmetic processing unit 31 generates a random number and notifies the card controller 4 of this random number data, and the card controller 4 shares the notified random number data between the card controller 4 and the secret communication module 3. It is encrypted with a key and notified to the arithmetic processing unit 31. Then, the arithmetic processing unit 31 decrypts the random number data encrypted by the card controller 4 based on the above-mentioned shared encryption key, compares this with the random number data previously notified by itself, and these. When they match, it is determined that the legitimacy of the communication partner has been confirmed, and the transaction permission is notified. Further, when the card controller 4 notifies the random number data generated by the card controller 4, the arithmetic processing unit 31 encrypts the random number data generated by the card controller 4 based on the encryption key and notifies the card controller. Then, when the validity of the communication partner is confirmed and the card controller 4 notifies the transaction permission, the random number data notified from the card controller 4 is stored in the card information storage unit 35 as a shared random number, and the card controller 4 and Start exchanging information.

【0030】

On the other hand, in the card controller 4, when random number data is input from the secret communication module 3, mutual authentication processing is executed in response to this (step S510 in FIG. 5), and the received random number data is mutually set using an encryption key. The encryption is encrypted and notified to the arithmetic processing unit 31 of the secret communication module 3, and the card controller 4 also generates a random number and notifies the arithmetic processing unit 31 of this random number data. Then, when the secret communication module 3 notifies the encrypted random number data, it is decrypted and compared with the random number data transmitted by itself, and when these match, the validity of the communication partner is obtained. Is confirmed, and the transaction permission is notified to the secret communication module 3. Then, when the validity of the communication partner is confirmed and the transaction permission is notified from the secret communication module 3, the random data generated by the self is stored in the card information storage unit 42 as a shared random number, and the information with the secret communication module 3 is stored. Start giving and receiving.

【0031】

In the mutual authentication process of the card controller 4 and the secret communication module 3, when the validity of the communication partner cannot be confirmed, a random number is generated again to perform the authentication process, or the card inserted as not being a legitimate communication partner. Take measures such as canceling the card processing for 2. Further, the mutual authentication process is not limited to the above method.

【0032】

When the mutual authentication process is completed in this way, the arithmetic processing unit 31 of the secret communication module 3 proceeds to step S140 and stores the card ID information stored in the card information storage unit 35 in the card information storage unit 35. Using the shared random number, scramble according to the common scramble method set in advance by the arithmetic processing unit 11 and the card controller 4, store this in the scramble data storage unit 32, and instruct the card controller 4 to read through the port connection. (Step S150).

【0033】

Subsequently, the card eigenvalue is calculated based on the card ID information, and this is stored in a predetermined storage area (step S160). This card eigenvalue is calculated, for example, by taking an Ex-OR of the card ID and the shared random number. Then, the method of calculating the card eigenvalue is set in advance between the card controller 4 and the secret communication module 3. Then, the process proceeds to step S170, and thereafter, when data is received from the card controller 4 or the card processor 1, the data conversion process shown in FIG. 4 described later is performed.

【0034】

On the other hand, in the card controller 4, when a read instruction is given from the secret communication module 3, the process proceeds from step S520 to step S530 in FIG. 5, and the scrambled card ID information stored in the scrambled data storage unit 32 is read out. Descramble is performed according to a preset scrambling method based on the shared random number stored in the card information storage unit 42. Then, based on the obtained card ID information, the card eigenvalue is calculated according to the calculation method common to the above-mentioned preset secret communication module 3, and this is stored in the card information storage unit 42 (step S540). .. Then, the process proceeds to step S550, and thereafter, when data is exchanged between the card controller 4 and the secret communication module 3, the communication process shown in FIG. 6 is performed.

【0035】

That is, when data is transmitted from the card controller 4 to the secret communication module 3, the process proceeds from step S602 to step S604, and the transmitted data is based on the shared random number stored in the card information storage unit 42 and the card unique value. , Scramble according to the common scramble method set in advance between the secret communication module 3 and the card controller 4. In this scramble, for example, a value obtained by shifting (rouding) the card eigenvalues by the shared random number is calculated, the transmission data is divided into the number of data corresponding to this calculated value, and the Ex-OR of the above-mentioned calculated value and the separated data It is done by taking.

