JP4697936B2 - Computer system and cache method for caching data in card-type storage medium - Google Patents

Description

  The present invention relates to a method for caching data stored in a card-type storage medium represented by an IC card, and a computer system for caching data stored in a card-type storage medium.

  In recent years, card-type storage media represented by IC cards in which IC chips are embedded in card media and personal computers (hereinafter referred to as PCs) are used in combination. For example, in an electronic authentication system using PKI (Public Key Infrastructure), a user's electronic certificate used for authentication is stored in an IC card and combined with a PC to be used as a logon system to a company network. in use.

  In a computer system in which a card type storage medium and a PC are combined, convenience is enhanced by the portability of the card type storage medium, but the access time from the PC to the data stored in the card type storage medium becomes a problem. For example, in the case of an IC card, an EEPROM (Electrically Erasable Programmable Read-Only Memory) whose access speed is still slow is still mainstream, and the access time to the data stored in the IC card is generally used. Very slow compared to other peripherals.

  A data processing technique called a cache is widely known as a data processing technique for increasing the data processing time of a PC. A cache temporarily stores data stored in a storage device having a low access speed in a cache file provided in a storage device (for example, RAM: Random Access Memory) having a high access speed. Is a data processing technique that speeds up the overall processing of the computer by using the data stored in the computer.

Patent Document 1 is an invention that uses this cache technology for an IC card system (automatic toll collection system). The data processing device disclosed in Patent Document 1 is necessary for the specific processing before starting the specific processing. Data stored in the IC card is collectively stored in a cache file, and after completion of the specific processing, the data of the cache file updated by execution of the specific processing is stored in the IC card again in batch. By doing so, the processing time of the specific processing is greatly shortened.
JP 2002-366993 A

  However, in the above-described technology, the card type storage medium is pulled out from the PC and replaced with another card type storage medium, or the card type storage medium is pulled out from the PC and the data in the card type storage medium is rewritten in another environment. In some cases, the data stored in the card-type storage medium and the cache data cannot be matched, resulting in inconvenience in subsequent processing.

  Accordingly, in view of the above-described problems, the present invention provides data stored in a cache file when the PC uses data in the card type storage medium stored in the cache file in a computer system that combines the card type storage medium and the PC. It is an object of the present invention to provide a computer system and a cache method that do not cause any inconvenience in subsequent processing even when the card-type storage medium is pulled out from a PC.

A first invention that solves the above-described problem is a computer system that uses a card-type storage medium that is a card-shaped information storage medium, and the card-type storage medium includes a card cached in the computer system. When the data and the card data are cached in the computer system, the check file authentication data authenticated by the computer system and the check file authentication data are successfully readable, and the computer system Check data read by the computer system when operating the cached card data, and the computer system communicates with the card-type storage medium to perform specific processing; and When the application processing unit caches and operates the card data, the application processing unit has a cache unit that is called from the application processing unit, and the cache unit already caches the card data when caching the card data. If it is cached, the check data is read and only when the check data is successfully read, the cached card data is determined to be valid and the card data is cached. When the check data is not read or when the check data fails to be read, the check file authentication data is authenticated, and the card data is cached in the computer system only when the authentication is successful.

Further, the second invention is a cache method for storing and operating card data stored in a card-type storage medium, which is a card-shaped information storage medium, in a computer system, wherein the cached card data is stored. Determines whether or not the card data is cached. If not, the check file authentication data stored in the card type storage medium is authenticated and the check file authentication data is successfully authenticated. Only when the card data is read out and cached in the computer system, and the card data stored in the computer system is manipulated, it is determined whether or not the card data is cached. It is stored in the card-type storage medium, the check Read the check data that enables viewing reading of a successful authentication of Airu authentication data, wherein only when a successful reading of the check data, determines that valid the card data cache is operated cached the card data has been This is a cache method characterized by:

  According to the present invention described above, when using cache data held by a PC in a computer system that combines a card-type storage medium and a PC, it is used after confirming the validity of the data cached in the PC. Even if the card-type storage medium is pulled out from the PC, it is possible to provide a computer system and a cache method that do not cause any inconvenience in subsequent processing. In the present invention, the validity of the cached card data is determined by the internal state of the card-type storage medium (whether or not the check data can be read), so that complicated processing is not required.

  From here, a computer system to which the present invention is applied will be described in detail with reference to the drawings. FIG. 1 is a perspective view of a computer system. The computer system shown in FIG. 1 includes an IC card 1 as a card-type storage medium and a PC 2 on which an application 3 that is software that uses the IC card 1 is installed.

