JPH0334084A - Recording device for portable storage medium - Google Patents

Abstract

PURPOSE:To improve the security of issued data by storing decoding data to be used for the decoding processing of the issued data in a portable electronic device, and reading this decoding data, and decoding the issued data by this decoding data to store it in a portable storage medium. CONSTITUTION:The code key, the personal identification number, etc., of the decoding data for decoding the encoded issued data stored as information in an auxiliary storage device 1 are stored previously in a key card 11 consisting of an IC card to constitute the portable electronic device. This decoding data is read out, and the issued data is decoded by this decoding data, and is stored in the IC card 7 as the portable storage medium. Thus, the safety of the decoding data is raised, and the security of the issued data is improved.

Description

[Detailed Description of the Invention] [Object of the Invention] (Industrial Application Field) The present invention is directed to storing issuing data, such as information regarding the issuer or information for each card holder, on a portable storage medium such as an IC card. The present invention relates to a recording device for storing data on a portable storage medium.

(Prior Art) In a portable storage medium such as an IC card, issuance data such as the above-mentioned information on the issuer or information on each card holder stored in an issuance data file is written by an issuance system. issued. If the issue data requires secrecy, the issue data is encrypted and stored in the issue data file, and decrypted and written to the IC card at the time of issue.

The decryption data, that is, the encryption key, used to decrypt the issued data encrypted in this way is
Conventionally, the information is stored in the publishing system in the form of a data file, or is pre-stored in a program that controls the publishing process.

(Problem to be Solved by the Invention) Conventionally, decryption data, that is, an encryption key, used to decrypt encrypted issue data has been stored in the issue system in the form of a data file, or Since it is stored in advance in the program that controls the issuing process, it is easily read out or changed, which poses a security problem.

The present invention has been made in view of the above, and its purpose is to increase the security of decryption data used in the decryption process of encrypted issued data, and thereby to improve the security of the decryption data used in the decryption process of encrypted issued data. An object of the present invention is to provide a recording device for a portable storage medium with improved safety.

[Structure of the Invention] (Means for Solving the Problems) In order to achieve the above object, a recording device for a portable storage medium of the present invention includes a storage means storing encrypted issued data, and a recording device for storing encrypted issued data. A portable electronic device stores decryption data used for decrypting the published data, reads the decryption data stored in the portable electronic device, and uses the read decryption data to perform the decryption process described above. The gist includes a decoding means for decoding issued data, and a portable storage medium for storing the issued data decoded by the decoding means.

(Operation) In the recording device for a portable storage medium of the present invention, decrypted data used for decoding processing of issued data is stored in a portable electronic device, this decrypted data is read out, and issued using this decrypted data. The data is decoded and stored on a portable storage medium.

(Example) Hereinafter, the present invention will be explained in detail using the drawings.

FIG. 1 is a block diagram showing the overall configuration of a recording device for a portable storage medium according to an embodiment of the present invention. The recording device for a portable storage medium shown in the figure uses an IC card as an example of the portable storage medium, and stores issuing data such as information regarding the issuer or information for each card holder on the IC card. The system constitutes an issuance system that issues issuance data, and includes an auxiliary storage device 1 that encrypts the issuance data and stores it as an issuance data file, and a host computer 3 that controls the overall operation.

In addition to the above publication data, the auxiliary storage device 1 stores a control program for controlling the publication system. The host computer 3 also has a memory for controlling and temporarily storing data.

A reader/rider 5, a key card reader 9, a display 13, a keyboard 15, and a printer 17 are connected to the host computer 3.

The reader/rider 5 writes required issuing data to the IC card 7 or reads information from the IC card 7 under the control of the host computer 3, and the key card reader 9 constitutes a portable electronic device. It is a device that reads information from a key card 11 consisting of an IC card, or supplies information, specifically, a password manually entered by an operator from a keyboard 15, to the key card 11, and the key card 11 has an auxiliary storage device as information. An encryption key, a password, etc., which are decryption data for decrypting the encrypted issue data stored in 1, are stored.

Further, the display 13 displays the operating procedure and status of the issuing system to the operator, and the keyboard 15 is used to manually enter various commands and information for operating the issuing system.

Furthermore, the printer 17 prints out the date and time, issue data file name, card number, number of issued cards, etc.
A record of the issuance of the C card 7 is being created.

FIG. 2 shows the format of the issue data file stored in the auxiliary storage device 1 mentioned above. The issue data file shown in the figure includes a 6-byte card number 21 at the beginning and a plurality of issue data 23, that is, as an example in the figure, Data, Data2... Issuance data 23 named like , , , etc. are stored side by side.

Next, the operation of the card issuing process will be explained with reference to FIG.