【0036】

Then, after writing the scrambled transmission data to the scrambled data storage unit 32, a reading instruction is given to the arithmetic processing unit 31 of the secret communication module 3 via the port connection. (Step S606). In response to this, the arithmetic processing unit 31 of the secret communication module 3 shifts from step S202 to step S204 in FIG. 4, reads the data written in the scrambled data storage unit 32, and stores this in the card information storage unit 35. After descrambling and returning to plaintext data according to a predetermined scramble method based on the shared random number and the card unique value, this is encrypted and the encrypted data is output to the card processor 1 via the communication processing unit 34. (Step S206).

【0037】

When the arithmetic processing unit 31 cannot normally decode the data written in the scrambled data storage unit 32, the arithmetic processing unit 31 notifies the card controller 4 and the card processing machine 1 of an error. When the card processor 1 receives the encrypted data from the secret communication module 3, the process proceeds from step S4 to step S5, the received encrypted data is decrypted by the encryption processing unit 12, and the data is written to the card 2 according to the received data. Alternatively, the specified process such as reading the card information from the card 2 is performed (step S6). At this time, when the data is transmitted from the card processor 1 to the card controller 4, the transmitted data is encrypted by the encryption processing unit 12 and then transmitted to the secret communication module 3.

【0038】

Then, in the secret communication module 3, when the encrypted data is received from the card processor 1, the process proceeds from step S208 to step S210, the received encrypted data is decrypted, and then scrambled based on the shared random number and the card eigenvalue ( Step S212), this is written to the scrambled data storage unit 32, and the card controller 4 is instructed to read (step S214).

【0039】

When a data read instruction is given from the card controller 4, the data in the scrambled data storage unit 32 is read and descrambled (steps S202 and S204), the descrambled data is encrypted, and then the card processor 1 is used. Send (step S206). On the contrary, when the encrypted data is received from the card processor 1, it is decrypted (steps S208, S210), scrambled based on the shared random number and the card eigenvalue (step S212), and the scrambled data is stored. Write to Part 32 and instruct the card controller 4 to read (step S214).

【0040】

When the confidential communication module 3 cannot normally decrypt the encrypted data received from the card processor 1, an error notification is sent to the card processor 1 and the card controller 4, and the received encrypted data is discarded. Then, in the card controller 4, when a read instruction is given from the secret communication module 3, the process proceeds from step S608 to step S610, data is read from the scrambled data storage unit 32, and this is read based on the card eigenvalue and the shared random number. Descramble is performed, and a predetermined process is executed based on the data after the descrambling (step S612). Then, when transmitting data to the card processor 1, the process proceeds from step S602 to step S604, the transmitted data is scrambled with the card eigenvalue and the shared random number, and then this is written to the scrambled data storage unit 32 for arithmetic processing. Instruct the unit 31 to read (step S606).

【0041】

Then, the card controller 4 confirms the card ID or the balance according to the instruction from the vending machine master 6 based on the card information received from the card processing machine 1, and the vending machine master 6 confirms the balance and the selected product. If the product can be purchased from the above, the product discharge control device 6 is driven to discharge the selected product. In addition, the card controller 4 is notified of the deduction amount information and the like according to the purchased product, and the card controller 4 operates the card processor 1 to update the card balance information. Then, when the writing of the predetermined data to the card 2 is completed and the vending machine master 5 gives an end instruction, the card controller 4 transmits this to the secret communication module 3 and ends its own processing (step S614). When the end instruction is given, the secret communication module 3 detects this in step S216, notifies the card processor 1 of the end notification, and ends its own processing. Then, when the end notification is given, the card processor 1 detects this in step S7, ejects the card 2, and ends the process. As a result, a series of processes for the inserted card 2 is completed.