  FIG. 2 is a configuration diagram of the PC 2 on which the application 3 is installed. As shown in FIG. 2, the PC 2 includes a central processing unit 20 (hereinafter referred to as a CPU), a RAM 21 (Random Access Memory) as a main memory, a hard disk 22 as an external storage device, and optical information. A USB port 25 serves as a reader / writer interface for connecting a display 23 to be displayed, a keyboard 24 as an input means for inputting information to the PC 2, and a reader / writer 4 which is a peripheral device having a function of data communication with the IC card 1. Connected to (Bus).

  The application 3 installed on the PC 2 is software designed for the PC 2 to control the CPU 20 and execute processing for a specific application (for example, user authentication using PKI). The application 3 is the PC 2 Is stored in the hard disk 22. In addition, the application 3 according to the present embodiment has a function of caching data stored in the IC card 1 in the memory of the PC 2 and using the cached data to speed up the entire processing of the application 3. Is realized by software.

  3A and 3B are diagrams for explaining the IC card 1 serving as a card-type storage medium in the present embodiment. FIG. 3A is an external view of the IC card 1, and FIG. 3B is FIG. Sectional drawing between A-B of this is shown typically. As shown in FIG. 3A, the IC card 1 has a contact terminal 1a that is electrically connected to the reader / writer 4 on the outer surface, and an IC card 1 is provided inside the IC card 1 as shown in FIG. A chip 1b is incorporated.

  FIG. 4 is a block diagram of the IC chip 1b. As shown in FIG. 4, the IC chip 1b built in the IC card 1 communicates with the CPU 10, the ROM 11 / EEPROM 12, which is a nonvolatile memory, the RAM 13, which is a volatile memory, and the reader / writer 4 via the contact terminals 1a. In this embodiment, the data cached in the PC 2 is stored in the EERPROM 12 provided in the IC chip 1b.

  In the present embodiment, the card-type storage medium is the contact IC card 1 shown in FIG. 3, but the card-type storage medium may be a non-contact IC card or a contact IC card IC that performs wireless data communication. A SIM (Subscriber Identity Module) having a shape obtained by cutting the vicinity of the chip into a strip shape may be used, or a hardware token incorporating a SIM may be used. The data cached in the PC 2 may be data stored in the ROM 11 or RAM 13.

  1 will be described in detail with reference to the block diagram of the computer system shown in FIG. 1 and the flowchart showing the operation procedure of the cache method according to the present invention. . FIG. 5 is a block diagram of a computer system.

  As shown in FIG. 5, the IC card 1 has data 101 cached in the PC 2 (hereinafter referred to as IC data), a data file 100 in which the IC data 101 is stored, and the validity of the cached IC data 101. A check file 110 that stores check data 111 that is read out when the data is confirmed, and check file authentication data 121 (hereinafter referred to as CF authentication data) that is authenticated when the IC data 101 is cached.

  The data file 100 or the check file 110 included in the IC card 1 is a work basic file (WEF) defined by ISO7816, and each file includes file identification information that is information for identifying the file. (For example, a file number) is added.

  The IC data 101 stored in the data file 100 is data used by the application 3 for processing. As described above, the IC data 101 is read from the IC card 1 by the application 3 and cached in the memory of the PC 2 for use. Data. The check data 111 stored in the check file 110 is data that is read by the application 3 when the validity of the cached IC data 101 is confirmed. The CF authentication data 121 is data that is used when the IC data 101 is cached. This data is authenticated.

  In the present embodiment, the IC card 1 can read the check data 111 stored in the check file 110 only when the CF authentication data 121 is successfully authenticated by the security management technique described in the ISO 7816 standard. Is provided. Authentication information indicating that the authentication of the CF authentication data 121 has been successful is stored in the RAM 13 of the IC chip 1b. When the IC card 1 is withdrawn from the reader / writer 4 or the IC card 1 is inactivated, this authentication information is displayed. Is erased from the RAM 13 and the check data 111 cannot be read.

  FIG. 6 is a diagram for explaining the logical file structure of the data file 100, the check file 110, and the CF authentication data 121. As shown in FIG. 6, in the present embodiment, the file structure of the IC card 1 is a logical file structure defined by the ISO 7816 standard. Logically, the file structure of the dedicated file 130 (DF) is as follows. One check file 110 and CF authentication data 121 and at least one data file 100 are stored.

