JP2006293943A - Peripheral device card, host device, method, program for controlling peripheral device card and method for controlling host device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enhance security of various peripheral device cards such as PCMCIA, an IC card and a CF card and to prevent their damages. <P>SOLUTION: In a system comprising a host terminal and a peripheral device card including a main functional part which executes a main function for predetermined information processing, the peripheral device card (7) is provided with an IC tag communication part 1 which operates by a power source to be supplied from induced electromotive force concerning IC tag communication independently of power supply of the card main functional part 6. When the card 7 with built-in IC tag is attached to a card use terminal, propriety of use of the main functions to be executed by the main functional part 6 is authenticated using the security information to be transmitted from the card use terminal by IC tag communication before executing the main functions by the card main functional part 6. In addition, self-diagnosis of a power line of the card, etc. may be performed and a host terminal may be notified of the self-diagnosis by the IC tag communication before executing the main functions. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a peripheral device card that is mounted on a host device and includes a main function unit that executes a main function for predetermined information processing, a host device, a peripheral device card control method, a peripheral device card control program, and a host The present invention relates to a device control program.

  Conventionally, peripheral device cards such as a PCMCIA, IC card, and CF card are used by being mounted on a host device such as a portable terminal or a personal computer (hereinafter referred to as a PC).

  Peripheral device cards such as PCMCIA, IC card, CF card, etc. are configured as memory cards mounted with memory, HDD, etc., and there are also a variety of devices configured as line interface cards such as modem cards and PHS. Those with built-in functions are known.

  When accessing a peripheral device card of this type, a host device first reads information based on a predetermined protocol from a memory in which information in the card is stored, and determines the card type, access time, and card supply voltage. The access method information such as the above is discriminated, and data input / output is accessed according to the information.

  In addition, in the peripheral device card, when the data stored in the card is required to be kept confidential, or the device is used by a person other than the original user (for example, the line contractor or the cardholder himself) as in the case of a PHS card, etc. Measures have been proposed for preventing unauthorized access to a card using an encryption technique or the like when it is not permitted (for example, Patent Documents 1 and 2 below).

Although it can be considered as a kind of IC card, in recent years, a device that performs data input / output with a host device using a non-contact communication technique using electromagnetic induction, such as a so-called IC tag, is known (for example, Patent Documents 3 and 4 below.
JP-A-10-198776 JP 2003-228525 A JP 2001-202488 A JP 2002-183893 A

  However, conventionally, there have been the following problems with respect to peripheral device cards (PC cards) such as PCMCIA, IC cards, and CF cards.

  (1) Even if a card must originally be a line contractor or cardholder, such as a PHS card, it can be used by a third party mobile terminal, and a stolen card can be used. There is a risk of unauthorized use. In addition, there is a technique such as encryption as a countermeasure against this problem, but since these are performed by accessing the card, the encryption may be broken.

  (2) Information for using the peripheral device card can be acquired only when the card power is turned on and the card is accessed. However, the card is broken, for example, when the card power / ground is short-circuited. If accessed, the card interface part of the terminal could be destroyed.

  In view of the above problems, an object of the present invention is to improve the security of various peripheral device cards such as a PCMCIA, an IC card, and a CF card, and to prevent the damage.

  In order to solve the above problems, in the present invention, in a system including a host device and a peripheral device card including a main function unit that executes a main function for predetermined information processing, the peripheral device card is provided on the peripheral device card. When the peripheral device card is mounted on the host device using the IC tag communication unit that operates by the power supplied from the induced electromotive force related to the IC tag communication independently of the power supply of the function unit, the main function unit Before the main function is implemented, a configuration is adopted in which the security information transmitted from the host device by IC tag communication is used to authenticate the availability of the main function implemented by the main function unit.

  Alternatively, the peripheral device card uses the induced electromotive force generated by IC tag communication before performing the main function by the main function unit when the peripheral device card is mounted on the host device. Self-diagnosis of the card function related to the operation, and the self-diagnosis result is notified to the host device by IC tag communication, and the host device is based on the self-diagnosis result notified from the peripheral device card. A configuration that controls access was adopted.

  According to the above configuration, before the main function unit of the peripheral device card performs the main function, authentication regarding the availability of the main function of the peripheral device card is performed using the security information transmitted from the host device by IC tag communication. Therefore, there is an excellent effect that the unauthorized use of the card can be surely prevented.