【0042】

Subsequently, when another card 2 is inserted, processing is performed in the same manner as above in this case as well, and the secret communication module 3 generates a random number again to perform mutual authentication processing, and similarly, the card controller 4 However, mutual authentication processing is performed in the same way, and the random number generated by the card controller 4 is set as a shared random number. Then, when the validity of the communication partner can be confirmed, the secret communication module 3 transmits the card ID information of the newly inserted card 2 to the card controller 4, and the secret communication module 3 and the card controller 4 use the card ID information in each of them. Calculate the card eigenvalue based on it.

【0043】

After that, the data exchanged between the card controller 4 and the secret communication module 3 is the shared random number newly generated by the card controller 4 and the card eigenvalue based on the card information of the newly inserted card 2. It is scrambled and transmitted. Here, since encrypted communication is performed between the secret communication module 3 and the card processor 1, even if the data is stolen in the transmission path between the secret communication module 3 and the card processor 1, the data is encrypted. Since it is data, it is difficult to decipher it. On the other hand, since data is transmitted between the card controller 4 and the secret communication module 3 by scramble communication, even if the data is stolen between the card controller 4 and the secret communication module 3, it is scrambled during this period. It is difficult to decipher because it is communicated.

【0044】

Further, since the card controller 4 does not perform the encryption process but the confidential communication module 3 performs the encryption process, the card controller 4 only needs to perform the scramble process, and the process related to the communication control of the card controller 4. Can be reduced, and the confidentiality of the communication can be ensured. Further, at this time, since the scrambling process is performed, the card controller 4 is not overloaded. In addition, since it is not necessary to perform encryption processing on the card controller 4, it can be applied even to an existing card controller 4 that does not have an encryption processing function, and the existing card controller 4 is significantly changed. Can be applied without doing.

【0045】

Further, when an error is detected in the secret communication module 3, only the error notification is sent to the card controller 4 or the card processor 1, so that the card controller 4 or the card processor 1 can deal with the data in which the error occurs. The processing time required can be reduced. Also, at this time, scrambling is performed based on the card eigenvalue based on the card ID and the random number, and the scramble method is different each time the card is processed, so that it is more difficult to analyze the scramble communication. Can be.

【0046】

Further, a secret communication module 3 is inserted between the card processor 1 and the card controller 4, and the data transmitted by the card processor 1 and the data transmitted by the card controller 4 are converted by the secret communication module 3. Therefore, it can be realized without major changes on the card controller 4 side and the card processor 1 side.

【0047】

In addition, since the encryption process is performed by the secret communication module 3, it is not necessary to change the card controller 4 side when changing the encryption method of the encrypted communication with the card processor 1. Since the secret communication module 3 only needs to be replaced, there is no significant change in the encryption method. Further, by connecting the secret communication module 3 and the card controller 4 by bus and port, and writing and reading to the scramble data storage unit 32, scramble data is exchanged between the secret communication module 3 and the card controller 4. Therefore, the processing time required for exchanging scrambled data between these can be shortened, and the time required for the entire processing for the card 2 can be shortened. Needless to say, if it is not necessary to consider the time required for data transfer, it is possible to connect the secret communication module 3 and the card controller 4 by a communication line instead of a bus connection. Nor.

【0048】

In the first embodiment described above, the case where data is exchanged between the card processor 1 and the card controller 4 has been described, but the case where data is exchanged between the card controller 4 and the external device 7 has been described. Also, the same as above may be applied. That is, when the data transfer is started, the device ID information for identifying the device may be transmitted from the external device 7, and the device ID information may be processed in the same manner as the card ID information.

【0049】

Further, in the first embodiment described above, the case where the transfer data is scrambled and communicated between the secret communication module 3 and the card controller 4 has been described, but the present invention is not limited to this, and the card is not limited to this. Any method that can perform confidential communication without imposing a load on the controller 4 and without making a significant change can be applied.

