JP3015376B2 - IC card - Google Patents

Description

The present invention relates to an IC card having a built-in IC (integrated circuit) chip having a control element such as a nonvolatile memory and a CPU. The present invention relates to an IC card having an improved data file and area definition method for the memory.

(Prior Art) In recent years, as a new portable data storage medium, a so-called IC card having a built-in IC chip having a control element such as an erasable nonvolatile memory and a CPU has attracted attention. This type of IC card selectively performs data input / output with the outside by accessing a built-in memory by a built-in control element.

Recently, in such an IC card, a memory is largely divided and defined by a concept of a plurality of data files, and each data file is divided and defined by a concept of a plurality of areas so as to be compatible with various applications.

These areas are units of access to the memory, and are designated as access targets within the IC card by specifying identification information (eg, area number) assigned to the area at the time of access. It allows direct access to the area.

Access to an area in a data file is performed by designating identification information (for example, a data file name) assigned to a data file in which an area to be accessed exists and selecting the data file.

By the way, the conventional method of defining a data file in such an IC card is to define all the data files to be defined in advance and to define them collectively. At this time, at the time of definition of the data file, it was necessary to confirm from outside (such as an IC card issuing system) that the identification information given to the data file was not duplicated.

According to this method, even if the process checked externally is wrong, it is defined normally as it is.
For this reason, when defining a data file, there is a possibility that identification information designating the data file may be duplicated, and there is a problem that reliability is poor.

Also, the method of defining an area for a defined data file is performed in a similar manner, and has a similar problem.

(Problems to be Solved by the Invention) The present invention provides a method for defining a data file as described above.
This is intended to solve the problem of inferior reliability, in which the identification information for designating the data file may be duplicated, and the duplication of the identification information can be checked inside the apparatus, and thus the data file can be checked. Provided is an IC card in which identification information for designating a data file is not duplicated at the time of definition, which improves reliability and reduces the processing load of the issuing system that issues the apparatus. The purpose is to:

Further, the present invention has been made to solve the problem that the identification information for designating an area may be duplicated when an area is defined as described above, resulting in poor reliability. In this case, it is possible to check the duplication of the identification information inside the device. Therefore, when the area is defined, there is no possibility that the identification information specifying the area is duplicated, thereby improving the reliability and improving the reliability of the issuing system for issuing the apparatus. An object of the present invention is to provide an IC card in which the processing load is reduced.

[Structure of the Invention] (Means for Solving the Problems) The IC card of the present invention has a built-in memory which is used by being divided into a plurality of data files, and accesses these files to selectively access the external files. An IC card for inputting / outputting data to / from a device, a data input / output unit for inputting / outputting data to / from the external device, and command data input from the external device via the data input / output unit. Means for determining whether or not is a data file definition instruction including data file identification information for additionally defining a data file and size information of the data file; and If it is determined that the command is a file definition command, the definition information of the data file having the same identification information as the file identification information in the data file definition command is A second means for determining whether or not the information already exists in the memory, and the second means determines that the definition information of the data file having the same identification information does not already exist in the memory. In this case, the third means for generating the address information of the file additionally defined by the data file definition command and the definition information of the data file having the same identification information in the second means are stored in the memory. If it is determined that the data file does not already exist, the identification information of the file and the size information of the data file in the definition command of the data file and the address information of the data file generated by the third means A fourth means for generating file definition information consisting of: and storing the same in a memory; and the second means for identifying the same file identification information as the file identification information in the data file definition command. If it is determined that the definition information of the data file having the information already exists in the memory, response data indicating that the data file having the same identification information already exists is output to the external device. Fifth means, in a case where a file selection command is input from the external device via the data input / output unit, has the same data file identification information as the data file identification information in the file selection command. Sixth means for finding file definition information from the memory and performing processing on a file defined by the file definition information.

