JP4836707B2 - Portable electronic device and IC card - Google Patents

Description

  The present invention incorporates an IC (integrated circuit) chip having control elements such as a rewritable nonvolatile memory and a CPU (Central Processing Unit), and executes various processes based on commands supplied from the outside. The present invention relates to a portable electronic device such as an IC card that outputs the processing result to the outside and an IC card.

  Recently, as portable electronic devices, an EEPROM as a rewritable nonvolatile memory, a RAM as a volatile memory, a CPU as a control element for accessing (reading or writing data, etc.) these memories, and , Means having a ROM storing a CPU operation program and the like, executing processing corresponding to a command supplied from an external device (card reader / writer), and outputting the processing result to the external device IC cards with built-in IC chips are used in various industries.

  In general, when this type of IC card receives a read command from an external device (card reader / writer), the target data is searched from a nonvolatile memory, and if the corresponding data exists, the data is read from the head. The data length is read from.

  By the way, in such an IC card, there are many specifications that complete a single process (for example, transaction processing) by executing a plurality of commands in order, that is, according to a predetermined scenario (for example, transaction processing) (for example, , See Patent Document 1).

However, the scenario often differs depending on the usage of the IC card or the compliant specification. In addition, the IC card often executes reading and writing of memory in units of commands transmitted from the external device, and even when the scenario is executed normally halfway but finally determined to be illegal, The contents of the nonvolatile memory may be updated.
Japanese Patent Laid-Open No. 11-282991

  As described above, the scenario often differs depending on the usage or conformance specification of the IC card, and the IC card often executes memory reading and writing in units of commands transmitted from the external device. There is a problem that the contents of the non-volatile memory may be updated even when it is normally executed halfway but finally determined to be illegal.

  Therefore, an object of the present invention is to provide a portable electronic device and an IC card in which a scenario can be set flexibly and the contents of the memory are not updated in the case of an illegal scenario.

  The portable electronic device of the present invention includes a memory for storing data, a scenario storage means for storing a plurality of scenarios describing the execution order of commands input from the outside, and a first command input from the outside A reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios, and a command process executed in the execution order of the scenario by referring to the scenario identified by the reference scenario identifying means. When the command processing by the first processing means and the command processing by the first processing means are executed normally and the final command is executed normally, the memory rewrites the data requested by the plurality of already executed commands. Second processing means to be executed.

  The portable electronic device of the present invention includes a memory for storing data, a scenario storage means for storing a plurality of scenarios describing the execution order of commands input from the outside, and registration in the plurality of scenarios. Rewrite designation information that pre-stores rewrite designation information that specifies whether or not the rewrite of data requested by the command is reflected in the memory when processing of the command is normally completed. A storage means, a reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios by a first command input from the outside, and the scenario identified by referring to the scenario identified by the reference scenario identifying means First processing means for executing command processing in accordance with the execution order of the When the command processing is normally executed, it is determined whether or not the command is permitted to be reflected in the memory by the rewrite designation information. If the command processing is permitted, it is requested by a plurality of commands that have already been executed. And third processing means for executing rewriting of the data on the memory.

  Further, the IC card of the present invention includes a memory for storing data, a scenario storage means for storing a plurality of scenarios describing the execution order of commands input from the outside, and a first command input from the outside A reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios, and a command process executed in the execution order of the scenario by referring to the scenario identified by the reference scenario identifying means. When the command processing by the first processing means and the command processing by the first processing means are executed normally and the final command is executed normally, the memory rewrites the data requested by the plurality of already executed commands. An IC module configured to have a second processing means to execute, and the IC module stored therein It is and a C card body.