  The reason why one check file 110 and CF authentication data 121 are stored under one DF 130 is because, generally, the DF 130 used by the application 3 is different for each application 3. For example, when two different applications 3 installed on the PC 2 use the same IC card 1, it is desirable that the CF authentication data 121 be authenticated by each application 3, and the DF 130 used by each application 3 for this purpose. It is desirable that one check file 110 and CF authentication data 121 are stored under.

  The check data 111 and the CF authentication data 121 are data used in the cache function of the computer system and have nothing to do with access management to the IC data 101. For example, when it is necessary to verify the user PIN (Personal Identification Number) stored in the IC card 1 for reading the IC data 101, even if the CF authentication data 121 is authenticated, the user PIN If the verification is not successful, the application 3 cannot read the IC data 101.

  From here, each function of PC2 of FIG. 5 is demonstrated. The PC 2 has an application 3, and the application 3 stores the IC data 101 stored in the IC card 1 in addition to the application processing unit 300 that executes processing designed for a specific application. A cache unit 310 that caches the cache file 320 formed in the RAM 21 or the hard disk 22 is provided.

  In FIG. 5, the application processing unit 300 included in the application 3 is realized by a program for operating the PC 2 in order to realize a specific application. For example, if the application 3 provided in the computer system of FIG. 1 has a function of managing the activation of the PC 2 using the IC card 1, it is a password authentication program executed when the PC 2 is activated, A user authentication program for authenticating a user using an electronic certificate stored in the IC card 1 is stored as the application processing unit 300.

  The cache unit 310 is a program that is called when the application processing unit 300 caches and uses the IC card 101, has a function of storing and manipulating the IC data 101 in the cache file 320, and operates the PC 2. Realized. The cache unit 310 includes a cache determination unit 311 and a check file authentication unit 312 (hereinafter referred to as a CF authentication program). When the IC data 101 is not cached, the application processing unit 300 does not call the cache unit 310.

  When the cache unit 310 stores the IC data 101 in the cache file 320, the RAM 21 stores the file identification information included in the data file 100 storing the IC data 101 and the pointer storing the IC data 101 in the cache file 320 in the RAM 21. To do. Here, the pointer is data indicating an address at which the IC data 101 is stored in the storage device. For example, when the cache file 320 is formed in the RAM 21, the address of the RAM 21 becomes the pointer.

  When the cache unit 310 receives an access request from the application processing unit 300 to the IC data 101, the cache unit 310 confirms the file identification information and the pointer held in the RAM 21. When the cache unit 310 does not hold the file identification information included in the data file 100 storing the IC data 101 requested to be accessed and the pointer storing the IC data 101, the check file authentication unit 312 is used. The CF authentication data 121 is authenticated.

  When the authentication of the CF authentication data 121 is successful, the cache unit 310 reads the IC data 101 from the data file 100 and stores the read IC data 101 in the cache file 320. When the cache unit 310 stores in the memory of the PC 2, as described above, the file identification information of the data file 100 and the pointer storing the IC data 101 are stored and held.

  If the file identification information and the pointer are already held, the cache unit 310 uses the cache determination unit 311 to confirm the validity of the IC data 101 stored in the cache file 320.

  The validity of the IC data 101 stored in the cache file 320 can be confirmed by removing the IC card 1 from the PC 2 and replacing it with another IC card 1 or withdrawing the IC card 1 from the PC 2 in another environment. This is because if the data 101 is rewritten, the IC data 101 stored in the IC card 1 and the cache data may not be consistent.

The cache determination unit 311 selects the check file 110 below the DF 130 in which the data file 100 specified by the held file identification information is placed, and the check data 111 stored in the check file 110 is selected. read out. If the reading is successful, it is determined that the IC card 1 has not been removed, and the IC data 101 stored in the cache file 320 is determined to be valid. This is because, as described above, when the IC card 1 is pulled out from the reader / writer 4 and the IC card 1 is inactivated, the authentication information for authenticating the CF authentication data is deleted from the RAM 13 and the check data 111 is read. It is because it returns to the state which cannot be taken out.

  Then, the cache unit 310 delivers the file identification information and the pointer to the application processing unit 300, and the application processing unit 300 operates the IC data 101 stored in the cache file 320 using the pointer.

  If the check data 111 is not successfully read, the cache unit 310 determines that the IC card 1 has been removed, and determines that the IC data 101 stored in the cache file 320 is invalid. Then, the cache unit 310 uses the check file authentication unit 312 to store the IC data 101 in the cache file 320 again according to the procedure described above.