Further, the IC card of the present invention has a built-in memory that is divided into a plurality of data files, and each data file is further divided into a plurality of areas, and accesses each file and area. An IC card for selectively inputting and outputting data to and from an external device,
A data input / output unit for inputting / outputting data to / from the external device, and selecting at least one of the plurality of data files according to file selection command data input from the external device via the data input / output unit First means for performing the operation, and command information input from the external device via the data input / output unit after selecting a file by the first means; and area identification information for additionally defining an area in the file. And second means for determining whether or not the command is an area definition command including size information of the area. If the second means determines that the command is an area definition command, this area definition Definition information of an area having the same identification information as the identification information of the area in the instruction already exists in the file selected by the first means. A third means for determining whether or not the area definition information having the same identification information already exists in the memory; The fourth means for generating the address information of the area additionally defined in the step (a) and the third means determining that the definition information of the area having the same identification information does not already exist in the memory Generates area definition information including the area identification information and the area size information in the area definition command, and the area address information generated by the fourth means, and stores the area definition information in the memory. The fifth means and the third means, when it is determined that the area definition information having the same identification information as the area identification information in the area definition command already exists in the memory, , Identical identity A sixth means for outputting response data to the effect that an area having an area already exists to the external device, and when an area selection command is input from the external device via the data input / output unit, Seventh means for finding area definition information having the same area identification information as the area identification information in the area selection command from the file, and performing processing on the area defined by the area definition information. ing.

(Operation) According to the present invention, when a data file is defined in the memory, when the identification information to be assigned to the data file is input, the identification information overlaps with the existing identification information assigned to the already defined data file. By determining whether or not the data file is not duplicated and defining the data file, it is possible to check the duplication of the identification information inside the apparatus. Therefore, at the time of defining the data file, there is no possibility that the identification information designating the data file is duplicated, and the reliability is improved, and the load on the processing of the issuing system that issues the apparatus is reduced.

Further, according to the present invention, when defining an area for a defined data file, when identification information to be assigned to the area is input, the information overlaps with existing identification information assigned to an already defined area. By determining whether or not there is no overlap, and defining the area after confirming that there is no overlap, it is possible to check the overlap of the identification information inside the apparatus. Therefore, at the time of defining the area, there is no possibility that the identification information designating the area is given redundantly, the reliability can be improved, and the load on the processing of the issuing system that issues this apparatus can be reduced.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

FIG. 14 shows a configuration example of a terminal device for handling an IC card according to the present invention. That is, this terminal device is an IC
The card can be connected to a control unit 3 including a CPU or the like via a card reader / writer 2, and a keyboard 4, a CRT display device 5, a printer 6, and a floppy disk device 7 are connected to the control unit 3. .

The IC card 1 is held by the user, and refers to a personal identification number known only to the user when, for example, purchasing a product, accumulates necessary data, and the like. For example, FIG. 13 shows its functional blocks. As shown in the read / write section 11,
It comprises a part for executing basic functions such as a password setting / password collating unit 12 and an encryption / decryption unit 13, and a supervisor 14 for managing these basic functions.

The read / write unit 11 has a function of reading, writing, or erasing data from the data memory 16 or the like.

The password setting / password collation unit 12 has a function of performing storage and reading prohibition processing of the password set by the user, collating the password after setting the password, and giving permission for the subsequent processing.

The encryption / decryption unit 13 performs, for example, encryption for preventing leakage or forgery of communication data when data is transmitted from the control unit 3 to another terminal device via a communication line, and encryption / decryption of the encrypted data. Performs decryption, such as DES
(Data Encryption Standard). This function performs data processing according to an encryption algorithm having sufficient encryption strength.

The supervisor 14 has a function of decoding a function code input from the card reader / writer 2 or a function code to which data is added, and selecting and executing a necessary function among the basic functions.

In order to exhibit these various functions, the IC card 1
For example, as shown in FIG. 12, a control element (control section) 15 such as a CPU, a data memory (memory section) 16, a program memory 17, and a contact section 18 for obtaining electrical contact with the card reader / writer 2 Is composed of
Among these, the control element 15, the data memory 16, and the program memory 17 are composed of one IC chip (or a plurality of IC chips) and are embedded in the IC card body.

The program memory 17 is formed of, for example, a mask ROM, and stores a control program of the control element 15 having a subroutine for realizing each of the basic functions.

The data memory 16 is used for storing various data, and is composed of an erasable nonvolatile memory such as an EEPROM.