  Before the main function unit of the peripheral device card performs the main function, the peripheral device card side performs self-diagnosis on the card function related to the operation of the main function unit and notifies the host device of the result. The problem that the peripheral device card is driven and damaged in an abnormal operation state can be avoided in advance.

[Example 1]
FIG. 1 shows the configuration of a peripheral device card employing the present invention and a host device (card using terminal) using the peripheral device card. Here, a configuration common to peripheral device cards such as PCMCIA, IC card, and CF card is shown as the PC card.

  The PC card of the present embodiment is characterized in that an IC tag is incorporated in order to control access to the card.

  In FIG. 1, reference numeral 7 denotes an IC tag built-in card of the present embodiment. The IC tag of the IC tag built-in card 7 is an IC tag communication unit 1, an IC tag control unit 2 for controlling IC tag communication, and a card security. A memory unit 3 that stores information, an IC tag communication control program, and the like, and a card use determination memory unit 4 that stores information on whether or not to permit the function of the card based on the result of IC tag communication with the card using terminal. , Is composed of.

  The IC tag communication unit 1, the IC tag control unit 2, the memory unit 3, and the card use determination memory unit 4 for storing information are supplied from the induced electromotive force obtained at the time of IC tag communication with the card using terminal. It can operate with a power supply.

  Further, the IC tag built-in card 7 includes the following members constituting the main part of the PC card. These include a card interface unit 5 that is an interface unit with a card using terminal, main functions other than the IC tag communication unit relationship of the card, particularly a main function related to predetermined information processing of the card, for example, a communication function if a communication card, a memory If it is a card, it is the card main function unit 6 constituting the memory card function.

  The card interface unit 5 and the card main function unit 6 can operate only after receiving power from a power line included in the card interface connector or the like based on the card standard (for example, the PCMCIA card standard). Therefore, in the present embodiment, the main function unit of the card does not operate until the power supply from the host card interface unit (8 below) of the card using terminal is started.

  On the other hand, the card using terminal (host device) is a user interface composed of a CPU 16 that controls the entire device, a ROM 16a that stores a control program for the CPU 16, a RAM 16b that is used as a work area for the CPU 16, a display, a keyboard, a mouse, and other devices. Reference numeral 16c denotes an HDD (or other storage device) 16d as an external storage device and a terminal card interface unit 14.

  The terminal card interface unit 14 is connected to the CPU 16 via an interrupt signal 15 and a CPU bus 16e used for notifying information such as card insertion.

  The terminal card interface unit 14 is composed of the following members. That is, the host card interface unit 8 controls the card power on / off and card access in order to exchange main functions with the card, the card detection unit 9 detects that the card is inserted into the card slot, and the IC. Via a tag reader / writer communication unit 10, an IC tag reader / writer control unit 11 for controlling the IC tag reader / writer communication unit, an IC tag reader / writer control program, a control memory unit 12 in which card use terminal information is stored, and a host card interface unit 8 Card controller 13 for controlling the card.

  In the above configuration, the control memory unit 12 in the terminal card interface unit 14 of the card using terminal stores security information (card using terminal information) for using the IC tag built-in card 7. This security information is information such as a terminal ID and a password. On the other hand, in the memory part 3 of the IC tag built-in card 7, security information (usage-permitted terminal information: information such as the above-mentioned terminal ID and password, or an encrypted version thereof) of the card-use terminal that permits card use is stored. When the IC tag built-in card 7 is inserted into the terminal card interface unit 14 of the card using terminal, the IC tag communication unit 1 and the IC tag reader / writer communication unit 10 communicate with each other, and authentication based on these security information is performed. Only when the authentication is correctly performed, the original operation of the IC tag built-in card 7 is allowed.

  That is, when the IC tag built-in card 7 is inserted into the card slot of the terminal card interface unit 14 of the card using terminal, the card detection unit 9 receives the card detection signal from the host card interface unit 8 of the terminal card interface unit 14 via the card detection signal. Detects that a card has been inserted.

  When the IC tag reader / writer control unit 11 receives the card detection notification from the card detection unit 9, the IC tag reader / writer control unit 11 stores the card use terminal information stored in the control memory unit 12 as security information in accordance with the program of the control memory unit 12. The data is transmitted to the IC tag built-in card 7 via the writer communication unit 10.

  When the IC tag built-in card 7 side receives the card using terminal information via the IC tag communication unit 1, the IC tag control unit 2 stores the received information in the memory unit according to the program in the memory unit 3. It is checked whether the terminal into which the card is inserted is a card use permission terminal, and the card use determination memory unit 4 writes the card use permission / inhibition information. Thereafter, the card usage information is notified to the card using terminal via the IC tag communication unit 1.