  From here, the procedure of the cache method according to the present invention will be described in detail with reference to the drawings. By showing the procedure of the cache method of the present invention, the operation of each element described in FIG. 5 becomes clearer. FIG. 7 is a flowchart showing the procedure of the cache method.

  The first step of the present invention is a step (S10) in which the application processing unit 300 starts processing using the IC data 101. In the next step (S20), when the application processing unit 300 caches and uses the IC data 101, the application processing unit 300 calls the cache unit 310 and proceeds to step (S30), and when the IC data 101 is not cached and used. The process proceeds to step (S90) without calling the cache unit 310.

  In step (S90), the application 3 accesses the IC data 101 via the reader / writer 4, performs processing such as reading and changing the IC data 101, and the procedure ends.

In step (S30), the cache unit 310 checks the stored file identification information and pointer, and checks whether the IC data 101 to be accessed is stored in the cache file 320. If it is cached, the process proceeds to step (S41), and if not cached, the process proceeds to step (S40).

  In step (S41), the cache unit 310 calls the cache determination unit 311 and reads the check data 111 stored in the IC card 1. If the check data 111 can be read, it is determined that the cache data is valid, and the IC data 101 stored in the cache file 320 is processed in step (S70). If the check data 111 cannot be read, it is determined that the cache data is invalid, and the process proceeds to step (S40).

  Step (S40) is a step of starting caching of the IC data 101. The cache unit 310 calls the check file authentication means 312 and authenticates the CF authentication data 121 stored in the IC card 1. If the authentication is successful, the process proceeds to step (S50). If the authentication is not successful, the process of the IC data 101 is interrupted in step (S80), and the procedure is terminated.

  In step (S50), the cache unit 310 reads the IC data 101 to be cached. In step (S60), the read IC data 101 is stored in the cache file 320. When storing in the cache, the cache unit 310 stores / holds file identification information in which the read IC data 101 is stored and a pointer in which the IC data 101 is stored in the RAM 13 or the like.

  In step (S70), the application processing unit 300 performs processing using the IC data 101 stored in the cache file 320. With step (S70), the procedure of the cache method ends. In step (S70), when the application processing unit 300 manipulates the IC data 101 stored in the cache file 320 and changes the contents of the IC data 101, it is stored in the IC card 2 when the application 3 is terminated. The updated IC data 101 may be updated based on the IC data 101 stored in the cache file 320.

The perspective view of a computer system. The block diagram of a computer. Explanatory drawing of an IC card. The block diagram of an IC card. The functional block diagram of a computer system. The figure explaining the logical file structure of an IC card. The flowchart which showed the procedure of the cache method.

Explanation of symbols

1 IC card 12 EEPROM provided in the IC card
13 RAM in IC card
100 data file 101 IC data 110 check file 111 check data 121 check file authentication data 2 personal computer 21 main memory provided in personal computer 3 application 300 application processing unit 310 cache processing unit 311 cache determination unit 312 check file authentication unit 320 cache File 4 Reader / Writer

Claims (2)

A computer system using a card-type storage medium that is a card-shaped information storage medium, wherein the card-type storage medium caches card data cached in the computer system, and the card data is cached in the computer system. When the check file authentication data authenticated by the computer system and the check file authentication data are successfully authenticated, the computer system operates the cached card data. Check data to be read by the computer system, the computer system communicating with the card-type storage medium and performing a specific process; and A cache unit that is called from the application processing unit when the cache data is operated, and the cache unit determines whether the card data has already been cached when caching the card data. If the cache data is cached, the check data is read out, and the cached card data is determined to be valid only when the check data has been successfully read. When reading fails, the check file authentication data is authenticated, and the card data is cached in the computer system only when the authentication is successful. A cache method for storing and manipulating card data stored in a card-type storage medium, which is a card-shaped information storage medium, in a computer system, wherein when the cached card data is stored, the card data is cached If it is not cached, the check file authentication data stored in the card type storage medium is authenticated, and the card data is stored only when the check file authentication data is successfully authenticated. When operating the card data read and cached in the computer system, it is determined whether or not the card data is cached, and if it is cached, the card type storage medium stored in, the check file authentication data The check data that can be read only when the authentication is successful is read, and only when the check data is successfully read, the cached card data is determined to be valid, and the cached card data is operated. Cache method.

Images