For example, as shown in FIG. 2, the data memory 16 stores one common data file (CDF) 21 commonly used by all applications and a plurality of application data files (ADF) 22 used for each application. , ... are largely divided and defined. These data files (DF) 21 and 22 are defined by data file definition information 24 of a data file definition table 23. In this case, the data file definition information 24 is stored from one end (for example, the starting address) of the data memory 16, and the data files 21, 22 defined by the data file definition information 24 are stored at the other end (for example, (Last address).

Here, the data file definition information 24 is, for example, the third
As shown in the figure, a data file name (DFN) as identification information for specifying a data file, head address information on a memory to which the data file is allocated, size information and access condition information, total area allocation head address information, It is a data string in which area unallocated size information is associated.

In the state where no area is defined in the defined data file, the value of the area unallocated size information is the maximum size of the data file, and the value of the total area allocation start address information is Is a value obtained by adding “1” to the final address of the data file.

The data file definition information 24 is sequentially stored according to data file definition command data described later.
In the example shown in FIG. 2, the data file names “00000”, “NNNNN”,..., “ZZZZZ” are stored in this order by this instruction data. Reserved internally as data file name.

Also, as shown in FIG. 4, the common data file 21 is divided into a plurality of areas 25,..., 28,. These areas 25 and 28 are defined by the area definition information 27 and 30 of the area definition tables 26 and 29, respectively. In this case, the area definition information 27, 30 is stored from one end (for example, the first address) of the data files 21, 22,
Each area 2 defined by the area definition information 27, 30
5, 28 are defined from the other end (for example, the last address) of the data files 21, 22.

Here, as shown in FIG. 6, for example, the area definition information 27, 30 includes an area number (AID) as identification information for specifying an area, head address information on a memory to which the area is allocated, size information, It is a data string associated with access condition information.

The area definition information 27, 30 is sequentially stored according to area definition command data described later. In the example of FIG. 4, according to this instruction data, the area numbers “01”, “02”,
.. Are stored in the order of "03", and in the example of FIG. 5, they are stored in the order of the area numbers "04",.

FIG. 7 shows a data file unallocated size storage unit 31 for storing data file unallocated size information and a total data file allocation start address storage unit 32 for storing total data file allocation start address information. For example, it is provided in the data memory 16.

In the state where no data file is defined, the value of the data file unallocated size information is the maximum size provided for the data file allocation as the data memory 16 and the total data file allocation The address information is a value obtained by adding “1” to the last address of the area in the data memory 16 given for data file allocation.

Next, the operation of such a configuration will be described with reference to the flowchart shown in FIG.

First, the data file definition process will be described. In the steady state, it is in a state of waiting for external command data, and when command data is input in this state, the control element
Step 15 determines whether or not the data is data file definition command data as shown in FIG. If the result of this determination is that the data is not data file definition command data, the control element 15 proceeds to a process of determining that it is another command data.

As a result of the determination of the command data, if the command data is the data file definition command data, the control element 15 finds the data file definition information having the same data file name as the data file name in the command data from the data memory 16. If found, the control element 15 determines that the data file name is duplicated, outputs response data indicating that the data file name already exists, and returns to the instruction data waiting state.

If not found, the control element 15 determines that the data file name is not duplicated, adds the number of bytes (size information) of the data file definition information to the file size information in this instruction data, and compares the result. The result is set to 1 and compared with the value in the data file unallocated size storage unit 31.
As a result of this comparison, if the latter is smaller than the former, the control element 15 determines that the data file defined by the present instruction data cannot be allocated in the data memory 16 and sends response data indicating an abnormal size. Output and return to the instruction data waiting state.

As a result of the comparison, if the former is equal to or greater than the latter, the control element 15 determines that the data file defined by the present instruction data is allocated in the data memory 16 and the head address information in the data file definition information is determined. Generate The generation of the head address information can be obtained by internally calculating using the value in the total data file allocation head address storage unit 32 and the file size information in the present instruction data.

Thus, when the head address information is generated, the control element
15 generates data file definition information based on the data file name, access condition information, file size information, and the generated top address information in the instruction data,
If there is already stored data file definition information, it is stored next. In this case, the data file is 1
If none is defined, the data memory 16
The data file definition information is stored starting from the first address.