  The IC card of the present invention includes a memory for storing data, a scenario storage means for storing a plurality of scenarios describing the execution order of commands input from the outside, and a plurality of scenarios registered in the plurality of scenarios. Rewrite designation information storage means for preliminarily storing rewrite designation information for designating whether or not the rewrite of data requested by the command is reflected in the memory when the processing of the command is normally completed A reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios by a first command input from the outside, and executing the scenario by referring to the scenario identified by the reference scenario identifying means A first processing means for executing command processing in order, and a command processing by the first processing means; When the command processing is normally executed, it is determined whether or not the command is permitted to be reflected in the memory by the rewrite designation information. If the command is permitted, the command has been requested by a plurality of commands already executed. And an IC module having a third processing means for executing data rewriting on the memory, and an IC card main body containing the IC module.

  According to the present invention, it is possible to provide a portable electronic device and an IC card in which a scenario can be flexibly set and the contents of the memory are not updated in the case of an illegal scenario.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration example of an IC card system that handles an IC card as a portable electronic device according to an embodiment of the present invention. In this IC card system, the IC card 11 can be connected to a terminal device 13 such as a personal computer via a card reader / writer 12, and a keyboard 14, a CRT display device 15 and a printer 16 are connected to the terminal device 13. Configured.

  When the system shown in FIG. 1 is applied to a payment system such as a credit card, for example, it becomes a POS terminal device or an automatic cash transaction apparatus (ATM), and when applied to a point system, points are added or subtracted. It becomes a point terminal device.

  FIG. 2 shows the configuration of the IC card 11, and includes a CPU 101 as a control element, a data memory 102 as a storage means (memory) whose contents can be rewritten, a working memory 103, a program memory 104, a card reader, The contact portion 105 is used to obtain electrical contact with the writer 12. Of these, the portion within the broken line (CPU 101, data memory 102, working memory 103, program memory 104) is composed of one (or a plurality) of IC chips 106, and further this IC chip 106 and contact portion 105. Are integrated into an IC module and embedded in the IC card main body 11a.

  The data memory 102 is used for storing various types of data, and is composed of, for example, a nonvolatile memory such as an EEPROM that can be rewritten. In the case of the present embodiment, the data memory 102 stores (stores) data that is actually used during operation, such as data of the owner of the IC card 11 (for example, a personal identification number) and balance information. Further, a plurality of scenarios describing the execution order of commands input from the outside, which will be described in detail later, are also stored (stored).

The working memory 103 is a working memory for temporarily storing processing data when the CPU 101 performs processing, and is configured by, for example, a RAM.
The program memory 104 is composed of, for example, a non-volatile memory that cannot be rewritten, such as a mask ROM, and stores a control program of the CPU 101 and the like.

  FIG. 3 shows a configuration example of a plurality of scenarios describing the execution order of commands according to the first embodiment. The plurality of scenarios 300 are configured by individual scenarios 310, and each scenario 310 includes command identification information 311 (a CLA byte and an INS byte described in ISO / IEC7816-4 in the figure) of a command to be executed. be registered.

  As will be described later, one or a plurality of scenarios 310 as candidates are extracted by referring to the command identification information 311 from among a plurality of scenarios 300 by the first command, and one scenario by the commands after the second command is extracted. 310 will be selected. When the final command is executed according to the selected scenario 310, the data rewriting process for the data memory 102 is performed.

  FIG. 4 shows a configuration example of a plurality of scenarios describing the execution order of commands according to the second embodiment. The basic configuration is the same as that of the first embodiment (FIG. 3), but further differs from the first embodiment in that rewrite designation information 312 is registered in association with command identification information 311. .

  The rewrite designation information 312 is information for designating whether or not data rewrite requested by the command is reflected in the data memory 102. In the example of FIG. 4, “01” is rewrite permission (reflection) and “00”. Indicates that rewriting is not permitted (not reflected).

  As with the first embodiment (FIG. 3), the basic operation is also to extract the scenario 310 by referring to the command identification information 311 or confirm whether the command according to the selected scenario 310 is executed. However, when the command identification information 311 is referred to, the rewrite designation information 312 is also referred to.