  In the card use terminal, the terminal card interface unit 14 receives the card use availability information notified from the card side by the IC tag reader / writer communication unit 10, and if it is permitted, notifies the card controller unit 13 to that effect, and the card controller unit 13 This is notified to the CPU 16 that controls the entire apparatus by the interrupt signal 15, and the CPU 16 performs control via the CPU bus 16 e and performs card access such as turning on the card power via the host card interface unit 8.

  On the other hand, when the IC tag built-in card 7 is accessed via the card interface unit 5, it reads the usage information of the card use determination memory unit 4, and if the card usage is permitted, the operation of the card main function unit 6 is permitted and the entire card is permitted. The card interface unit 5 enters the card use refusal mode and does not respond to any access from the terminal.

  The IC tag communication used in this embodiment is a passive type that obtains power by electromagnetic induction from the terminal as the power supply of the IC tag communication unit from the card side. The security information can be obtained before the power is turned on, and the mode for access from the terminal can be determined.

  FIG. 2 shows a control procedure on the card using terminal side of the present embodiment for performing the above operation. The illustrated procedure is stored as a control program of the CPU 16 in the ROM 16a (or the control memory unit 12 of the terminal card interface unit 14).

  In FIG. 2, when the IC tag built-in card 7 is inserted (step S1), the IC tag reader / writer communication unit 10 detects the card (step S2), and uses the card use terminal information (security information) as the IC tag reader / writer communication unit 10. Is transmitted by IC tag communication of a predetermined method (step S3).

  As described above (or by the card side control described later), authentication is performed by checking the card use terminal information transmitted from the card use terminal side on the card side, and whether or not the card can be used is determined. A response is returned by IC tag communication (step S4).

  If the card is not used, the CPU 16 is notified that the card cannot be used, and the card is not accessed (step S5). On the other hand, if the card is accessible, the CPU 16 is notified of this, and the card power is turned on via the card controller unit 13 (step S6), and then the card is read / written via the host card interface unit 8. The original card access is performed (step S7).

  FIG. 3 shows a control procedure on the IC tag built-in card 7 side for performing the above operation. The illustrated procedure is stored in the memory unit 3 of the IC tag built-in card 7.

  When the card is inserted into the terminal (step S8), it waits for the security information from the card using terminal to be transmitted by IC tag communication (step S9). If no security information is received, the card access rejection mode (step S11) Continues to wait for the reception of security information. If security information is received, it is determined from the received security information whether use is permitted or not (step S10), and if not, unusable information is transmitted by IC tag communication. Then, the access rejection mode (step S11) is entered, and the process returns to step S9 to continue waiting for new security information. If it is determined from the security information that the use is permitted, the card is placed in a use permission mode (step S12), and the use permission information is transmitted by IC tag communication (step S13).

  The card rejection mode in FIG. 3 is a state in which 1 is written to the use permission flag bit arranged at a specific address in the card use determination memory unit 4 in FIG. 1, and there is an access from the card using terminal. In this case, the card interface unit 5 checks the use permission bit in the card use determination unit 4, and when 1 is read, the card interface unit does not react at all. Responsive control is performed. Such access control can be executed by referring to the card use determination memory unit 4 by a program stored in the card main function unit 6.

  According to the above configuration, prior to card access, the card determines whether to accept access from the terminal used before the card power is turned on. If this is done, the card will not even be turned on and it will not be possible to dump the card information, thus preventing unauthorized use of the card.

  In the above embodiment, it is assumed that the security information stored in the card is written in advance. For example, as a method for generating security information, the first card use is performed using an IC tag reader / writer on the terminal side. In some cases, it is possible to perform writing (registration of security information) by the terminal in use without performing discrimination based on the security information, and to perform protection based on the security information shown in FIGS.

  In the above description, the IC tag built-in card 7 transmits the unusable information by the IC tag communication if it is not determined whether or not the use is permitted in steps S10 and S11 in FIG. In such a case, it is possible to shift to the access denial mode without making a response by IC tag communication. In this case, the card use terminal waits in the card unusable state until a response to the transmission of the card use terminal information (security information) is received from the IC tag built-in card 7 in step S4 in FIG. When the permission information is received, the process may proceed to step S6.

[Example 2]
In this embodiment, a configuration example in which a self-diagnosis function is incorporated in the IC tag built-in card 7 is shown.

