IC card portable terminal apparatus

• US 6,044,470 A
• Filed: 09/10/1997
• Issued: 03/28/2000
• Est. Priority Date: 09/12/1996
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kuriyama, Ryouichi
• Primary Examiner(s): Palys, Joseph E.
• Assistant Examiner(s): NGUYEN, NGUYEN X
• Application Number:
  US08/927,041
• Time in Patent Office: 930 Days
• Field of Search: 713/202, 380/4, 711/164
• US Class Current: 726/19
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

Password identification information for identifying a password for key verification is set for each of a plurality of applications. A current password storage unit for storing a password which has recently been input and the password identification information of the password is arranged. When one application is selected, password identification information corresponding to the application is verified with the password identification information stored in the current password storage unit. If the two password identification information match, key verification is performed using the password in the current password storage unit. With this operation, a plurality of data can be read out by performing the password input operation once. One or two select keys are arranged in place of a ten-key pad. By repeating an operation using the select keys and the enter key, a password having a plurality of digits is input. Therefore, the password can be input using a minimum number of keys.

Claims

1. An IC card terminal apparatus which receives an IC card having a plurality of applications and storing data of the plurality of applications, reads out the data from said received IC card, and displays the readout data, comprising:

application table means for storing password identification information for identifying passwords of the plurality of applications;

password input means for inputting a password necessary to read out the data stored in said IC card;

current password information storage means for storing the password input using said password input means in a previous password verification operation and password identification information of the password;

selection means for selecting one of the plurality of applications;

comparison means for comparing the password identification information in said current password information storage means with password identification information in said application table means, the password identification information corresponding to the application selected by said selection means;

verification control means for, when comparison by said comparison means indicates that the two password identification information match, causing the received IC card to verify the passwords on the basis of the password in said current password information storage means;

read means for, when the passwords verified by said verification control means normally match each other, reading out the data of the application selected by said selection means from said received IC card; and

display means for displaying the data read out by said read means.

2. An apparatus according to claim 1, further comprising:

check means for checking whether the password identification information is present in said current password information storage means when an application is selected by said selection means, and wherein

said comparison means has means for comparing the two password identification information when check by said check means reveals that the password identification information is present in said current password information storage means.

3. An apparatus according to claim 2, wherein

said application table means has means for storing, for each application, password input information defining whether a password is to be input every time data stored in said IC card is to be read out, and

said check means has means for, when an application is selected by said selection means, checking the password input information in said application table means, the password input information corresponding to the selected application, and checking whether the password identification information is present in said current password information storage means when the password input information defines that a password is not to be input every time.

4. An apparatus according to claim 2, further comprising:

means for clearing storage contents of said current password information storage means upon turning on a power supply of said apparatus.

5. An apparatus according to claim 2, wherein

said application table means has means for starting, for each application, clear control information defining whether contents of said current password information storage means are to be cleared upon turning on a power supply of said apparatus,

said apparatus further comprising:

means for checking the clear control information in said application table means upon turning on said power supply of said apparatus, the clear control information corresponding to the password identification information in said current password information storage means, and

means for clearing the contents of said current password information storage means when the corresponding clear control information represents that the contents are to be cleared.

6. An apparatus according to claim 1, further comprising:

password input control means for inputting a password using said password input means when comparison by said comparison means indicated that the two password identification information do not match; and

storage control means for storing, in said current password information storage means, the password input by said password input control means and the password identification information in said application table means, the password identification information corresponding to the application selected by said selection means, and wherein

said verification control means has means for, when the password and the password identification information of the password are stored in said current password information storage means by said storage control means, causing the received IC card to verify the passwords on the basis of the password in said current password information storage means.

7. An apparatus according to claim 6, wherein

said password input control means has means for inputting the password using said password input means when check by said check means reveals that the password identification information is not present in said current password information storage means.

8. An apparatus according to claim 1, further comprising:

application name read means for reading out application names of the plurality of applications supported by said IC card from the received IC card, and wherein

said selection means has means for selecting one of the plurality of application names read out by said application name read means.

9. An apparatus according to claim 8, wherein

said data read means has means for forming a read command using an application identifier corresponding to the application selected by said selection means and transmitting the read command to said IC card.

10. An apparatus according to claim 1, further comprising:

display means for displaying a character;

first and second keys; and

password storage means for storing the password input by said password input means, and wherein

said password input means has means for displaying an initial value on said display means first, changing the displayed value every time said first key is depressed, storing the displayed value in said password storage means when said second key is depressed after depressing said first key, and inputting a password having a plurality of digits for the received IC card by repeating the operation using said first and second keys.

11. An apparatus according to claim 10, wherein

said first key comprises a first select key for changing the displayed value to a succeeding value and a second select key for changing the displayed value to a preceding value.

12. An apparatus according to claim 10, wherein

said password input means has determination means for determining the end of password input when a specific value is input.

13. An apparatus according to claim 10, wherein

said password input means has means for, when the number of digits of the input password reaches a predetermined number of digits set in advance, displaying a specific character representing an end of input on said display means.

14. A password verification method for an IC card terminal apparatus which receives an IC card having a plurality of applications and storing data of the plurality of applications, reads out the data from said received IC card, and displays the readout data, comprising the step of:

storing password identification information for identifying passwords of the plurality of applications in an application table;

storing a password input in a previous password verification operation and password identification information of the password in a current password storage unit;

selecting one of the plurality of applications;

checking whether the password identification information is present in said current password information storage unit when the application is selected in the selection step;

when check reveals that the password identification information is present in said current password information storage unit, comparing the password identification information in said current password information storage unit with password identification information in said application table, the password identification information corresponding to the application selected in the selection step;

when comparison in the comparison step indicates that the two password identification information match, causing the received IC card to verify the passwords on the basis of the password in said current password information storage unit;

when the passwords verified in the step of causing to perform verification normally match each other, reading out the data of the application selected in the selection step from said received IC card; and

displaying the data read out in the read step.

15. A method according to claim 14, further comprising the steps of:

inputting a password using password input means when comparison in the comparison step indicates that the two password identification information do not match; and

storing, in said current password information storage unit, the password input in the password input step and the password identification information in said application table, the password identification information corresponding to the application selected in the selection step, and wherein

the step of causing to perform verification includes, when the password and the password identification information of the password are stored in said current password information storage unit in the storage step, causing the received IC card to verify the passwords on the basis of the password in said current password information storage unit.

16. A method according to claim 14, wherein

said application table stores, for each application, password input information defining whether a password is to be input every time data stored in said IC card is to be read out, and

the check step includes, when an application is selected in the selection step, checking the password input information in said application table, the password input information corresponding to the selected application, and checking whether the password identification information is present in said current password information storage unit when the password input information defines that a password is not to be input every time.

17. A method according to claim 14, further comprising the step of

reading out application names of the plurality of applications supported by said IC card from the received IC card, and wherein

the selection step includes selecting one of the plurality of application names read out in the application name read step.