  Next, an example of the operation of the IC card 11 according to the first embodiment in such a configuration will be described with reference to the flowchart shown in FIG. Note that the scenario of FIG. 3 is used in the first embodiment.

  When a command input from the card reader / writer 12 is received (step S1), the CPU 101 checks whether the received command is the first command or after the second command (step S2). As a result of the confirmation, if the received command is the first command, the CPU 101 confirms whether there is a command that matches the scenario 310 in the plurality of scenarios 300 (step S3). This confirmation is performed by comparing the CLA byte and INS byte in the received first command with the command identification information 311 of the scenario 310.

  As a result of the confirmation in step S3, if there is no scenario 310 that matches the received command, the CPU 101 transmits an abnormal termination response to the card reader / writer 12 as the processing termination.

  As a result of the confirmation in step S3, when there is a scenario 310 that matches the received command, the CPU 101 holds a history of which scenario 310 matched in the working memory 103 (step S4). The scenario 310 in this case is one or a plurality of scenarios 310.

  Next, the CPU 101 checks whether or not the received command is a rewrite command for instructing rewriting (step S5). If the result of this confirmation is that the command is not a write command, the CPU 101 terminates processing (executes each command processing).

  As a result of the confirmation in step S5, in the case of a write command, the CPU 101 stores command information including data to be written in the command in a buffer in the working memory 103 in order to hold data to be written when the final command is executed ( (Step S6). Thereafter, the CPU 101 ends the process (executes each command process).

  As a result of the confirmation in step S2, when the received command is the second command or later, the CPU 101 matches the received command from one or a plurality of scenarios 310 that are candidates in the processing in steps S3 to S4. It is confirmed whether or not there is (step S7). This confirmation is performed by comparing the CLA byte and INS byte in the received command with the command identification information 311 of the matched scenario 310 held in the working memory 103.

  As a result of the confirmation in step S7, if there is no scenario 310 that matches the received command, the CPU 101 transmits an abnormal termination response to the card reader / writer 12 as the processing is terminated.

  As a result of the confirmation in step S7, if there is a scenario 310 that matches the received command, the CPU 101 holds a history of which scenario 310 matched in the working memory 103 (step S8).

Next, the CPU 101 checks whether or not the received command is a rewrite command for instructing rewriting (step S9). As a result of this confirmation, in the case of a write command, the CPU 101 stores command information including data to be written in the command in a buffer in the working memory 103 in order to hold data to be written at the time of execution of the final command (step S10), the process proceeds to step S11.
If the result of the confirmation in step S9 is not a write command, the CPU 101 jumps to step S10 and proceeds to step S11.

  In step S11, it is confirmed whether the process of the scenario 310 has been executed up to the final command, that is, whether the command is recognized as the final command by the command identification information 311. As a result of the confirmation, if the command is not the final command, the CPU 101 ends the process (executes each command process).

  As a result of the confirmation in step S11, if the command is the final command, the CPU 101 writes the write target data in the command information stored in the buffer in the working memory 103, for example, in a specified area of the data memory 102. Processing is performed (step S12). After that, the CPU 101 transmits a normal end response to the card reader / writer 12 as the process ends.

  As described above, according to the first embodiment, a plurality of scenarios describing the execution order of commands input from the outside are stored in advance, and the plurality of scenarios are determined by the first command input from the outside. The scenario to be referred to is identified from among the scenarios, and by referring to the identified scenario, the command processing is executed according to the execution order of the scenario, the command processing is executed normally, and the final command is executed normally. In this case, the scenario can be flexibly set by rewriting the data requested by multiple commands already executed to the memory, and the contents of the memory are not updated in the case of an illegal scenario. It becomes possible to do so.

  Next, an operation example of the IC card 11 according to the second embodiment will be described with reference to a flowchart shown in FIG. Note that the scenario of FIG. 4 is used in the second embodiment.

