JP5457743B2 - IC card and portable electronic information device - Google Patents

Description

  The present invention relates to an IC card capable of switching a function to be provided by determining a used state and a portable electronic information device including the IC card.

In an IC card, an IC module having functions such as a memory and a CPU is embedded in a housing made of a plastic plate or the like.
This IC card is provided with an IC having a control element such as a CPU, ROM, RAM, EEPROM, etc., so that various functions can be realized. Further, since counterfeiting is difficult, security is greatly improved. For this reason, it is widely used for settlement of credit cards and other commercial transactions.

By the way, in the case of an IC card used for settlement by credit card or other commercial electronic money, there may be cases where the electronic money stored in the IC card is illegally used due to theft or loss.
Taking a mobile phone as an example, if a SIM (Subscriber Identitiy Module) card is equipped with an electronic payment function, the mobile phone may be damaged in the same manner.

  Therefore, in the technique described in Patent Document 1, the owner can set a limit amount that can be used with the IC card each time, and the set limit amount cannot be higher than the previous set amount. The function is realized. For this reason, even if the IC card is stolen, the damage can be reduced.

  A mobile phone is provided with a remote lock function. This function can be locked, for example, by making a call according to a pattern on a mobile phone. As a result, even if the mobile phone is lost, the damage can be reduced.

JP 2006-172247 A

However, in the technique described in Patent Document 1, it is necessary for the owner to always set a limit amount, and when the IC card is stolen, the owner sets the limit amount to a high amount. If so, there remains a risk that it will be misused for high-value payments.
If the mobile phone is lost, the remote lock function can be used when the power of the mobile phone is turned on, so the risk of misuse can be reduced. Since the function cannot be used, the electronic payment function in the SIM may be used.

  Technical issues to solve such problems are to provide normal functions when it is recognized as being used under normal conditions, and limit functions when there is a risk of being used under abnormal conditions. Realization of an IC card that can be used is conceivable.

  The present invention has been made in view of such circumstances, and provides an IC card capable of switching a function to be provided by determining a used state and a portable electronic information device including the IC card. Objective.

The present invention for solving the above-mentioned problems is to determine a state in which the IC card is used from information input via the first communication interface in an IC card having a plurality of communication interfaces, and to enter this state. Correspondingly, it is an IC card that restricts at least a part of the processing contents of the electronic payment input via the second communication interface.

  The present invention also relates to a portable electronic information device provided with the IC card according to the invention described above.

  According to the IC card and the electronic information device including the IC card according to the present invention, it is possible to switch the function to be provided by determining the state of use. Therefore, it is possible to improve user convenience or security.

The figure which shows the outline | summary of the mobile telephone terminal which performs a non-contact IC card application service. The block diagram which shows the signal interface with the structure of USIM and a mobile telephone terminal. The block diagram which shows the application stored in a mobile telephone terminal and a control part. The flowchart which shows the operation | movement of the outline of the control part for improving security.

[First embodiment]
In the embodiment of the present invention, a portable electronic information device such as a PDA (Portable Digital Assistance) equipped with an IC card is taken as an example, and more specifically, an IC card incorporated in a mobile phone will be described.

Many countries overseas have adopted the GSM (registered trademark) (Global System for Mobile communications) system as a mobile phone system system. In the GSM (registered trademark) system, a SIM (Subscriber Identity Module) card, which is a kind of IC card, is indispensable in a mobile phone.
In Japan, mobile phone systems that adopt 3GPP (3rd Generation Partnership Project) standards instead of GSM (registered trademark) have been launched. In the 3GPP standard, an IC card similar to a SIM card and a USIM (Universal Subscriber Identity Module) card are essential.

SIM and USIM used in GSM (registered trademark) and 3GPP are inserted into a mobile phone terminal. In SIM and USIM, key information, encryption algorithm, and various network parameters necessary for connecting to the communication network of the carrier are recorded. The mobile phone terminal transmits such information to the carrier's OTA (Over The Air) server, authentication / management server, etc., and authenticates with these servers. If the authentication result is correct, the communication service of the carrier is provided. It becomes possible to receive.

  In addition, various applications by third parties are downloaded to SIM and USIM. For this reason, SIM and USIM are customized for each user and are unique. In recent years, the capacity of user memories has increased, and personal information such as telephone directories and mails that have been stored in memory devices until now has also been stored in SIMs and USIMs with higher security.

  In Japan and overseas, a contactless communication chip is mounted in a mobile phone terminal, and a contactless mobile payment similar to a contactless IC card has been launched. Until now, non-contact IC card applications have been often mounted on mobile phone terminals on a chip different from SIM and USIM. However, the interface between the non-contact communication chip and the SIM / USIM is standardized, and the non-contact IC card application is installed in the SIM / USIM from the viewpoint of security and removable.

FIG. 1 is a diagram showing an outline of a mobile phone terminal that performs a contactless IC card application service.
The USIM 2 equipped in the mobile phone terminal 1 is connected to a contactless communication chip (CLF: Contact Front End) 3 and a mobile phone terminal (MPU) 4. The interface between the USIM 2 and the mobile phone terminal MPU4 handles data when the mobile phone application is used. The interface between the USIM 2 and the non-contact communication chip 3 handles data when using the non-contact IC card application. The non-contact communication chip 3 controls information exchange with an external non-contact communication reader / writer 6 via the non-contact communication antenna 5.