【0050】

Here, the card controller 4 corresponds to the processing device without the encryption processing means, the card processing machine 1 corresponds to the processing device with the encryption processing means, the secret communication module 3 corresponds to the secret communication device, and the encryption of the card processing machine 1 The encryption process executed by the processing unit 12 and the process of encrypting and decrypting the data exchanged with and from the card processor 1 in the secret communication module 3 correspond to the encryption processing means, and the secret communication module 3 Auxiliary encryption processing is the process of scrambling and descrambling the data sent and received with the card controller 4, and the process of scrambling and descrambling the data sent and received with the confidential communication module 3 in the card controller 4. Corresponds to the means.

【0051】

Next, a second embodiment of the present invention will be described. In this second embodiment, when scrambling the scrambled communication between the secret communication module 3 and the card controller 4 in the first embodiment, the card ID information of the card to be processed last time is used. The card eigenvalue is calculated based on the card eigenvalue, and scrambling is performed based on the card eigenvalue based on the previous card ID information and the random number data generated by the card controller 4. Then, as shown in FIG. 7, in the secret communication module 3 according to the first embodiment, the previous card information storage unit (memory) that stores the card ID information of the previous processing target instead of the card information storage unit 35. Means) 36 is provided, and the previous card information storage unit 36 is composed of a rewritable non-volatile memory. Further, in the card controller 4, instead of the card information storage unit 42, the previous card information storage unit (storage means) 43 composed of a rewritable non-volatile memory is provided.

【0052】

The same parts as those in the first embodiment are designated by the same reference numerals, and detailed description thereof will be omitted. In the second embodiment, the card processor 1 reads the card information when it detects that the card 2 has been inserted, and the card ID information from the read card information, as in the first embodiment. Is extracted, encrypted by the encryption processing unit 12, and then transmitted to the secret communication module 3 (steps S1 to S3 in FIG. 2).

【0053】

When the secret communication module 3 receives the encrypted data from the card processor 1, the process proceeds from step S110 to step S120 in FIG. 8, the received encrypted data is decrypted into plain text data, and then stored in the card information storage unit 36 last time. To do. Subsequently, the arithmetic processing unit 31 performs mutual authentication processing (step S130), and when the validity of the communication partner can be confirmed, the random number generated by the card controller 4 is used as a shared random number, for example, a working memory or the like. Store in a predetermined storage area.

【0054】

Subsequently, the process proceeds to step S161, and the card ID information of the card 2 to be processed last time stored in the card information storage unit 36 last time when the previous processing is executed is read out in the same manner as in the first embodiment. , Calculate the card eigenvalue from the card ID information (hereinafter, the card eigenvalue based on this previous card ID information is referred to as the previous card eigenvalue). Then, this is stored in a predetermined storage area.

【0055】

Next, the process proceeds to step S162, and based on the shared random number stored in the predetermined storage area and the previous card unique value calculated in step S161, the previous card information is stored in the same manner as in the first embodiment. The card ID information of the card 2 to be processed this time stored in the unit 36 is scrambled, written to the scrambled data storage unit 32, and a reading instruction of the card controller 4 is given (step S163). Then, the process proceeds to step S171, and thereafter, when data is received from the card controller 4 or the card processor 1, the data conversion process shown in FIG. 9 described later is performed.

【0056】

On the other hand, in the card controller 4, when random number data is input from the secret communication module 3, mutual authentication processing is executed in response to this (step S510 in FIG. 10), and when the validity of the communication partner can be confirmed, the random number generated by itself is confirmed. Is stored as a shared random number in a predetermined storage area such as a working memory. Subsequently, the process proceeds to step S541, and the card ID information of the card 2 to be processed last time stored at the time of executing the previous processing is read out to the card information storage unit 43 last time, and based on this, the same as the first embodiment described above is performed. (Hereinafter, the card eigenvalue based on the previous card ID information is referred to as the previous card eigenvalue). Then, this is stored in the card information storage unit 43 last time.

【0057】

Subsequently, when the process proceeds to step S542 and the secret communication module 3 gives an instruction to read the data of the scrambled data storage unit 32, the process proceeds to step S543 and the scrambled data storage unit 32 of the current card ID information is scrambled. Is read, and this is descrambling with the shared random number and the previous card unique value in the same manner as in the first embodiment, and then stored in the previous card information storage unit 43. Then, the process proceeds to step S551, and thereafter, when data is exchanged between the card controller 4 and the secret communication module 3, the communication process shown in FIG. 11 is performed.