First, the key card 11 storing the password and encryption key is inserted into the key card reader 9 according to the instructions displayed on the display 13 (step 110). Then, the operator of the book publishing system presses the keyboard 15.
When the user inputs a password manually, the manually entered password is supplied to the key card 11 via the key card reader 9, and the key card 11 compares it with the password already stored in the key card 11. Step 120
). If this verification is established (step 130), the encryption key, which is the decryption data stored in the key card 11, can be read out at this point. Note that this encryption key is read out in step 170, which will be described later, and is used in step 210 to decrypt the encrypted issued data from the auxiliary storage device 1. If the verification is not successful, the key card 11 is ejected from the key card reader 9, and the card issuing process is canceled (
Step 130).

If the PIN is successfully verified, the operator manually enters the data file name, starting card number, number of issued cards, and issuer PIN using the keyboard 15 according to the instructions displayed on the display 13 (step 1).
40). These input information are then stored in the memory of the host computer 3. The host computer 3 is
It is checked whether the input publication data file is stored in the auxiliary storage device 1 (step 150).

In addition, if the issue data file is stored, the issue data file is further read out from the memory of the host computer 3, and
It is checked whether the card numbers from the input starting card number to the number of issued cards are stored in the issued data file (step 160). When it is confirmed that the auxiliary storage device 1 is stored, the auxiliary storage device 1 is connected to the key card reader 9
The encryption key, which is the decrypted data stored in the key card 11, is read out via the key card 11 and stored in the memory of the host computer 3 (step 170).

Then, the operator inserts the IC card 7 into the reader/writer 5 according to the instructions displayed on the display 13 (step 180), and enters the issuer's PIN pre-stored in the memory of the IC card 7 on the keyboard 15 in step 140. Check with the issuer PIN number manually generated from
Verify that the operator is the issuer (step 1)
90).

As soon as the match is established (step 200), the host computer 3 inputs the starting card number entered in step 140 and stored in the memory of the host computer 3, for example rooo as shown in FIG.

"D" of issuance data 23 belonging to the starting card number "01"
a t a nJ, more specifically, the ``Da t a IJ'' of the first issue data 23 in step 17.
The decryption process is performed using the encryption key read in step 0 and the decryption routine built into the control program of the issuing system (step 210), and this decrypted rData
lJ is written to the IC card 7 via the reader/writer 5 (step 220).

After "DatalJ" is written to the IC card 7, it is checked whether all data has been written to the card. If not, the issuing data is updated and steps 210. The decoding process of 220 and the writing process to the IC card 7 are performed (steps 230 and 240).For example, if the number of issued data of -Oita is m, rDataJ is followed by rDataJ.
Decryption processing and IC processing for each issued data up to
Write to card 7.

When all data belonging to the starting card number has been written, the IC card 7 is ejected from the reader/writer 5 (
Step 250). Then, it is checked whether the data writing process has been completed for all of the IC cards 7 specified in step 140 (step 260), and if not, the card number is incremented and the process returns to step 180. Return (step 270). Then, the display 13 requests the insertion of the IC card 7 having the next incremented card number, for example r00002J, and this I
When the C card 7 is inserted, the processes of steps 190 to 230 for this IC card 7 are similarly repeated.

When the manual writing of the number of tickets issued in step 140 is completed (step 260), the key card 11 is ejected from the key card reader 9 (step 280), and then the printer 17 prints the date of issue, date of issue,
The issue data file name, the card number of the issued data, the number of issued cards, etc. are printed out, and the process ends (step 290).

If a check fails and an error occurs in the check processing at steps 130, 150, and 160200, an error message is displayed on the display 13, and the processing is terminated or interrupted.

[Effects of the Invention] As explained above, according to the present invention, decrypted data used for decrypting issued data is stored in a portable electronic device, this decrypted data is read out, and the decrypted data is read out. Since the issued data is decrypted and stored in the portable storage medium, when reading the decrypted data from the portable electronic device, for example, the password can be verified,
Alternatively, the security of the decrypted data can be increased by separating the portable electronic device that stores the decrypted data from the issued data and storing it in a safe, for example, thereby further improving the security of the issued data. can.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing the configuration of a recording device for a portable storage medium according to an embodiment of the present invention, FIG. 2 is a diagram showing the format of an issue data file used in the recording device of FIG. 1, FIG. 3 is a flowchart showing the operation of the recording apparatus of FIG. 1. DESCRIPTION OF SYMBOLS 1... Auxiliary storage device, 3... Host computer, 5... Reader/writer, 7... ■C card, 9... Key card reader, 1... Key card.

Claims (2)

[Claims] (1) A storage means that stores encrypted publication data;
a portable electronic device storing decryption data used for decryption processing of the encrypted issued data; reading the decryption data stored in the portable electronic device;
A recording device for a portable storage medium, comprising a decoding means for decoding the issued data using the read decoding data, and a portable storage medium for storing the issued data decoded by the decoding means. (2) The portable electronic device has a PIN storage means that stores a PIN number, and the decryption means reads out the decryption data after verifying the PIN stored in the PIN storage means. 2. A recording device for a portable storage medium according to claim 1, further comprising a reading means capable of reading data from a portable storage medium.