  Here, the data when the mobile phone application is used is data exchanged with the USIM 2 when, for example, a mobile user inputs an operation on the screen. The data when using the non-contact IC card application is data exchanged with the USIM 2 regarding electronic payment, for example.

FIG. 2 is a block diagram showing a configuration of the USIM 2 and a signal interface between the mobile phone terminal 1.
The USIM 2 includes a ROM 201, a RAM 202, a nonvolatile memory 203, a control unit 204, and an input / output interface unit 205. The input / output interface unit 205 is provided with an IO unit 206 and a SWP unit 207.

  The control unit 204 performs calculation, control, etc., and controls the USIM 2 in an integrated manner. The ROM 201 is a read-only memory. The ROM 201 stores basic software such as an operating system (OS), applications, and data. The RAM 202 is used as a work area in the processing of the control unit 204.

  The non-volatile memory 203 is a rewritable non-volatile memory such as an EEPROM or a flash memory, and is normally used as a user work area, a program area, or the like.

The IO unit 206 receives data when using the mobile phone application transmitted from the mobile phone terminal MPU 4 and outputs the data to the control unit 204. The SWP unit 207 receives data when using the non-contact IC card application transmitted from the non-contact communication chip CLF3 and outputs the data to the control unit 204.
Here, reception of data when the mobile phone application is used is executed when the power of the mobile phone terminal 1 is ON. On the other hand, the reception of data when using the non-contact IC card application is executed at any time when the power of the mobile phone terminal 1 is turned on or off.

In addition, IO is “Input Output”. When a portable user performs an operation on the screen, communication when the operation command is exchanged between the mobile phone terminal MPU4 and the USIM 2 is performed. (Reference standard: ISO7816).
SWP is “Single Wire Protocol”, which means a contact-type communication method between the non-contact communication chip CLF3 and the USIM2. That is, when the non-contact communication chip CLF3 receives a command from an external terminal by non-contact communication, it is a communication method for executing exchange of the command between the non-contact communication chip CLF3 and the USIM 2 (reference standard: ETSI). TS 102613).

  FIG. 3 is a block diagram showing applications stored in the mobile phone terminal 1 and the control unit 204.

The mobile phone terminal MPU4 is provided with an operation input / output unit 401, a USIM monitoring unit 402, and a communication input / output unit 403. When the user of the mobile phone terminal 1 performs an operation on the screen, the operation input / output unit 401 transmits the operation data to the USIM 2. The USIM monitoring unit 402 accesses the USIM 2 every predetermined time and monitors whether there is a response. The operation of the USIM monitoring unit 402 is for confirming that the USIM 2 has not been removed. The communication input / output unit 403 transmits the data to the USIM 2 when there is a predetermined communication (for example, remote lock) from the outside.
Each of these applications executes an operation when the power of the mobile phone terminal 1 is in an ON state, and exchanges commands and data with the USIM 2 via the IO unit 206.

  The control unit 204 includes a command analysis unit 204a, a timer processing unit 204b, a mode switching unit 204c, and other applications 204d. The command analysis unit 204a analyzes the received command, determines whether the command is transmitted from the mobile phone terminal MPU4 or the non-contact communication chip 3, and activates an application for processing the command. The timer processing unit 204b controls the setting / resetting of the timer in the USIM2. The mode switching unit 204c sets a flag indicating whether the power of the mobile phone terminal 1 is on or off.

  FIG. 4 is a flowchart showing a schematic operation of the control unit 204 for improving security.

  In step S01, when the USIM 2 receives the command, in step S02, the command analysis unit 204a analyzes the received command and determines whether the command is transmitted from the mobile phone terminal MPU4 or the non-contact communication chip 3. . Note that since the physical address of the terminal (not shown) to which the IO unit 206 and the SWP unit 207 are allocated is different, it may be determined from which address the command is received.

  When the received command is transmitted from the mobile phone terminal MPU4, that is, when the command is an IO communication method, it is determined that the power supply of the mobile phone terminal 1 is ON. Examples of this command include a command when using a mobile phone application, a USIM monitoring command every predetermined time, and a command for remote lock.

  In step S03, the timer processing unit 204b resets the timer provided in the USIM 2 and starts counting from zero. Accordingly, the count value of the timer is reset to 0 each time a command is input from the mobile phone terminal MPU4. In step S04, the mode switching unit 204c switches the flag to the power ON mode.

  In step S05, it is checked whether the received command is remote lock. If Yes in step S05, that is, if the received command is remote lock, a predetermined function in the USIM is locked in step S06. As a result, the electronic payment function in USIM cannot be used.

  If No in step S05, that is, if the received command is not remote lock, in step S07, the processing contents at the time of electronic settlement in the power-on state are maintained without being changed. For example, if the user has set a payment amount, the setting is maintained. In step S08, a predetermined application corresponding to the received command is activated.