【0058】

That is, as in the first embodiment, when the card controller 4 transmits data to the card processor 1 (step S602), the transmitted data is scrambled and the scrambled data storage unit of the secret communication module 3 is used. It is written to 32. At this time, after scrambling based on the shared random number and the unique value of the previous card, this is written to the scrambled data storage unit 32 and a read instruction is given (steps S604a, S606).

【0059】

In the secret communication module 3, as shown in FIG. 9, when a read instruction is given (step S202), data is read from the scrambled data storage unit 32, and this is descrambled based on the shared random number and the eigenvalue of the previous card. After that (step S204a), encryption processing is performed and output to the card processor 1 (step S206). On the contrary, when the card processor 1 outputs the data to the card controller 4, the card processor 1 encrypts the transmitted data and outputs the data to the secret communication module 3, and the secret communication module 3 decrypts the data (step). S208, S210), scramble based on the shared random number and the unique value of the previous card, write to the scrambled data storage unit 32, and give a read instruction (steps S212a, S214).

【0060】

When the card controller 4 is instructed to read (step S608), the data in the scrambled data storage unit 32 is read, and this is descrambled based on the shared random number and the eigenvalue of the previous card to obtain plain text data (step S610a). ), A predetermined process is executed based on the received data (step S612). Therefore, also in this case, the same effect as that of the first embodiment can be obtained, and in the second embodiment, the card controller 4 and the secret communication module 3 transmit the transmission data. Scramble is performed based on the previous card unique value, and at this time, the previous card information is stored in the card controller 4 and the secret communication module 3, so that when the process for the card 2 inserted this time is executed. In addition, scrambling is performed using information that does not flow between the card controller 4 and the secret communication module 3. Therefore, even if the scrambled data is stolen, the analysis can be made more difficult and the confidentiality can be ensured.

【0061】

In the second embodiment described above, the case where the card information of the card 2 processed last time is stored and the card eigenvalues are obtained based on the stored card information has been described, but based on the card information of the previous time. The card eigenvalues may be obtained, in short, the card information that has been processed before and the card information that is the basis for calculating the card eigenvalues in the card controller 4 and the confidential communication module 3 are the same. For example, the card eigenvalue may be calculated based on the card information at any time.

【0062】

Next, a third embodiment of the present invention will be described. In the third embodiment, as shown in FIG. 12, in the functional configuration diagram of the second embodiment shown in FIG. 7, the secret communication module 3 and the card controller 4 are rewritable non-volatile memory. The continuous number storage units 37 and 44 composed of the above are added, respectively.

【0063】

The second embodiment is the same as the second embodiment except that the scramble method for the scrambled communication between the secret communication module 3 and the card controller 4 is different. The same reference numerals are given and detailed description thereof will be omitted. That is, in the third embodiment, the card processor 1 reads the card information when it detects that the card 2 has been inserted, and reads the card from the read card information, as in the second embodiment. The ID information is extracted, encrypted by the encryption processing unit 12, and then transmitted to the secret communication module 3 (steps S1 to S3 in FIG. 2).

【0064】

When the secret communication module 3 receives the encrypted data from the card processor 1, the process of FIG. 13 is executed, and the process proceeds from step S110 to step S120 in the same manner as in the second embodiment, and the received encrypted data. Was decrypted into plain text data, stored in the card information storage unit 36 last time, and subsequently subjected to mutual authentication processing (step S130), and the random number generated by the card controller 4 when the validity of the communication partner could be confirmed. Is stored as a shared random number in a predetermined storage area such as a working memory.

