JP2003036424A - Multiapplication ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To effectively utilize a memory by temporarily saving an application in an IC card to an external device and releasing a memory of the IC card. SOLUTION: A multiapplication IC card (1) provided with a rewritable nonvolatile memory and an IC chip with a CPU while a plurality of applications can be mounted on the nonvolatile memory is provided with a means for enciphering mounted applications to save temporarily the applications to the external device (3) and releasing the nonvolatile memory.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a multi-application IC card equipped with a rewritable nonvolatile memory and an IC chip with a CPU.

[0002]

2. Description of the Related Art A multi-application IC card is created for general purpose, and many applications such as electronic money, credits and points can be mounted on one card and used. Although IC cards have high security, they are more expensive than magnetic stripe cards, which hinders their widespread use. Further, the IC chip is also improved in security and the capacity of a rewritable nonvolatile memory is being increased. However, mounting an electronic money or credit application requires a large amount of memory due to the high security required. . From the above, even if it is a multi-application IC card capable of mounting a plurality of applications at the same time, if a highly secure application is installed, only a few will be included.

Therefore, an application that is rarely used is temporarily saved in a personal computer or the like and deleted from the memory of the IC card, and another application is installed, or when an IC card having a larger capacity memory is obtained, IC
It is possible to move the application from the card.

[0004]

However, in order to register / delete the application of the multi-application IC card, it is necessary to apply for and receive the certificate from the certificate authority to ensure security. For this reason, an IC card owned by the user has an application that is rarely used, or even if there is an application that the user wants to use, if the free memory is insufficient and the application cannot be installed, the memory cannot be temporarily released. , When using multiple IC cards, or the card pattern unique to the IC card issuer, I
There is a problem that the application cannot be transferred to a specific card due to the performance improvement of the C chip.

The present invention is intended to solve the above-mentioned problems. By temporarily saving the application in the IC card to an external device and opening the memory of the IC card,
An object of the present invention is to make it possible to effectively use the relatively small memory of the C card.

[0006]

[Means for Solving the Problems] Application code (program), data and management so that an application installed in an IC card can be temporarily saved in an external device and written back to the original IC card. Information is encrypted and temporarily saved in an external personal computer, host computer or the like through an IC card reader / writer. In this case, it is premised that the saved data is written back to the original IC card. Therefore, the saved data is encrypted so that it cannot be used by another IC card. In addition, the application that has been temporarily saved can be used by writing it back to the original IC card, but once it is written back to the IC card, the loaded history is retained and it cannot be written back again, which prevents unauthorized use. To prevent. As a result, it is possible to prevent fraudulent acts such as loading and using on a plurality of other IC cards or restoring the state of the application, and it is possible to maintain the same security as in the state where temporary saving is not permitted.

When moving an application mounted on an IC card to another IC card, a public encryption key is obtained from the IC card of the moving destination, and the public key is used to move the application code of the moving source and data management information. Part or all of the above, or a signature, etc., that can be a certificate, is encrypted, and the IC of the destination is passed through the reader / writer.
Send to card. The IC card at the destination can be made operable by decrypting it with the private key paired with the public encryption key. In this case, it is assumed that the private key is known only to the IC card at the transfer destination, and the other IC
Since the card cannot decrypt, it is possible to prevent fraudulent activity such as mounting on multiple IC cards. Moreover, the loaded history remains in the IC card, and it cannot be written back again. This makes it possible to maintain the same level of security as when no movement is permitted.

As means for executing the above-mentioned processing, dedicated control software is used, or a control function related to the OS is added.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing an example in which an application installed in an IC card is temporarily saved in a personal computer. The reader / writer 2 is connected to the personal computer 3. It is assumed that the IC card 1 has a rewritable nonvolatile memory in which two applications, application 1 and application 2, are installed. The IC card 1 is set in the reader / writer 2, and a command to save the application 1 is transmitted from the reader / writer to the IC card. The IC card that receives this command encrypts the code, data, and management information with the public key that the IC card has individually,
Send to writer. When the transmission of the application 1 is completed, the IC card deletes the application 1 in the card and opens the nonvolatile memory.

The encrypted application 1 can be decrypted only by the IC card having the secret key paired with the public key, that is, the original IC card 1. FIG. 1 shows that the application 1 has been saved twice. That is, when the application 1 is saved for the first time, the history and the ID 1 indicating the signature are added, encrypted, and saved in the personal computer 3. Later App 1 and ID 1
Is restored to the original IC card and saved again in the personal computer, at which time ID2 is added to the personal computer. The application 1 and ID 1 and the application 1 and ID 2 are stored in the personal computer, but the application 1 and ID 1 for the IC card are stored because the application 1 and ID 1 remain in the IC card as a history.
Reload of D1 is prohibited and only application 1 and ID2 are loaded.
This shows a state in which the loading of ID2 is completed.

FIG. 2 is a diagram showing an example of moving an application between IC cards. There is a device in which two readers / writers 4 and 5 are connected (a personal computer may intervene in the middle), and each reader / writer has an IC card a,
b is connected. The card individual public key of the IC card b is transmitted from the IC card b to the IC card a by a command for moving the application. The IC card a encrypts the code, data, management information, etc. of the application 1 with this public key and sends it to the IC card b. When the transmission is completed, the IC card a deletes the application 1 in the card and opens the memory. The IC card b loads the application 1 transmitted from the IC card a and decrypts it with the private key so that it can be used. This completes the movement, and the figure shows the state where the movement is completed.

Since the application 1 is encrypted between the reader and the writer, even if the application 1 is obtained, the card individual secret key of the IC card b cannot be known, and the application 1 cannot be decrypted. Also,
In the IC card b, the ID 1 remains as the history for the application 1, and after the application 2 is deleted or moved, the application 1, I
Trying to reload D1 is prohibited.

[0013]

As described above, according to the present invention, in an IC card in which a plurality of applications can be mounted, an infrequently used application is temporarily saved in a personal computer or the like, deleted from the memory of the IC card, and another An IC that has an application and a larger memory
It is possible to provide a mechanism for moving an application from another IC card when the card is obtained, and it is possible to effectively use a relatively small memory of the IC card.

[Brief description of drawings]

FIG. 1 is a diagram showing an example in which an application installed in an IC card is temporarily saved in a personal computer.

FIG. 2 is a diagram showing an example of moving an application between IC cards.

[Explanation of symbols]

1 ... IC card, 2, 4, 5 ... Reader / writer, 3 ... Personal computer.

Continued front page    F-term (reference) 2C005 MA05 MA34 MB02 MB03 MB08                       MB10 NA03 SA02 SA03 SA05                       SA06 SA08 SA23 SA25                 5B017 AA03 AA06 BA07 BA09 CA14                       CA15                 5B018 GA04 HA04 NA06                 5B035 AA06 AA13 BB09 CA38                 5B058 CA23 KA35

Claims (3)

[Claims] 1. A multi-application IC card having a rewritable non-volatile memory and an IC chip with a CPU, wherein a plurality of applications can be installed in the non-volatile memory. Multi-application I, characterized in that it comprises means for evacuating to the device and releasing the non-volatile memory
C card. 2. When the saved application is reloaded, its history is stored in a non-volatile memory, and an application having the same history as the history is prohibited from reloading. Multi-application IC card. 3. The multi-application IC card according to claim 1, wherein the encryption is performed by obtaining a public key of an IC card of a moving destination.