  FIG. 4 shows the configuration of a PC card adopting the present invention in the same format as in FIG. 1 and a host device (card using terminal) using the PC card. The configuration of FIG. 4 is obtained by adding a self-diagnosis determination means 17 to the IC tag built-in card 7, and the other hardware configuration is the same as that of FIG.

  The self-diagnosis determination means 17 uses the power supplied to electromagnetic induction during IC tag communication to determine whether or not there is an abnormality in the card power line. In order to diagnose an abnormality in the card power line before accessing the card. It is means of.

  FIG. 5 specifically shows the configuration of the self-diagnosis determination means 17. As shown in the figure, the self-diagnosis determination means 17 includes an IC tag induced voltage 18 generated by IC tag communication, a ground 19 of the IC tag communication circuit unit, a comparator 20, a resistor R1 (21), a resistor R2 (22), and a resistor R4. (23), a resistor R3 (24), a ground 25 of the card main circuit unit, and a power supply line 26 of the card main circuit unit, and a self-diagnosis detection signal 27 is output from the output terminal of the comparator 20. Reference numeral 28 denotes an equivalent resistance value Rc between the power source and the ground of the card main circuit of the card interface.

  In the above configuration, the IC tag induced voltage 18 generated by the IC tag communication is supplied as a power source for the self-diagnosis determination unit 17. A voltage obtained by dividing the power supply by the resistors R1 (21) and R2 (22) is input to the negative voltage input terminal of the comparator 20 to create a negative reference potential of the comparator. On the other hand, the voltage divided by the resistors R4 (23) and R3 (24) and the resistor Rc (28) between the circuit power supply and ground of the card interface is input to the positive voltage input terminal of the comparator 20.

  In the above configuration, the potential divided by the IC tag induced voltage 18 by R4 (23), R3 (24) and the equivalent resistance value Rc (28) between the power source and the ground of the card main circuit must be larger than the negative reference potential. In other words, if the resistance value (Rc) between the power source and the ground of the card main circuit is greater than a predetermined value, the self-diagnosis detection signal 27 output from the comparator 20 becomes High and the power line of the card main circuit is normal. When the resistance value (Rc) between the card main circuit power supply and the ground circuit becomes smaller than the predetermined resistance value, the negative reference potential of the comparator 20 becomes higher, the self-diagnosis detection signal 27 becomes Low, and the card main circuit power supply -It is determined that the ground is short-circuited, the abnormality is notified to the IC tag control unit 2, and the IC tag communication unit 1 It can be informed to the card terminal used at C-tag communication.

  Here, as an example of determining the short-circuit state between the power supply and the ground of the card main circuit unit, the negative reference potential of the comparator 20 is 15 mV when the IC tag induced voltage 18 is 1.5 V, R1 is 100 kΩ, and R2 is 1 kΩ. When R4 is set to 10 kΩ and R3 is set to 82Ω, the negative reference potential of the comparator 20 becomes higher when the resistance value between the card main circuit power supply and the ground (resistance value of Rc) is about 20Ω or less. The level is output as the self-diagnosis detection signal 27.

That is, for each resistance value, R2 / (R1 + R2)> (R3 + Rc) / (R4 + R3 + Rc) (1)
When the above relationship is established, a Low level indicating abnormality is output as the self-diagnosis detection signal 27.

  FIG. 6 shows a control procedure on the IC tag built-in card 7 side in the present embodiment. FIG. 6 shows a configuration in which a self-diagnosis determination step (step S14) is inserted between step S10 and step S12 of FIG. 3 in the first embodiment, and the other configurations are the same as those in FIG.

  In the procedure of FIG. 6, the security information is received, and it is determined whether the terminal is usable by the data (step S10). (Step S14), if it is abnormal, it shifts to the access denial mode (Step S11) and denies the card access. If it is normal, the mode is set to the access permit mode (Step S12), and a use permission signal is transmitted (Step S13).

  With the above configuration, it is possible to prevent an accident that destroys the card interface unit because the card power is turned on without knowing the abnormality of the power line of the card or the card using terminal.

  In this embodiment, the state of the power supply line of the card is self-diagnosed. However, by using another appropriate detection circuit, the self-diagnosis of the card components other than the power supply line of the card is performed. The result can be notified to the card using terminal.