【0065】

Subsequently, the process proceeds to step S161, the card ID information of the card 2 to be processed last time stored in the card information storage unit 36 last time when the previous processing is executed is read, and the same as in the second embodiment described above , The eigenvalue of the previous card is calculated from the card ID information and stored in a predetermined storage area. Next, the process proceeds to step S162, and the shared random number set in step S120 and the previous card eigenvalue calculated in step S161 are stored in the previous card information storage unit 36 in the same manner as in the second embodiment. The card ID information of the card 2 to be processed this time is scrambled, this is written to the scrambled data storage unit 32, and the reading instruction of the card controller 4 is given.

【0066】

Then, the process proceeds to step S166, and whether or not the card 2 to be processed last time and the card to be processed this time match is determined by the previous card ID information stored in the previous card information storage 36 and step S162. This is done by comparing with the entered card ID information this time (comparison means). Then, if the card ID information of the previous processing target and the current processing target do not match, the inserted card 2 is assumed to be the same as the card at the time of the previous processing execution, and the process proceeds to step S167 and is stored in the continuous number storage unit 37. After updating and storing the continuous number of times C to C = 0, the process proceeds to step S171, and the data conversion process shown in FIG. 9 described above is performed. That is, as in the second embodiment, when a read instruction is received from the card controller 4, the data in the scramble data storage unit 32 is read, descrambling is performed based on the random number and the eigenvalue of the previous card, and then this is performed. Is encrypted and output to the card processor 1. On the contrary, when data is received from the card processor 1, it is decoded and converted into flat data, which is scrambled based on the shared random number and the eigenvalue of the previous card and written to the scrambled data storage unit 32. Instruct 4 to read.

【0067】

On the other hand, when it is determined in the process of step S166 of FIG. 13 that the previous card ID information and the current card ID information are the same, the process proceeds from step S166 to step S168 and is stored in the continuous number storage unit 37. The number of consecutive times C is incremented by "1" and updated and stored (measurement means). Then, the process proceeds to step S172, and the data conversion process shown in FIG. 14 is performed.

【0068】

In this data conversion process, when the card controller 4 receives an instruction to read the data of the scrambled data storage unit 32, the process proceeds from step S202 to step S204b, and the information stored in the scrambled data storage unit 32 is read out. Is descrambled based on the shared random number, the unique value of the previous card, and the number of consecutive times C, and then encrypted in step S206 and transmitted to the card processor 1.

【0069】

Conversely, when data from 1 to card controller 4 is received from the card processor, the process proceeds from step S208 to step S210 to decrypt the received encrypted data, and the data decrypted in step S212b is combined with the shared random number and the previous card. After scrambling based on the eigenvalue and the number of consecutive times C, the data is written to the scramble data storage unit 32. Then, a read instruction is given to the card controller 4 (step S214).

【0070】

On the other hand, in the card controller 4, when the process of FIG. 15 is executed and random number data is input from the secret communication module 3, the mutual authentication process is executed in response to this (step S510), and the validity of the communication partner can be confirmed. , The random number data generated by the self is stored in a predetermined storage area as a shared random number. Subsequently, the process proceeds to step S541, and the card ID information of the card 2 to be processed last time stored in the card information storage unit 43 last time is read out, and based on this, the same as the second embodiment is performed. Calculate the eigenvalue of the previous card. Then, this is stored in the storage unit 42.

【0071】

Subsequently, when a read instruction is given from the secret communication module 3, the process proceeds from step S542 to step S543, the card ID information stored in the scrambled data storage unit 32 is read, and this is the shared random number and the previous card calculated in step S543. Based on the unique value, the scramble is decrambled in the same manner as in the second embodiment, and the current card ID information of the plaintext data is stored in the previous card information storage unit 43.