After storing the data file definition information, the control element
15 rewrites the value in the total data file allocation start address storage unit 32 with the head address information stored this time, and subtracts the previously calculated result 1 from the value in the data file unallocated size storage unit 31; The result is stored in the data file unallocated size storage unit 31 as new data file unallocated size information. Then, the control element 15 outputs response data indicating the completion of the data file definition, and returns to the instruction data waiting state.

According to such processing, as shown in FIG. 2, the data file definition information 24 is sequentially stored in the area provided for the data file allocation as the data memory 16 from the smaller address. The data files 21 and 22 defined by the file definition information 24 are defined sequentially from the one with the largest address.

Next, a data file selection process will be described. As a result of the determination as to whether the data file definition command data is not data file definition command data, the control element 15
Next, it is determined whether or not the data is the data file selection command data as shown in FIG. If the result of this determination is not data file selection instruction data, control element 15 proceeds to a process of determining that it is another instruction data.

As a result of the determination of the command data, if the command data is the data file selection command data, the control element 15 finds the data file definition information having the same data file name as the data file name in the command data from the data memory 16. If not found, the control element 15 outputs response data indicating that the data file has not been defined, and returns to the command data waiting state.

If found, the control element 15 stores the data file definition information in a built-in RAM (not shown), outputs response data indicating completion of data file selection, and returns to the command data waiting state.

Next, an area definition process will be described. If the result of the determination as to whether or not the data file selection command data is not data file selection command data, the control element 15
It is determined whether the data is the area definition command data as shown in the figure. If the result of this determination is that the data is not area definition command data, the control element 15 proceeds to a process of determining that it is another command data.

As a result of the determination of the command data, if the data is the area definition command data, the control element 15 first refers to the data file definition information stored in the RAM at the time of selecting the data file, thereby obtaining the application data file 22. It is determined whether or not is selected. As a result of this determination, if the application data file 22 is not selected, the common data file 21 is selected, and if the application data file 22 is selected, the common data file 21 and the selected application data file 22 are selected. By referring to each of them, area definition information having the same area number (AID) as the area number (AID) in the instruction data is found. If found, the control element 15 determines that the area numbers are duplicated, outputs response data indicating that the area numbers already exist, and returns to the command data waiting state.

If not found, the control element 15 determines that the area numbers are not duplicated, then adds the number of bytes (size information) of the area definition information to the area size information in this instruction data, and compares the result. The result is set to result 2 and compared with the area unallocated size information in the data file definition information. At this time, if the application data file 22 has not been selected, the area unallocated size information in the data file definition information defining the common data file 21 is targeted, and the application data file 22
If 22 is selected, the area unallocated size information in the data file definition information defining the application data file 22 is targeted.

As a result of the above comparison, if the latter is smaller than the former, the control element 15 determines that the area defined by the present instruction data cannot be allocated in the present data file, and outputs response data indicating an abnormal size. To return to the instruction data waiting state.

As a result of the comparison, if the former is equal to or larger than the latter, the control element 15 determines that the area defined by the instruction data is allocated in the data file, and generates the head address information in the area definition information. I do. The generation of the head address information can be obtained by internally calculating using the total area allocation start address information in the data file definition information and the area size information in the present instruction data. At this time, if the application data file 22 has not been selected, the total area allocation start address information in the data file definition information defining the common data file 21 is targeted, and the application data file 22 is not selected. If so, the target is the total area allocation start address information in the data file definition information defining the application data file 22.

Thus, when the head address information is generated, the control element
15 generates area definition information from the area number, access condition information, area size information, and the generated start address information in the instruction data, and if there is already stored area definition information, Remember.
In this case, when no area is defined, the area definition information is stored from the start address of the data file.

When the storage of the area definition information is completed, the control element 15 rewrites the total area allocation start address information in the target data file definition information with the head address information stored this time, and sets the target data file definition information. Is subtracted from the previously calculated area unallocated size information, and the result is stored as new area unallocated size information. Then, the control element 15 outputs response data indicating the completion of the area definition, and returns to the instruction data waiting state.

According to such processing, the defined data file
As shown in FIGS. 4 and 5, area definition information 27 and 30 are sequentially stored in the areas 21 and 22 in ascending order of address. Areas 25 and 28 defined by the area definition information 27 and 30 are They are defined sequentially from the one with the largest address.