  In each of the above-described embodiments, the card usage in which the security information stored in the memory unit 3 or the control memory unit 12 of the IC tag built-in card 7 is used to indicate the terminal that can use the card. Although it is assumed that the information is terminal information, of course, this security information is a user ID for authenticating a card user, a password, and user biometric information generated or input using another predetermined device (for example, user fingerprint, palm print, Based on a blood vessel shape, an iris pattern, or the like).

  The present invention can be implemented in a system including a host device and a peripheral device card including a main function unit that executes a main function for predetermined information processing. The program constituting the present invention is supplied from various external storage media (CDROM, MO, memory card, etc.) to the host device, to the peripheral device card via the host device, or directly from any server via the network. Can be supplied.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram illustrating a configuration of an IC tag built-in card and a card using terminal adopting the present invention (Example 1). It is the flowchart figure which showed the control procedure by the side of the card use terminal in FIG. It is the flowchart figure which showed the control procedure by the side of the IC tag built-in card in FIG. (Example 2) which was the block diagram which showed the structure of the IC tag built-in card | curd and card use terminal which employ | adopted this invention. It is the circuit diagram which showed the structure of the self-diagnosis judgment means in FIG. FIG. 5 is a flowchart showing a control procedure on the IC tag built-in card side in FIG. 4.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 IC tag communication part 2 IC tag control part 3 Memory part 4 Card use judgment memory part 5 Card interface part 6 Card main function part 7 IC tag built-in card 8 Host card interface part 9 Card detection part 10 IC tag reader / writer communication part 11 IC Tag reader / writer control unit 12 control memory unit 13 card controller unit 14 terminal card interface unit 15 interrupt signal 16 CPU
17 Self-diagnosis judgment means 20 Comparator 21-24 Resistance 25 Card main circuit ground 26 Card main circuit power supply line 27 Self-diagnosis detection signal

Claims (9)

In a peripheral device card that is mounted on a host device and includes a main function unit that executes a main function for predetermined information processing,
Stored is an IC tag communication unit that is operated by a power source supplied from an induced electromotive force related to IC tag communication independently from the power supply of the main function unit, and security information for performing authentication relating to the card availability. A control memory unit,
When it is attached to the host device, authentication on the availability of the main function implemented by the main function unit is performed using the security information transmitted from the host device by IC tag communication and the security information stored in the control memory unit. Peripheral device card characterized in that it performs. In the host device which mounts the peripheral device card according to claim 1 and uses the main function of the peripheral device card,
An IC tag reader / writer communication unit for performing IC tag communication with the IC tag communication unit;
When the attachment of the peripheral device card is detected, IC tag communication is performed between the IC tag communication unit of the peripheral device card and the IC tag reader / writer communication unit,
A host apparatus characterized by transmitting and receiving the security information, receiving an authentication result regarding the availability of the main function from the peripheral device card, and controlling access to the peripheral device card according to the authentication result.   The peripheral device card according to claim 1, further comprising self-diagnosis means that operates by an induced electromotive force by IC tag communication and self-diagnosis a card function related to the operation of the main function unit. A peripheral device card that notifies a diagnosis result to the host device by IC tag communication.   4. A host device using the peripheral device card according to claim 3 and using the main function of the peripheral device card to control access to the peripheral device card based on a self-diagnosis result notified from the peripheral device card. A host device.   4. The peripheral device card according to claim 3, wherein the self-diagnosis unit self-diagnose a state of a card power supply line that supplies power to the main function unit. In a peripheral device card control method including a main function unit that is mounted on a host device and executes a main function for predetermined information processing,
Provided in the peripheral device card, using an IC tag communication unit that operates by a power source supplied from an induced electromotive force related to IC tag communication independently from the power supply of the main function unit,
When the peripheral device card is mounted on the host device, before the main function is performed by the main function unit, the main function unit is implemented by using the security information transmitted from the host device by IC tag communication. A method for controlling a peripheral device card, wherein authentication is performed regarding whether or not a function can be used.   7. The peripheral device card control method according to claim 6, wherein when the peripheral device card is mounted on a host device, the peripheral device card is subjected to IC tag communication before performing a main function by the main function unit. The card function related to the operation of the main function unit is self-diagnosed using the induced electromotive force, the self-diagnosis result is notified to the host device by IC tag communication, and the host device is notified from the peripheral device card. A peripheral device card control method, comprising: controlling access to the peripheral device card based on a self-diagnosis result.   8. A peripheral device card control program for controlling the peripheral device card to implement the peripheral device card control method according to claim 6 or 7.   8. A host device control program for controlling the host device to implement the peripheral device card control method according to claim 6.

Images