【0072】

Next, the process proceeds to step S546, the previous card ID information stored in the card information storage unit 43 last time is compared with the card ID information received in step S543, and whether the card 2 to be processed is the same as the previous time. Judge whether or not (comparison means). Then, when it is determined that the card 2 to be processed is not the same as the previous time, the process proceeds from step S546 to step S547, and after the continuous number C stored in the continuous number storage unit 44 is updated and set to C = 0. , Step S551 is performed, and the communication process shown in FIG. 11 described above is performed. In this communication process, as in the second embodiment, when data is transmitted to the card processor 1, the transmitted data is scrambled and written to the scrambled data storage unit 32 of the secret communication module 3. When, the transmitted data is scrambled and written based on the shared random number and the previous card unique value to give a read instruction, and in the secret communication module 3, the read data is descrambled based on the random number data and the previous card unique value. After that, this is encrypted and output to the card processor 1. Conversely, when outputting from the card processor 1 to the card controller 4, the card processor 1 encrypts the transmitted data and outputs it to the secret communication module 3, and the secret communication module 3 decodes this and then randomizes the data. It scrambles based on the data and the unique value of the previous card and writes it to the scrambled data storage unit 32. The card controller 4 reads the data of the scrambled data storage unit 32, descrambles the data based on the random number data and the eigenvalue of the previous card to make plain text data, and then executes a predetermined process based on the received data.

【0073】

On the other hand, in the card controller 4, when it is determined in step S546 of FIG. 15 that the card 2 to be processed matches the card at the time of the previous processing, the process proceeds from step S546 to step S548 and is stored in the continuous number storage unit 44. After incrementing the number of consecutive times C by 1 (measurement means), the process proceeds to step S552. After that, when data is exchanged between the card controller 4 and the secret communication module 3, the communication process shown in FIG. 16 is performed.

【0074】

In this communication process, when data is transmitted to the card processor 1, the process proceeds from step S602 to step S604b, the transmitted data is scrambled, and the scrambled data storage unit 32 of the secret communication module 3 is instructed to write / read. When, the transmission data is scrambled and written based on the shared random number, the eigenvalue of the previous card, and the number of consecutive times C.

【0075】

On the contrary, when a read instruction is given from the secret communication module 3, the process proceeds from step S608 to step S610b, the data in the scrambled data storage unit 32 is read, and the shared random number, the eigenvalue of the previous card, and the number of consecutive times C are also used. After descrambling and converting to plain text data, the process proceeds to step S612, and a predetermined process is executed based on the received data.

【0076】

That is, in this third embodiment, when it is determined that the card to be processed last time and the card to be processed this time do not match, that is, when the same card is not continuously inserted, the random number and the eigenvalue of the previous card Scramble communication is performed based on. Conversely, when it is determined that the card to be processed last time and the card to be processed this time match, that is, when the same card is accessed to the vending machine multiple times, a random number is used when scrambling communication. Scramble communication is performed by scrambling based on the eigenvalue of the previous card and the number of consecutive times C, and the number of consecutive times C is incremented each time the same card is used, and the scrambling method is changed each time the same card is used. There is.

【0077】

Therefore, when a malicious third party repeatedly accesses the vending machine using the same card for device analysis, etc., the number of consecutive times C is incremented each time the same card is used. , The scrambling method will be different each time the same card is used consecutively. Therefore, analysis based on scrambled data can be made more difficult.

【0078】

Needless to say, it is possible to obtain the same effect as that of the second embodiment. In the third embodiment, the scramble method is changed according to the number of consecutive times C by scrambling using the random number, the eigenvalue of the previous card, and the number of consecutive times C. Not limited to this, for example, a plurality of scramble methods may be set, and different scramble methods may be adopted according to the number of consecutive times C to perform scramble communication.

【0079】

Further, the third embodiment has described the case where the scrambling method is changed based on the number of consecutive times C in the second embodiment, but it is applied to the first embodiment. Needless to say, it may be. Further, in each of the above embodiments, the case where the product or system is applied to a vending machine as a trading device has been described, but the present invention is not limited to this, and for example, an unmanned device or system such as an automatic entrance gate that provides products or services. It is also possible to apply it to such as. It is also possible to apply not only IC cards but also prepaid cards and the like.

【0080】

Further, in each of the above embodiments, the case where the card eigenvalues are set based on the card ID information has been described, but the present invention is not limited to this, and any card information of the inserted card 2 is applied. be able to.