Next, the area processing (reading and writing of data in the area) will be described. As a result of the determination as to whether or not the area definition command data, if not the area definition command data, the control element 15
Next, it is determined whether the data is read command data as shown in FIG. 11A or write command data as shown in FIG. 11B. If the result of this determination is not area processing instruction data as shown in FIG. 11, the control element 15 outputs response data indicating an abnormality in the instruction data, and returns to the instruction data waiting state.

As a result of the determination of the command data, if the command data is the area processing command data, the control element 15 first refers to the data file definition information selectively stored in the RAM of the data file, thereby obtaining the application data file. It is determined whether 22 has been selected. As a result of this determination, if the application data file 22 is not selected, the common data file 21 is selected, and if the application data file 22 is selected, the common data file 21 and the selected application data file 22 are selected. By referring to each of them, area definition information having the same area number (AID) as the area number (AID) in the instruction data is found. If not found, the control element 15 outputs response data indicating that the area is undefined, and returns to the command data waiting state.

If found, the control element 15 obtains information such as where the target area is located in the memory from the area definition information, and reads or writes the area. Then, after the end of the area processing, the control element 15 outputs the processing result as response data, and returns to the instruction data waiting state.

In the above-described embodiment, the data file definition information is sequentially stored in the data memory in ascending order of address, and each data file defined by the data file definition information is sequentially defined in ascending order of the address. That is, the data file definition information may be stored sequentially from the larger address, and each data file may be defined sequentially from the smaller address. The same applies to the storage of area definition information and the definition of areas in each data file.

As described above, when a data file name (identification information) to be assigned to a data file is input when a data file is defined in the data memory, the existing data file name assigned to the already defined data file is replaced with the existing data file name. By judging whether or not the data file is duplicated and confirming that the data file is not duplicated, the data file is defined, whereby the duplication of the data file name can be checked inside the present IC card. Therefore, when defining the data file, there is no possibility that the data file name specifying the data file is duplicated, thereby improving the reliability and reducing the load on the processing of the issuing system that issues the IC card. You.

When an area number (identification information) to be assigned to an area is defined when an area is defined for a defined data file, whether or not the area number overlaps with an existing area number assigned to an already defined area It is possible to check the duplication of the area number inside the present IC card by defining the area after judging whether there is no duplication or not. Therefore, when defining the area, there is no possibility that the area number designating the area will be duplicated, thereby improving the reliability and reducing the load on the processing of the issuing system that issues the present IC card.

[Effects of the Invention] As described in detail above, according to the IC card of the present invention, it is possible to check for duplication of identification information given to a data file inside the present apparatus. Therefore, at the time of defining the data file, there is no possibility that the identification information designating the data file is duplicated, and the reliability is improved, and the load on the processing of the issuing system that issues the apparatus is reduced.

Further, according to the IC card of the present invention, it is possible to check the duplication of the identification information given to the area inside the device. Therefore, at the time of defining the area, there is no possibility that the identification information designating the area is given redundantly, the reliability can be improved, and the load on the processing of the issuing system that issues this apparatus can be reduced.

[Brief description of the drawings]

1 is a flowchart for explaining each processing operation, FIG. 2 is a diagram showing a data file structure in a data memory, and FIG. 3 is a data file definition. FIG. 4 is a diagram illustrating information, FIG. 4 is a diagram illustrating an area structure in a common data file, FIG. 5 is a diagram illustrating an area structure in an application data file, FIG. 6 is a diagram illustrating area definition information, FIG. FIG. 8 is a diagram illustrating a data file unallocated size storage unit and a total data file allocation start address storage unit. FIG. 8 is a diagram illustrating a format example of data file definition command data. FIG. 9 is a format of a data file selection command data. FIG. 10 is a diagram showing an example, FIG. 10 is a diagram showing a format example of area definition command data, and FIG. 11 (a) is a diagram showing a format example of read command data to an area. FIG. 11 (b) is a diagram showing a format example of write instruction data to an area, FIG. 12 is a block diagram showing a configuration of an IC card, FIG. 13 is a diagram showing functional blocks of the IC card, FIG. 14 is a block diagram showing a configuration of a terminal device. 1 IC card, 15 Control element (control section), 16 Data memory (memory section), 17 Program memory, 21
…… Common data file, 22 …… Application data file, 24 …… Data file definition information, 25,28
... area, 27, 30 ... area definition information.