  When a command input from the card reader / writer 12 is received (step S21), the CPU 101 checks whether the received command is the first command or after the second command (step S22). As a result of the confirmation, if the received command is the first command, the CPU 101 confirms whether there is a command that matches the scenario 310 in the plurality of scenarios 300 (step S23). This confirmation is performed by comparing the CLA byte and INS byte in the received first command with the command identification information 311 of the scenario 310.

  As a result of the confirmation in step S23, if there is no scenario 310 that matches the received command, the CPU 101 transmits an abnormal termination response to the card reader / writer 12 as the processing termination.

  As a result of the confirmation in step S23, if there is a scenario 310 that matches the received command, the CPU 101 holds a history of which scenario 310 matched in the working memory 103 (step S24). The scenario 310 in this case is one or a plurality of scenarios 310.

  Next, the CPU 101 checks whether or not the received command is a rewrite command for instructing rewriting (step S25). If the result of this confirmation is that the command is not a write command, the CPU 101 terminates processing (executes each command processing).

  As a result of the confirmation in step S25, in the case of a write command, the CPU 101 stores command information including data to be written in the command in a buffer in the working memory 103 in order to hold data to be written when the final command is executed ( (Step S6). Thereafter, the CPU 101 ends the process (executes each command process).

  As a result of the confirmation in step S22, when the received command is the second command or later, the CPU 101 matches the received command from one or a plurality of scenarios 310 that are candidates in the processing in steps S23 to S24. It is confirmed whether or not there is (step S27). This confirmation is performed by comparing the CLA byte and INS byte in the received command with the command identification information 311 of the matched scenario 310 held in the working memory 103.

  As a result of the confirmation in step S27, if there is no scenario 310 that matches the received command, the CPU 101 transmits an abnormal termination response to the card reader / writer 12 as the processing is terminated.

  As a result of the confirmation in step S27, when there is a scenario 310 that matches the received command, the CPU 101 holds a history of which scenario 310 matched in the working memory 103 (step S28).

Next, the CPU 101 checks whether or not the received command is a rewrite command for instructing rewrite (step S29). As a result of this confirmation, in the case of a write command, the CPU 101 stores command information including data to be written in the command in a buffer in the working memory 103 in order to hold data to be written at the time of execution of the final command (step S30), the process proceeds to step S31.
If the result of the confirmation in step S29 is not a write command, the CPU 101 jumps to step S30 and proceeds to step S31.

  In step S31, it is confirmed whether or not the command is rewritten, that is, whether or not the rewrite designation information 312 corresponding to the command is set to rewrite permission ("01"). As a result of the confirmation, if the command is not permitted to be rewritten, the CPU 101 ends the process (executes each command process).

  As a result of the confirmation in step S31, when the command is permitted to be rewritten, the CPU 101 writes the data to be written in the command information stored in the buffer in the working memory 103, for example, in a specified area of the data memory 102. Processing is performed (step S32). Thereafter, the CPU 101 ends the process (executes each command process).

  As described above, according to the second embodiment, a plurality of scenarios describing the execution order of commands input from the outside are stored in advance, and the commands registered in the plurality of scenarios are Rewrite designation information for designating whether or not the rewrite of data requested by the command is reflected in the memory when the command processing is normally completed is stored in advance. A scenario to be referred to is identified from a plurality of scenarios, command processing is executed in the execution order of the scenario by referring to the identified scenario, and when the command processing is executed normally, the command is executed. Determines whether or not reflection is permitted in the memory according to the above rewrite designation information. The scenario can be flexibly set by rewriting the data requested by multiple commands to the memory, and the contents of the memory are not updated in the case of an illegal scenario. It becomes possible.

  In the above embodiment, the case where the present invention is applied to a contact type IC card as a portable electronic device has been described. However, the present invention is not limited to this and can be applied to a non-contact type IC card. It can also be applied to a portable terminal device or a mobile phone called PDA, and the shape of the portable electronic device is not limited to a card type, but a booklet type, a block type, a tag type, Other shapes may be used.

