JPH0325568A - Card validity confirming method - Google Patents

Abstract

PURPOSE:To find out a forgery card at early stages by registering data different everytime at every completion of a processing for every transaction both on a card and a center file, and comparing and collating both data when every transaction is started. CONSTITUTION:A CPU 7 that is a host system transmits the transmission request of immediately authorization D to the card 9 incorporating an IC, and the card 9 incorporating the IC reads the preceding authorization D from an E<2>PROM and transmits it to the host system 7. Here, the preceding authorization D is different data at every card generated by the mark of a character, etc., not relating to a transaction for the use of the card by using the random number table, and it is the data registered on the card 9 and the center file of the host system 7. Then, the preceding authorization D supplied when the card is used previously is compared with the preceding authorization D registered on the center file, and when noncoincidence is obtained, the card 9 is judged as an unauthorized card 9, therefore, no transaction is established. In such a way, the forgery card is found out at early stages.

Description

[Detailed Description of the Invention] [Field of Industrial Application] The present invention relates to a method for confirming the validity of a card in an online system that uses cards from financial institutions such as banks and credit cards, and particularly relates to a method for confirming the validity of a card in an online system that uses cards from financial institutions such as banks and credit cards. This invention relates to a card authenticity confirmation method that can quickly detect a counterfeit card or a card in which two cards with the same content are erroneously issued.

[Conventional technology]

Conventionally, the validity of cards in online systems has been confirmed using unique data created by combining personal data with fixed data and logic (in the case of IC cards) such as internal bank codes and branch codes using magnetic stripes and ICs. was sent to the higher-level system using a line, and the higher-level system compared the above-mentioned fixed data and variable data and recognized the card as legitimate only when they were equal.

[Problem to be solved by the invention]

However, according to the above-mentioned conventional technology, if a counterfeit card is discovered that has duplicated the contents of a legitimate card, the legitimate card user may have an unusual lack of balance on a financial institution's card. With credit cards, it was not known until it was determined due to the difference between the amount used and the amount charged. [Means for Solving the Problems] The present invention provides a method for verifying the validity of a card when a transaction is made using a card using an online system, in which different data is collected each time the transaction data is processed. It is characterized by being registered in both the card and the center file.

[For production]

According to the above structure, the data of both parties is compared and verified at the start of each transaction, and even if a forged card is used, the transaction will not be completed unless the data used for the last transaction process matches. This means that counterfeit cards can be discovered.

〔Example〕

An embodiment of the present invention will be described below with reference to the drawings.

Note that the following explanation is based on a case where the card can be placed in a financial institution such as a bank, and a card with a built-in IC is used.

Fig. 1 is a flowchart showing the processing steps, Fig. 2 is a block diagram of the transaction processing device, Fig. 3 is an explanatory diagram of an example of the last authentication storage file of the host system, and Fig. 4 is a diagram of the structure of the memory in the card. ．． In Fig. 2, 1 is a transaction processing device, 2 is a keyboard, and 3 is a transaction processing device.
is a CRT, 4 is a printer, 5 is a hard disk, 6 is an I
This is a communication control device for a card with a built-in C.

7 is a CPU which is a host system, and 8 is a communication control device that connects this CPU 7 and the transaction processing device 1. For example, the card 9 with a built-in IC has a memory as shown in FIG. Part 8, E” FROM, RAM,
Communication is performed via the communication control device 6 from the ROM or the like.

The transaction process of this embodiment based on the above structure will be explained below. 31 Start of transaction by inserting the card into transaction processing device 1. S2 Normal initial processing such as transaction selection is performed using the keyboard 2 and CRT 3 of the transaction processing device 1.

33 The card's bank code, branch code, etc. are compared with those registered in the center file of the host system to confirm the validity of the card, which is normally done. S4 Send a request to send the last-minute authentication D to the card with a built-in IC, and the card with a built-in IC sends a request to send the last-minute authentication D as shown in Figure 4.
IR" FROM and sends it to the upper system. Here, the last-minute authentication D is the gist of the present invention, and uses random numbers, etc., for example, to perform authentication related to transactions every time the card is used (including initial issuance). This data is different for each use of the card, created by symbols such as characters that do not match, and is registered in the center file of the card and the host system.This last-minute authentication D is registered using the timing signal of card processing. Although it is possible to do so, this method is not limited to this method.

S5 The host system receives last-minute authentication D of the card. 86 Compare the last-minute authentication D given the last time the card was used with the last-minute authentication D registered in the center file.

S7 If the two are not equal, the card is deemed to be an invalid card and cannot be traded.

S8 If the two are equal, the transaction process selected in S2 above is performed.

S9 Register the new last-minute authentication D created from random numbers etc. in the center file of the upper system.

SIO Send the above new last-minute authentication D to the card, register it, and complete the transaction. Although the above embodiment has been explained in the case of a card with a built-in IC, the same applies to a magnetic card. The above last-minute authentication is read and written.

In the transaction processing described above, if the identity of the user is verified using a personal identification number or the like after the previous authentication matches, the security of card usage will be further increased.

It should be noted that there is no problem in performing any of the usual verification of the validity of a code such as a bank code, last-minute authentication verification, and personal identification such as a personal identification number first.

Further, the above embodiment is carried out in exactly the same way in credit transactions.

[Effects of the Invention] According to the present invention described in detail above, different data is registered in both the card and the center file each time the processing of transaction data is completed, and the data of both are compared and verified at the start of each transaction. As a result, even if a forged card is used, unless the last used data match, the transaction will not be carried out, and a forged card can be detected early, which has the effect of preventing forgery.

In addition, if a counterfeit card is used illegally, the next time a real card is used, it becomes an illegal card, so it becomes clear that the counterfeit card was used, and as in the past, there are two steps until the original user notices. There is no longer any possibility that a single card will remain alive, and this will also lead to early detection of counterfeit cards.

[Brief explanation of drawings]

FIG. 1 is a flowchart of processing steps showing an embodiment of the present invention, FIG. 2 is a block diagram of a transaction processing device, FIG. 3 is an explanatory diagram of an example of a last-minute authentication storage file of a host system, and FIG. This is a diagram of the internal memory structure of the card, transaction processing device, keyboard, CRT, communication control device, CPU, and communication control device.

Claims (1)

[Claims] 1. In a method for verifying the validity of a card when a transaction is made using a card using an online system, different data is stored in the card and center file each time the transaction data is processed. A method for verifying card authenticity that is characterized by registering in both and comparing and verifying data from both at the start of each transaction.