 ──────────────────────────────────────────────────続 き Continuation of the front page (56) References JP-A-63-198183 (JP, A) JP-A-63-100590 (JP, A) JP-A-60-191342 (JP, A) JP-A 62-1981 276683 (JP, A) JP-A-61-156491 (JP, A) JP-A-62-251991 (JP, A) JP-A-57-14956 (JP, A) JP-A-62-251992 (JP, A)

Claims (4)

(57) [Claims] An IC card having a built-in memory which is used by being divided into a plurality of data files, and which accesses the files to selectively input / output data to / from an external device. A data input / output unit for inputting / outputting data to / from the external device; and data file identification information for additionally defining a data file with command data input from the external device via the data input / output unit; First means for determining whether or not the instruction is a data file definition instruction including size information of the data file; and if the first means determines that the instruction is a data file definition instruction, To determine whether or not the definition information of the data file having the same identification information as the identification information of the file in the definition command already exists in the memory. If it is determined by the second means that the definition information of the data file having the same identification information does not already exist in the memory, it is additionally defined by the definition command of the data file. A third means for generating address information of the file; and if the second means determines that the definition information of the data file having the same identification information does not already exist in the memory, A fourth step of generating file definition information including the file identification information in the file definition command, the size information of the data file, and the address information of the data file generated by the third means, and storing the generated file definition information in a memory; Means for storing data file definition information having the same identification information as the file identification information in the data file definition command in the second means. When it is determined that the data input / output unit already exists, fifth means for outputting response data to the effect that the data file having the same identification information already exists to the external device; When a file selection command is input from the external device via the external device, file definition information having the same data file identification information as the data file identification information in the file selection command is found from the memory, and this file definition Sixth means for performing processing on a file defined by the information. An IC card comprising: 2. The method according to claim 1, wherein when the first means determines that the instruction is a data file definition instruction, the size information of the data file in the data file definition instruction is compared with the unused size of the memory. A seventh means for determining whether or not the additional definition of the data file is possible, and when the seventh means determines that the additional definition of the data file is not possible, outputting response data indicating an abnormal size to the external device. 8th
2. The IC card according to claim 1, further comprising: 3. The data file is divided into a plurality of data files, and
An IC card that has a built-in memory in which each data file is further divided into a plurality of areas and that accesses each file and area to selectively input / output data to / from an external device. A data input / output unit for inputting / outputting data to / from the external device; and at least one file among the plurality of data files according to file selection command data input from the external device via the data input / output unit. The first to choose
Means for selecting, by the first means, a file, instruction data input from the external device via the data output unit, area identification information for additionally defining an area in the file, and identification information of the area. Second means for determining whether or not the area definition command includes size information; and if the second means determines that the area definition command is an area definition command, the area in the area definition command is determined. Third means for judging whether or not area definition information having the same identification information as that of the area already exists in the file selected by the first means; and If it is determined that the definition information of the area having the same identification information does not already exist in the memory, the address information of the area additionally defined by the area definition instruction is generated. The fourth means, and if the third means determines that the definition information of the area having the same identification information does not already exist in the memory, the identification of the area in the area definition command is performed. Fifth means for generating area definition information including information, size information of the area, and address information of the area generated by the fourth means, and storing the generated area definition information in a memory; If it is determined that the area definition information having the same identification information as the area identification information in the area definition command already exists in the memory, the area having the same identification information already exists. Sixth means for outputting response data indicating that the area selection command is present to the external device, and when an area selection command is input from the external device via the data input / output unit, area identification information in the area selection command Same as Seventh area finds area definition information having identification information from the file, performs processing to area defined by the area definition information
An IC card characterized by comprising: 4. When the first means determines that the command is an area definition command, the size information of the area in the area definition command and the unused size of the file to which the area is added are stored. Eighth means for comparing and judging whether additional definition of an area is possible, and outputting response data indicating an abnormal size to the external device when the eighth means determines that additional definition of an area is not possible. The IC card according to claim 3, further comprising: ninth means for performing the operation.