The block diagram which shows the structural example of the IC card system which handles the IC card which concerns on embodiment of this invention. The block diagram which shows the structural example of an IC card. The schematic diagram which shows the structural example of the some scenario which described the execution order of the command which concerns on 1st Embodiment. The schematic diagram which shows the structural example of the some scenario which described the execution order of the command which concerns on 2nd Embodiment. The flowchart explaining the operation example of the IC card which concerns on 1st Embodiment. The flowchart explaining the operation example of the IC card which concerns on 2nd Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... IC card (portable electronic device), 11a ... IC card main body, 12 ... Card reader / writer, 13 ... Terminal device, 15 ... CRT display part, 101 ... CPU (control element), 102 ... Data memory (storage means) , Memory), 103 ... working memory, 104 ... program memory, 105 ... contact part, 106 ... IC chip, 300 ... multiple scenarios, 310 ... individual scenarios, 311 ... command identification information, 312 ... rewrite designation information.

Claims (6)

A memory for storing data;
Scenario storage means for storing in advance a plurality of scenarios describing the execution order of commands input from the outside;
A reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios by a first command input from the outside;
First processing means for executing command processing in the execution order of the scenario by referring to the scenario identified by the reference scenario identifying means;
When the command processing by the first processing means is normally executed and the final command is normally executed, data rewriting requested by a plurality of already executed commands is executed on the memory. Processing means;
A portable electronic device comprising: A memory for storing data;
Scenario storage means for storing in advance a plurality of scenarios describing the execution order of commands input from the outside;
Rewrite specification information for specifying whether or not the rewrite of data requested by the command is reflected in the memory when the command processing is normally completed for the commands registered in the plurality of scenarios is stored in advance. Rewriting designation information storage means,
A reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios by a first command input from the outside;
First processing means for executing command processing in the execution order of the scenario by referring to the scenario identified by the reference scenario identifying means;
When the command processing by the first processing means is normally executed, it is determined whether or not the command is permitted to be reflected in the memory according to the rewrite designation information. Third processing means for rewriting data requested by a plurality of commands to the memory;
A portable electronic device comprising:   3. The plurality of scenarios stored in the scenario storage means can be rewritten by a specific command input from the outside on the condition that authentication is established. Portable electronic device. Memory for storing data, scenario storage means for storing in advance a plurality of scenarios describing the execution order of commands input from the outside, and reference from among the plurality of scenarios by the first command input from the outside A reference scenario identifying means for identifying a scenario to be performed, a first processing means for executing command processing in accordance with the execution order of the scenario by referring to the scenario identified by the reference scenario identifying means, and the first Second processing means for executing, on the memory, rewriting of data requested by a plurality of commands already executed when the command processing by the processing means is normally executed and the final command is normally executed; An IC module comprising:
An IC card body containing the IC module;
An IC card comprising: A memory for storing data, scenario storage means for storing a plurality of scenarios describing the execution order of commands input from the outside, and commands registered in the plurality of scenarios. Rewrite designation information storage means for storing in advance rewrite designation information for designating whether or not the rewrite of data requested by the command is reflected in the memory when it is normally completed, and the first input from the outside A reference scenario identifying means for identifying a scenario to be referred to from among the plurality of scenarios by a command, and executing command processing in accordance with the execution order of the scenario by referring to the scenario identified by the reference scenario identifying means. 1 processing means and the command processing by this first processing means was executed normally Determining whether or not the command is permitted to be reflected in the memory according to the rewrite designation information, and if permitted, rewriting data requested by a plurality of commands already executed to the memory. An IC module configured to have third processing means to execute;
An IC card body containing the IC module;
An IC card comprising:   6. The plurality of scenarios stored in the scenario storage means can be rewritten by a specific command input from the outside on the condition that the authentication is established. IC card.

Images