【0081】

[Effect of the invention]

As described above, the trading device using the information recording card according to claims 1 to 5 of the present invention is the processing device with the encryption processing means between the processing device without the encryption processing means and the encrypted reading value. A secret communication device provided with a cryptographic processing means for performing cryptographic communication with and an auxiliary cryptographic processing means for performing cryptographic communication with the processing device without the cryptographic processing means is inserted, and cryptographic processing is performed via the secret communication device. Since information is exchanged between the processing device without means and the processing device with cryptographic processing means, the confidentiality of communication can be ensured even if the processing device without cryptographic processing means is not provided with cryptographic processing means. Moreover, it can be easily realized without significantly changing the processing device without the encryption processing means.

【0082】

In particular, in the trading device using the information recording card according to claim 2, since the processing device without encryption processing means and the secret communication device are connected to each other by bus and port, the processing device without encryption processing means and the secret communication device are connected. It is possible to shorten the processing time required for exchanging data with and from. Further, in the trading device using the information recording card according to claim 3, the encryption by the auxiliary encryption processing means is shared between the processing device with the encryption processing means and the secret communication device with the random number and the card information to be processed. Since the encryption is performed using the specified unique value, it is possible to make it more difficult to analyze the card information between the processing device with the encryption processing means and the secret communication device.

【0083】

In addition, the trading device using the information recording card according to claim 4 stores the encryption by the auxiliary encryption processing means in each of the processing device without the encryption processing means and the secret communication device, which is a preset number of times. Encryption is performed using the unique value specified by the previous card information, that is, the unique value based on the card information that is not exchanged between the processing device without encryption processing means and the secret communication device at the time of processing execution, and the shared random number. Therefore, it is possible to make the analysis of card information more difficult.

【0084】

Further, the trading apparatus using the information recording card according to claim 5 measures the number of consecutive times when the information recording cards to be processed are the same in succession, and the information recording card to be processed this time processed last time. When it is the same as the information recording card, the encryption method is changed according to the number of consecutive processes for this card, so that the analysis of the card information can be made more difficult.

[Simple explanation of drawings]

[Figure 1]

It is a schematic block diagram of the vending machine to which this invention is applied.

[Figure 2]

It is a flowchart which shows an example of the processing procedure of a card processing machine 1.

[Fig. 3]

It is a flowchart which shows an example of the processing procedure of the secret communication module 3 in 1st Embodiment.

[Fig. 4]

It is a flowchart which shows the processing procedure of the data conversion processing in FIG.

[Fig. 5]

It is a flowchart which shows an example of the processing procedure of the card controller 4 in 1st Embodiment.

[Fig. 6]

It is a flowchart which shows the processing procedure of the communication processing in FIG.

[Fig. 7]

It is a schematic block diagram of the vending machine in the 2nd Embodiment.

[Fig. 8]

It is a flowchart which shows an example of the processing procedure of the secret communication module 3 in the 2nd Embodiment.

[Fig. 9]

It is a flowchart which shows the processing procedure of the data conversion processing in FIG.

[Fig. 10]

It is a flowchart which shows an example of the processing procedure of the card controller 4 in the 2nd Embodiment.

[Fig. 11]

It is a flowchart which shows the processing procedure of the communication processing in FIG.

[Fig. 12]

It is a schematic block diagram of the vending machine in the 3rd Embodiment.

[Fig. 13]

It is a flowchart which shows an example of the processing procedure of the secret communication module 3 in 3rd Embodiment.

[Fig. 14]

It is a flowchart which shows the processing procedure of the data conversion process in FIG.

[Fig. 15]

It is a flowchart which shows an example of the processing procedure of the card controller 4 in 3rd Embodiment.

[Fig. 16]

It is a flowchart which shows the processing procedure of the communication processing in FIG.

[Fig. 17]

It is a schematic block diagram of a conventional vending machine.

[Explanation of symbols]

1 Card processor 12 Cryptographic processing unit 2 card 3 Confidential communication module 31 Arithmetic processing unit 32 Scramble data storage 35 Card information storage 4 card controller 5 Vending machine master 6 Product discharge control device