  On the other hand, when the received command is transmitted from the non-contact communication chip 3, that is, a command of the SWP communication method, it cannot be determined whether the power of the mobile phone terminal 1 is ON or OFF. . Therefore, in step S11, it is checked whether or not the timer time has exceeded a certain time.

In the case of No in step S11, that is, when the time of the timer has not yet elapsed, it is considered that the USIM monitoring unit 402 is executing an operation every predetermined time. That is, it can be determined that the mobile phone terminal 1 is in the power ON state. Accordingly, the processing after step S05 described above is executed.
In the case of Yes in step S11, that is, when the time of the timer has already exceeded a certain time, at this time, the transmission of the command of the IO communication method from the mobile phone terminal MPU4 has stopped for a certain time, that is, USIM monitoring It can be considered that the unit 402 is not performing an operation every predetermined time and is in a power OFF state. Therefore, in step S12, the mode switching unit 204c switches the flag to the power OFF mode. Then, in step S13, processing is performed so as to apply the setting contents at the time of electronic payment in the power-off state, for example, setting of low-value payment or non-payment. Thereafter, in step S08, a predetermined application corresponding to the received command is activated.

  Conventionally, since the remote lock cannot be performed when the power of the mobile phone terminal is OFF, there is a risk that a large amount of payment may be made if the power is OFF at the time of theft or loss. In the above-described embodiment, when the cellular phone terminal 1 is in a power-on state, the lock is prohibited by remote lock, and in the case of theft or loss, a high-value payment is controlled to be disapproved in a power-off state. Is possible. For this reason, damage can be reduced in the case of theft or loss.

[Variation of the first embodiment]
In the first embodiment, the amount of money that can be settled is controlled depending on whether the power of the mobile phone terminal is ON or OFF. In the variation of the first embodiment, the amount that can be settled is also controlled by whether or not communication radio waves can be received.

  This solves the case where the remote lock cannot be applied unless the communication radio wave can be received even if the power of the mobile phone terminal is turned on in the first embodiment.

In this variation, the amount that can be settled is controlled as follows.
(1) When communication radio wave reception is poor
(1-1) When the mobile phone terminal is turned on: The payment amount is limited to a low first amount.
(1-1) When the mobile phone terminal is turned off: The settlement amount is limited to a low second amount.
(2) When reception of communication radio waves is good
(2-1) When the power of the mobile phone terminal is turned on: High-value settlement is permitted.
(2-1) When the mobile phone terminal is turned off: The settlement amount is limited to a low second amount.

  In addition to the power ON / OFF determination described in the first embodiment, this function is received by the control unit 204 as a command from the communication input / output unit 403 as a command. It can be realized by incorporating it into the process.

In the above-described embodiment, a mobile phone terminal is used. However, the present invention is not limited to a mobile phone, and is widely applied to portable electronic information devices such as a PC (personal computer), a PDA, and a portable game machine. can do.
In the mobile phone terminal according to the present embodiment, USIM is used, but SIM may be used.

  It should be noted that the functions described in the above embodiments are not limited to being configured using hardware, but can be realized by causing a computer to read a program describing each function using software. Each function may be configured by appropriately selecting either software or hardware.

Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage.
Various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

    DESCRIPTION OF SYMBOLS 1 ... Mobile phone terminal, 2 ... USIM, 3 ... Non-contact communication chip, 4 ... Mobile phone terminal MPU, 5 ... Non-contact communication antenna, 6 ... Non-contact communication reader / writer, 201 ... ROM, 202 ... RAM, 203 ... Non-volatile 204, control unit, 205 ... input / output interface, 206 ... IO unit, 207 ... SWP unit, 204a ... command analysis unit, 204b ... timer processing unit, 204c ... mode switching unit, 401 ... operation input unit, 402 ... USIM monitoring unit, 403... Communication input / output unit.

Claims (5)

In an IC card having a plurality of communication interfaces,
A state in which the IC card is used is determined from information input through the first communication interface, and processing contents of electronic payment input through the second communication interface corresponding to this state are determined. An IC card characterized in that at least a part thereof is restricted. In an IC card that is incorporated in a portable electronic information device and exchanges information with the portable electronic information device via a plurality of communication interfaces.
Based on the information input via the first communication interface, the power ON / OFF state of the portable electronic information device is determined, and input via the second communication interface corresponding to the power ON / OFF state. An IC card characterized by restricting at least a part of processing contents of electronic payment . In an IC card that is incorporated in a portable electronic information device having a communication function with an external device and exchanges information with the portable electronic information device via a plurality of communication interfaces.
From the information input via the first communication interface, it is determined whether the portable electronic information device is in a power ON / OFF state and whether communication with the external device is possible, and the power ON / OFF state and the external device An IC card that restricts at least a part of processing contents of electronic payment input via the second communication interface in correspondence with whether or not communication is possible. The electronic payment processing content input via the second communication interface that is restricted is an upper limit value of an amount of money that is allowed to be traded in the electronic payment. IC card according to item.   A portable electronic information device comprising the IC card according to any one of claims 1 to 4.

Images