Security card having fingerprint authentication, processing system and processing method therefor

• US 10,140,439 B2
• Filed: 10/15/2014
• Issued: 11/27/2018
• Est. Priority Date: 10/15/2013
• Status: Expired due to Fees

• Current Assignee: Hyun Kil Choi, Jung Taek Kim, Young Dai Gwun
• Original Assignee: Hyun Kil Choi, Jung Taek Kim, Young Dai Gwun
• Inventors: Kim, Jung Taek, Gwun, Young Dai
• Primary Examiner(s): Vu, Phy Anh
• Application Number:
  US15/029,884
• Publication Number:
  US 20160246954A1
• Time in Patent Office: 1,504 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints
• CPC Class Codes: G06V 40/55 Performing matching on a personal external card, e.g. to avoid submitting reference information

Abstract

The present invention relates to a security card processing system and method, and more particularly, to a security card system and method wherein a security card is activated and security information stored in the security card is externally transmitted only when the card owner'"'"'s fingerprint is authenticated using a fingerprint sensor built into the security card, thereby protecting against unauthorized use by other people. According to the present invention, unauthorized use of the security card by other people can be prevented and also security information of the owner of the security card can be protected from leaking since the security card is activated and the security information stored in the security card is externally transmitted only when the card owner'"'"'s fingerprint is authenticated using a fingerprint sensor built into the security card.

Claims

1. A method for operating a security card, the method comprising:

providing a security card that performs fingerprint authentication;

providing a new issuing machine that communicates with the security card; and

providing a management server that communicates with the new issuing machine,

sensing, via the security card, a fingerprint and generating sensed fingerprint information;

receiving, via the new issuing machine, new issuance information including personal information of a card-issued person and transmitting the received new issuance information to the management server,

in response to the new issuance information received;

generating and transmitting, via the management server, a first key value and a first key value time limit information to the new issuing machine, and

generating and transmitting, via the management server, a second key value and a second key value time limit information to a card-issued person of the security card in an e-mail or text message format,

receiving, via the new issuing machine, issuance security information including first information and second information and transmitting the issuance security information to the management server,

in response to the first information and the second information included in the issuance security information being identical to the first key value and the second key value and in response to the first information and the second information being received within the first key value time limit information and the second key value time limit information;

transmitting, via the management server, an issuance permission signal to the new issuing machine;

transmitting, via the new issuing machine, the issuance permission signal received to the security card;

in response to the issuance permission signal received, storing, via the security card, the sensed fingerprint information as a reference fingerprint information in a security region of the security card, and further storing security information including at least two of financial information for financial works, personal information, a personal identification number (PIN), and authority information in the security region of the security card;

transmitting, via the security card, the reference fingerprint information to the management server;

generating, via the management server, an issuance completion signal to the new issuing machine when receiving the reference fingerprint information;

transmitting, via the new issuing machine, the issuance completion signal received to the security card;

starting, via the security card, monitoring the security region of the security card;

providing, via the security card, the security information stored in the security region to the outside via an input/output interface or a radio frequency (RF) module only when new sensed fingerprint information is identical to the reference fingerprint information via a controller;

generating, via the security card, a one-time password (OTP) which is output via a display for a financial work when the security card is activated and an OTP generation button is pressed; and

discarding, via the security card, the reference fingerprint information stored in the security region when a change in the security region is sensed.

2. The method of claim 1 further comprising:

reading, via a card checking machine, the security information stored in the security region;

transmitting, via the card checking machine, the read security information to the management server; and

performing, via the card checking machine, an operation according to an access permission signal about access permission or access non-permission when the access permission signal is received from the management server,

wherein the card checking machine communicates with the security card and the management server.

3. The method of claim 1, further comprising:

sensing, via the controller, a change in the security information stored in the security region; and

discarding, via the controller, the security information stored in the security region when the change in the security information stored in the security region is sensed.

4. A security card processing system comprising:

a security card that performs fingerprint authentication;

a new issuing machine that communicates with the security card; and

a management server that communicates with the new issuing machine,

wherein the security card;

senses a fingerprint and generates sensed fingerprint information;

stores reference fingerprint information in a security region and further stores security information including at least two of financial information for financial works, personal information, a personal identification number (PIN), and authority information in the security region of the security card;

provides the security information stored in the security region to the outside via an input/output interface or a radio frequency (RF) module only when the sensed fingerprint information is identical to the reference fingerprint information via a controller; and

generates a one-time password (OTP) which is output via a display for a financial work when the security card is activated and an OTP generation button is pressed,

wherein the new issuing machine;

receives new issuance information including personal information of a card-issued person and transmits the received new issuance information to the management server,

receives issuance security information including first information corresponding to a first key value and second information corresponding to a second key value and transmits the issuance security information to the management server, and

transmits an issuance permission signal and an issuance completion signal to the security card when receiving the issuance permission signal and the issuance completion signal from the management server,

wherein, in response to receiving the issuance permission signal, the security card;

stores a fingerprint sensed via a fingerprint sensor as the reference fingerprint information in the security region of the security card, and

transmits the reference fingerprint information to the management server via the new issuing machine, and in response to the issuance completion signal received, the security card

starts monitoring the security region, and

discards the reference fingerprint information stored in the security region when a change in the security region is sensed, and

wherein, in response to receiving the new issuance information, the management server;

generates and transmits the first key value and a first key value time limit information to the new issuing machine, and

generates and transmits the second key value and a second key value time limit information to a card-issued person of the security card in an e-mail or text message format, and,

wherein when the first information and the second information included in the issuance security information are identical to the first key value and the second key value and in response to the first information and the second information being received within the first key value time limit information and the second key value time limit information, the management server;

transmits the issuance permission signal,

generates the issuance completion signal when receiving the reference fingerprint information, and

transmits the issuance completion signal to the new issuing machine.

5. The security card processing system of claim 4, further comprising a card checking machine that communicates with the security card and the management server, wherein the card checking machine:

reads the security information stored in the security region,

transmits the read security information to the management server, and

performs an operation according to an access permission signal about access permission or access non-permission when the access permission signal is received from the management server.